$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft File: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft (raw, json) Hash identifier: NlLgHwqnOYuV7n3WTeRwSqRPgE2FxVS/1Quw46diFcE= Subject key identifier: 83:36:C7:77:83:A7:F3:8A:E2:E6:BE:C5:81:0E:D8:AF:90:46:33:AF Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 Certificate issuer: /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Certificate serial: 63C910136DC0A1135B6418A09EDA27DCECA4BD5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft Manifest number: 01C2 Signing time: Tue 29 Apr 2025 12:51:05 +0000 Manifest this update: Tue 29 Apr 2025 12:46:05 +0000 Manifest next update: Fri 02 May 2025 18:42:05 +0000 Files and hashes: 1: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl (hash: 43WJqkz/graRCD6fEVkiuclYkxbRI2OoJ/MJ8xn80kA=) 2: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: mOeMNdSXIouJLXdg2H2KNR/lETkTVaMFt6gn5NaH74s=) 3: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: lEs/WKd2HcYEye3FJfKRh1W7qOC7B+EUp+9m2m8vd7c=) 4: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: ZHzUIRy4nZYVajGdct7Oorl4xz1bGegJThKCS1yBqbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c9:10:13:6d:c0:a1:13:5b:64:18:a0:9e:da:27:dc:ec:a4:bd:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Validity Not Before: Apr 29 12:46:05 2025 GMT Not After : May 2 18:42:05 2025 GMT Subject: CN=8336C77783A7F38AE2E6BEC5810ED8AF904633AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:e2:15:2f:c2:91:4a:55:af:e2:29:4f:d5: c8:12:83:5e:78:fe:8e:63:7d:69:22:81:b7:7e:5c: 96:40:83:ea:e7:35:7b:32:09:6d:fd:a1:f3:b4:32: 32:9a:d3:47:e3:98:71:ae:5f:d7:56:db:d0:f3:9a: 6c:3e:4f:d7:1c:b2:72:80:42:79:84:ac:de:a3:6c: 07:7f:b4:5b:e6:ce:0b:a6:0e:92:66:65:48:51:36: 22:01:6a:cd:b2:83:0c:36:c9:ed:de:15:a2:bf:c9: 63:19:cd:63:bd:2b:9e:09:34:83:4e:45:96:20:d6: 50:78:c2:7d:ac:50:90:2d:00:f2:68:a6:93:f9:17: d0:54:41:45:8c:da:ed:b0:c1:fd:53:f7:5e:0f:49: 75:be:46:56:64:22:45:6a:af:ff:d5:eb:82:b6:2d: fa:c2:10:08:a8:e1:d2:97:88:0b:43:56:b8:14:71: 25:ca:ab:60:9e:6b:a0:08:e4:54:e3:75:87:32:5f: 67:4f:63:02:eb:fb:16:51:8c:da:48:6b:23:05:2d: 14:60:df:f6:7c:57:f8:06:41:9c:c5:7f:74:3a:76: a5:45:0b:52:e5:4c:d5:84:92:c7:c5:21:01:d7:f8: c1:20:c8:3e:62:7e:50:0a:18:81:75:1c:1f:ea:f6: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:36:C7:77:83:A7:F3:8A:E2:E6:BE:C5:81:0E:D8:AF:90:46:33:AF X509v3 Authority Key Identifier: keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:34:ff:e8:11:01:b3:24:59:64:e4:ab:58:98:a8:59:67:23: 94:af:05:54:df:a1:2b:3b:7b:a7:d0:12:2d:2f:9b:8f:90:60: b2:c8:89:d7:fe:f0:bb:de:ee:40:58:e7:fd:62:50:a6:79:00: 06:91:df:4e:8e:be:34:c4:40:fe:9d:9a:a8:2e:99:4c:16:4b: 28:91:69:01:e3:52:3f:90:cb:94:c1:2c:2e:2d:56:5b:28:50: e8:3a:0b:dc:9e:21:95:0c:25:25:1d:75:79:71:5e:f5:c9:db: 58:ef:38:b4:2c:20:da:35:1b:c3:b9:23:d0:fa:53:fc:9d:24: bd:b2:a5:c7:62:14:2f:e3:3f:84:c8:c7:70:d3:e6:46:aa:84: 6a:81:98:01:a8:a0:e0:f1:27:e9:5d:58:98:0c:aa:3e:f8:a3: 3c:b8:c9:45:2b:28:18:9c:c0:a8:9b:27:e0:5a:6a:88:f7:02: 1c:7f:28:11:53:75:33:2a:0b:1d:8b:5a:30:ed:af:b2:09:66: 64:46:ce:10:ad:ee:13:2d:f1:fa:b9:22:05:be:8a:f4:08:1f: 20:cc:11:32:3b:9a:61:67:25:4e:77:6e:66:50:6d:ee:b1:44: 4e:9e:fd:87:3b:df:97:97:de:f6:e8:2d:64:9e:f1:87:d2:04: d5:bb:b3:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8kQE23AoRNbZBignton3OykvV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1 QTY5QzU5NjAeFw0yNTA0MjkxMjQ2MDVaFw0yNTA1MDIxODQyMDVaMDMxMTAvBgNV BAMTKDgzMzZDNzc3ODNBN0YzOEFFMkU2QkVDNTgxMEVEOEFGOTA0NjMzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahOIVL8KRSlWv4ilP1cgSg154 /o5jfWkigbd+XJZAg+rnNXsyCW39ofO0MjKa00fjmHGuX9dW29Dzmmw+T9ccsnKA QnmErN6jbAd/tFvmzgumDpJmZUhRNiIBas2ygww2ye3eFaK/yWMZzWO9K54JNINO RZYg1lB4wn2sUJAtAPJoppP5F9BUQUWM2u2wwf1T914PSXW+RlZkIkVqr//V64K2 LfrCEAio4dKXiAtDVrgUcSXKq2Cea6AI5FTjdYcyX2dPYwLr+xZRjNpIayMFLRRg 3/Z8V/gGQZzFf3Q6dqVFC1LlTNWEksfFIQHX+MEgyD5iflAKGIF1HB/q9l/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgzbHd4On84ri5r7FgQ7Yr5BGM68wHwYDVR0j BBgwFoAUWKcG6nRo3w0UyhgXx8xdvVppxZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmJmYWIwOS1jMWU5LTQ0ZDgtODE5ZS1mZGY2NTQ5YzZiM2YvMC81OEE3MDZFQTc0 NjhERjBEMTRDQTE4MTdDN0NDNURCRDVBNjlDNTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1QTY5 QzU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVE QkQ1QTY5QzU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEc0/+gRAbMkWWTkq1iYqFlnI5SvBVTfoSs7 e6fQEi0vm4+QYLLIidf+8Lve7kBY5/1iUKZ5AAaR306OvjTEQP6dmqgumUwWSyiR aQHjUj+Qy5TBLC4tVlsoUOg6C9yeIZUMJSUddXlxXvXJ21jvOLQsINo1G8O5I9D6 U/ydJL2ypcdiFC/jP4TIx3DT5kaqhGqBmAGooODxJ+ldWJgMqj74ozy4yUUrKBic wKibJ+Baaoj3Ahx/KBFTdTMqCx2LWjDtr7IJZmRGzhCt7hMt8fq5IgW+ivQIHyDM ETI7mmFnJU53bmZQbe6xRE6e/Yc735eX3vboLWSe8YfSBNW7s1k= -----END CERTIFICATE-----Generated at Tue Apr 29 23:03:41 2025 by rpki-client