$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft File: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft (raw, json) Hash identifier: R4zckFC5gD7Q+46p8eBZlXY228uH+zXISZJGWpH5ZF8= Subject key identifier: 36:C8:A7:37:75:27:87:DA:DF:A4:7E:61:4F:56:05:2B:D2:3D:0D:D9 Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Certificate serial: 77612B72E7A57084B36C5EA5BCB3BFE08D1FFFE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft Manifest number: 0502 Signing time: Mon 11 Aug 2025 16:41:06 +0000 Manifest this update: Mon 11 Aug 2025 16:36:06 +0000 Manifest next update: Fri 15 Aug 2025 00:46:06 +0000 Files and hashes: 1: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl (hash: KUAhqYgotPzf6rzHLH2jkvdUOYByWIsR4m8jNfHs1cU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 00:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:61:2b:72:e7:a5:70:84:b3:6c:5e:a5:bc:b3:bf:e0:8d:1f:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Validity Not Before: Aug 11 16:36:06 2025 GMT Not After : Aug 15 00:46:06 2025 GMT Subject: CN=36C8A737752787DADFA47E614F56052BD23D0DD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:04:41:82:65:e2:11:e4:a0:2e:94:88:47:e5: f6:fe:f9:18:e9:a0:1e:c3:c6:4c:0d:18:db:e8:4c: f7:6c:09:b8:c2:0d:11:c8:2f:17:5d:40:fe:24:f9: 73:1d:83:e5:b4:87:1b:ca:ac:23:11:25:fa:4a:06: 46:e6:02:d5:69:87:63:53:74:c7:78:40:cf:c9:37: 77:42:3d:c4:54:3e:da:86:52:2d:3e:7f:87:cd:f5: 27:37:56:4f:5b:b4:a2:aa:6c:e9:fe:cb:df:e4:fc: 89:a7:8e:2d:95:da:a9:b3:2d:2a:61:39:57:b0:7b: ed:47:0d:8e:47:38:06:72:56:6d:f4:25:a6:7c:3a: 81:c6:a2:0c:bb:81:4a:47:6b:2c:31:be:c1:d3:05: a5:9e:42:09:39:ce:b1:b4:1a:ca:71:97:91:78:9a: f7:6d:39:38:7a:d4:30:20:c6:35:80:c5:16:b8:6d: 56:d3:24:05:89:72:ed:5f:03:a9:80:86:49:09:47: df:11:41:3b:7d:2b:83:2e:d5:4f:eb:d4:4a:9c:74: 6b:d8:6d:c8:49:ef:30:0b:e6:9f:9d:8a:a3:c0:2c: 2e:a9:34:07:ea:34:02:2a:45:b2:4c:5e:0a:25:4b: 4a:d8:0a:ac:a8:9e:b2:a4:3a:3d:36:b6:e6:f0:a2: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C8:A7:37:75:27:87:DA:DF:A4:7E:61:4F:56:05:2B:D2:3D:0D:D9 X509v3 Authority Key Identifier: keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7e:89:33:04:4e:e6:b1:67:9a:48:3b:4d:9d:fe:ea:44:13: d2:28:34:b4:22:32:d9:a4:50:79:c6:51:15:46:15:e9:c4:56: 5d:57:2e:d3:ba:e9:9b:e2:76:61:36:c0:03:03:8e:6a:c4:95: cc:cf:09:2f:43:cb:25:09:79:8b:eb:b5:03:b4:96:02:f2:44: 1c:51:37:1b:da:ab:d5:a3:ef:1a:21:05:3c:51:c6:dc:b2:93: c4:1a:d2:31:80:57:6f:fd:ad:dd:30:1f:07:4f:55:cb:3a:58: 86:7b:10:a8:52:a1:d1:d4:31:45:27:10:07:42:70:57:15:98: 7e:51:ad:a7:e4:e7:aa:32:ba:33:4d:a4:d9:e6:93:94:2e:5e: 14:72:13:16:45:9e:b1:8b:c0:38:9c:a8:14:b7:7b:b5:ef:d5: 6a:f4:da:6e:eb:e7:80:80:49:fa:c0:c4:4b:e4:14:6f:96:d7: 31:e4:50:ee:b2:ed:f6:23:86:0f:54:f3:e7:d3:0d:57:94:47: 07:06:8b:f9:d9:c7:d5:e1:27:2e:5f:5a:70:3f:8c:c3:64:74: 70:5d:70:40:26:cb:ea:e8:12:a8:9f:37:25:d5:a8:a0:b5:a6: 4c:b6:49:eb:06:17:42:17:56:06:8e:13:8c:9a:fb:e5:39:4a: 2b:7e:99:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd2ErcuelcISzbF6lvLO/4I0f/+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFC NjdENjFFQTAeFw0yNTA4MTExNjM2MDZaFw0yNTA4MTUwMDQ2MDZaMDMxMTAvBgNV BAMTKDM2QzhBNzM3NzUyNzg3REFERkE0N0U2MTRGNTYwNTJCRDIzRDBERDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOBEGCZeIR5KAulIhH5fb++Rjp oB7DxkwNGNvoTPdsCbjCDRHILxddQP4k+XMdg+W0hxvKrCMRJfpKBkbmAtVph2NT dMd4QM/JN3dCPcRUPtqGUi0+f4fN9Sc3Vk9btKKqbOn+y9/k/Imnji2V2qmzLSph OVewe+1HDY5HOAZyVm30JaZ8OoHGogy7gUpHaywxvsHTBaWeQgk5zrG0Gspxl5F4 mvdtOTh61DAgxjWAxRa4bVbTJAWJcu1fA6mAhkkJR98RQTt9K4Mu1U/r1EqcdGvY bchJ7zAL5p+diqPALC6pNAfqNAIqRbJMXgolS0rYCqyonrKkOj02tubwojW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNsinN3Unh9rfpH5hT1YFK9I9DdkwHwYDVR0j BBgwFoAUWNfcUw87pKzQSIBiFw4VgbZ9YeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhM2EzOS1lMGVjLTRmYzEtOWI1NC0zNTNlMDdmMDA1ZGQvMC81OEQ3REM1MzBG M0JBNEFDRDA0ODgwNjIxNzBFMTU4MUI2N0Q2MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFCNjdE NjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1 ODFCNjdENjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABB+iTMETuaxZ5pIO02d/upEE9IoNLQiMtmk UHnGURVGFenEVl1XLtO66ZvidmE2wAMDjmrElczPCS9DyyUJeYvrtQO0lgLyRBxR Nxvaq9Wj7xohBTxRxtyyk8Qa0jGAV2/9rd0wHwdPVcs6WIZ7EKhSodHUMUUnEAdC cFcVmH5Rrafk56oyujNNpNnmk5QuXhRyExZFnrGLwDicqBS3e7Xv1Wr02m7r54CA SfrAxEvkFG+W1zHkUO6y7fYjhg9U8+fTDVeURwcGi/nZx9XhJy5fWnA/jMNkdHBd cEAmy+roEqifNyXVqKC1pky2SesGF0IXVgaOE4ya++U5Sit+mZY= -----END CERTIFICATE-----Generated at Tue Aug 12 14:33:54 2025 by rpki-client