$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: 2L5SEfbFzsrYoDEmgGmYJIa/Q9gyHS4blXmetJ+++IU= Subject key identifier: 2E:20:91:94:73:70:D2:AE:83:32:36:97:34:5A:E0:F0:9D:D3:32:44 Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 2D5B59D743FDF8F4311BABBC8B6E595E708BA1A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 0224 Signing time: Mon 04 Aug 2025 15:50:04 +0000 Manifest this update: Mon 04 Aug 2025 15:45:04 +0000 Manifest next update: Fri 08 Aug 2025 03:49:04 +0000 Files and hashes: 1: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: i8M5392/mKafDuklRHq/QilbzCjACq89wuIsnjrNvog=) 2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: gC29j+yO4i7uQ2lQ5TlSgcpEgKWPrlDicf9vHKUSroM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5b:59:d7:43:fd:f8:f4:31:1b:ab:bc:8b:6e:59:5e:70:8b:a1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Aug 4 15:45:04 2025 GMT Not After : Aug 8 03:49:04 2025 GMT Subject: CN=2E2091947370D2AE83323697345AE0F09DD33244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:51:80:23:56:33:88:9a:ca:74:d9:90:ff: 07:d6:28:37:0a:ac:79:00:88:31:9e:40:e1:6e:f7: a2:d1:bf:54:f1:a9:c4:be:4b:b3:bc:0f:14:9d:17: 85:91:fd:7b:97:64:84:01:ad:6b:25:c6:79:03:60: ad:62:7d:12:b6:7c:ac:ed:36:71:5e:ac:8f:b7:61: 41:dc:5f:39:8c:2b:66:40:03:31:47:3b:7a:fc:39: 35:61:34:68:3a:b7:69:6a:e4:2c:c9:36:a0:9d:58: 9e:58:1b:18:83:0c:3f:b9:28:f5:07:b3:69:3a:01: fc:a9:d9:c9:a2:dc:c0:57:f2:f1:12:11:27:16:18: 8a:fd:a1:09:3e:c6:18:20:af:0f:e6:c9:89:0d:dd: b1:d9:81:64:14:38:0c:e4:e4:0b:e2:85:bd:7e:96: 57:81:cd:13:6a:dc:0b:ef:e4:de:ae:cd:0c:f4:a2: 98:00:dd:3e:93:6c:5b:c8:bb:0c:51:1e:f4:e5:9c: 35:79:c0:f0:7d:33:0c:97:98:36:58:00:cc:5b:d5: e3:32:13:f3:be:03:9e:49:11:9f:6e:17:94:c4:4a: 47:45:45:6e:2e:32:a2:8c:d2:8d:19:27:37:15:d0: 0e:95:b1:b3:70:d3:a0:7f:ac:2e:7c:b9:d0:6c:dd: 0e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:20:91:94:73:70:D2:AE:83:32:36:97:34:5A:E0:F0:9D:D3:32:44 X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e2:e0:89:91:eb:39:a2:63:f9:49:83:59:3c:62:5f:5d:90: 0c:08:96:ff:11:0c:f3:dc:e7:31:78:34:15:b7:40:42:ef:ed: e5:00:60:f0:36:f1:cf:3f:0c:64:52:42:e6:a1:1a:ff:f0:e2: fd:f4:8b:bf:60:8d:4a:98:8c:97:b3:e9:48:36:a3:5b:7c:da: ce:e1:51:20:c3:cd:c5:fd:8c:88:da:b6:d2:4f:17:29:33:58: 2c:21:ac:d0:48:79:b3:ee:2f:66:a3:a6:bf:e9:17:da:20:11: e4:1e:57:59:8c:6b:18:d1:71:da:1c:e0:39:7a:2b:2a:b4:f9: cd:f5:87:d3:df:9d:0e:84:a6:62:59:24:86:29:9a:8f:0c:4d: 72:7c:a5:9d:c9:43:ac:74:86:4c:7f:3e:a0:91:c3:e1:d4:d4: 21:2a:9f:e3:eb:54:2f:de:0f:e8:dd:cd:2a:c8:8c:76:69:02: 33:6b:80:03:c8:f2:68:69:1b:7d:22:61:fb:34:9b:72:92:a7: a1:c1:83:e4:38:11:62:6c:5d:18:76:2f:e3:9d:36:06:33:19: eb:75:6a:0a:b5:30:85:38:33:c6:75:ff:97:97:f0:c3:8b:ae: 06:ca:f1:58:ad:4c:a4:2f:11:a6:c1:f2:0d:4c:7f:ed:3f:e5: e3:2a:64:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVtZ10P9+PQxG6u8i25ZXnCLoagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNTA4MDQxNTQ1MDRaFw0yNTA4MDgwMzQ5MDRaMDMxMTAvBgNV BAMTKDJFMjA5MTk0NzM3MEQyQUU4MzMyMzY5NzM0NUFFMEYwOUREMzMyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxh1GAI1YziJrKdNmQ/wfWKDcK rHkAiDGeQOFu96LRv1TxqcS+S7O8DxSdF4WR/XuXZIQBrWslxnkDYK1ifRK2fKzt NnFerI+3YUHcXzmMK2ZAAzFHO3r8OTVhNGg6t2lq5CzJNqCdWJ5YGxiDDD+5KPUH s2k6Afyp2cmi3MBX8vESEScWGIr9oQk+xhggrw/myYkN3bHZgWQUOAzk5Avihb1+ lleBzRNq3Avv5N6uzQz0opgA3T6TbFvIuwxRHvTlnDV5wPB9MwyXmDZYAMxb1eMy E/O+A55JEZ9uF5TESkdFRW4uMqKM0o0ZJzcV0A6VsbNw06B/rC58udBs3Q7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULiCRlHNw0q6DMjaXNFrg8J3TMkQwHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzi4ImR6zmiY/lJg1k8Yl9dkAwIlv8RDPPc 5zF4NBW3QELv7eUAYPA28c8/DGRSQuahGv/w4v30i79gjUqYjJez6Ug2o1t82s7h USDDzcX9jIjattJPFykzWCwhrNBIebPuL2ajpr/pF9ogEeQeV1mMaxjRcdoc4Dl6 Kyq0+c31h9PfnQ6EpmJZJIYpmo8MTXJ8pZ3JQ6x0hkx/PqCRw+HU1CEqn+PrVC/e D+jdzSrIjHZpAjNrgAPI8mhpG30iYfs0m3KSp6HBg+Q4EWJsXRh2L+OdNgYzGet1 agq1MIU4M8Z1/5eX8MOLrgbK8VitTKQvEabB8g1Mf+0/5eMqZD0= -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:13 2025 by rpki-client