$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft File: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft (raw, json) Hash identifier: qC3eFlG+PH+u4z6UqPnIsAwEg8GfFTF4a6lwboumc6w= Subject key identifier: 9D:17:29:AB:B0:69:F2:6E:34:FF:19:9E:40:BA:57:70:59:E8:F0:CF Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 Certificate issuer: /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Certificate serial: 2A8A8B6777D0FC0681BBA3AFA61E55F819A7C1C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft Manifest number: 01FC Signing time: Sat 06 Sep 2025 10:51:07 +0000 Manifest this update: Sat 06 Sep 2025 10:46:07 +0000 Manifest next update: Tue 09 Sep 2025 20:33:07 +0000 Files and hashes: 1: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: GTF74Ft0qa3Ml/qzXNfnDXeDnWgSofyFjshmuk26klk=) 2: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl (hash: G6C2BwbzDlJImUjLLyOelFATSaKFWowPsMg6ZSmuXCI=) 3: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: SYGWmmOnwGKD6Y/4QC0HTfwuXQyWf4xsNcK5v8re6i0=) 4: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: +E4T7dUXV6aX4bEXGLU3jVOr97rI3sHCGNsBCv/YCaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8a:8b:67:77:d0:fc:06:81:bb:a3:af:a6:1e:55:f8:19:a7:c1:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Validity Not Before: Sep 6 10:46:07 2025 GMT Not After : Sep 9 20:33:07 2025 GMT Subject: CN=9D1729ABB069F26E34FF199E40BA577059E8F0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:85:88:53:8c:ac:a5:16:80:b0:10:58:8a: 4b:ca:56:d0:44:2a:c3:4b:6f:c0:5a:9c:56:c6:49: 02:68:e7:29:1d:a7:ec:eb:c6:a1:c5:9a:55:8c:80: 0b:81:a7:d5:bd:f6:c6:52:2a:1e:a8:37:17:00:10: d4:a4:ae:ab:9e:a1:7e:95:fa:07:94:1a:31:4c:9e: b4:14:cf:f3:ae:7a:c8:5a:da:ba:74:72:3d:ee:ec: 5d:6b:86:b5:7e:80:bf:7a:e7:fa:1c:5d:47:75:4d: 4e:df:95:45:cc:71:50:d0:fa:cc:94:40:9b:89:64: e5:c2:0b:4d:63:59:a4:91:71:0d:56:8e:5d:50:c0: 9b:b1:74:7f:1a:7c:81:36:f9:3a:58:e4:31:15:80: fc:ed:16:a0:61:78:e2:fb:50:6c:91:ef:cc:41:f0: 10:a4:59:fc:54:32:15:02:f3:f5:8a:db:cf:ae:55: 20:b8:86:06:bd:fd:c1:7b:02:89:b2:93:a0:6e:4e: 3a:12:ee:5d:92:4a:58:d9:9d:be:34:24:dd:78:b3: 13:e5:62:29:16:71:a0:64:b0:70:34:ed:17:cc:03: 6f:d5:99:df:02:14:8c:05:15:ef:e7:b0:36:f4:53: c9:21:b5:54:c6:d2:aa:9b:74:36:3a:4f:97:1d:44: 0c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:17:29:AB:B0:69:F2:6E:34:FF:19:9E:40:BA:57:70:59:E8:F0:CF X509v3 Authority Key Identifier: keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b3:27:17:b3:ed:60:e4:60:58:d3:08:04:fb:16:cc:ae:c6: fa:f9:eb:0e:84:58:f0:50:49:59:f3:69:6e:0f:af:78:7d:4e: 09:4d:de:8c:3e:4a:be:10:15:5b:70:e0:a0:a8:b1:02:ee:15: d6:3c:2e:d5:cd:c0:bf:37:80:94:e7:42:4c:e0:37:eb:3f:eb: 87:35:f2:f1:0d:40:53:29:db:84:41:56:70:9e:be:cf:07:3e: 76:dc:47:0f:df:1d:35:d4:e8:7e:9e:5d:b5:8b:bb:40:30:4c: 98:1f:59:19:9a:28:bf:df:f6:2c:9d:0e:b8:69:ac:24:43:73: f0:92:cc:c3:5a:7d:d9:55:0a:00:03:e9:b9:53:1e:e6:d6:da: 7a:83:30:c2:2f:3b:d3:e4:f6:8a:e3:0d:21:95:e9:3b:cc:b0: f8:b0:96:31:41:fb:32:ad:b1:22:ed:18:eb:61:9c:ba:34:ce: f0:ff:eb:81:78:cc:01:88:20:79:b3:9d:82:29:92:02:1c:4c: 18:3f:28:63:de:8a:1f:c8:a8:1f:63:e3:cd:ea:65:05:1e:7e: 24:02:e0:ab:1b:59:48:0e:1e:1f:b9:c2:4a:ff:1a:5d:99:f6: eb:3f:3a:f3:fe:20:bb:f5:ed:71:d9:ec:a4:69:ea:73:4f:1e: e6:cb:50:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKoqLZ3fQ/AaBu6Ovph5V+BmnwckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1 QTY5QzU5NjAeFw0yNTA5MDYxMDQ2MDdaFw0yNTA5MDkyMDMzMDdaMDMxMTAvBgNV BAMTKDlEMTcyOUFCQjA2OUYyNkUzNEZGMTk5RTQwQkE1NzcwNTlFOEYwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEB4WIU4yspRaAsBBYikvKVtBE KsNLb8BanFbGSQJo5ykdp+zrxqHFmlWMgAuBp9W99sZSKh6oNxcAENSkrqueoX6V +geUGjFMnrQUz/Ouesha2rp0cj3u7F1rhrV+gL965/ocXUd1TU7flUXMcVDQ+syU QJuJZOXCC01jWaSRcQ1Wjl1QwJuxdH8afIE2+TpY5DEVgPztFqBheOL7UGyR78xB 8BCkWfxUMhUC8/WK28+uVSC4hga9/cF7Aomyk6BuTjoS7l2SSljZnb40JN14sxPl YikWcaBksHA07RfMA2/Vmd8CFIwFFe/nsDb0U8khtVTG0qqbdDY6T5cdRAzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnRcpq7Bp8m40/xmeQLpXcFno8M8wHwYDVR0j BBgwFoAUWKcG6nRo3w0UyhgXx8xdvVppxZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmJmYWIwOS1jMWU5LTQ0ZDgtODE5ZS1mZGY2NTQ5YzZiM2YvMC81OEE3MDZFQTc0 NjhERjBEMTRDQTE4MTdDN0NDNURCRDVBNjlDNTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1QTY5 QzU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVE QkQ1QTY5QzU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqzJxez7WDkYFjTCAT7Fsyuxvr56w6EWPBQ SVnzaW4Pr3h9TglN3ow+Sr4QFVtw4KCosQLuFdY8LtXNwL83gJTnQkzgN+s/64c1 8vENQFMp24RBVnCevs8HPnbcRw/fHTXU6H6eXbWLu0AwTJgfWRmaKL/f9iydDrhp rCRDc/CSzMNafdlVCgAD6blTHubW2nqDMMIvO9Pk9orjDSGV6TvMsPiwljFB+zKt sSLtGOthnLo0zvD/64F4zAGIIHmznYIpkgIcTBg/KGPeih/IqB9j483qZQUefiQC 4KsbWUgOHh+5wkr/Gl2Z9us/OvP+ILv17XHZ7KRp6nNPHubLUNY= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:29 2025 by rpki-client