$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft File: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft (raw, json) Hash identifier: BN3dMwceL7y6+On4Gz/7PUJKVzfYdnmi2ALPa+sH8HQ= Subject key identifier: 6B:86:0A:B5:70:69:7D:3E:41:47:5E:3E:F8:33:19:FB:9A:E5:B7:75 Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Certificate serial: 637BAA539EA9286ED6A0DEB007F586370D430EF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft Manifest number: 0527 Signing time: Mon 03 Nov 2025 02:31:06 +0000 Manifest this update: Mon 03 Nov 2025 02:26:06 +0000 Manifest next update: Thu 06 Nov 2025 10:05:06 +0000 Files and hashes: 1: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl (hash: dWnGCoDVg+HXKA+IUKokzYUOrElTt1mFn69XSB54DNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7b:aa:53:9e:a9:28:6e:d6:a0:de:b0:07:f5:86:37:0d:43:0e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Validity Not Before: Nov 3 02:26:06 2025 GMT Not After : Nov 6 10:05:06 2025 GMT Subject: CN=6B860AB570697D3E41475E3EF83319FB9AE5B775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:5a:6d:4d:75:17:6c:7e:38:2e:90:16:46: 33:d4:f6:10:2d:b3:c6:01:7e:77:21:e0:fc:3a:10: 77:f3:b0:18:92:28:88:a2:eb:2f:5c:d8:41:8c:75: 2a:08:b4:f5:7a:3e:d1:a1:bb:84:8a:74:d3:14:c9: b2:79:f8:9e:40:b9:62:b4:b7:36:8c:90:6f:e2:ef: 9a:98:50:0c:7a:6e:27:4c:a1:4c:d4:fe:29:fb:36: 16:c2:be:b7:d3:d7:cd:75:9f:ac:d2:ca:5e:42:78: 48:dd:98:b7:fc:54:1e:6a:98:fa:9b:5c:d2:5c:62: a8:cd:31:43:0b:45:c9:0e:23:37:05:3b:ba:22:24: 02:ce:73:88:65:b9:f5:d1:11:91:5d:bd:17:c8:aa: 23:11:26:d0:77:19:91:0a:ee:78:aa:5f:f9:fd:ed: bf:aa:4a:b6:51:fb:67:72:d7:78:76:ca:ac:dc:d4: a8:50:d9:e3:2e:2e:3f:8b:33:cd:f9:72:55:1c:aa: 45:0e:73:0f:2a:97:c9:41:0b:57:30:e0:19:be:2d: 8b:f7:ad:fa:ab:0c:ac:a5:34:23:55:fe:61:4a:97: b8:08:e3:2d:14:dc:07:d3:08:9c:b1:d9:e0:de:81: 82:60:75:18:3e:65:db:f8:41:8e:6f:c9:d6:78:c7: 8e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:86:0A:B5:70:69:7D:3E:41:47:5E:3E:F8:33:19:FB:9A:E5:B7:75 X509v3 Authority Key Identifier: keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:65:6b:e6:ac:2a:81:79:cc:db:83:a2:fa:d2:34:80:74:43: 00:7c:b5:26:43:13:c3:45:8f:81:bf:d8:5b:37:ba:ac:54:5a: 6d:04:f0:54:ad:34:a9:4a:64:98:e2:45:1a:6a:8f:f9:be:ce: 22:7e:6b:eb:8c:dc:71:c9:8e:56:99:3e:02:e2:62:33:cb:f2: 39:7a:c8:05:cb:4b:10:f5:9a:c6:32:c3:1f:c6:d7:9e:a7:a7: c4:25:c0:3a:ca:37:6b:78:17:ef:8f:65:c4:11:8e:24:fb:bd: 64:a1:7b:57:46:84:6f:12:13:e5:f5:1c:c6:46:c0:cf:b0:21: a7:08:92:7b:70:05:6c:70:56:0a:64:68:8c:9b:95:30:8d:45: 95:b7:72:42:fa:62:0b:fc:0f:71:17:54:c5:1c:28:37:a7:41: ab:23:66:ad:5d:e5:28:15:0b:8f:97:a8:b4:84:6d:8e:66:f9: f1:45:09:d9:99:32:e6:45:e5:89:20:43:32:d6:3f:ce:48:ff: 58:46:21:f7:c5:33:81:f9:03:0e:76:68:25:6b:cb:98:b3:7a: 78:13:23:a1:a0:5d:2e:37:87:12:c7:97:21:e2:47:66:b4:42: 93:e9:af:e2:bb:e0:ba:c9:3e:23:fb:d8:49:75:d7:0f:12:15: 2b:4c:d7:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3uqU56pKG7WoN6wB/WGNw1DDvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFC NjdENjFFQTAeFw0yNTExMDMwMjI2MDZaFw0yNTExMDYxMDA1MDZaMDMxMTAvBgNV BAMTKDZCODYwQUI1NzA2OTdEM0U0MTQ3NUUzRUY4MzMxOUZCOUFFNUI3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHlptTXUXbH44LpAWRjPU9hAt s8YBfnch4Pw6EHfzsBiSKIii6y9c2EGMdSoItPV6PtGhu4SKdNMUybJ5+J5AuWK0 tzaMkG/i75qYUAx6bidMoUzU/in7NhbCvrfT1811n6zSyl5CeEjdmLf8VB5qmPqb XNJcYqjNMUMLRckOIzcFO7oiJALOc4hlufXREZFdvRfIqiMRJtB3GZEK7niqX/n9 7b+qSrZR+2dy13h2yqzc1KhQ2eMuLj+LM835clUcqkUOcw8ql8lBC1cw4Bm+LYv3 rfqrDKylNCNV/mFKl7gI4y0U3AfTCJyx2eDegYJgdRg+Zdv4QY5vydZ4x46bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa4YKtXBpfT5BR14++DMZ+5rlt3UwHwYDVR0j BBgwFoAUWNfcUw87pKzQSIBiFw4VgbZ9YeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhM2EzOS1lMGVjLTRmYzEtOWI1NC0zNTNlMDdmMDA1ZGQvMC81OEQ3REM1MzBG M0JBNEFDRDA0ODgwNjIxNzBFMTU4MUI2N0Q2MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFCNjdE NjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1 ODFCNjdENjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdla+asKoF5zNuDovrSNIB0QwB8tSZDE8NF j4G/2Fs3uqxUWm0E8FStNKlKZJjiRRpqj/m+ziJ+a+uM3HHJjlaZPgLiYjPL8jl6 yAXLSxD1msYywx/G156np8QlwDrKN2t4F++PZcQRjiT7vWShe1dGhG8SE+X1HMZG wM+wIacIkntwBWxwVgpkaIyblTCNRZW3ckL6Ygv8D3EXVMUcKDenQasjZq1d5SgV C4+XqLSEbY5m+fFFCdmZMuZF5YkgQzLWP85I/1hGIffFM4H5Aw52aCVry5izengT I6GgXS43hxLHlyHiR2a0QpPpr+K74LrJPiP72El11w8SFStM10Q= -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:10 2025 by rpki-client