$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft File: 585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json) Hash identifier: 2YlMJbXfD+twHfAz+paP+oSBRk5BUYjQlQ6RT+rIt1o= Subject key identifier: 28:E5:FD:E5:EB:99:C2:B3:58:F4:34:B0:A0:6A:05:AE:22:BA:77:B8 Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 Certificate issuer: /CN=585D79944E315672D413B937BFC042F7C0AAB990 Certificate serial: 5C6A50A6E0B9C0D47D598C93F169C04A602137E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft Manifest number: EE Signing time: Sat 19 Jul 2025 02:41:00 +0000 Manifest this update: Sat 19 Jul 2025 02:36:00 +0000 Manifest next update: Tue 22 Jul 2025 14:29:00 +0000 Files and hashes: 1: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: Chss6Py6E5eKRwgjf1F9DIQZMBqTCEGF8meobH7ciaE=) 2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: jeEsDMd/+EovuK4uL5Q5qgB89wPIiu04eYRInb+Xh5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6a:50:a6:e0:b9:c0:d4:7d:59:8c:93:f1:69:c0:4a:60:21:37:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990 Validity Not Before: Jul 19 02:36:00 2025 GMT Not After : Jul 22 14:29:00 2025 GMT Subject: CN=28E5FDE5EB99C2B358F434B0A06A05AE22BA77B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:5b:07:22:fa:b6:6f:b0:3a:e6:d5:cf:e6: 30:f6:34:ac:ff:fd:fb:9e:aa:c2:97:b5:72:5e:62: e1:f9:49:e4:7f:b0:9a:11:f1:1b:d0:ff:27:6e:74: 54:e9:06:4b:e2:1a:07:ba:50:c8:25:0f:7b:df:32: 27:82:d0:24:02:31:f4:e1:7a:2c:7f:b3:e7:b3:78: 6b:20:ac:ec:67:22:f0:92:cf:b7:87:10:9d:c6:42: 48:31:e2:95:73:0b:b5:8d:11:d1:81:75:79:d5:c4: 63:66:73:d6:b5:85:89:8a:99:07:46:c3:71:1f:24: ee:22:30:bf:99:09:49:d2:b4:9d:92:09:e1:c6:5d: c8:c4:bf:e1:6c:87:3d:2d:da:a9:b7:30:fa:c8:d4: 3f:f7:10:0b:f0:c8:73:76:d6:13:a7:ac:fa:b4:33: e9:4a:23:5f:46:79:b0:a5:6a:86:47:13:9e:e6:ff: d4:99:59:bc:2a:e3:8b:f4:56:17:87:53:1d:86:94: 30:d6:82:48:87:04:09:cb:16:5d:f8:ba:30:18:4a: d4:f1:f5:26:48:aa:91:6a:35:37:99:61:e5:18:7e: a0:7f:6f:d0:26:a5:ad:4a:2c:ee:78:03:48:21:a6: 17:6c:1d:f8:17:00:aa:34:62:3c:44:43:55:6c:13: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E5:FD:E5:EB:99:C2:B3:58:F4:34:B0:A0:6A:05:AE:22:BA:77:B8 X509v3 Authority Key Identifier: keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f8:f1:42:a2:1a:fd:8c:dc:e2:3b:5d:dc:f6:f2:e9:7a:0f: fd:f5:65:ad:66:2f:d7:e9:bc:07:35:7c:40:9c:e5:27:04:d3: f8:cc:62:53:43:47:75:7b:66:43:55:8f:96:dd:cd:86:02:e6: fe:25:d3:2e:6b:72:47:af:36:d3:85:25:f0:2e:8f:a4:54:5c: 9c:cb:71:fa:7d:d1:07:5b:20:ed:bc:39:fa:1f:59:fa:04:04: ec:d0:19:ce:09:7a:ca:ac:f2:71:4a:45:21:5a:f0:a9:cb:13: 78:17:60:91:5e:76:27:67:14:79:a4:93:b8:b1:ec:9d:20:6b: 12:76:b2:b0:14:c4:e5:4d:72:8f:2b:22:f3:71:d5:23:8c:e2: a8:41:c6:22:42:29:7e:5b:58:ec:1d:74:fc:86:49:c5:9c:a0: c3:e0:6a:85:db:51:46:14:d3:51:4c:68:85:88:e6:3a:cb:8d: ce:ba:31:4e:7b:1e:99:aa:c4:43:0c:d7:97:b1:80:bd:d7:41: 4b:0f:64:e9:1e:72:28:5a:50:29:75:41:04:aa:b4:36:fa:65: 71:f7:0e:18:23:e7:db:1b:1a:ef:9e:c5:3b:7d:cd:66:d1:ee: a3:06:6f:69:1f:82:ba:32:bb:8d:7f:b5:73:46:80:5e:fc:cc: 2b:0d:c0:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXGpQpuC5wNR9WYyT8WnASmAhN+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdD MEFBQjk5MDAeFw0yNTA3MTkwMjM2MDBaFw0yNTA3MjIxNDI5MDBaMDMxMTAvBgNV BAMTKDI4RTVGREU1RUI5OUMyQjM1OEY0MzRCMEEwNkEwNUFFMjJCQTc3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0lsHIvq2b7A65tXP5jD2NKz/ /fueqsKXtXJeYuH5SeR/sJoR8RvQ/ydudFTpBkviGge6UMglD3vfMieC0CQCMfTh eix/s+ezeGsgrOxnIvCSz7eHEJ3GQkgx4pVzC7WNEdGBdXnVxGNmc9a1hYmKmQdG w3EfJO4iML+ZCUnStJ2SCeHGXcjEv+Fshz0t2qm3MPrI1D/3EAvwyHN21hOnrPq0 M+lKI19GebClaoZHE57m/9SZWbwq44v0VheHUx2GlDDWgkiHBAnLFl34ujAYStTx 9SZIqpFqNTeZYeUYfqB/b9Ampa1KLO54A0ghphdsHfgXAKo0YjxEQ1VsEzevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKOX95euZwrNY9DSwoGoFriK6d7gwHwYDVR0j BBgwFoAUWF15lE4xVnLUE7k3v8BC98CquZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC81ODVENzk5NDRF MzE1NjcyRDQxM0I5MzdCRkMwNDJGN0MwQUFCOTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdDMEFB Qjk5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQy RjdDMEFBQjk5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKD48UKiGv2M3OI7Xdz28ul6D/31Za1mL9fp vAc1fECc5ScE0/jMYlNDR3V7ZkNVj5bdzYYC5v4l0y5rckevNtOFJfAuj6RUXJzL cfp90QdbIO28OfofWfoEBOzQGc4Jesqs8nFKRSFa8KnLE3gXYJFedidnFHmkk7ix 7J0gaxJ2srAUxOVNco8rIvNx1SOM4qhBxiJCKX5bWOwddPyGScWcoMPgaoXbUUYU 01FMaIWI5jrLjc66MU57HpmqxEMM15exgL3XQUsPZOkecihaUCl1QQSqtDb6ZXH3 Dhgj59sbGu+exTt9zWbR7qMGb2kfgroyu41/tXNGgF78zCsNwPc= -----END CERTIFICATE-----Generated at Mon Jul 21 12:39:19 2025 by rpki-client