$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft File: C58E232004125E8B46AB63B600900D92EB71A3B1.mft (raw, json) Hash identifier: 10r3bjRYMeyPDETXBsgggV9ztXW3zU6qLBtfanHGk2A= Subject key identifier: 3E:14:79:03:31:B2:B9:35:63:F8:01:6F:A0:38:23:4E:13:B5:28:01 Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1 Certificate issuer: /CN=C58E232004125E8B46AB63B600900D92EB71A3B1 Certificate serial: 043A9B69BA3AB4CEF590DC397D91713492B462B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft Manifest number: 016A Signing time: Sat 07 Jun 2025 16:01:46 +0000 Manifest this update: Sat 07 Jun 2025 15:56:46 +0000 Manifest next update: Tue 10 Jun 2025 18:00:46 +0000 Files and hashes: 1: C58E232004125E8B46AB63B600900D92EB71A3B1.crl (hash: lVSQ/IgyVgRvFbyWgLrp7+y8S3vXFPQozN8sfUPJ4jI=) 2: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: szZrGfxfjDvhYMSxWdXsF8gNn9uKqD0sZuSt9/Sp4zs=) 3: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: F98mLIPqX7xW346RCv6louyBJXE+C84977MPR7enwBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3a:9b:69:ba:3a:b4:ce:f5:90:dc:39:7d:91:71:34:92:b4:62:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1 Validity Not Before: Jun 7 15:56:46 2025 GMT Not After : Jun 10 18:00:46 2025 GMT Subject: CN=3E14790331B2B93563F8016FA038234E13B52801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:5f:13:48:84:3b:8b:d8:ab:2d:1f:3c:da: b5:ff:0d:21:ee:74:19:03:d4:11:66:d2:32:c1:10: 18:c6:bf:b9:8f:b2:a0:b5:88:15:6d:04:52:56:d7: 55:90:bc:dc:8c:b4:ec:a1:1c:b6:6d:61:02:ea:9e: 29:51:91:ee:47:35:01:5e:be:77:1c:49:a7:79:7d: d2:97:02:27:fc:f4:1e:4b:30:85:85:38:a7:3d:b4: 28:62:1f:84:29:b7:80:92:a3:4b:d8:5b:ed:5e:20: c7:c9:a1:2d:18:9a:9c:d2:f0:56:41:3a:51:fa:18: 36:ef:59:79:d9:c1:be:86:a4:32:00:89:9d:e8:28: 88:21:5d:d6:db:3e:c1:6a:da:72:80:4e:74:a3:52: e0:76:92:71:04:2f:75:79:b3:1d:f5:46:ca:9a:59: d5:e7:22:05:e9:6f:c5:45:94:bd:c5:ea:dd:03:34: d9:ae:37:c6:16:d3:1b:ec:ea:d4:33:3a:d0:b8:44: 83:d4:9d:5a:fc:13:62:4c:fe:3f:07:ca:b5:4b:48: d4:ab:1f:c4:c7:78:3e:9b:c7:39:39:b0:ca:6d:c7: a7:91:3d:dd:3b:33:ed:11:d4:21:ee:42:3a:40:49: 4e:51:1e:76:4c:e2:1e:37:8d:d6:56:12:cf:05:92: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:14:79:03:31:B2:B9:35:63:F8:01:6F:A0:38:23:4E:13:B5:28:01 X509v3 Authority Key Identifier: keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:82:2a:b9:bb:96:80:05:04:4d:8e:70:1c:4d:df:45:a8:c9: