$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft File: C58E232004125E8B46AB63B600900D92EB71A3B1.mft (raw, json) Hash identifier: Qc1+GEjX9I9vMtKoQnm7IyEAaGiRKyb3rh+zbAekHCo= Subject key identifier: 83:74:31:7E:40:E5:5C:63:F4:F6:39:89:15:96:92:28:8F:4E:D0:56 Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1 Certificate issuer: /CN=C58E232004125E8B46AB63B600900D92EB71A3B1 Certificate serial: 49CAE83ECE72D650F98FACCF087DEDF3CB2CCA80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft Manifest number: 0192 Signing time: Wed 03 Sep 2025 20:31:47 +0000 Manifest this update: Wed 03 Sep 2025 20:26:47 +0000 Manifest next update: Sat 06 Sep 2025 23:49:47 +0000 Files and hashes: 1: C58E232004125E8B46AB63B600900D92EB71A3B1.crl (hash: U1KP4HMZ4yf40OIiqAT9LbSFt/SCX0CJR4LMgRmudpk=) 2: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: szZrGfxfjDvhYMSxWdXsF8gNn9uKqD0sZuSt9/Sp4zs=) 3: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: F98mLIPqX7xW346RCv6louyBJXE+C84977MPR7enwBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 23:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ca:e8:3e:ce:72:d6:50:f9:8f:ac:cf:08:7d:ed:f3:cb:2c:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1 Validity Not Before: Sep 3 20:26:47 2025 GMT Not After : Sep 6 23:49:47 2025 GMT Subject: CN=8374317E40E55C63F4F63989159692288F4ED056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:d1:c0:3d:70:42:c7:f6:50:25:97:25:2e: 56:c7:76:98:d6:19:a5:fb:a7:80:f0:75:01:67:92: 63:5d:22:1e:59:48:e5:c0:3c:06:4d:a0:5b:05:b2: 5d:1e:12:2f:8a:15:fc:55:3b:d5:43:77:dc:2c:6a: 50:e4:10:47:b7:c5:8d:3b:30:0e:e7:bc:ce:e9:88: 06:ab:2d:0b:70:d7:aa:da:3d:c3:e8:af:7b:cb:22: 8d:4f:e9:3e:8e:37:e0:82:84:1c:ed:ca:5f:dc:49: c6:df:9b:fd:69:9e:65:e4:6e:6c:1e:40:a2:bb:47: 7b:f4:32:ff:07:21:93:84:00:6a:45:03:e4:02:33: 05:d7:0c:f4:0d:59:ed:52:96:76:ed:4c:37:37:b1: 36:6d:14:93:b3:85:a2:61:a5:0c:b1:c3:f0:47:bf: b4:75:70:cc:df:3b:57:55:ce:9a:4d:3e:bf:25:44: c5:9f:5d:63:c7:4a:57:7b:2e:fc:fe:ea:d6:9f:88: 03:30:5b:d9:99:eb:2b:ba:a3:c1:0c:21:a9:5d:05: 2c:c4:27:b1:a7:0b:77:48:57:4d:f0:f2:a9:f8:aa: 1c:86:a2:2d:58:7a:1a:4a:2d:21:f3:74:43:07:f7: 40:cc:10:fd:95:fd:5f:61:8f:0c:35:2b:32:ec:e1: 7a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:74:31:7E:40:E5:5C:63:F4:F6:39:89:15:96:92:28:8F:4E:D0:56 X509v3 Authority Key Identifier: keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7d:98:04:59:37:0e:12:8f:e5:76:1d:8a:36:58:1c:58:cb: 