$ rpki-client -vvf repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft (raw, json) Hash identifier: YoZTjLIWKl4zW5nsUSkgtFgWOnkeYYibmVr9O7MrB7k= Subject key identifier: 7F:2F:D5:A7:65:C7:71:73:BE:E8:C5:2E:7A:D8:3F:73:DC:E1:EF:3D Authority key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Certificate issuer: /CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Certificate serial: 466B1FD5DB0938328CEF4273A87AD8B000AC512E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft Manifest number: 04A8 Signing time: Sun 15 Jun 2025 22:41:22 +0000 Manifest this update: Sun 15 Jun 2025 22:36:22 +0000 Manifest next update: Thu 19 Jun 2025 01:30:22 +0000 Files and hashes: 1: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: cLVCVvcvprgwkkF82bMcfbs0h+bsaPJp7VIWMvcz0os=) 2: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: zhjLKdHiZJAAA60z4kxaHFx03Q2DU/hes1jKQwL/5G8=) 3: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl (hash: Daav/oZxlVImgRjvhra2HWHkCtyxSBxy8s5Ae17zw4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6b:1f:d5:db:09:38:32:8c:ef:42:73:a8:7a:d8:b0:00:ac:51:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Validity Not Before: Jun 15 22:36:22 2025 GMT Not After : Jun 19 01:30:22 2025 GMT Subject: CN=7F2FD5A765C77173BEE8C52E7AD83F73DCE1EF3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:79:86:0b:05:35:c8:a4:0d:8d:9f:89:fb:f6: 86:38:e0:e7:10:9b:dd:e7:55:0b:f1:74:16:f6:f3: 40:e1:2a:a8:f0:51:31:a9:1b:11:91:48:68:7b:9f: 42:8f:8f:60:69:3b:5a:92:6e:70:a7:d0:79:0a:20: f7:aa:b4:5c:03:b3:5d:a1:50:87:31:9e:fb:a3:92: 1b:59:24:98:c3:82:49:3c:a5:d4:ad:5a:e1:55:25: fe:7c:51:a0:4e:03:2b:9e:c5:fd:31:a8:79:38:f3: 36:e4:83:d5:b1:60:cb:79:e7:77:60:1f:15:dd:c3: 2d:12:1b:df:45:90:69:23:85:a8:ba:d4:f4:2f:49: b7:86:53:ff:95:65:b3:69:ca:44:79:82:7b:7b:14: 89:9a:10:91:8a:4f:9f:64:3f:43:22:05:e5:10:41: cf:2f:ae:ce:17:c4:a0:aa:bd:cb:56:a6:ad:75:e7: 78:ad:e7:12:6b:06:4e:01:6c:50:23:0b:60:c3:dc: 1e:d5:18:cc:0f:a5:a8:85:21:f6:d8:b7:41:35:90: 7b:6d:a5:5e:19:6f:2c:89:f6:77:ca:2e:14:c1:81: 6a:29:2e:55:c8:75:71:07:b1:35:91:4f:60:38:b2: 0f:e2:b1:81:51:7a:86:1b:ad:00:23:39:26:b0:2c: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2F:D5:A7:65:C7:71:73:BE:E8:C5:2E:7A:D8:3F:73:DC:E1:EF:3D X509v3 Authority Key Identifier: keyid:58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:03:dc:53:77:04:3b:6f:38:7c:17:4d:87:1d:67:9a:f7:eb: 39:22:10:5e:d1:d2:dd:67:07:85:cb:d7:8d:2a:7d:69:20:0a: 30:bc:d1:70:ca:1c:3d:e4:2c:34:2f:77:d4:dd:f6:70:d0:a2: 0d:09:25:34:4d:5e:c8:52:d4:94:87:22:1b:51:2b:49:8d:02: 04:17:9f:fc:4f:10:83:6f:c2:3b:d4:72:19:54:d5:81:c6:67: 43:ce:02:f7:3f:0a:34:1d:64:a0:35:e1:0a:92:ff:d0:a3:5e: 22:81:21:7b:7f:7b:ae:1f:a9:f9:4a:0b:0c:06:34:46:d5:b1: 85:9b:5e:4c:f9:29:e5:84:a8:b6:e6:85:e4:5b:95:c7:fa:b0: bd:9d:de:13:e8:49:73:5d:df:c9:7d:b4:4d:5f:db:5e:db:06: fa:90:4f:57:90:bd:bb:62:7e:4d:05:18:a7:4b:c3:6e:27:39: 50:46:c9:ef:72:3b:1f:65:25:88:87:46:73:cc:f5:32:10:c5: 47:dd:8b:a9:9f:11:96:e6:49:24:81:62:7b:96:ff:8c:3b:c8: b2:6f:af:7b:54:46:d7:82:6e:28:ee:c1:f2:ce:c7:0b:c8:f4: 42:4e:b3:04:1c:de:a8:e3:0b:6a:7f:24:a7:b1:ce:92:38:28: 36:01:00:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmsf1dsJODKM70JzqHrYsACsUS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIw M0Q1MzVERjAeFw0yNTA2MTUyMjM2MjJaFw0yNTA2MTkwMTMwMjJaMDMxMTAvBgNV BAMTKDdGMkZENUE3NjVDNzcxNzNCRUU4QzUyRTdBRDgzRjczRENFMUVGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDceYYLBTXIpA2Nn4n79oY44OcQ m93nVQvxdBb280DhKqjwUTGpGxGRSGh7n0KPj2BpO1qSbnCn0HkKIPeqtFwDs12h UIcxnvujkhtZJJjDgkk8pdStWuFVJf58UaBOAyuexf0xqHk48zbkg9WxYMt553dg HxXdwy0SG99FkGkjhai61PQvSbeGU/+VZbNpykR5gnt7FImaEJGKT59kP0MiBeUQ Qc8vrs4XxKCqvctWpq1153it5xJrBk4BbFAjC2DD3B7VGMwPpaiFIfbYt0E1kHtt pV4ZbyyJ9nfKLhTBgWopLlXIdXEHsTWRT2A4sg/isYFReoYbrQAjOSawLF4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfy/Vp2XHcXO+6MUuetg/c9zh7z0wHwYDVR0j BBgwFoAUWG/o0n/01r1PqDn8WIRKSwPVNd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMC81ODZGRThEMjdG RjRENkJENEZBODM5RkM1ODg0NEE0QjAzRDUzNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIwM0Q1 MzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRB NEIwM0Q1MzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoD3FN3BDtvOHwXTYcdZ5r36zkiEF7R0t1n B4XL140qfWkgCjC80XDKHD3kLDQvd9Td9nDQog0JJTRNXshS1JSHIhtRK0mNAgQX n/xPEINvwjvUchlU1YHGZ0POAvc/CjQdZKA14QqS/9CjXiKBIXt/e64fqflKCwwG NEbVsYWbXkz5KeWEqLbmheRblcf6sL2d3hPoSXNd38l9tE1f217bBvqQT1eQvbti fk0FGKdLw24nOVBGye9yOx9lJYiHRnPM9TIQxUfdi6mfEZbmSSSBYnuW/4w7yLJv r3tURteCbijuwfLOxwvI9EJOswQc3qjjC2p/JKexzpI4KDYBAE4= -----END CERTIFICATE-----Generated at Mon Jun 16 03:25:38 2025 by rpki-client