$ rpki-client -vvf repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft (raw, json) Hash identifier: xm77IJs8aNRf8wo9Uaf8ZulTqXQBwY1puZdd9PsT594= Subject key identifier: AD:8E:7F:E2:BE:89:6A:F5:0F:F7:3C:9B:87:8B:85:B4:6F:99:13:A2 Authority key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Certificate issuer: /CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Certificate serial: 2A05B5BF92F000A6611E934CE84F2D93F89C2DB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft Manifest number: 04E6 Signing time: Mon 03 Nov 2025 12:11:23 +0000 Manifest this update: Mon 03 Nov 2025 12:06:23 +0000 Manifest next update: Thu 06 Nov 2025 15:49:23 +0000 Files and hashes: 1: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 8uluz9oQUOC33A/yP5J6qEWwFa5BN6LUXooNJ8KA6Pw=) 2: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: z4oYCZWDew+XBZrkivYPBIEa8esU/2et9t2LDZPakkY=) 3: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl (hash: hyG8i6/2B1iI53DRQbiXA9iDskIUihLCDJK8xorHUAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:05:b5:bf:92:f0:00:a6:61:1e:93:4c:e8:4f:2d:93:f8:9c:2d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Validity Not Before: Nov 3 12:06:23 2025 GMT Not After : Nov 6 15:49:23 2025 GMT Subject: CN=AD8E7FE2BE896AF50FF73C9B878B85B46F9913A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:f9:c7:f1:f9:da:5d:de:9b:62:22:15:c4: 19:93:c0:f1:52:fd:8e:68:16:89:0f:03:42:b0:da: 6f:cf:81:d0:db:60:28:79:8d:66:02:ba:f6:16:23: 27:06:c6:bb:4d:13:79:f8:2a:04:d5:2c:77:0e:07: ef:fe:90:4f:42:ba:5a:33:3c:85:3a:0c:37:38:d8: e2:5f:f6:37:90:9d:4a:4f:43:c1:19:9e:e7:d0:8f: 19:e8:ae:b5:6a:b5:63:c0:c4:e7:e3:a8:1a:a7:ed: b5:94:9b:93:bd:aa:c4:17:b1:aa:2b:c0:98:f5:26: 7c:8f:b1:1c:15:6f:5c:d1:f6:28:03:68:ea:81:e3: f8:dd:b6:62:2b:a0:8a:72:62:33:3c:39:aa:c4:6b: 62:c3:a4:8c:41:24:11:c8:16:3f:05:47:6b:22:a6: a9:79:7a:b9:aa:58:c5:c8:7a:0e:6e:ac:4a:88:df: 0a:6d:53:1c:5e:68:5f:e3:36:aa:69:88:47:e7:51: 04:f3:d9:4f:f9:c1:c1:20:0d:3b:5b:26:83:df:d0: 8c:d4:7b:15:30:85:ea:65:55:45:d3:b7:d6:e4:03: 97:2f:d1:c5:de:98:a6:ff:a8:7b:94:22:d9:29:b8: 87:23:34:cf:63:13:1d:d9:64:6d:c4:1f:ed:b6:ae: 48:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8E:7F:E2:BE:89:6A:F5:0F:F7:3C:9B:87:8B:85:B4:6F:99:13:A2 X509v3 Authority Key Identifier: keyid:58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b1:eb:a7:9c:ac:88:d0:03:9a:2d:1e:fa:9c:87:35:3e:4e: f8:2c:05:7d:56:63:e0:0f:36:8b:95:8c:58:7d:91:71:8c:d1: 8f:0c:c1:12:6c:2c:54:64:c4:51:70:25:c5:b0:d1:68:c8:30: ca:bb:18:80:73:0b:18:da:63:6e:4b:21:6c:48:30:fc:a6:d4: 5b:7f:44:52:57:b6:b0:e8:c4:b0:34:bd:a3:b7:a5:52:78:fa: 39:63:86:f0:e1:25:eb:02:ad:83:95:6c:78:4d:4a:88:6a:3c: 48:1a:5c:15:28:ea:e3:18:32:d7:24:55:42:af:7e:85:ce:c5: 06:1a:39:c0:39:7e:db:e1:c8:b5:7b:3e:73:90:3f:c6:65:1b: 6f:15:73:6d:cf:a7:a0:c9:44:8e:c3:cd:13:8e:f7:65:f2:a5: 2a:a4:62:fd:95:9b:f0:37:c0:76:a8:78:09:c3:04:c4:92:1a: 06:81:17:4b:97:28:57:f3:0e:1d:9a:a1:25:71:ac:5b:dd:80: 40:7c:66:e3:21:9f:48:ac:0d:81:32:42:2a:42:13:3e:e6:e1: bc:b1:90:fd:34:e6:1c:17:bd:04:ec:87:a0:1d:9b:3c:ba:ee: 69:9d:fb:d2:23:2d:24:00:55:a0:98:09:6b:f2:29:ba:a7:b7: db:22:1e:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgW1v5LwAKZhHpNM6E8tk/icLbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIw M0Q1MzVERjAeFw0yNTExMDMxMjA2MjNaFw0yNTExMDYxNTQ5MjNaMDMxMTAvBgNV BAMTKEFEOEU3RkUyQkU4OTZBRjUwRkY3M0M5Qjg3OEI4NUI0NkY5OTEzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhvnH8fnaXd6bYiIVxBmTwPFS /Y5oFokPA0Kw2m/PgdDbYCh5jWYCuvYWIycGxrtNE3n4KgTVLHcOB+/+kE9Culoz PIU6DDc42OJf9jeQnUpPQ8EZnufQjxnorrVqtWPAxOfjqBqn7bWUm5O9qsQXsaor wJj1JnyPsRwVb1zR9igDaOqB4/jdtmIroIpyYjM8OarEa2LDpIxBJBHIFj8FR2si pql5ermqWMXIeg5urEqI3wptUxxeaF/jNqppiEfnUQTz2U/5wcEgDTtbJoPf0IzU exUwheplVUXTt9bkA5cv0cXemKb/qHuUItkpuIcjNM9jEx3ZZG3EH+22rkjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrY5/4r6JavUP9zybh4uFtG+ZE6IwHwYDVR0j BBgwFoAUWG/o0n/01r1PqDn8WIRKSwPVNd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMC81ODZGRThEMjdG RjRENkJENEZBODM5RkM1ODg0NEE0QjAzRDUzNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIwM0Q1 MzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRB NEIwM0Q1MzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmx66ecrIjQA5otHvqchzU+TvgsBX1WY+AP NouVjFh9kXGM0Y8MwRJsLFRkxFFwJcWw0WjIMMq7GIBzCxjaY25LIWxIMPym1Ft/ RFJXtrDoxLA0vaO3pVJ4+jljhvDhJesCrYOVbHhNSohqPEgaXBUo6uMYMtckVUKv foXOxQYaOcA5ftvhyLV7PnOQP8ZlG28Vc23Pp6DJRI7DzROO92XypSqkYv2Vm/A3 wHaoeAnDBMSSGgaBF0uXKFfzDh2aoSVxrFvdgEB8ZuMhn0isDYEyQipCEz7m4byx kP005hwXvQTsh6Admzy67mmd+9IjLSQAVaCYCWvyKbqnt9siHm0= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:28 2025 by rpki-client