$ rpki-client -vvf repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft File: 58D7A2E054D4F6B835578031386896062B0B0CED.mft (raw, json) Hash identifier: dpV5bIGPf7Bajf5jMh0Z8CbGg8qYaZNI4fgFgfsR3p0= Subject key identifier: 8F:BE:35:C1:94:8E:06:AC:41:D5:27:FB:4B:2F:88:BF:C5:0F:16:CC Authority key identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED Certificate issuer: /CN=58D7A2E054D4F6B835578031386896062B0B0CED Certificate serial: 5E6C5831FABA80D6B6496576B1A7A988E8CC5567 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft Manifest number: 04BE Signing time: Sat 19 Jul 2025 16:51:54 +0000 Manifest this update: Sat 19 Jul 2025 16:46:54 +0000 Manifest next update: Wed 23 Jul 2025 01:51:54 +0000 Files and hashes: 1: 58D7A2E054D4F6B835578031386896062B0B0CED.crl (hash: 8ftXCpojuP+u5G0w2o0BF+RdhbSvhhgpjlILPsEkcfU=) 2: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: ZWBY3WXKjlvHg1FOOk4HRgnKTIvP5SNRhqskNyIgs+A=) 3: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: OexevG3DSt6IOIQ8TDJTohgp2mw8T+QrRti2PWdRftM=) 4: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: GJUhrLI0oWXDf6ZROGFSjUwnXXl9dUvh1pZu6x2DLeU=) 5: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: lXDC34Tc//RCk/Qkq64mSBed2Qu8SClw4SKY3H86P70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6c:58:31:fa:ba:80:d6:b6:49:65:76:b1:a7:a9:88:e8:cc:55:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7A2E054D4F6B835578031386896062B0B0CED Validity Not Before: Jul 19 16:46:54 2025 GMT Not After : Jul 23 01:51:54 2025 GMT Subject: CN=8FBE35C1948E06AC41D527FB4B2F88BFC50F16CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:9d:ff:d8:4e:30:ce:39:b8:61:4d:8e:8b: b3:d6:95:47:0b:5c:e0:24:92:b0:c1:b0:62:15:72: ca:74:06:1e:64:17:59:30:bc:5a:0f:ad:2e:2e:a7: c3:9f:fb:c5:f3:3b:2e:ef:57:ea:3e:f8:1c:45:c8: e0:1d:4d:fe:13:12:6f:79:3f:22:74:86:d5:2b:1a: c1:f0:e7:1b:5e:39:c5:0a:c1:0a:b0:37:71:80:e0: 0e:4d:ed:ef:47:62:ce:72:16:cb:c1:35:e5:31:2e: c5:62:ff:28:34:38:22:17:54:fe:36:64:ca:ed:6a: a3:a2:32:ca:a0:bf:34:23:07:b7:4e:f8:91:12:96: ee:eb:f5:d5:8b:d1:d1:12:6c:5c:d8:7d:48:b6:14: 6e:4a:09:06:b8:ce:32:8d:dc:b0:a0:7e:e5:5e:79: 32:88:cc:ec:21:fc:4e:01:28:67:d8:fa:9b:ab:b1: a7:76:51:37:52:de:7f:90:b2:b3:97:be:76:94:2d: e7:ab:1b:f3:66:2b:1b:c5:e2:30:b8:1f:64:68:0a: d3:6c:62:e5:47:2a:f6:93:86:2c:5a:f4:e7:bc:9a: ce:7f:2d:71:39:4b:d4:c8:3b:36:60:03:15:58:f7: fd:a4:47:c7:b0:0f:a7:ec:96:ae:4e:a6:2e:41:b6: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BE:35:C1:94:8E:06:AC:41:D5:27:FB:4B:2F:88:BF:C5:0F:16:CC X509v3 