$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: Ktl4w8OohjQWBOmhbt/7+q9/XWm1/Fvt6XracsGjTK8= Subject key identifier: AE:23:7C:4F:67:47:1A:68:5C:99:DF:1A:79:B8:96:E1:DA:EC:00:9A Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 2A919F284A8E17E76185133B1A51EB524048F26D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 0233 Signing time: Sat 06 Sep 2025 19:10:04 +0000 Manifest this update: Sat 06 Sep 2025 19:05:04 +0000 Manifest next update: Wed 10 Sep 2025 04:41:04 +0000 Files and hashes: 1: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: PkxtajyZNq/GkaEWnDDLdJmOs+eDyGViW0RGL3moQLM=) 2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: gC29j+yO4i7uQ2lQ5TlSgcpEgKWPrlDicf9vHKUSroM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:91:9f:28:4a:8e:17:e7:61:85:13:3b:1a:51:eb:52:40:48:f2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Sep 6 19:05:04 2025 GMT Not After : Sep 10 04:41:04 2025 GMT Subject: CN=AE237C4F67471A685C99DF1A79B896E1DAEC009A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:af:77:1d:db:2f:a5:a3:2c:85:a9:a0:54:8f: 9c:bd:e2:04:7c:7a:c1:57:73:a1:99:de:3e:b9:1c: a8:db:6d:db:f2:8a:e4:a8:19:fe:26:0b:dc:b3:5f: 96:90:1c:df:e7:82:e8:1b:4c:b8:c2:be:08:7c:c1: ac:5a:39:db:91:d5:46:82:fd:20:e1:43:e9:c6:34: 93:07:85:25:e5:32:df:ad:26:f4:2e:77:2f:fd:6c: a9:fd:ac:1d:eb:69:7d:e9:92:ac:83:45:f7:b1:a8: 46:ed:9c:13:79:34:d5:b6:4b:c1:47:34:9a:96:34: 33:9b:c5:3e:3b:a6:21:5c:1f:4e:3e:d5:f1:df:51: 80:b0:93:0c:15:6f:cd:df:90:f0:4d:57:04:0a:ff: 71:25:e3:e4:cf:79:2e:10:f4:19:8d:50:5f:26:56: 31:10:dc:e2:8e:12:c6:04:6a:98:1a:28:e3:e3:ff: 26:a7:4f:f6:b9:2c:c5:b6:ad:f6:32:54:54:ff:db: 78:a9:41:95:da:5f:5e:d6:f8:f8:b6:c0:0d:cd:71: 88:80:ca:48:c3:8e:82:50:4c:6f:ab:d7:06:59:27: 91:90:fb:a7:92:7a:2e:1b:85:e2:f0:74:63:d0:9d: 68:5f:c7:94:7a:96:91:b6:0e:06:7b:05:eb:a1:0f: e7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:23:7C:4F:67:47:1A:68:5C:99:DF:1A:79:B8:96:E1:DA:EC:00:9A X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e6:0f:58:ce:0e:6d:1e:b6:cd:77:3b:20:36:33:59:27:dc: 2c:b7:68:4f:e7:9b:56:43:3e:68:a0:d2:f9:c3:fe:f4:cc:96: a2:55:14:08:88:02:cc:c6:41:b0:a1:6a:49:a3:2b:bb:29:35: 78:b3:f1:e1:f1:33:32:77:8e:1a:4e:9a:15:fd:87:c1:12:98: 31:c2:5f:30:07:62:3b:ca:9e:e1:82:ac:5e:05:41:84:a0:a2: 95:d6:e7:a5:f5:91:c6:cc:1a:7c:f9:eb:2e:18:31:04:d4:c5: 88:a6:d4:49:46:6f:08:c3:5c:48:4a:51:b6:9b:ff:a0:d8:c6: b6:11:5a:d3:e2:30:8d:2f:6c:0b:7b:ac:98:7c:92:bb:67:9e: 23:0e:47:89:fd:7b:47:fd:d4:26:8b:eb:bb:1f:32:83:12:b4: d9:46:00:2e:dc:e9:ca:c3:da:1b:10:36:ec:ee:4e:9c:46:96: 10:ff:14:a1:b6:ac:86:98:b1:b0:8f:e0:27:fb:b9:ca:80:c3: ae:b8:55:8c:fc:60:27:d3:04:fc:7d:01:44:d2:8a:b5:85:69: 3c:21:f4:d6:96:3a:e1:e8:60:c5:4c:26:d8:ea:a3:07:bc:f3: 0e:bd:a9:dc:a6:e5:cc:da:ce:c9:e9:f3:13:72:af:ef:df:bf: 69:c4:3a:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpGfKEqOF+dhhRM7GlHrUkBI8m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNTA5MDYxOTA1MDRaFw0yNTA5MTAwNDQxMDRaMDMxMTAvBgNV BAMTKEFFMjM3QzRGNjc0NzFBNjg1Qzk5REYxQTc5Qjg5NkUxREFFQzAwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmr3cd2y+loyyFqaBUj5y94gR8 esFXc6GZ3j65HKjbbdvyiuSoGf4mC9yzX5aQHN/ngugbTLjCvgh8waxaOduR1UaC /SDhQ+nGNJMHhSXlMt+tJvQudy/9bKn9rB3raX3pkqyDRfexqEbtnBN5NNW2S8FH NJqWNDObxT47piFcH04+1fHfUYCwkwwVb83fkPBNVwQK/3El4+TPeS4Q9BmNUF8m VjEQ3OKOEsYEapgaKOPj/yanT/a5LMW2rfYyVFT/23ipQZXaX17W+Pi2wA3NcYiA ykjDjoJQTG+r1wZZJ5GQ+6eSei4bheLwdGPQnWhfx5R6lpG2DgZ7BeuhD+ffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUriN8T2dHGmhcmd8aebiW4drsAJowHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfmD1jODm0ets13OyA2M1kn3Cy3aE/nm1ZD Pmig0vnD/vTMlqJVFAiIAszGQbChakmjK7spNXiz8eHxMzJ3jhpOmhX9h8ESmDHC XzAHYjvKnuGCrF4FQYSgopXW56X1kcbMGnz56y4YMQTUxYim1ElGbwjDXEhKUbab /6DYxrYRWtPiMI0vbAt7rJh8krtnniMOR4n9e0f91CaL67sfMoMStNlGAC7c6crD 2hsQNuzuTpxGlhD/FKG2rIaYsbCP4Cf7ucqAw664VYz8YCfTBPx9AUTSirWFaTwh 9NaWOuHoYMVMJtjqowe88w69qdym5czazsnp8xNyr+/fv2nEOqk= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:39 2025 by rpki-client