c4:82:70:60:78:31:38:60:58:54:ad:bd:07:a3:f1:3f:d1:c6: a1:df:77:06:98:d1:4f:a4:52:64:ae:3c:21:39:ef:e0:eb:08: ce:fb:34:5d:0d:44:4c:9b:9a:7e:44:ba:68:e5:ee:4f:bc:59: da:fe:9c:03:1a:d1:28:5b:03:ea:2a:1d:53:fb:86:ac:4e:56: ca:c6:96:4e:fe:fd:b6:c2:f2:c3:72:76:c7:15:77:e0:85:46: 3a:d1:ef:94:b6:4b:97:cc:18:4e:ca:e7:52:4f:ae:05:cd:7f: f4:34:6a:de:bb:c4:53:62:e3:53:cb:74:c8:82:5b:02:3b:2d: 74:8f:b0:0d:40:1d:ee:06:6f:74:9c:87:60:82:41:cb:ca:d9: 73:e0:97:01:8d:4e:aa:5c:e8:8c:ef:3f:86:45:27:ff:6d:e4: 54:1c:40:e6:b0:4b:ca:b1:d4:0a:4d:92:f5:f3:9f:91:87:48: f8:89:aa:f6:54:d5:d0:ce:96:40:a0:0e:56:20:5e:79:8a:1c: b8:93:90:cb:07:e7:87:eb:6e:04:b6:8d:ea:2e:f5:c0:3c:b9: 7b:94:c9:60:c7:41:45:e2:28:e1:fe:70:b2:ee:dd:ae:06:55: ba:11:88:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDqbabo6tM71kNw5fZFxNJK0YrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJF QjcxQTNCMTAeFw0yNTA2MDcxNTU2NDZaFw0yNTA2MTAxODAwNDZaMDMxMTAvBgNV BAMTKDNFMTQ3OTAzMzFCMkI5MzU2M0Y4MDE2RkEwMzgyMzRFMTNCNTI4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/18TSIQ7i9irLR882rX/DSHu dBkD1BFm0jLBEBjGv7mPsqC1iBVtBFJW11WQvNyMtOyhHLZtYQLqnilRke5HNQFe vnccSad5fdKXAif89B5LMIWFOKc9tChiH4Qpt4CSo0vYW+1eIMfJoS0YmpzS8FZB OlH6GDbvWXnZwb6GpDIAiZ3oKIghXdbbPsFq2nKATnSjUuB2knEEL3V5sx31Rsqa WdXnIgXpb8VFlL3F6t0DNNmuN8YW0xvs6tQzOtC4RIPUnVr8E2JM/j8HyrVLSNSr H8THeD6bxzk5sMptx6eRPd07M+0R1CHuQjpASU5RHnZM4h43jdZWEs8FkiD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPhR5AzGyuTVj+AFvoDgjThO1KAEwHwYDVR0j BBgwFoAUxY4jIAQSXotGq2O2AJANkutxo7EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMjQzYS03NjNkLTQ0YjgtOTg3ZC0wOGJkMGRhOWVlM2QvMC9DNThFMjMyMDA0 MTI1RThCNDZBQjYzQjYwMDkwMEQ5MkVCNzFBM0IxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJFQjcx QTNCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjI0M2EtNzYzZC00NGI4LTk4 N2QtMDhiZDBkYTllZTNkLzAvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBE OTJFQjcxQTNCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaCKrm7loAFBE2OcBxN30WoycSCcGB4MThg WFStvQej8T/RxqHfdwaY0U+kUmSuPCE57+DrCM77NF0NREybmn5Eumjl7k+8Wdr+ nAMa0ShbA+oqHVP7hqxOVsrGlk7+/bbC8sNydscVd+CFRjrR75S2S5fMGE7K51JP rgXNf/Q0at67xFNi41PLdMiCWwI7LXSPsA1AHe4Gb3Sch2CCQcvK2XPglwGNTqpc 6IzvP4ZFJ/9t5FQcQOawS8qx1ApNkvXzn5GHSPiJqvZU1dDOlkCgDlYgXnmKHLiT kMsH54frbgS2jeou9cA8uXuUyWDHQUXiKOH+cLLu3a4GVboRiMs= -----END CERTIFICATE-----Generated at Sun Jun 8 00:44:28 2025 by rpki-client