Authority Key Identifier: keyid:58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b7:f6:2c:0c:5f:07:9a:c2:7a:0a:45:a1:16:81:eb:53:34: 89:59:30:ab:46:08:ca:98:2c:7d:67:bb:06:98:b8:6f:76:a0: 9a:c8:e1:75:18:f6:33:5e:f5:4d:07:8e:85:1c:5d:8f:b1:90: 62:66:84:e2:99:f3:80:66:c7:a3:35:77:bb:cc:62:d2:cf:25: 5e:3d:61:de:d8:38:03:3a:77:15:fa:63:f5:cf:62:2e:fb:52: ee:13:71:5a:a2:99:f5:01:d8:e4:08:5d:74:d1:be:54:88:dc: 35:73:4b:a2:f3:cb:a0:a2:c9:ba:56:b0:a9:c8:68:ae:b0:c3: 95:1c:eb:7c:f7:43:83:87:70:2c:0f:dc:4b:61:4a:d6:41:97: 3b:73:69:99:cc:58:db:18:a7:fd:e8:13:1d:f6:2a:04:7c:28: bb:ce:2b:f8:4b:d9:0c:37:74:e8:a9:5d:09:38:7e:96:92:da: 99:50:ee:fd:b4:c8:a5:76:91:70:2c:e7:66:1d:ba:c0:09:e3: e7:ac:35:41:45:ae:93:2c:cb:75:4f:9d:7d:f4:cb:2c:41:70: a1:8b:25:5e:03:7e:26:6a:01:2d:60:b0:bb:36:15:c1:b9:51: d1:63:71:c1:f7:0d:21:d7:9f:29:c1:07:17:99:ff:19:1f:29: 5f:a3:f8:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmxYMfq6gNa2SWV2saepiOjMVWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0EyRTA1NEQ0RjZCODM1NTc4MDMxMzg2ODk2MDYy QjBCMENFRDAeFw0yNTA3MTkxNjQ2NTRaFw0yNTA3MjMwMTUxNTRaMDMxMTAvBgNV BAMTKDhGQkUzNUMxOTQ4RTA2QUM0MUQ1MjdGQjRCMkY4OEJGQzUwRjE2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHK53/2E4wzjm4YU2Oi7PWlUcL XOAkkrDBsGIVcsp0Bh5kF1kwvFoPrS4up8Of+8XzOy7vV+o++BxFyOAdTf4TEm95 PyJ0htUrGsHw5xteOcUKwQqwN3GA4A5N7e9HYs5yFsvBNeUxLsVi/yg0OCIXVP42 ZMrtaqOiMsqgvzQjB7dO+JESlu7r9dWL0dESbFzYfUi2FG5KCQa4zjKN3LCgfuVe eTKIzOwh/E4BKGfY+pursad2UTdS3n+QsrOXvnaULeerG/NmKxvF4jC4H2RoCtNs YuVHKvaThixa9Oe8ms5/LXE5S9TIOzZgAxVY9/2kR8ewD6fslq5Opi5BtpwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj741wZSOBqxB1Sf7Sy+Iv8UPFswwHwYDVR0j BBgwFoAUWNei4FTU9rg1V4AxOGiWBisLDO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWJiYWRiMy05YWM4LTQ2ZGYtYWI5MS1iZjM5ZGZlZTFiZDAvMC81OEQ3QTJFMDU0 RDRGNkI4MzU1NzgwMzEzODY4OTYwNjJCMEIwQ0VELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0EyRTA1NEQ0RjZCODM1NTc4MDMxMzg2ODk2MDYyQjBC MENFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvNThEN0EyRTA1NEQ0RjZCODM1NTc4MDMxMzg2ODk2 MDYyQjBCMENFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKm39iwMXweawnoKRaEWgetTNIlZMKtGCMqY LH1nuwaYuG92oJrI4XUY9jNe9U0HjoUcXY+xkGJmhOKZ84Bmx6M1d7vMYtLPJV49 Yd7YOAM6dxX6Y/XPYi77Uu4TcVqimfUB2OQIXXTRvlSI3DVzS6Lzy6CiybpWsKnI aK6ww5Uc63z3Q4OHcCwP3EthStZBlztzaZnMWNsYp/3oEx32KgR8KLvOK/hL2Qw3 dOipXQk4fpaS2plQ7v20yKV2kXAs52YdusAJ4+esNUFFrpMsy3VPnX30yyxBcKGL JV4DfiZqAS1gsLs2FcG5UdFjccH3DSHXnynBBxeZ/xkfKV+j+CI= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:24 2025 by rpki-client