$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: 0zaSOxMIvra05Z3Qk36/lHIob5QN3bW1iz7pdnG5L+c= Subject key identifier: 7B:AC:23:0B:E4:6C:09:22:F4:12:E4:B4:9B:4F:33:29:65:70:00:D9 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 531200504E220B6B4B248B1B1C56AD942A096847 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 0499 Signing time: Mon 28 Apr 2025 12:51:58 +0000 Manifest this update: Mon 28 Apr 2025 12:46:58 +0000 Manifest next update: Thu 01 May 2025 21:16:58 +0000 Files and hashes: 1: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: 8MQqIGW3y4OjpMZRu0eUkt3/knZ+oFLPNluE9zJTObE=) 2: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: YwE+UrBIdJChzzky/B1cyIMVCcodIiUc4aS8d6d7+co=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: vrRICHKdrX5bsoj+V7upbCct/K0FWIRbEMdPjprjMe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:12:00:50:4e:22:0b:6b:4b:24:8b:1b:1c:56:ad:94:2a:09:68:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Apr 28 12:46:58 2025 GMT Not After : May 1 21:16:58 2025 GMT Subject: CN=7BAC230BE46C0922F412E4B49B4F3329657000D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:43:a1:00:59:c0:6f:2e:7d:0f:1c:21:e0: ec:6e:8f:62:ab:56:3d:e8:49:ab:64:23:c8:3e:5d: dd:ec:dc:60:c1:5b:8b:8b:70:c8:25:4d:fb:b1:31: 45:48:3d:b5:a1:0d:d8:24:16:19:85:f4:d4:25:66: 25:21:21:78:14:2f:1a:9a:53:4f:85:64:73:da:4e: a2:0b:c6:40:10:46:fb:0c:f3:0b:63:37:e5:d3:59: a4:0b:ff:d2:eb:bf:d0:d8:f9:37:da:14:d3:80:62: 12:cd:2b:af:a0:d9:54:4c:a4:33:c7:84:b8:2f:d1: 85:b3:96:46:22:76:c1:51:ab:06:01:19:77:ed:6a: 29:fb:f0:f5:5e:f4:81:8f:60:3d:fc:15:fe:c1:f8: e6:a0:13:c4:4c:45:a1:09:96:4c:54:0c:17:62:3d: 0c:c0:d8:6d:0d:51:6e:51:67:02:56:a2:ef:6b:67: 67:34:0c:01:25:96:68:b7:c2:9c:c4:72:a1:89:41: 77:9d:97:4f:05:aa:6c:b1:18:48:6b:dd:64:df:52: f4:f9:f8:83:e5:2a:cb:ce:f4:01:d0:ce:f6:f7:0f: 95:3b:d4:6f:74:5e:cf:82:93:ef:7a:9e:75:1c:18: c7:c3:3d:5c:ec:6b:f8:28:d2:dc:c3:1b:b0:b7:72: 43:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AC:23:0B:E4:6C:09:22:F4:12:E4:B4:9B:4F:33:29:65:70:00:D9 X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ec:3b:82:5f:f0:f8:94:b3:c0:d5:e9:11:d1:2c:b4:43:51: c1:c4:b6:5c:df:75:27:17:da:af:5f:59:4e:01:e3:68:e4:df: d7:37:df:18:c9:d6:94:ee:14:01:f1:48:cf:8c:e2:5f:d4:ee: 2b:43:f7:7c:65:5e:f7:18:2e:00:7f:df:bf:7c:c0:59:ac:f9: 31:a1:af:01:be:7e:50:21:dd:06:55:23:64:93:21:b3:72:c9: e0:32:6b:6e:a7:8b:c9:d0:0b:10:c3:be:8d:98:62:e8:c6:2e: cd:8c:7b:7e:87:bb:c4:c3:9b:54:37:8f:6b:dd:6a:fd:79:dd: b6:81:5f:57:7b:42:2d:1d:ae:ef:28:a1:5c:bf:fb:0e:1a:ef: 48:df:ef:10:d3:11:da:69:42:cf:f5:27:76:e3:44:02:5f:22: a9:4e:64:c9:38:0d:93:ae:ec:02:48:cc:0d:f7:5f:d7:b9:0a: 85:ec:93:eb:5e:a6:43:2e:1e:69:ba:fa:61:e5:d6:4a:ed:22: a4:9a:71:e6:ae:d7:e5:45:a8:ae:ad:bf:75:46:0b:74:32:dd: 9f:13:85:4e:6e:e2:fa:fc:8f:5a:f9:12:de:f2:a4:2b:cb:76: d0:92:2d:85:d2:7d:10:c6:8c:19:02:89:7d:2f:91:8d:63:92: 1b:10:05:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxIAUE4iC2tLJIsbHFatlCoJaEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTA0MjgxMjQ2NThaFw0yNTA1MDEyMTE2NThaMDMxMTAvBgNV BAMTKDdCQUMyMzBCRTQ2QzA5MjJGNDEyRTRCNDlCNEYzMzI5NjU3MDAwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjkOhAFnAby59Dxwh4Oxuj2Kr Vj3oSatkI8g+Xd3s3GDBW4uLcMglTfuxMUVIPbWhDdgkFhmF9NQlZiUhIXgULxqa U0+FZHPaTqILxkAQRvsM8wtjN+XTWaQL/9Lrv9DY+TfaFNOAYhLNK6+g2VRMpDPH hLgv0YWzlkYidsFRqwYBGXftain78PVe9IGPYD38Ff7B+OagE8RMRaEJlkxUDBdi PQzA2G0NUW5RZwJWou9rZ2c0DAEllmi3wpzEcqGJQXedl08FqmyxGEhr3WTfUvT5 +IPlKsvO9AHQzvb3D5U71G90Xs+Ck+96nnUcGMfDPVzsa/go0tzDG7C3ckOJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe6wjC+RsCSL0EuS0m08zKWVwANkwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzsO4Jf8PiUs8DV6RHRLLRDUcHEtlzfdScX 2q9fWU4B42jk39c33xjJ1pTuFAHxSM+M4l/U7itD93xlXvcYLgB/3798wFms+TGh rwG+flAh3QZVI2STIbNyyeAya26ni8nQCxDDvo2YYujGLs2Me36Hu8TDm1Q3j2vd av153baBX1d7Qi0dru8ooVy/+w4a70jf7xDTEdppQs/1J3bjRAJfIqlOZMk4DZOu 7AJIzA33X9e5CoXsk+tepkMuHmm6+mHl1krtIqSaceau1+VFqK6tv3VGC3Qy3Z8T hU5u4vr8j1r5Et7ypCvLdtCSLYXSfRDGjBkCiX0vkY1jkhsQBcc= -----END CERTIFICATE-----Generated at Tue Apr 29 07:01:13 2025 by rpki-client