$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: EtfoodSw9cKrRVVw4XK66fgh62W4ySo8MwUSWO81jJA= Subject key identifier: F2:9E:8B:57:B0:F8:94:01:FF:A0:C3:04:14:3C:79:D1:79:C5:44:B8 Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 7024E1653C5329080B2DB88752A1FDE1333250F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 0209 Signing time: Tue 03 Jun 2025 10:10:24 +0000 Manifest this update: Tue 03 Jun 2025 10:05:24 +0000 Manifest next update: Fri 06 Jun 2025 21:11:24 +0000 Files and hashes: 1: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: O0+b8xQS7wUCIy3cFLoJgziNlrFkH+FlJuAOVkQHw6Y=) 2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: gC29j+yO4i7uQ2lQ5TlSgcpEgKWPrlDicf9vHKUSroM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:24:e1:65:3c:53:29:08:0b:2d:b8:87:52:a1:fd:e1:33:32:50:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Jun 3 10:05:24 2025 GMT Not After : Jun 6 21:11:24 2025 GMT Subject: CN=F29E8B57B0F89401FFA0C304143C79D179C544B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:d1:e3:71:d7:59:f9:a6:b2:b6:f0:75:c1: cf:8d:37:f0:e4:9f:a7:b4:1d:82:70:20:7e:38:6f: 56:34:a3:10:a8:93:01:51:8e:b5:eb:ef:f5:8e:ee: e5:5d:73:2c:7a:1e:bf:4f:df:36:ee:47:2f:e4:59: 66:0a:81:5d:f2:b0:e0:5c:3a:17:6d:33:ab:27:13: 43:fe:83:de:76:99:48:67:f6:94:54:ed:41:ef:12: b4:1d:18:7e:ac:af:be:6e:1d:15:ae:39:a2:7b:92: f4:df:b2:e4:2b:3b:28:cf:da:c0:34:f1:9e:30:78: 38:d5:bc:a0:fd:27:6b:3e:e4:ca:4f:c3:db:35:4d: d6:90:fa:00:0a:65:d6:ac:2a:8d:b8:a8:da:b7:d9: 18:94:7d:cf:af:8d:0e:dd:fb:e6:93:6e:14:d7:77: 2c:0b:97:75:c2:36:a8:7e:a4:ab:71:e7:b5:aa:ce: 7a:f9:ee:48:be:a3:26:2f:43:a5:5d:fd:9e:4d:93: 60:ed:8c:85:0c:70:a1:14:ec:20:ea:1b:c9:b2:3a: 69:54:63:22:0c:19:e9:f3:f3:73:ab:82:7f:9d:d7: 06:fe:c1:7e:5c:24:24:25:05:51:b9:b1:a2:bf:45: 33:64:c5:34:14:d8:f0:b8:83:47:07:a9:08:fe:4a: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9E:8B:57:B0:F8:94:01:FF:A0:C3:04:14:3C:79:D1:79:C5:44:B8 X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ce:ec:98:c5:4c:e8:ff:81:e8:60:ab:83:f1:2c:b4:28:8c: 48:66:89:3a:29:eb:c6:9a:7b:5a:89:ca:9c:a7:f5:92:98:67: 94:1a:99:8b:21:cc:2c:d9:a0:ef:5c:5b:14:53:bd:d2:30:8c: 4c:82:4d:be:44:12:70:72:62:8f:b6:37:e2:5c:bf:41:68:cc: 76:b4:43:37:59:d1:83:f2:2c:f8:84:77:d6:75:cc:e5:2f:a9: 2a:df:6c:6c:23:97:9b:f6:17:eb:3b:73:63:d0:ac:8a:df:d4: 06:33:70:f0:a8:23:98:91:e4:1d:18:fa:8b:11:bb:40:b2:76: e6:76:1e:e9:a5:72:e6:5d:5e:e8:2e:5d:70:aa:c9:6d:5a:d0: 29:98:67:f3:eb:df:df:6e:37:3f:60:5c:d8:da:2b:c1:21:65: c8:f1:3e:ec:d5:14:9d:29:2e:f9:75:5e:16:42:01:c1:56:5a: 85:9b:e7:cd:9a:46:d2:0f:cc:da:ee:9a:2e:f3:28:f5:c2:71: 8b:0c:f9:fc:b2:17:6e:e7:80:7a:a8:e1:75:20:43:75:ea:af: da:43:f0:54:c0:54:df:8e:70:7e:af:92:00:29:b4:e8:9f:05: 91:25:46:d5:a7:ee:62:8d:6e:14:4c:3b:25:29:4c:10:70:32: 87:07:8b:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCThZTxTKQgLLbiHUqH94TMyUPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNTA2MDMxMDA1MjRaFw0yNTA2MDYyMTExMjRaMDMxMTAvBgNV BAMTKEYyOUU4QjU3QjBGODk0MDFGRkEwQzMwNDE0M0M3OUQxNzlDNTQ0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lNHjcddZ+aaytvB1wc+NN/Dk n6e0HYJwIH44b1Y0oxCokwFRjrXr7/WO7uVdcyx6Hr9P3zbuRy/kWWYKgV3ysOBc OhdtM6snE0P+g952mUhn9pRU7UHvErQdGH6sr75uHRWuOaJ7kvTfsuQrOyjP2sA0 8Z4weDjVvKD9J2s+5MpPw9s1TdaQ+gAKZdasKo24qNq32RiUfc+vjQ7d++aTbhTX dywLl3XCNqh+pKtx57Wqznr57ki+oyYvQ6Vd/Z5Nk2DtjIUMcKEU7CDqG8myOmlU YyIMGenz83Orgn+d1wb+wX5cJCQlBVG5saK/RTNkxTQU2PC4g0cHqQj+SqpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8p6LV7D4lAH/oMMEFDx50XnFRLgwHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7O7JjFTOj/gehgq4PxLLQojEhmiTop68aa e1qJypyn9ZKYZ5QamYshzCzZoO9cWxRTvdIwjEyCTb5EEnByYo+2N+Jcv0FozHa0 QzdZ0YPyLPiEd9Z1zOUvqSrfbGwjl5v2F+s7c2PQrIrf1AYzcPCoI5iR5B0Y+osR u0CyduZ2HumlcuZdXuguXXCqyW1a0CmYZ/Pr399uNz9gXNjaK8EhZcjxPuzVFJ0p Lvl1XhZCAcFWWoWb582aRtIPzNrumi7zKPXCcYsM+fyyF27ngHqo4XUgQ3Xqr9pD 8FTAVN+OcH6vkgAptOifBZElRtWn7mKNbhRMOyUpTBBwMocHi+Q= -----END CERTIFICATE-----Generated at Tue Jun 3 23:40:08 2025 by rpki-client