$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft File: 585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json) Hash identifier: WSjjkI38FgfinmIhAt8Y5SCzrOiLBzeWMSt1LMDPuuQ= Subject key identifier: EA:82:A2:53:02:A8:A8:8F:22:4A:62:76:07:18:F3:49:AF:AB:C1:99 Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 Certificate issuer: /CN=585D79944E315672D413B937BFC042F7C0AAB990 Certificate serial: 3D741F6B3C93E10D62BA7F9DBDCFD34B99331192 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft Manifest number: 0102 Signing time: Wed 03 Sep 2025 01:01:01 +0000 Manifest this update: Wed 03 Sep 2025 00:56:01 +0000 Manifest next update: Sat 06 Sep 2025 10:20:01 +0000 Files and hashes: 1: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: C9l/TI359na0PeEHKBKADQ4MRNQ1psdZpHH9fhSgSiA=) 2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: jeEsDMd/+EovuK4uL5Q5qgB89wPIiu04eYRInb+Xh5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:74:1f:6b:3c:93:e1:0d:62:ba:7f:9d:bd:cf:d3:4b:99:33:11:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990 Validity Not Before: Sep 3 00:56:01 2025 GMT Not After : Sep 6 10:20:01 2025 GMT Subject: CN=EA82A25302A8A88F224A62760718F349AFABC199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:0d:07:91:f7:11:60:21:ad:76:21:41:38: 18:99:c7:f1:d2:aa:02:39:a9:64:7a:13:90:0a:94: 36:df:31:2c:03:0c:63:fe:22:7b:b7:e0:3f:fc:1c: 00:1e:68:0d:df:97:ee:de:be:38:33:e6:11:8c:e8: c9:f6:c3:c4:0c:d7:ae:19:5b:81:29:3b:3e:e8:b6: 75:45:45:5c:e9:b0:63:c9:99:c9:2f:f8:6a:65:1c: e7:29:5e:8f:5b:01:15:f6:d2:00:80:93:e3:be:fb: c1:1f:82:bb:13:54:e2:30:fc:dd:a9:73:21:94:5e: 3b:dc:2f:f0:c9:e5:85:d9:38:73:1f:03:24:1e:e4: 18:7c:bf:45:f7:89:be:45:01:2e:cc:25:1c:a9:c1: 2f:20:59:d7:d2:10:54:e8:ef:d4:be:01:44:55:83: 05:d9:df:0b:06:e5:a5:4f:71:0f:8c:0e:5c:95:15: e7:35:d5:3e:5d:c3:b5:d8:c3:ec:f3:31:2f:16:84: aa:3c:0f:8b:4e:c4:23:bb:10:eb:f0:1a:d3:fd:fe: 7f:73:92:03:ed:7e:9d:1d:39:f6:bf:81:b8:64:f9: 4d:f4:42:87:c3:90:f0:d0:70:2d:d6:4c:f9:a2:f1: 65:6c:43:96:64:08:80:b5:fe:ca:0d:26:c9:0c:47: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:82:A2:53:02:A8:A8:8F:22:4A:62:76:07:18:F3:49:AF:AB:C1:99 X509v3 Authority Key Identifier: keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:83:37:f6:1c:44:63:1c:21:21:12:c9:26:a4:c0:2b:08:e4: 89:da:06:a4:e1:27:99:43:17:46:1a:7d:a0:64:88:68:a9:f0: 53:45:e3:5b:c5:3c:7d:44:a2:fd:5e:56:4b:13:90:c5:a8:b4: 9b:f7:17:ab:f7:5e:ae:6c:fd:24:d5:09:4e:e7:12:65:63:a1: aa:8c:78:13:6d:ca:c3:e2:d5:58:12:1d:84:ea:f6:ee:29:0c: 09:86:6d:88:3b:c1:47:ba:00:ba:7f:eb:6a:53:62:ae:90:ca: b4:f3:1c:ca:ed:6f:05:69:c5:78:3d:47:a5:95:98:a4:83:98: 8d:3a:6f:44:4b:44:bf:0a:f0:ff:b3:ad:81:11:d4:d5:a4:0a: bd:5a:c1:20:b1:1f:6b:19:9a:bc:f1:cf:29:7e:b7:27:91:3e: 55:90:84:19:66:92:35:48:df:be:a2:8c:50:94:71:d5:64:ec: 98:3c:bc:e9:58:f9:cb:12:08:b3:5d:2a:41:82:f6:38:20:5f: 4f:8c:1d:5b:3f:2b:2f:c4:b9:4f:c0:b9:e3:61:e5:1f:d5:f7: cd:f1:43:a0:66:2b:81:bc:cd:83:de:eb:5e:c0:2c:a5:d1:77: 47:d7:34:03:71:a8:90:91:7c:d1:54:42:c4:cf:1f:0d:99:28: a4:a7:90:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXQfazyT4Q1iun+dvc/TS5kzEZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdD MEFBQjk5MDAeFw0yNTA5MDMwMDU2MDFaFw0yNTA5MDYxMDIwMDFaMDMxMTAvBgNV BAMTKEVBODJBMjUzMDJBOEE4OEYyMjRBNjI3NjA3MThGMzQ5QUZBQkMxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqQ0HkfcRYCGtdiFBOBiZx/HS qgI5qWR6E5AKlDbfMSwDDGP+Inu34D/8HAAeaA3fl+7evjgz5hGM6Mn2w8QM164Z W4EpOz7otnVFRVzpsGPJmckv+GplHOcpXo9bARX20gCAk+O++8EfgrsTVOIw/N2p cyGUXjvcL/DJ5YXZOHMfAyQe5Bh8v0X3ib5FAS7MJRypwS8gWdfSEFTo79S+AURV gwXZ3wsG5aVPcQ+MDlyVFec11T5dw7XYw+zzMS8WhKo8D4tOxCO7EOvwGtP9/n9z kgPtfp0dOfa/gbhk+U30QofDkPDQcC3WTPmi8WVsQ5ZkCIC1/soNJskMR8EbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6oKiUwKoqI8iSmJ2BxjzSa+rwZkwHwYDVR0j BBgwFoAUWF15lE4xVnLUE7k3v8BC98CquZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC81ODVENzk5NDRF MzE1NjcyRDQxM0I5MzdCRkMwNDJGN0MwQUFCOTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdDMEFB Qjk5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQy RjdDMEFBQjk5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImDN/YcRGMcISESySakwCsI5InaBqThJ5lD F0YafaBkiGip8FNF41vFPH1Eov1eVksTkMWotJv3F6v3Xq5s/STVCU7nEmVjoaqM eBNtysPi1VgSHYTq9u4pDAmGbYg7wUe6ALp/62pTYq6QyrTzHMrtbwVpxXg9R6WV mKSDmI06b0RLRL8K8P+zrYER1NWkCr1awSCxH2sZmrzxzyl+tyeRPlWQhBlmkjVI 376ijFCUcdVk7Jg8vOlY+csSCLNdKkGC9jggX0+MHVs/Ky/EuU/AueNh5R/V983x Q6BmK4G8zYPe617ALKXRd0fXNANxqJCRfNFUQsTPHw2ZKKSnkOM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:54 2025 by rpki-client