$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft File: 585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json) Hash identifier: uq1TU34skv1VUtL1Je3nUVP3Jfr2kx9EM/aCDt8VNS4= Subject key identifier: 0F:0D:68:FD:51:C0:3A:81:CD:A0:63:9A:B9:D7:05:76:F1:E9:0D:29 Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 Certificate issuer: /CN=585D79944E315672D413B937BFC042F7C0AAB990 Certificate serial: 3D81929392C3AFC9DDF2A5A6705E5DCF8EB801D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft Manifest number: E0 Signing time: Tue 17 Jun 2025 09:20:59 +0000 Manifest this update: Tue 17 Jun 2025 09:15:59 +0000 Manifest next update: Fri 20 Jun 2025 11:38:59 +0000 Files and hashes: 1: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: XOY7NYCxjScXmdPJz7WtoVYjtipI8oXDt3ieYZJ7GG8=) 2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: jeEsDMd/+EovuK4uL5Q5qgB89wPIiu04eYRInb+Xh5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 11:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:81:92:93:92:c3:af:c9:dd:f2:a5:a6:70:5e:5d:cf:8e:b8:01:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990 Validity Not Before: Jun 17 09:15:59 2025 GMT Not After : Jun 20 11:38:59 2025 GMT Subject: CN=0F0D68FD51C03A81CDA0639AB9D70576F1E90D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:9a:df:db:a0:af:9d:2a:63:0a:99:f3:e2: 8f:89:d4:d1:cd:88:b7:ba:8e:5b:6d:ea:66:d2:b6: 61:a0:5b:e9:9e:88:fb:90:2f:fd:50:3b:ed:73:61: 3e:9c:f7:6d:70:ef:7c:2a:c2:da:3f:44:45:73:fe: e6:29:b8:dc:b7:d7:42:bc:38:cb:cd:bf:46:b9:4f: 20:1b:77:0a:df:4c:c0:53:c6:c1:88:a5:44:94:b7: fd:8c:e5:d9:c9:1d:d2:a3:e2:76:bb:11:b6:9c:e8: dd:b7:74:b6:b0:27:09:69:bc:27:d3:85:20:a1:fc: 19:21:35:a8:d8:4c:35:0c:0b:c3:7b:b5:35:6f:bb: 43:72:5b:76:2a:89:7c:08:35:62:de:63:c4:ae:25: c1:91:c1:5e:c0:f4:60:05:e7:78:d4:9a:e2:da:d5: ac:3b:d3:5a:73:da:a2:13:4b:ba:bb:26:d3:e8:eb: 4f:17:c4:77:65:4e:ff:b4:81:f6:eb:0d:99:e1:78: 54:d0:d6:96:bf:18:73:50:d4:83:4b:de:3b:24:d7: 65:ed:61:7a:04:da:e9:52:a9:50:09:b1:4e:57:a4: 80:94:c8:45:09:4b:a4:b0:b4:a0:48:68:d3:9d:84: cb:ed:56:e6:54:7a:1c:b3:9c:d1:c8:01:b1:2d:02: 3f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0D:68:FD:51:C0:3A:81:CD:A0:63:9A:B9:D7:05:76:F1:E9:0D:29 X509v3 Authority Key Identifier: keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b7:3c:a2:57:8e:a4:8f:f7:b9:ae:bf:e5:12:a3:16:fc:69: ab:01:02:ab:18:83:63:a0:87:d8:a7:31:71:e6:13:ef:e1:24: f4:3e:72:a5:f9:1b:81:56:d7:80:53:fd:55:3f:8e:e5:5b:29: 08:a0:ae:91:55:ac:3f:c9:d2:5f:9a:6a:0e:77:b5:82:bd:ac: de:67:60:16:c1:cd:84:e7:f1:4e:2b:55:86:e7:a7:0e:5b:79: 82:ff:c5:0f:db:f4:f3:65:2a:f8:e4:cd:30:09:12:ec:20:d6: ff:7f:8d:ae:04:55:32:ab:23:d2:8c:fc:bd:33:6f:c0:23:6e: 87:f4:9c:65:99:56:e7:0c:4b:3a:fd:a7:fd:b7:fa:34:c6:71: ea:5d:0a:bd:f1:c1:77:e1:02:12:7a:c5:17:0f:92:8a:0a:97: 45:2b:53:48:63:d0:81:c1:17:81:4a:58:d3:a9:24:67:15:78: e2:fe:44:3b:07:c5:22:98:63:5d:04:35:ca:35:a6:f6:bb:b9: 45:67:f1:09:34:3b:c0:48:6f:d2:eb:65:ba:8e:36:13:29:87: 6d:6b:3f:5c:b2:34:6c:cc:df:44:df:ad:b5:03:c1:98:1b:7e: b7:8e:b9:1c:f2:d1:e5:20:a0:33:1d:cd:dd:be:1d:20:b8:6c: 2a:17:28:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPYGSk5LDr8nd8qWmcF5dz464AdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdD MEFBQjk5MDAeFw0yNTA2MTcwOTE1NTlaFw0yNTA2MjAxMTM4NTlaMDMxMTAvBgNV BAMTKDBGMEQ2OEZENTFDMDNBODFDREEwNjM5QUI5RDcwNTc2RjFFOTBEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHh5rf26CvnSpjCpnz4o+J1NHN iLe6jltt6mbStmGgW+meiPuQL/1QO+1zYT6c921w73wqwto/REVz/uYpuNy310K8 OMvNv0a5TyAbdwrfTMBTxsGIpUSUt/2M5dnJHdKj4na7Ebac6N23dLawJwlpvCfT hSCh/BkhNajYTDUMC8N7tTVvu0NyW3YqiXwINWLeY8SuJcGRwV7A9GAF53jUmuLa 1aw701pz2qITS7q7JtPo608XxHdlTv+0gfbrDZnheFTQ1pa/GHNQ1INL3jsk12Xt YXoE2ulSqVAJsU5XpICUyEUJS6SwtKBIaNOdhMvtVuZUehyznNHIAbEtAj9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDw1o/VHAOoHNoGOaudcFdvHpDSkwHwYDVR0j BBgwFoAUWF15lE4xVnLUE7k3v8BC98CquZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC81ODVENzk5NDRF MzE1NjcyRDQxM0I5MzdCRkMwNDJGN0MwQUFCOTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdDMEFB Qjk5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQy RjdDMEFBQjk5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW3PKJXjqSP97muv+USoxb8aasBAqsYg2Og h9inMXHmE+/hJPQ+cqX5G4FW14BT/VU/juVbKQigrpFVrD/J0l+aag53tYK9rN5n YBbBzYTn8U4rVYbnpw5beYL/xQ/b9PNlKvjkzTAJEuwg1v9/ja4EVTKrI9KM/L0z b8Ajbof0nGWZVucMSzr9p/23+jTGcepdCr3xwXfhAhJ6xRcPkooKl0UrU0hj0IHB F4FKWNOpJGcVeOL+RDsHxSKYY10ENco1pva7uUVn8Qk0O8BIb9LrZbqONhMph21r P1yyNGzM30TfrbUDwZgbfreOuRzy0eUgoDMdzd2+HSC4bCoXKA0= -----END CERTIFICATE-----Generated at Wed Jun 18 01:47:53 2025 by rpki-client