$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: 7X3rVdJj3u2USe27CDVpaaAniHbOqr6KYko2UmPs9aU= Subject key identifier: 8A:3B:A6:B0:7B:74:2D:28:1B:9E:E1:E9:B9:EF:7C:47:D0:E5:3C:48 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 35B81AD8BE2185FB6C3E57233C1BFD26F05B48DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 048F Signing time: Sun 06 Apr 2025 11:11:58 +0000 Manifest this update: Sun 06 Apr 2025 11:06:58 +0000 Manifest next update: Wed 09 Apr 2025 15:33:58 +0000 Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: vrRICHKdrX5bsoj+V7upbCct/K0FWIRbEMdPjprjMe8=) 2: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: YwE+UrBIdJChzzky/B1cyIMVCcodIiUc4aS8d6d7+co=) 3: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: KiPqcHFst5SAwDOyFO7PYsLiwuKIJjGpGQ8aoG7osNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 15:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b8:1a:d8:be:21:85:fb:6c:3e:57:23:3c:1b:fd:26:f0:5b:48:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Apr 6 11:06:58 2025 GMT Not After : Apr 9 15:33:58 2025 GMT Subject: CN=8A3BA6B07B742D281B9EE1E9B9EF7C47D0E53C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:56:83:c1:5f:af:58:f8:5e:8f:80:fe:38: fc:05:0a:b5:12:af:44:7f:c5:73:64:5f:9e:4d:5d: 5a:f1:eb:66:e9:f2:d9:48:13:25:ea:76:d2:b3:e7: ba:d9:3a:ec:82:a2:4b:3b:2a:53:1e:71:db:91:d4: bc:5a:2b:da:23:4c:45:6e:bc:3e:82:c9:36:f0:7d: 5b:28:2d:2d:5f:ed:3e:4f:41:bd:32:46:52:bd:08: a5:af:3a:c8:cc:a3:44:39:5d:74:96:a0:64:93:97: fe:2f:3c:3f:74:8d:c9:8e:a4:c2:ba:69:31:2d:73: d4:e4:8c:ab:a1:8e:6f:f1:85:34:9b:32:2a:f3:06: a9:99:37:73:31:c6:e0:ad:ed:ef:9e:1a:7d:df:dc: 68:1a:e4:86:80:dc:fa:d5:66:3e:d0:03:e8:5f:7a: 0d:ff:c5:3d:70:b1:cd:f0:c1:4b:39:04:fd:83:4a: 36:b0:bf:8e:00:cd:5b:3d:24:e9:d9:37:13:85:d4: 24:b5:e7:cb:1e:e7:75:21:17:24:e6:b0:07:2c:83: b3:02:85:75:c5:83:68:fb:35:ab:39:c1:ae:32:7a: fa:98:af:14:e2:97:08:bd:ae:fb:c4:c9:2f:42:ba: eb:a4:91:03:34:04:f8:75:5e:62:00:76:e5:92:ad: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:A6:B0:7B:74:2D:28:1B:9E:E1:E9:B9:EF:7C:47:D0:E5:3C:48 X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:61:59:f6:63:53:a6:19:8a:1f:cd:ee:aa:e5:33:27:1e:e2: ce:fe:c9:35:d5:39:ea:10:03:d7:9c:6f:3a:f2:2b:bf:18:17: ef:4c:ce:d0:b3:c3:5e:3c:e1:fb:89:23:23:ab:1d:3a:21:77: cd:bc:46:62:d6:41:83:1d:45:30:dc:0b:51:94:63:d7:5f:fb: a5:7b:15:e7:3e:82:af:4a:5c:a0:51:dd:8c:e2:52:02:0d:5c: f5:6b:da:b7:04:dd:59:5d:a3:42:97:3e:d9:cb:d0:a6:c0:18: bf:02:c6:fa:98:c7:6e:e4:ab:f4:ac:45:a6:b7:dd:86:d1:31: e5:36:38:58:55:b5:18:79:02:50:4c:89:a9:14:7d:1d:63:7e: fd:32:09:48:89:d0:da:5e:9f:6d:37:28:22:2f:0a:ae:d5:a0: 87:67:37:d5:25:eb:85:78:d9:aa:b1:62:4e:a3:79:0c:86:ee: 2d:e7:26:04:61:d6:9d:12:d6:01:9d:3a:27:7c:43:6b:cb:de: d9:1a:9f:48:5c:03:19:67:11:ed:21:33:7f:9d:0f:09:d2:44: 5d:4e:8e:eb:08:b5:df:e4:13:3d:5b:22:1e:8f:85:1a:9b:93: 02:a5:52:d9:e3:ac:26:83:7a:c0:0a:40:84:95:67:ac:44:ad: 2a:8c:fa:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbga2L4hhftsPlcjPBv9JvBbSN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTA0MDYxMTA2NThaFw0yNTA0MDkxNTMzNThaMDMxMTAvBgNV BAMTKDhBM0JBNkIwN0I3NDJEMjgxQjlFRTFFOUI5RUY3QzQ3RDBFNTNDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoh1aDwV+vWPhej4D+OPwFCrUS r0R/xXNkX55NXVrx62bp8tlIEyXqdtKz57rZOuyCoks7KlMecduR1LxaK9ojTEVu vD6CyTbwfVsoLS1f7T5PQb0yRlK9CKWvOsjMo0Q5XXSWoGSTl/4vPD90jcmOpMK6 aTEtc9TkjKuhjm/xhTSbMirzBqmZN3MxxuCt7e+eGn3f3Gga5IaA3PrVZj7QA+hf eg3/xT1wsc3wwUs5BP2DSjawv44AzVs9JOnZNxOF1CS158se53UhFyTmsAcsg7MC hXXFg2j7Nas5wa4yevqYrxTilwi9rvvEyS9CuuukkQM0BPh1XmIAduWSrYxLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUijumsHt0LSgbnuHpue98R9DlPEgwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRhWfZjU6YZih/N7qrlMyce4s7+yTXVOeoQ A9ecbzryK78YF+9MztCzw1484fuJIyOrHTohd828RmLWQYMdRTDcC1GUY9df+6V7 Fec+gq9KXKBR3YziUgINXPVr2rcE3Vldo0KXPtnL0KbAGL8CxvqYx27kq/SsRaa3 3YbRMeU2OFhVtRh5AlBMiakUfR1jfv0yCUiJ0Npen203KCIvCq7VoIdnN9Ul64V4 2aqxYk6jeQyG7i3nJgRh1p0S1gGdOid8Q2vL3tkan0hcAxlnEe0hM3+dDwnSRF1O jusItd/kEz1bIh6PhRqbkwKlUtnjrCaDesAKQISVZ6xErSqM+sY= -----END CERTIFICATE-----Generated at Mon Apr 7 11:47:47 2025 by rpki-client