$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: rmaH/Qhcj3bK+NawHSEIgCBM1rgfUxD/ZpXH3HXFmmk= Subject key identifier: B1:7A:67:10:B4:9D:CA:AC:69:D1:52:E4:5E:62:87:3A:5C:7A:91:A4 Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 7A4F2BA1F0D872E747292DE8A835BB150B40C3FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 02E9 Signing time: Sat 06 Sep 2025 17:22:09 +0000 Manifest this update: Sat 06 Sep 2025 17:17:09 +0000 Manifest next update: Wed 10 Sep 2025 04:47:09 +0000 Files and hashes: 1: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: zPRVVEuzND/TSHdVq3ZkAQYAgPmvosaZoKU+TXGH1vc=) 2: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: lwypc1eue2zj3ktOWvglzu1Jo7qmvdfN4AlugN+i5Zw=) 3: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: yIxyAi+LsGKpwTABrM9lNwtjILhJjgs1G21qada+Ir4=) 4: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: tftBtDd9R8lHhS9/otmSo4cPnQBxdyCymJZZ1sDf0MA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4f:2b:a1:f0:d8:72:e7:47:29:2d:e8:a8:35:bb:15:0b:40:c3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Sep 6 17:17:09 2025 GMT Not After : Sep 10 04:47:09 2025 GMT Subject: CN=B17A6710B49DCAAC69D152E45E62873A5C7A91A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:85:96:11:97:a5:01:30:d4:68:d6:db:05:85: c9:fc:16:4c:38:49:42:89:8b:1d:b6:c9:13:d1:86: 71:f3:39:99:3a:e9:42:35:18:e3:7a:9a:d3:2a:a7: 4d:ab:a1:6e:e9:56:0c:0e:06:e4:b1:89:ef:87:b0: 50:70:bc:b4:8a:43:d3:33:24:c4:43:13:85:79:eb: 1e:bd:95:95:4b:be:f7:96:fb:b1:d9:09:38:db:78: b8:b5:5b:ea:23:a1:df:99:dc:a3:09:c3:a3:f5:cc: d0:ee:9f:a2:25:63:a9:70:30:52:b8:1c:37:49:00: 29:4d:34:9e:d9:9f:83:0f:a5:40:1d:4e:d4:77:47: 56:9e:90:ea:e3:3d:77:51:da:ba:18:dc:06:a2:54: 43:fe:8e:7f:c3:01:67:5d:ed:e5:a5:ea:6b:ad:31: 65:28:d7:b6:4e:dd:e2:41:98:23:ec:76:1a:8a:68: e1:ec:1b:c9:50:ad:31:b4:33:44:94:27:c7:01:7e: 87:a8:24:76:fc:4d:9b:ae:3d:3d:c0:9b:80:29:88: 0a:49:89:1c:65:f4:50:3e:73:bc:ea:51:42:3e:43: 69:c3:a8:23:85:1d:99:fe:c6:eb:4f:93:f7:32:a2: 8f:61:c8:99:9f:16:66:40:0b:f7:28:fb:5d:49:be: e1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7A:67:10:B4:9D:CA:AC:69:D1:52:E4:5E:62:87:3A:5C:7A:91:A4 X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:45:33:9e:6d:10:0f:12:ea:8e:c2:12:d0:ea:59:3e:02:cb: 80:c3:b3:97:7e:7c:86:91:8d:f9:a3:eb:2d:3d:86:3a:d2:63: a0:8b:71:06:22:97:b5:bf:a5:9a:fd:76:a2:8c:3c:24:5e:f7: dd:60:e3:5c:fb:33:9f:55:04:10:fe:a7:d4:d7:e5:60:c6:0a: f6:f4:55:ce:a5:3d:14:fe:92:b8:40:38:62:0d:69:84:58:1d: 4b:72:f0:4d:46:5c:ec:5a:99:c1:66:30:0f:74:83:c9:58:3b: 3e:b3:2e:2f:9f:97:f4:b6:1d:31:6e:16:90:91:c0:b2:ee:ce: 9c:32:a0:12:1c:48:e9:d5:11:bb:99:da:fb:72:ae:d5:9c:74: 23:ae:98:2f:8d:a6:58:6e:8d:ff:41:4a:ec:05:b8:7f:57:16: 11:03:11:f6:b6:5f:00:2c:1a:70:97:6a:68:a7:45:ea:48:35: 81:76:e0:17:f4:74:5d:7d:e5:cb:b8:ef:db:02:37:ce:8c:50: 83:92:19:37:6b:b8:ed:88:33:87:30:af:25:69:ff:b4:ee:b5: ac:d2:75:9d:ac:cf:c7:7a:79:39:68:45:3c:ba:3d:40:8a:cf: 82:d0:9f:bb:b1:28:c9:84:7b:2d:50:3d:17:99:50:5f:92:60: 79:27:1e:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUek8rofDYcudHKS3oqDW7FQtAw/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNTA5MDYxNzE3MDlaFw0yNTA5MTAwNDQ3MDlaMDMxMTAvBgNV BAMTKEIxN0E2NzEwQjQ5RENBQUM2OUQxNTJFNDVFNjI4NzNBNUM3QTkxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhZYRl6UBMNRo1tsFhcn8Fkw4 SUKJix22yRPRhnHzOZk66UI1GON6mtMqp02roW7pVgwOBuSxie+HsFBwvLSKQ9Mz JMRDE4V56x69lZVLvveW+7HZCTjbeLi1W+ojod+Z3KMJw6P1zNDun6IlY6lwMFK4 HDdJAClNNJ7Zn4MPpUAdTtR3R1aekOrjPXdR2roY3AaiVEP+jn/DAWdd7eWl6mut MWUo17ZO3eJBmCPsdhqKaOHsG8lQrTG0M0SUJ8cBfoeoJHb8TZuuPT3Am4ApiApJ iRxl9FA+c7zqUUI+Q2nDqCOFHZn+xutPk/cyoo9hyJmfFmZAC/co+11JvuEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsXpnELSdyqxp0VLkXmKHOlx6kaQwHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhFM55tEA8S6o7CEtDqWT4Cy4DDs5d+fIaR jfmj6y09hjrSY6CLcQYil7W/pZr9dqKMPCRe991g41z7M59VBBD+p9TX5WDGCvb0 Vc6lPRT+krhAOGINaYRYHUty8E1GXOxamcFmMA90g8lYOz6zLi+fl/S2HTFuFpCR wLLuzpwyoBIcSOnVEbuZ2vtyrtWcdCOumC+Nplhujf9BSuwFuH9XFhEDEfa2XwAs GnCXaminRepINYF24Bf0dF195cu479sCN86MUIOSGTdruO2IM4cwryVp/7TutazS dZ2sz8d6eTloRTy6PUCKz4LQn7uxKMmEey1QPReZUF+SYHknHpw= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:07 2025 by rpki-client