2f:9f:7f:c1:b0:24:45:74:fe:95:30:a6:8f:77:ab:25:d8:4c: f0:a5:43:40:4a:2d:59:a4:0d:4a:39:82:ea:00:38:f9:aa:ce: 14:16:a8:51:f7:24:15:0b:c8:3a:d7:aa:e2:d7:4c:92:d4:33: a0:25:02:95:e4:e9:9e:c0:df:48:9f:72:91:4f:24:c7:c4:5b: 5d:34:35:90:6c:9f:09:a6:09:dc:7c:b8:ab:4a:23:80:f5:75: a0:2a:1e:02:97:a2:a3:06:3e:67:60:e7:71:b4:6c:6f:a7:c4: 50:63:ee:42:81:cb:cd:b2:32:35:63:e1:44:59:72:94:d9:f2: 3e:83:7b:c5:b8:9a:99:7c:a0:59:62:60:8f:c5:e9:f1:4e:f4: 5a:d3:94:16:4f:c9:a6:b3:59:2b:8b:2d:cb:80:38:fb:12:8f: 5a:96:f7:42:64:30:53:de:9d:4d:09:b7:57:8d:c5:1a:06:46: 6a:55:9f:22:34:f0:28:39:c2:cc:f0:11:3e:f4:04:6a:69:2e: a3:a3:53:12:a2:93:89:4a:5b:e6:d4:85:b5:26:17:9c:34:64: 33:e5:f0:6a:14:71:88:ea:2c:aa:4c:ea:ae:5c:9d:0d:af:15: 46:3d:2f:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScroPs5y1lD5j6zPCH3t88ssyoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJF QjcxQTNCMTAeFw0yNTA5MDMyMDI2NDdaFw0yNTA5MDYyMzQ5NDdaMDMxMTAvBgNV BAMTKDgzNzQzMTdFNDBFNTVDNjNGNEY2Mzk4OTE1OTY5MjI4OEY0RUQwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rtHAPXBCx/ZQJZclLlbHdpjW GaX7p4DwdQFnkmNdIh5ZSOXAPAZNoFsFsl0eEi+KFfxVO9VDd9wsalDkEEe3xY07 MA7nvM7piAarLQtw16raPcPor3vLIo1P6T6ON+CChBztyl/cScbfm/1pnmXkbmwe QKK7R3v0Mv8HIZOEAGpFA+QCMwXXDPQNWe1SlnbtTDc3sTZtFJOzhaJhpQyxw/BH v7R1cMzfO1dVzppNPr8lRMWfXWPHSld7Lvz+6tafiAMwW9mZ6yu6o8EMIaldBSzE J7GnC3dIV03w8qn4qhyGoi1YehpKLSHzdEMH90DMEP2V/V9hjww1KzLs4XqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg3QxfkDlXGP09jmJFZaSKI9O0FYwHwYDVR0j BBgwFoAUxY4jIAQSXotGq2O2AJANkutxo7EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMjQzYS03NjNkLTQ0YjgtOTg3ZC0wOGJkMGRhOWVlM2QvMC9DNThFMjMyMDA0 MTI1RThCNDZBQjYzQjYwMDkwMEQ5MkVCNzFBM0IxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJFQjcx QTNCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjI0M2EtNzYzZC00NGI4LTk4 N2QtMDhiZDBkYTllZTNkLzAvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBE OTJFQjcxQTNCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV9mARZNw4Sj+V2HYo2WBxYyy+ff8GwJEV0 /pUwpo93qyXYTPClQ0BKLVmkDUo5guoAOPmqzhQWqFH3JBULyDrXquLXTJLUM6Al ApXk6Z7A30ifcpFPJMfEW100NZBsnwmmCdx8uKtKI4D1daAqHgKXoqMGPmdg53G0 bG+nxFBj7kKBy82yMjVj4URZcpTZ8j6De8W4mpl8oFliYI/F6fFO9FrTlBZPyaaz WSuLLcuAOPsSj1qW90JkMFPenU0Jt1eNxRoGRmpVnyI08Cg5wszwET70BGppLqOj UxKik4lKW+bUhbUmF5w0ZDPl8GoUcYjqLKpM6q5cnQ2vFUY9Lxc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:31 2025 by rpki-client