$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft File: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft (raw, json) Hash identifier: uyS5ssb9YBFUHe9kT1eOfbk+xypFYJZUdwg/oACBAr8= Subject key identifier: 31:05:70:9D:00:3A:5C:26:A8:FB:A3:C2:B4:0B:C6:75:8B:55:07:AB Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 Certificate issuer: /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Certificate serial: 10B1B655AF63081A4AA5A7394D73BB2A66AB464E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft Manifest number: 01EE Signing time: Tue 05 Aug 2025 17:31:07 +0000 Manifest this update: Tue 05 Aug 2025 17:26:07 +0000 Manifest next update: Fri 08 Aug 2025 22:58:07 +0000 Files and hashes: 1: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: +E4T7dUXV6aX4bEXGLU3jVOr97rI3sHCGNsBCv/YCaI=) 2: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: GTF74Ft0qa3Ml/qzXNfnDXeDnWgSofyFjshmuk26klk=) 3: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl (hash: gYyPiSxtLFbQ6knvzWR9iSW9uThrCbbvI5IIMOkNzKs=) 4: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: SYGWmmOnwGKD6Y/4QC0HTfwuXQyWf4xsNcK5v8re6i0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 22:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b1:b6:55:af:63:08:1a:4a:a5:a7:39:4d:73:bb:2a:66:ab:46:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Validity Not Before: Aug 5 17:26:07 2025 GMT Not After : Aug 8 22:58:07 2025 GMT Subject: CN=3105709D003A5C26A8FBA3C2B40BC6758B5507AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:91:a8:eb:a3:b9:09:a9:a6:e8:7f:56:40:a7: 91:6c:2a:f0:4b:f9:99:c2:f1:a2:b0:b4:48:32:f7: 95:27:93:76:34:d4:18:9e:75:18:ef:17:cf:ad:20: 4e:10:db:ac:f8:7a:43:e2:b1:9f:e9:11:09:37:c6: a1:c9:25:bd:9b:6a:22:27:4e:fb:37:5a:3d:f4:10: 50:8d:20:b1:6e:77:cf:68:d5:9c:4a:26:da:4b:15: 71:e4:f3:f0:a7:40:0a:fe:49:47:78:ba:b2:65:0d: a2:ba:e8:4e:2c:f1:37:70:ae:f6:1e:26:29:f7:d3: 1a:a6:de:31:ad:ca:18:aa:9e:52:7d:d7:bd:4d:c0: ea:13:0d:cc:3f:77:ba:3b:db:2b:a4:f3:7d:6d:76: 4d:8b:c7:5a:2a:6c:07:f7:6c:01:e0:a6:96:bf:91: 39:63:69:d2:cd:56:95:d5:b0:cb:60:89:25:b1:45: 9a:bd:11:73:3d:c4:90:65:15:16:cf:6e:4e:14:ef: ef:9e:80:be:12:d4:3f:53:c7:79:d1:ca:15:7b:7d: 4b:27:b3:c3:79:73:af:ef:ef:af:1d:f2:98:70:30: f1:42:57:b6:96:29:18:9d:15:8c:58:75:aa:dd:b9: 1d:51:04:a1:e5:84:54:26:16:11:49:88:79:4d:dc: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:05:70:9D:00:3A:5C:26:A8:FB:A3:C2:B4:0B:C6:75:8B:55:07:AB X509v3 Authority Key Identifier: keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:68:2d:4c:19:9e:5d:47:d1:72:14:ef:42:19:ff:12:9d:af: 49:98:77:c2:85:ec:1a:09:b5:b4:d9:e6:2f:ad:26:84:af:8d: ee:cc:99:a5:86:11:f6:41:34:96:51:48:aa:d4:45:42:65:64: 43:d5:0b:35:ce:fa:c3:ac:44:0b:b0:52:1c:87:31:17:19:b0: 68:4c:06:43:2c:4b:9f:2c:41:5a:3a:04:38:06:2b:70:40:58: 28:85:9a:f5:ec:13:0f:7f:b0:60:32:54:51:47:f6:cd:66:b1: 6e:57:0f:33:72:97:cf:b7:30:42:a8:4e:6b:34:52:5a:c9:6d: 10:d8:86:ac:71:e0:4d:c3:36:1e:b2:09:f3:87:3b:14:c2:8f: 52:09:bf:9e:99:bf:4e:f6:31:86:7d:7a:69:d0:d7:e1:75:6f: 68:08:0f:c9:aa:c5:41:6a:2a:c0:14:c3:8d:06:19:c4:97:fe: 8c:f9:d4:e2:14:be:24:73:4f:c1:31:1b:ef:1a:73:bf:7b:39: 66:c3:4f:b2:44:f3:be:eb:69:dc:99:86:c3:17:ac:34:d8:96: 47:e7:ae:3d:9a:53:12:72:57:a2:d6:d8:03:7c:2f:88:4b:68: b9:59:b1:62:b8:80:87:62:47:61:dc:9c:1b:86:4c:c4:80:a8: 6b:b3:1e:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELG2Va9jCBpKpac5TXO7KmarRk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1 QTY5QzU5NjAeFw0yNTA4MDUxNzI2MDdaFw0yNTA4MDgyMjU4MDdaMDMxMTAvBgNV BAMTKDMxMDU3MDlEMDAzQTVDMjZBOEZCQTNDMkI0MEJDNjc1OEI1NTA3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkkajro7kJqabof1ZAp5FsKvBL +ZnC8aKwtEgy95Unk3Y01BiedRjvF8+tIE4Q26z4ekPisZ/pEQk3xqHJJb2baiIn Tvs3Wj30EFCNILFud89o1ZxKJtpLFXHk8/CnQAr+SUd4urJlDaK66E4s8TdwrvYe Jin30xqm3jGtyhiqnlJ9171NwOoTDcw/d7o72yuk831tdk2Lx1oqbAf3bAHgppa/ kTljadLNVpXVsMtgiSWxRZq9EXM9xJBlFRbPbk4U7++egL4S1D9Tx3nRyhV7fUsn s8N5c6/v768d8phwMPFCV7aWKRidFYxYdarduR1RBKHlhFQmFhFJiHlN3BeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMQVwnQA6XCao+6PCtAvGdYtVB6swHwYDVR0j BBgwFoAUWKcG6nRo3w0UyhgXx8xdvVppxZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmJmYWIwOS1jMWU5LTQ0ZDgtODE5ZS1mZGY2NTQ5YzZiM2YvMC81OEE3MDZFQTc0 NjhERjBEMTRDQTE4MTdDN0NDNURCRDVBNjlDNTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1QTY5 QzU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVE QkQ1QTY5QzU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJoLUwZnl1H0XIU70IZ/xKdr0mYd8KF7BoJ tbTZ5i+tJoSvje7MmaWGEfZBNJZRSKrURUJlZEPVCzXO+sOsRAuwUhyHMRcZsGhM BkMsS58sQVo6BDgGK3BAWCiFmvXsEw9/sGAyVFFH9s1msW5XDzNyl8+3MEKoTms0 UlrJbRDYhqxx4E3DNh6yCfOHOxTCj1IJv56Zv072MYZ9emnQ1+F1b2gID8mqxUFq KsAUw40GGcSX/oz51OIUviRzT8ExG+8ac797OWbDT7JE877radyZhsMXrDTYlkfn rj2aUxJyV6LW2AN8L4hLaLlZsWK4gIdiR2HcnBuGTMSAqGuzHkw= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:43 2025 by rpki-client