$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: HCquduNMNbFlzqhvgJdlHxvV9vWQ84N9KPL41zkxyNs= Subject key identifier: A7:79:AB:09:B1:5D:45:3E:43:A0:24:92:0E:D5:2F:3F:05:17:86:81 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 6CFE592544CBCBCB70EE731EAF45B42A9AD20028 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 04C5 Signing time: Wed 06 Aug 2025 20:22:17 +0000 Manifest this update: Wed 06 Aug 2025 20:17:17 +0000 Manifest next update: Sat 09 Aug 2025 22:53:17 +0000 Files and hashes: 1: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: YwE+UrBIdJChzzky/B1cyIMVCcodIiUc4aS8d6d7+co=) 2: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: u9TiJzlfLwT7enb40ha5GL/vfumyR1VxvePDfROUBPQ=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: vrRICHKdrX5bsoj+V7upbCct/K0FWIRbEMdPjprjMe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:fe:59:25:44:cb:cb:cb:70:ee:73:1e:af:45:b4:2a:9a:d2:00:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Aug 6 20:17:17 2025 GMT Not After : Aug 9 22:53:17 2025 GMT Subject: CN=A779AB09B15D453E43A024920ED52F3F05178681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:e0:94:2a:6c:e8:78:88:1c:28:ed:b6:e2: 5b:69:5c:b9:3b:5c:63:c5:00:e2:f2:d6:82:db:fb: f9:15:1e:7a:dd:44:a9:59:40:09:39:ff:88:51:dc: e9:c4:da:9c:34:32:e9:89:77:0a:f4:75:61:7b:ae: a8:77:ce:90:2b:15:23:21:f9:fd:32:5f:46:b3:97: af:73:76:56:29:c4:90:83:e9:15:01:d7:fa:fb:4c: 54:3a:a7:f7:6f:7d:8c:ce:11:fc:40:5c:03:b7:b3: b7:43:f1:a7:8e:e9:26:e9:d9:c6:bd:90:b5:19:99: 28:74:70:ba:a3:0a:d7:1f:18:c1:84:96:f9:53:57: 5f:12:cf:16:02:46:b3:49:12:52:f9:b9:bb:d3:a2: 05:d4:53:a2:d0:ad:db:c4:8a:37:f8:14:44:d2:a5: 85:78:f5:20:b4:c6:37:5f:82:df:03:4f:1a:8c:ee: d9:b2:2a:aa:e5:c6:56:f4:cd:cd:87:30:a1:02:21: 16:b7:5a:44:8f:b9:43:f0:69:1a:e3:bf:06:d6:e6: 28:f7:99:cc:67:8a:19:a7:83:d7:5b:ca:b4:c1:c1: 82:5b:a9:9e:11:4c:19:e0:f4:29:72:09:69:bb:8f: 5f:4c:70:8c:6d:38:34:3c:c9:e1:4d:ae:2b:d7:79: 83:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:79:AB:09:B1:5D:45:3E:43:A0:24:92:0E:D5:2F:3F:05:17:86:81 X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:8a:03:23:d8:7b:c4:c4:0b:3c:23:43:e1:77:f6:a5:a2:17: 63:51:8e:83:ce:e1:97:34:e9:f2:18:06:93:0d:90:4c:03:97: 00:35:8d:0d:cd:2c:7e:78:84:ed:7a:8e:1f:d5:78:ca:9a:e4: 13:1d:f2:02:29:08:9c:91:33:ff:e0:6b:a6:f2:b6:70:4f:02: dc:16:5a:5e:a5:74:06:66:26:2f:61:bc:f6:1e:50:6e:1e:04: 48:f6:30:fb:c0:2f:7d:24:2e:06:e0:bf:36:58:20:29:ed:94: ea:c5:f3:f8:49:34:b2:d6:0f:93:e8:72:ea:13:7f:f3:a8:c7: b6:41:29:4b:78:5e:3a:8d:35:d1:ea:c8:c8:40:09:2c:e9:25: a3:fd:38:b9:92:b9:e4:6a:39:bd:1b:eb:13:d4:81:0e:61:80: 1f:3c:88:97:5c:6f:2a:90:0f:e6:c2:10:d2:0d:59:63:0d:41: 88:7a:17:a2:63:e8:33:2c:35:10:34:fe:07:5f:62:7b:f7:35: a1:2b:40:4b:82:ad:b0:28:6b:06:c7:e6:1f:a7:a2:1f:ae:ac: bd:58:d5:86:1b:2a:a6:e9:9a:13:70:e4:0d:5c:e3:3f:3c:42: 39:78:8c:85:b2:d6:7b:7b:9f:c8:29:fa:e3:b8:9f:ef:b1:e7: da:34:1f:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbP5ZJUTLy8tw7nMer0W0KprSACgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTA4MDYyMDE3MTdaFw0yNTA4MDkyMjUzMTdaMDMxMTAvBgNV BAMTKEE3NzlBQjA5QjE1RDQ1M0U0M0EwMjQ5MjBFRDUyRjNGMDUxNzg2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkeCUKmzoeIgcKO224ltpXLk7 XGPFAOLy1oLb+/kVHnrdRKlZQAk5/4hR3OnE2pw0MumJdwr0dWF7rqh3zpArFSMh +f0yX0azl69zdlYpxJCD6RUB1/r7TFQ6p/dvfYzOEfxAXAO3s7dD8aeO6Sbp2ca9 kLUZmSh0cLqjCtcfGMGElvlTV18SzxYCRrNJElL5ubvTogXUU6LQrdvEijf4FETS pYV49SC0xjdfgt8DTxqM7tmyKqrlxlb0zc2HMKECIRa3WkSPuUPwaRrjvwbW5ij3 mcxnihmng9dbyrTBwYJbqZ4RTBng9ClyCWm7j19McIxtODQ8yeFNrivXeYPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp3mrCbFdRT5DoCSSDtUvPwUXhoEwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6KAyPYe8TECzwjQ+F39qWiF2NRjoPO4Zc0 6fIYBpMNkEwDlwA1jQ3NLH54hO16jh/VeMqa5BMd8gIpCJyRM//ga6bytnBPAtwW Wl6ldAZmJi9hvPYeUG4eBEj2MPvAL30kLgbgvzZYICntlOrF8/hJNLLWD5PocuoT f/Oox7ZBKUt4XjqNNdHqyMhACSzpJaP9OLmSueRqOb0b6xPUgQ5hgB88iJdcbyqQ D+bCENINWWMNQYh6F6Jj6DMsNRA0/gdfYnv3NaErQEuCrbAoawbH5h+noh+urL1Y 1YYbKqbpmhNw5A1c4z88Qjl4jIWy1nt7n8gp+uO4n++x59o0H3w= -----END CERTIFICATE-----Generated at Thu Aug 7 00:32:58 2025 by rpki-client