$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: elOBY/XSBcvREWcBjMj8Q5qbNr6kXRpkk7ciGJ5dyFg= Subject key identifier: CA:A9:8E:E0:D6:17:DB:08:B5:5B:A6:FA:86:FD:E0:B6:60:5E:1B:E6 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 70707793ED72261D604DB1951C1715CDC4391337 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 04ED Signing time: Mon 03 Nov 2025 21:12:04 +0000 Manifest this update: Mon 03 Nov 2025 21:07:04 +0000 Manifest next update: Fri 07 Nov 2025 06:42:04 +0000 Files and hashes: 1: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: ef2OOYAMvRhBjN1xxqDh0uCYVaWB+OALG+51ZcHeARE=) 2: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=) 3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: YwE+UrBIdJChzzky/B1cyIMVCcodIiUc4aS8d6d7+co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:70:77:93:ed:72:26:1d:60:4d:b1:95:1c:17:15:cd:c4:39:13:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Nov 3 21:07:04 2025 GMT Not After : Nov 7 06:42:04 2025 GMT Subject: CN=CAA98EE0D617DB08B55BA6FA86FDE0B6605E1BE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:55:b9:8c:2d:ad:84:13:a5:95:43:f5:ac: f8:da:59:9d:a6:37:77:99:62:1c:e3:a0:f4:95:ae: 5b:64:7c:f8:c9:c3:db:33:8c:e3:28:66:3b:06:8c: 6e:6b:e3:e7:9e:ad:f2:d2:e7:a5:5b:34:fb:74:d6: c6:f6:74:4c:b0:47:4f:97:92:53:3b:24:83:f7:8f: c6:49:ff:4f:82:d8:3f:14:98:63:19:ad:0f:c1:71: ae:5d:47:9f:fc:c3:d9:31:a5:bf:bf:18:6c:ab:9d: b1:e8:59:82:2f:f9:08:0d:0d:9f:6a:1d:2f:a7:82: 0d:f4:f7:2e:db:e1:e0:22:5a:d8:c9:74:e5:01:88: 73:39:f9:73:f6:0b:de:c4:29:62:b1:1d:71:d1:b7: 19:f3:63:4e:6e:f5:0b:e8:1a:04:40:99:1c:44:3f: 4d:40:e3:31:ad:f5:e9:4c:ce:3f:fa:fb:e9:cc:96: aa:88:2a:a5:da:39:36:23:d7:f1:d2:da:be:13:fa: bd:fa:06:3a:2a:3a:5e:27:cc:f0:f6:4b:4c:f0:21: 03:d2:81:3f:a0:c0:3b:7f:dc:45:c9:8a:b3:3d:bb: 8f:90:3e:c2:bf:d2:9e:b1:e0:3f:d8:ea:7f:f8:ca: 86:45:10:19:68:90:3e:ef:bd:f0:ab:10:61:db:5c: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A9:8E:E0:D6:17:DB:08:B5:5B:A6:FA:86:FD:E0:B6:60:5E:1B:E6 X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:53:fe:e2:24:25:0c:dd:24:d0:0c:d5:0a:d1:d1:bd:a4:18: c6:72:60:6f:4d:89:39:e1:4d:97:49:6d:38:47:82:3b:41:b6: 3d:6b:c3:56:fc:07:26:39:9b:b9:b6:78:d4:b9:22:60:11:d5: 59:97:6c:2d:af:52:b9:7c:a3:37:67:d4:16:be:1c:85:41:68: b6:37:76:47:df:a0:9f:b0:8a:f2:84:9c:1c:ca:b4:b4:1e:cf: d0:13:41:11:ce:cc:d9:ce:d0:65:25:49:48:04:66:19:17:32: d6:a1:7b:2f:d9:8c:af:38:ed:f6:34:6e:8e:f4:e8:fb:82:b0: 7e:ed:30:bc:46:0a:3e:02:29:b7:a4:60:9a:86:a3:fb:59:bf: c6:62:7b:f1:7f:6b:08:88:08:35:b1:0d:39:c6:61:9f:51:48: ed:49:ed:94:06:0d:c4:83:b2:57:88:48:d0:79:2c:4f:8d:47: 30:db:db:a8:e4:cb:05:89:3f:0e:b8:a3:03:de:e8:dd:58:9a: 56:82:d8:80:12:ed:6f:6c:4d:99:73:b3:8f:58:15:a0:0a:fb: a6:d3:10:f9:67:c1:da:ee:7e:3f:ff:1b:13:f7:99:4a:86:8c: 31:5f:ca:62:1e:3e:bf:12:9d:54:15:fb:fb:ae:a1:a2:ab:6a: 2c:3d:97:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHB3k+1yJh1gTbGVHBcVzcQ5EzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTExMDMyMTA3MDRaFw0yNTExMDcwNjQyMDRaMDMxMTAvBgNV BAMTKENBQTk4RUUwRDYxN0RCMDhCNTVCQTZGQTg2RkRFMEI2NjA1RTFCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVtFW5jC2thBOllUP1rPjaWZ2m N3eZYhzjoPSVrltkfPjJw9szjOMoZjsGjG5r4+eerfLS56VbNPt01sb2dEywR0+X klM7JIP3j8ZJ/0+C2D8UmGMZrQ/Bca5dR5/8w9kxpb+/GGyrnbHoWYIv+QgNDZ9q HS+ngg309y7b4eAiWtjJdOUBiHM5+XP2C97EKWKxHXHRtxnzY05u9QvoGgRAmRxE P01A4zGt9elMzj/6++nMlqqIKqXaOTYj1/HS2r4T+r36BjoqOl4nzPD2S0zwIQPS gT+gwDt/3EXJirM9u4+QPsK/0p6x4D/Y6n/4yoZFEBlokD7vvfCrEGHbXIjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyqmO4NYX2wi1W6b6hv3gtmBeG+YwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANVT/uIkJQzdJNAM1QrR0b2kGMZyYG9NiTnh TZdJbThHgjtBtj1rw1b8ByY5m7m2eNS5ImAR1VmXbC2vUrl8ozdn1Ba+HIVBaLY3 dkffoJ+wivKEnBzKtLQez9ATQRHOzNnO0GUlSUgEZhkXMtahey/ZjK847fY0bo70 6PuCsH7tMLxGCj4CKbekYJqGo/tZv8Zie/F/awiICDWxDTnGYZ9RSO1J7ZQGDcSD sleISNB5LE+NRzDb26jkywWJPw64owPe6N1YmlaC2IAS7W9sTZlzs49YFaAK+6bT EPlnwdrufj//GxP3mUqGjDFfymIePr8SnVQV+/uuoaKraiw9l68= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:47 2025 by rpki-client