$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: aZjE9NJokriGtbJa6MpzKXnhhAsEQHiXf6+5FBCdsS0= Subject key identifier: 08:53:46:29:51:8D:AA:3B:B5:66:BB:C2:6C:A1:1B:E4:C0:B3:E1:64 Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 36662BC40827FE278661451376E377BFF79583D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 020E Signing time: Sat 14 Jun 2025 19:00:04 +0000 Manifest this update: Sat 14 Jun 2025 18:55:04 +0000 Manifest next update: Wed 18 Jun 2025 05:01:04 +0000 Files and hashes: 1: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: gC29j+yO4i7uQ2lQ5TlSgcpEgKWPrlDicf9vHKUSroM=) 2: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: OCqFFtWmxx3kEYoRWJG11pqXLeXTa32x6wBDc8knnQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:66:2b:c4:08:27:fe:27:86:61:45:13:76:e3:77:bf:f7:95:83:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Jun 14 18:55:04 2025 GMT Not After : Jun 18 05:01:04 2025 GMT Subject: CN=08534629518DAA3BB566BBC26CA11BE4C0B3E164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:b7:bc:82:48:ef:07:7c:0c:53:89:6e:f4: 4b:10:4a:76:38:a0:97:9d:47:70:82:67:be:92:bc: c6:63:f0:24:08:d0:d8:c0:23:d5:7f:94:d6:f5:a9: 8e:30:c6:db:46:60:ff:c8:ee:b9:3c:fd:9d:02:19: 61:ac:b2:4a:34:51:30:f2:ac:77:cb:71:f4:b5:7d: 76:8f:ac:e5:4f:aa:45:b2:2a:ff:79:ed:da:ee:82: 58:bf:87:ca:26:5f:ff:a2:4c:c8:d1:7e:c5:e3:32: 10:09:f9:e5:51:a8:d8:fc:63:ad:60:20:b5:71:2b: 11:98:b0:3c:5e:f9:69:96:a6:d6:9a:0c:f4:96:91: 29:39:57:9e:b9:20:02:c6:62:88:81:47:b5:a6:54: a5:d5:5d:3e:ee:4b:6c:24:52:02:06:91:6f:69:a4: 3a:a3:85:b6:d3:5f:b7:92:e0:b5:45:32:45:fe:5b: df:c8:12:30:f2:c1:5b:3d:8a:93:b0:54:97:af:14: 79:c2:ae:55:06:ca:85:36:2f:92:ac:dd:a6:6b:59: db:e9:29:90:25:c7:ff:db:1a:9b:34:ad:27:eb:4c: dc:5b:d5:df:c4:d9:72:2a:c9:fb:c3:ea:a8:b5:c8: ce:33:97:95:c5:08:c3:a9:22:08:31:f8:74:50:e5: 26:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:53:46:29:51:8D:AA:3B:B5:66:BB:C2:6C:A1:1B:E4:C0:B3:E1:64 X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d1:26:f7:08:4b:02:55:bf:cc:40:5c:a4:00:81:9a:e6:c6: 96:5d:61:b1:f1:c3:5d:71:5b:f1:4c:86:33:a7:c8:79:27:04: ec:4c:1d:5e:3a:05:fa:4e:dc:84:95:22:27:94:e5:d1:b1:b1: dd:bc:c4:7d:a9:d3:8f:46:bf:71:49:78:81:18:0b:39:c6:c1: df:ca:58:3a:2f:3d:f7:6f:14:91:14:69:2f:61:fd:aa:7f:19: 1c:47:fd:89:d8:f5:d6:86:b4:bf:4e:47:c1:9e:50:15:90:74: 82:4d:10:a0:86:39:7e:2c:cb:1e:88:a5:09:fb:3b:e1:c2:ed: b4:ae:ac:cb:9c:b5:ca:71:7f:c8:2b:0c:a0:ad:b8:6b:9e:3a: df:28:c6:7a:1c:ec:e2:73:13:99:af:4a:a0:7e:d5:8c:70:37: d9:9e:bf:bd:8f:11:b6:14:d9:d2:26:09:35:2d:56:90:45:10: e3:67:4c:37:e1:6e:66:af:0c:73:c0:04:dd:64:4e:d9:ea:ce: 78:08:83:3a:d3:b6:f1:b1:07:7a:b0:f2:f3:21:1e:85:72:70: 10:34:7f:67:8c:3b:6d:15:de:c7:bb:80:34:58:00:0c:3e:f1: c5:d5:4d:61:81:f4:77:89:78:1a:63:ce:62:aa:f6:54:7d:c1: b0:c0:4d:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmYrxAgn/ieGYUUTduN3v/eVg9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNTA2MTQxODU1MDRaFw0yNTA2MTgwNTAxMDRaMDMxMTAvBgNV BAMTKDA4NTM0NjI5NTE4REFBM0JCNTY2QkJDMjZDQTExQkU0QzBCM0UxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ube8gkjvB3wMU4lu9EsQSnY4 oJedR3CCZ76SvMZj8CQI0NjAI9V/lNb1qY4wxttGYP/I7rk8/Z0CGWGssko0UTDy rHfLcfS1fXaPrOVPqkWyKv957drugli/h8omX/+iTMjRfsXjMhAJ+eVRqNj8Y61g ILVxKxGYsDxe+WmWptaaDPSWkSk5V565IALGYoiBR7WmVKXVXT7uS2wkUgIGkW9p pDqjhbbTX7eS4LVFMkX+W9/IEjDywVs9ipOwVJevFHnCrlUGyoU2L5Ks3aZrWdvp KZAlx//bGps0rSfrTNxb1d/E2XIqyfvD6qi1yM4zl5XFCMOpIggx+HRQ5SbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCFNGKVGNqju1ZrvCbKEb5MCz4WQwHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATRJvcISwJVv8xAXKQAgZrmxpZdYbHxw11x W/FMhjOnyHknBOxMHV46BfpO3ISVIieU5dGxsd28xH2p049Gv3FJeIEYCznGwd/K WDovPfdvFJEUaS9h/ap/GRxH/YnY9daGtL9OR8GeUBWQdIJNEKCGOX4syx6IpQn7 O+HC7bSurMuctcpxf8grDKCtuGueOt8oxnoc7OJzE5mvSqB+1YxwN9mev72PEbYU 2dImCTUtVpBFEONnTDfhbmavDHPABN1kTtnqzngIgzrTtvGxB3qw8vMhHoVycBA0 f2eMO20V3se7gDRYAAw+8cXVTWGB9HeJeBpjzmKq9lR9wbDATXQ= -----END CERTIFICATE-----Generated at Sun Jun 15 19:19:24 2025 by rpki-client