$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: bMxArXbTS9WCBjNKLy8ZoZsfmc9GZ7pY55RhoFC89OY= Subject key identifier: B9:E6:13:1C:4F:1E:13:C9:B9:B6:6E:5F:1E:E4:45:88:24:90:D2:B3 Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 4836D4FB74CB01200DBA5393E8B770CC6B9028D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 021D Signing time: Sat 19 Jul 2025 16:00:04 +0000 Manifest this update: Sat 19 Jul 2025 15:55:04 +0000 Manifest next update: Wed 23 Jul 2025 03:21:04 +0000 Files and hashes: 1: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: +TEOup36nfTlD8qM9GFjgR40Htgv8/yJq7ZyfS2WOJY=) 2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: gC29j+yO4i7uQ2lQ5TlSgcpEgKWPrlDicf9vHKUSroM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:36:d4:fb:74:cb:01:20:0d:ba:53:93:e8:b7:70:cc:6b:90:28:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Jul 19 15:55:04 2025 GMT Not After : Jul 23 03:21:04 2025 GMT Subject: CN=B9E6131C4F1E13C9B9B66E5F1EE445882490D2B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:9b:2d:63:74:20:e8:d1:b1:ba:94:9a:76: 9a:cb:e0:60:a2:6e:3e:d3:74:04:93:08:71:f3:fa: 5f:20:46:b1:d5:dc:58:65:14:4b:fd:72:7e:75:15: 43:ce:b2:9a:b5:91:a6:28:48:db:6c:1a:58:02:03: 97:36:4b:31:3d:d6:00:2c:e8:96:55:e7:29:ea:50: 4f:cf:5a:ec:69:23:da:c8:3b:a5:bc:98:ca:b4:13: e3:af:e0:9d:2a:87:8c:76:df:c7:da:c9:6c:47:22: f4:74:6d:12:18:4f:05:20:ae:d6:11:66:17:03:1a: 73:7b:e0:66:03:2a:40:a3:a9:d4:3f:87:f8:85:0e: 62:4a:bf:91:5d:85:36:aa:3c:aa:5c:f5:c0:9a:22: dc:ce:50:25:eb:9c:f2:69:2a:9a:79:34:36:3f:ea: 26:e0:88:a4:87:a1:dd:4b:a4:0b:3c:22:9d:30:14: b9:29:5c:1d:70:f3:b6:79:11:a1:1e:ed:4f:b5:04: 85:cf:f4:3a:3c:e6:28:f6:08:91:f9:80:21:2f:4a: f7:e8:fd:9a:f2:ae:17:b4:bc:6b:f2:1f:68:8c:0e: 87:1d:c0:ad:0e:34:da:fe:3b:15:08:50:51:a8:bd: 0e:9d:15:bd:54:23:b2:20:4c:e6:3b:86:4d:d1:80: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E6:13:1C:4F:1E:13:C9:B9:B6:6E:5F:1E:E4:45:88:24:90:D2:B3 X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:59:93:de:68:e5:92:59:e5:07:3e:e9:8a:23:bc:36:f5:4d: cf:5f:d1:ed:a1:6e:4f:ff:fc:bc:27:f2:c5:c1:f8:e4:66:2c: e8:46:a0:32:b4:ab:12:3f:39:0e:88:a3:c5:9c:88:b0:be:fb: 57:07:1b:ad:00:c4:82:eb:76:00:9b:ec:7d:39:b1:e1:44:ed: ce:24:1d:02:1a:ad:27:b3:f9:f9:47:80:d6:2b:9b:1f:dc:70: 1b:3d:6e:50:f6:cd:bc:01:48:f3:40:d9:5a:74:d5:31:6d:80: de:40:85:00:e5:95:d0:eb:a4:2e:58:62:12:80:1d:23:e7:15: b3:ae:dc:6b:e6:54:9d:66:bb:30:0c:01:39:a1:1a:a6:25:b5: 4d:52:36:54:78:a7:03:bd:b9:7e:07:2c:88:04:af:b7:e9:a9: de:b2:cd:d4:74:2d:72:94:d2:69:91:3b:87:df:f0:4f:40:6c: f5:98:df:e1:55:8c:b5:12:17:49:4a:a0:a8:de:c5:ee:8c:bd: bd:99:a1:16:c7:64:ee:82:b9:c1:73:83:40:21:1e:be:94:13: 63:b4:bd:b6:a5:5c:e5:41:87:a2:6f:6e:f7:70:95:04:1b:d3: fb:19:57:15:ee:a5:fe:65:49:31:dd:fc:df:1c:57:5d:f3:aa: 7d:b1:1d:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDbU+3TLASANulOT6LdwzGuQKNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNTA3MTkxNTU1MDRaFw0yNTA3MjMwMzIxMDRaMDMxMTAvBgNV BAMTKEI5RTYxMzFDNEYxRTEzQzlCOUI2NkU1RjFFRTQ0NTg4MjQ5MEQyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqZstY3Qg6NGxupSadprL4GCi bj7TdASTCHHz+l8gRrHV3FhlFEv9cn51FUPOspq1kaYoSNtsGlgCA5c2SzE91gAs 6JZV5ynqUE/PWuxpI9rIO6W8mMq0E+Ov4J0qh4x238fayWxHIvR0bRIYTwUgrtYR ZhcDGnN74GYDKkCjqdQ/h/iFDmJKv5FdhTaqPKpc9cCaItzOUCXrnPJpKpp5NDY/ 6ibgiKSHod1LpAs8Ip0wFLkpXB1w87Z5EaEe7U+1BIXP9Do85ij2CJH5gCEvSvfo /Zryrhe0vGvyH2iMDocdwK0ONNr+OxUIUFGovQ6dFb1UI7IgTOY7hk3RgMy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUueYTHE8eE8m5tm5fHuRFiCSQ0rMwHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtZk95o5ZJZ5Qc+6YojvDb1Tc9f0e2hbk// /Lwn8sXB+ORmLOhGoDK0qxI/OQ6Io8WciLC++1cHG60AxILrdgCb7H05seFE7c4k HQIarSez+flHgNYrmx/ccBs9blD2zbwBSPNA2Vp01TFtgN5AhQDlldDrpC5YYhKA HSPnFbOu3GvmVJ1muzAMATmhGqYltU1SNlR4pwO9uX4HLIgEr7fpqd6yzdR0LXKU 0mmRO4ff8E9AbPWY3+FVjLUSF0lKoKjexe6Mvb2ZoRbHZO6CucFzg0AhHr6UE2O0 vbalXOVBh6JvbvdwlQQb0/sZVxXupf5lSTHd/N8cV13zqn2xHVU= -----END CERTIFICATE-----Generated at Mon Jul 21 02:10:36 2025 by rpki-client