$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft File: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft (raw, json) Hash identifier: ujxR2G1VnXRwTZBm/yO4js9HLJci4z9hPmOlkC8hL/g= Subject key identifier: C2:0C:5F:9E:92:99:B7:44:B2:0D:F2:B5:2B:3F:A3:DC:F9:30:B4:36 Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 Certificate issuer: /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Certificate serial: 223A7133E8766BEC857FB8D624C4C10EAD4E5C4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft Manifest number: 01B8 Signing time: Sun 06 Apr 2025 12:31:04 +0000 Manifest this update: Sun 06 Apr 2025 12:26:04 +0000 Manifest next update: Wed 09 Apr 2025 14:27:04 +0000 Files and hashes: 1: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: mOeMNdSXIouJLXdg2H2KNR/lETkTVaMFt6gn5NaH74s=) 2: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: ZHzUIRy4nZYVajGdct7Oorl4xz1bGegJThKCS1yBqbI=) 3: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl (hash: 0edL7MjThq/pCWdU+o75DiEnimbe6m8bdx20e9khJc4=) 4: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: lEs/WKd2HcYEye3FJfKRh1W7qOC7B+EUp+9m2m8vd7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 14:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3a:71:33:e8:76:6b:ec:85:7f:b8:d6:24:c4:c1:0e:ad:4e:5c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Validity Not Before: Apr 6 12:26:04 2025 GMT Not After : Apr 9 14:27:04 2025 GMT Subject: CN=C20C5F9E9299B744B20DF2B52B3FA3DCF930B436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:88:e4:1c:9d:49:d3:9f:71:0c:be:ad:1a: 2b:7c:2c:48:c7:28:2f:f8:95:9d:83:a0:9d:90:32: 44:0c:31:b2:88:1b:99:46:9a:80:2f:d3:ee:37:6a: fb:50:d7:35:56:42:1b:9a:bd:ac:ca:c1:ba:5b:d9: 36:13:bd:bd:61:0b:31:ff:ab:0b:99:ce:d8:aa:54: 32:5a:68:aa:ef:d7:ef:5a:df:67:55:86:9f:4e:b4: 5e:cf:43:c4:2a:f4:f3:3f:20:4a:7a:d9:5b:9b:5e: 6d:ce:54:3f:90:ac:a6:19:5c:7b:33:65:8e:1d:8d: 67:a4:6a:2d:d1:b3:b4:7c:98:29:a1:6c:5f:8b:90: 7b:0e:4e:5d:ac:89:93:75:30:f4:f2:12:28:fa:40: 4f:13:34:35:75:c7:40:c6:ff:12:1b:49:bd:35:22: ce:74:33:8e:ae:ff:d3:0a:e3:02:9e:0d:08:69:2b: ee:6f:74:35:8f:cd:1d:00:37:fa:c7:2b:d5:06:9a: 35:d0:05:bc:ba:43:1a:65:ac:3a:cf:6f:fb:62:69: be:e9:26:26:6a:ad:19:ba:bf:6d:04:52:ee:c2:59: e0:08:c5:ac:2c:6f:83:9f:ad:25:11:1b:58:04:7e: b7:1e:77:2b:e3:3e:aa:d5:f2:df:e3:da:af:cb:ce: a5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0C:5F:9E:92:99:B7:44:B2:0D:F2:B5:2B:3F:A3:DC:F9:30:B4:36 X509v3 Authority Key Identifier: keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c0:be:bb:c2:f2:30:6d:70:b5:cc:d7:4c:af:f4:48:bf:2d: 72:7f:52:36:95:2c:1c:ea:12:da:86:f6:2f:5f:4e:c2:9d:7f: 9d:87:23:de:a1:cc:c0:44:07:56:35:3d:8d:c7:ba:78:3a:a3: bb:64:73:7d:62:b6:75:e2:05:75:80:83:bc:d0:b6:ad:71:da: df:2c:69:fe:c4:34:1f:80:a5:70:8f:79:db:18:79:95:b1:09: 00:a8:44:22:74:18:41:ea:da:b4:1a:5c:58:01:57:ba:06:42: 00:f8:1e:a0:c3:b2:67:60:f5:8f:58:ff:36:a6:65:2b:f7:36: bd:d5:2f:02:91:fa:8c:94:f1:f4:a4:03:aa:0f:87:51:4c:20: 7d:00:a9:b4:88:0c:f0:3e:ad:81:84:4c:0f:4e:7e:73:1b:96: 20:56:6e:5c:34:65:16:62:e7:42:60:63:87:ab:a9:a6:0e:13: 4b:0c:75:bb:22:3b:c9:4b:9c:1b:b2:fa:6a:6e:4f:e3:4b:ac: fc:ef:b5:90:ba:e6:12:b3:71:ad:30:8c:17:e4:01:35:7b:dc: 21:c3:2c:cb:aa:f1:ef:2e:e8:b4:93:19:36:62:e4:c5:07:e1: 7b:16:95:c8:57:e3:e7:eb:a9:2d:0d:c0:38:de:6b:34:10:6e: fe:9d:83:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjpxM+h2a+yFf7jWJMTBDq1OXE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1 QTY5QzU5NjAeFw0yNTA0MDYxMjI2MDRaFw0yNTA0MDkxNDI3MDRaMDMxMTAvBgNV BAMTKEMyMEM1RjlFOTI5OUI3NDRCMjBERjJCNTJCM0ZBM0RDRjkzMEI0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByojkHJ1J059xDL6tGit8LEjH KC/4lZ2DoJ2QMkQMMbKIG5lGmoAv0+43avtQ1zVWQhuavazKwbpb2TYTvb1hCzH/ qwuZztiqVDJaaKrv1+9a32dVhp9OtF7PQ8Qq9PM/IEp62VubXm3OVD+QrKYZXHsz ZY4djWekai3Rs7R8mCmhbF+LkHsOTl2siZN1MPTyEij6QE8TNDV1x0DG/xIbSb01 Is50M46u/9MK4wKeDQhpK+5vdDWPzR0AN/rHK9UGmjXQBby6QxplrDrPb/tiab7p JiZqrRm6v20EUu7CWeAIxawsb4OfrSURG1gEfrcedyvjPqrV8t/j2q/LzqWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwgxfnpKZt0SyDfK1Kz+j3PkwtDYwHwYDVR0j BBgwFoAUWKcG6nRo3w0UyhgXx8xdvVppxZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmJmYWIwOS1jMWU5LTQ0ZDgtODE5ZS1mZGY2NTQ5YzZiM2YvMC81OEE3MDZFQTc0 NjhERjBEMTRDQTE4MTdDN0NDNURCRDVBNjlDNTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1QTY5 QzU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVE QkQ1QTY5QzU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/AvrvC8jBtcLXM10yv9Ei/LXJ/UjaVLBzq EtqG9i9fTsKdf52HI96hzMBEB1Y1PY3Hung6o7tkc31itnXiBXWAg7zQtq1x2t8s af7ENB+ApXCPedsYeZWxCQCoRCJ0GEHq2rQaXFgBV7oGQgD4HqDDsmdg9Y9Y/zam ZSv3Nr3VLwKR+oyU8fSkA6oPh1FMIH0AqbSIDPA+rYGETA9OfnMbliBWblw0ZRZi 50JgY4erqaYOE0sMdbsiO8lLnBuy+mpuT+NLrPzvtZC65hKzca0wjBfkATV73CHD LMuq8e8u6LSTGTZi5MUH4XsWlchX4+frqS0NwDjeazQQbv6dg8s= -----END CERTIFICATE-----Generated at Tue Apr 8 13:03:37 2025 by rpki-client