$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft File: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft (raw, json) Hash identifier: 4KsX49cfPgOpxEPbvWmI77Qt1vPhnBSRSVpAuhaegUE= Subject key identifier: EB:A7:30:95:CE:E7:59:78:E3:CF:22:98:B4:71:6E:20:FB:E7:AE:DD Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Certificate serial: 64CBDC7503674AA100284777F5E1D88656FD3471 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft Manifest number: 04F8 Signing time: Sat 19 Jul 2025 11:21:32 +0000 Manifest this update: Sat 19 Jul 2025 11:16:32 +0000 Manifest next update: Tue 22 Jul 2025 14:03:32 +0000 Files and hashes: 1: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl (hash: HrJukc3QqzKz+c7BpiAB83NdX5PTsmPS9Zh8tE5pkHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:cb:dc:75:03:67:4a:a1:00:28:47:77:f5:e1:d8:86:56:fd:34:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Validity Not Before: Jul 19 11:16:32 2025 GMT Not After : Jul 22 14:03:32 2025 GMT Subject: CN=EBA73095CEE75978E3CF2298B4716E20FBE7AEDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:a1:0a:4c:ff:b0:09:73:32:95:e4:a9:f4: 13:08:d0:b8:ec:8a:60:4d:9b:3e:97:ad:c4:08:32: 9a:e6:b0:65:58:fd:fe:7b:ef:10:b7:c7:99:5c:27: f7:41:0f:ff:9a:79:50:74:5a:b6:5a:d1:5b:eb:70: 6a:f7:8e:39:44:c0:28:a1:fc:12:84:aa:25:6c:92: 5d:ae:c2:6a:ed:ae:99:59:7b:c4:0b:1a:43:4b:14: 69:91:a5:43:59:73:08:20:09:c9:f2:dd:1c:15:f3: ad:2a:ff:90:aa:1d:39:f2:2f:0b:7b:9d:cf:19:41: 25:20:62:d1:e4:4d:a3:9a:66:b6:9e:a7:8d:8d:dc: e9:e0:68:f9:50:51:85:cc:d7:e4:48:7e:fd:d7:a1: 6e:61:e8:81:d5:2c:50:0e:1e:9b:66:01:e6:85:24: 90:9a:62:04:bc:eb:6e:72:a6:ce:31:66:02:e5:08: f4:ad:fe:6a:d8:43:cf:34:42:31:4d:24:db:b8:c6: 8b:c5:a1:21:c8:1b:ad:78:c9:a0:0b:7a:a6:8d:97: d3:2f:94:b1:71:e9:11:08:bf:e3:ec:6d:1d:8d:1e: bb:2d:1c:8d:ff:ce:57:10:e5:43:5c:68:f4:08:c4: 92:f0:cc:39:54:ac:18:e1:ff:03:9a:65:65:6d:2a: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A7:30:95:CE:E7:59:78:E3:CF:22:98:B4:71:6E:20:FB:E7:AE:DD X509v3 Authority Key Identifier: keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:75:b5:7b:dc:11:98:cc:4c:95:bc:62:aa:13:76:a1:a0:65: aa:be:fa:16:20:20:12:8a:8f:5d:25:b3:16:ce:c0:57:66:d2: ee:39:b0:24:5a:b9:98:1c:32:91:67:34:52:b2:29:ce:72:14: 3e:ae:b4:d5:68:55:8f:bf:5d:c2:10:1f:58:d8:b9:d2:be:06: 36:90:8d:2e:44:ab:45:3e:3c:0d:a9:98:35:74:3f:ba:66:e7: 7e:9a:df:cc:e5:03:af:10:08:c6:18:8a:18:d6:bb:e7:1e:fa: ef:57:0b:95:5e:ae:5a:30:f6:88:5e:4b:27:a2:db:eb:8b:63: 5c:1f:3a:6c:17:5d:83:b4:ab:60:ab:c5:64:0b:4f:33:83:5e: f0:22:5e:4c:29:42:ba:4d:45:41:91:a8:a5:fd:25:e4:1d:ae: 04:78:eb:fa:b0:b7:65:3a:a1:60:e5:92:a3:86:b9:d8:5a:d0: b9:df:22:de:2d:85:57:c3:38:20:c5:6c:a1:8e:93:9f:11:db: 36:73:0e:03:5d:66:d5:3f:49:4a:1e:1d:17:b2:63:e5:df:02: d0:e0:07:b4:94:36:37:0b:61:41:cf:a6:b6:6d:2b:6e:d9:67: a1:3c:ba:a3:dd:82:dc:b0:7b:d0:e5:c4:bd:20:06:da:25:e9: ac:b0:75:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMvcdQNnSqEAKEd39eHYhlb9NHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFC NjdENjFFQTAeFw0yNTA3MTkxMTE2MzJaFw0yNTA3MjIxNDAzMzJaMDMxMTAvBgNV BAMTKEVCQTczMDk1Q0VFNzU5NzhFM0NGMjI5OEI0NzE2RTIwRkJFN0FFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+qEKTP+wCXMyleSp9BMI0Ljs imBNmz6XrcQIMprmsGVY/f577xC3x5lcJ/dBD/+aeVB0WrZa0VvrcGr3jjlEwCih /BKEqiVskl2uwmrtrplZe8QLGkNLFGmRpUNZcwggCcny3RwV860q/5CqHTnyLwt7 nc8ZQSUgYtHkTaOaZraep42N3OngaPlQUYXM1+RIfv3XoW5h6IHVLFAOHptmAeaF JJCaYgS8625yps4xZgLlCPSt/mrYQ880QjFNJNu4xovFoSHIG614yaALeqaNl9Mv lLFx6REIv+PsbR2NHrstHI3/zlcQ5UNcaPQIxJLwzDlUrBjh/wOaZWVtKm0LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU66cwlc7nWXjjzyKYtHFuIPvnrt0wHwYDVR0j BBgwFoAUWNfcUw87pKzQSIBiFw4VgbZ9YeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhM2EzOS1lMGVjLTRmYzEtOWI1NC0zNTNlMDdmMDA1ZGQvMC81OEQ3REM1MzBG M0JBNEFDRDA0ODgwNjIxNzBFMTU4MUI2N0Q2MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFCNjdE NjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1 ODFCNjdENjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHV1tXvcEZjMTJW8YqoTdqGgZaq++hYgIBKK j10lsxbOwFdm0u45sCRauZgcMpFnNFKyKc5yFD6utNVoVY+/XcIQH1jYudK+BjaQ jS5Eq0U+PA2pmDV0P7pm536a38zlA68QCMYYihjWu+ce+u9XC5Verlow9oheSyei 2+uLY1wfOmwXXYO0q2CrxWQLTzODXvAiXkwpQrpNRUGRqKX9JeQdrgR46/qwt2U6 oWDlkqOGudha0LnfIt4thVfDOCDFbKGOk58R2zZzDgNdZtU/SUoeHReyY+XfAtDg B7SUNjcLYUHPprZtK27ZZ6E8uqPdgtywe9DlxL0gBtol6aywdfU= -----END CERTIFICATE-----Generated at Mon Jul 21 12:38:18 2025 by rpki-client