$ rpki-client -vvf repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft (raw, json) Hash identifier: Bi1MR7AmW0JWoZF/1BDrEKTzeGSIxKsKmOHkSKUjAp4= Subject key identifier: 00:0D:B4:44:A0:C2:57:36:A2:A9:94:70:75:C0:65:DF:22:01:86:C6 Authority key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Certificate issuer: /CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Certificate serial: 22BF83B1CDD7ECBB5018937A81ADD4D4C74FBDED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft Manifest number: 04A2 Signing time: Mon 02 Jun 2025 14:31:25 +0000 Manifest this update: Mon 02 Jun 2025 14:26:25 +0000 Manifest next update: Fri 06 Jun 2025 00:21:25 +0000 Files and hashes: 1: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: cLVCVvcvprgwkkF82bMcfbs0h+bsaPJp7VIWMvcz0os=) 2: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl (hash: jWiAXwthCMZAjvqX6zBjacu/d3U5VdlXPMyXNiWfEx0=) 3: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: zhjLKdHiZJAAA60z4kxaHFx03Q2DU/hes1jKQwL/5G8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bf:83:b1:cd:d7:ec:bb:50:18:93:7a:81:ad:d4:d4:c7:4f:bd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Validity Not Before: Jun 2 14:26:25 2025 GMT Not After : Jun 6 00:21:25 2025 GMT Subject: CN=000DB444A0C25736A2A9947075C065DF220186C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:23:48:64:e1:06:f8:aa:b3:c4:4b:89:3d: a9:fa:18:a3:7b:44:c6:65:d7:f4:29:03:ff:98:95: 7d:e4:35:c0:36:e9:fc:2d:1d:51:fe:b1:41:18:69: 28:cd:c3:28:64:6e:67:5d:6e:a9:e3:65:63:d7:b2: 1f:3f:43:29:1c:41:35:b8:c0:1f:11:b8:00:13:f9: ec:f3:57:54:41:a5:b9:8a:58:cb:25:16:13:83:cb: 6f:1e:d4:ea:1a:97:fe:5c:3d:05:1f:05:da:32:da: e4:c6:44:de:cf:39:46:6b:d4:43:d3:63:a6:d2:ab: 06:6a:05:cb:01:f1:07:03:b0:42:18:50:5d:02:f3: d0:3d:56:52:44:d5:94:3b:55:18:12:d6:63:1b:0b: a9:bb:1e:8b:a7:85:a4:de:ec:a5:84:f0:1b:8a:01: 02:46:1c:17:e7:4b:a9:ed:7a:2d:34:7b:43:15:f2: 47:53:56:49:58:74:2a:46:9e:41:be:6d:50:55:4c: 29:fa:e2:2e:4b:17:b3:4b:3e:6e:06:e8:b5:5d:e2: a8:91:cd:a9:17:51:48:a5:36:d1:3e:3a:e3:ee:c5: b6:d3:5f:f3:a7:f5:52:19:6c:f8:6a:59:c8:f9:c5: c4:34:1a:4f:91:8e:03:5b:56:2a:97:55:6a:27:e9: 2c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0D:B4:44:A0:C2:57:36:A2:A9:94:70:75:C0:65:DF:22:01:86:C6 X509v3 Authority Key Identifier: keyid:58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a4:b7:c1:91:1b:5a:7d:46:19:3e:65:6d:a7:f7:4a:7b:b2: 5b:19:ef:5c:3e:dc:8f:f5:d9:a5:96:8f:a6:e2:d6:e1:06:4b: 76:00:b1:dc:eb:f2:c4:62:3d:f7:f7:8d:69:4b:bc:76:e2:a9: 6c:eb:44:d6:2b:da:70:f4:7a:07:0d:1f:22:ec:0f:5b:01:4f: 69:a8:c8:ff:d8:f6:59:f6:a9:91:38:9c:e3:af:52:b5:3b:42: 4d:83:eb:92:b9:33:19:a3:55:b1:ac:bb:4c:6a:08:12:80:24: e8:52:c0:37:9b:fc:3c:ad:f3:e1:ea:2a:89:ed:ec:cd:54:8b: f2:4d:3c:4a:23:ef:39:c8:20:f9:b1:8e:89:f6:5b:85:21:eb: b0:dc:ba:e2:b9:c3:ae:e2:88:36:6e:6c:8c:b7:ca:9c:2a:13: c4:ce:9a:00:5d:f1:54:53:b9:39:3e:02:79:c9:ef:dd:59:08: 48:e2:ec:d1:28:2d:2d:37:90:66:65:dc:c2:80:eb:b4:78:93: e3:bb:e3:32:d6:54:92:52:c1:07:98:94:1f:95:79:0a:3d:bc: b3:0a:6e:ff:ca:e8:db:54:51:f1:74:73:7f:b8:61:77:b0:8e: 25:fb:2e:fa:46:c5:26:a5:58:48:3f:21:b5:68:ba:b3:35:5d: dd:f2:1c:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIr+Dsc3X7LtQGJN6ga3U1MdPve0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIw M0Q1MzVERjAeFw0yNTA2MDIxNDI2MjVaFw0yNTA2MDYwMDIxMjVaMDMxMTAvBgNV BAMTKDAwMERCNDQ0QTBDMjU3MzZBMkE5OTQ3MDc1QzA2NURGMjIwMTg2QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlCNIZOEG+KqzxEuJPan6GKN7 RMZl1/QpA/+YlX3kNcA26fwtHVH+sUEYaSjNwyhkbmddbqnjZWPXsh8/QykcQTW4 wB8RuAAT+ezzV1RBpbmKWMslFhODy28e1Ooal/5cPQUfBdoy2uTGRN7POUZr1EPT Y6bSqwZqBcsB8QcDsEIYUF0C89A9VlJE1ZQ7VRgS1mMbC6m7HounhaTe7KWE8BuK AQJGHBfnS6ntei00e0MV8kdTVklYdCpGnkG+bVBVTCn64i5LF7NLPm4G6LVd4qiR zakXUUilNtE+OuPuxbbTX/On9VIZbPhqWcj5xcQ0Gk+RjgNbViqXVWon6Sz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAA20RKDCVzaiqZRwdcBl3yIBhsYwHwYDVR0j BBgwFoAUWG/o0n/01r1PqDn8WIRKSwPVNd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMC81ODZGRThEMjdG RjRENkJENEZBODM5RkM1ODg0NEE0QjAzRDUzNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIwM0Q1 MzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRB NEIwM0Q1MzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGkt8GRG1p9Rhk+ZW2n90p7slsZ71w+3I/1 2aWWj6bi1uEGS3YAsdzr8sRiPff3jWlLvHbiqWzrRNYr2nD0egcNHyLsD1sBT2mo yP/Y9ln2qZE4nOOvUrU7Qk2D65K5MxmjVbGsu0xqCBKAJOhSwDeb/Dyt8+HqKont 7M1Ui/JNPEoj7znIIPmxjon2W4Uh67DcuuK5w67iiDZubIy3ypwqE8TOmgBd8VRT uTk+AnnJ791ZCEji7NEoLS03kGZl3MKA67R4k+O74zLWVJJSwQeYlB+VeQo9vLMK bv/K6NtUUfF0c3+4YXewjiX7LvpGxSalWEg/IbVourM1Xd3yHGY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:57 2025 by rpki-client