$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: ZwxOGc7Rx5SKKcOsuAd2GjKWxnvYsvAvcLfgncq1Hxs= Subject key identifier: B4:7B:02:AD:D0:01:0F:97:03:F9:9F:BB:78:18:A2:9E:E0:2F:4C:1B Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 03A8E0C655DBBA0B14D841AEB2F9581832AB52E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 04EA Signing time: Mon 27 Oct 2025 22:52:02 +0000 Manifest this update: Mon 27 Oct 2025 22:47:02 +0000 Manifest next update: Fri 31 Oct 2025 02:21:02 +0000 Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=) 2: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: iUAwQ4qZH7SLy/Hx8M4tsRv8z1XkFSgpidQF/lxTB3g=) 3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: YwE+UrBIdJChzzky/B1cyIMVCcodIiUc4aS8d6d7+co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 02:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a8:e0:c6:55:db:ba:0b:14:d8:41:ae:b2:f9:58:18:32:ab:52:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Oct 27 22:47:02 2025 GMT Not After : Oct 31 02:21:02 2025 GMT Subject: CN=B47B02ADD0010F9703F99FBB7818A29EE02F4C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:e8:07:2e:76:6e:a1:9c:63:34:35:0c:c3: 91:53:61:f5:7b:aa:fd:ae:94:cc:4c:f2:64:23:ca: 42:64:8d:37:bf:6c:3a:e1:86:81:3b:d6:4d:90:67: 8d:2b:53:8c:01:4e:8e:7f:8f:23:30:29:78:8e:52: 03:0a:93:92:c6:ae:66:4e:2a:9e:f4:4d:8c:2f:50: 4a:35:6b:d0:b0:7d:a4:29:cc:d8:fa:d7:a7:44:d3: 40:48:00:0b:4a:90:fb:30:a8:df:c2:da:d5:82:a1: 1f:17:f5:c1:f3:7f:c5:c1:41:59:d0:ac:e0:b6:18: 69:30:25:27:48:d0:45:ec:7d:7e:5f:38:2d:3d:96: 9c:ee:95:8c:8b:79:57:81:a7:a3:3d:78:83:5f:05: c9:9d:05:a0:3a:2d:b3:a3:ac:06:3f:7a:f1:19:7c: 4c:a7:2f:92:41:f3:81:dd:5a:d7:ec:70:1c:7f:76: 74:82:d7:f6:8a:43:70:51:5a:e0:af:62:1c:cb:47: 0e:b7:54:fa:92:f4:e1:f3:4a:9f:6e:e5:87:c5:3c: 4d:d7:98:41:eb:f9:12:48:2b:de:f1:6f:dc:96:aa: 5b:e0:97:40:70:ec:d8:d8:0c:51:0c:35:c1:92:a5: e4:b8:ea:c5:cd:76:40:9a:e6:28:fc:80:d8:b4:38: 0c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7B:02:AD:D0:01:0F:97:03:F9:9F:BB:78:18:A2:9E:E0:2F:4C:1B X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7b:eb:56:46:19:97:8c:da:51:59:e4:9d:e3:45:82:2f:03: 9e:32:9e:79:0e:01:b1:b1:e5:8a:f4:8a:bd:0a:3c:43:a4:1d: 85:10:aa:30:1a:1d:8a:fe:09:92:0c:27:57:ab:de:e4:59:2b: 73:58:6b:38:ef:2a:b6:f3:de:8a:ce:4e:cd:54:57:b0:6e:be: 09:b4:8b:d5:78:18:34:bc:e6:a4:29:a2:41:06:1d:4b:f9:8e: d7:3b:ee:b4:5c:47:c2:2d:e0:51:4d:ce:51:e3:c9:48:e0:e8: 93:fb:2d:7b:de:16:5b:f1:3c:16:3f:aa:9b:a3:0b:97:54:f9: c8:c4:1e:23:36:20:8c:e8:42:15:88:3e:c6:90:ae:cf:9c:cc: 62:2f:ab:a9:38:cb:56:0f:32:ac:b5:a7:46:3e:3c:38:23:17: 3d:10:dd:96:47:19:23:10:c9:a1:45:8c:25:57:96:ca:34:fa: 4d:e5:cf:09:c8:47:44:43:fe:13:83:25:81:4d:d5:a5:26:e9: 4d:37:50:15:0b:cd:0b:29:12:df:7e:13:62:44:f9:32:c2:3f: 83:fb:11:e0:0f:17:4d:fe:df:9a:7f:96:07:3e:da:99:ce:06: e2:d6:72:b2:b3:e8:97:a4:3c:91:98:41:d6:04:fb:23:d9:30: c7:ee:2d:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA6jgxlXbugsU2EGusvlYGDKrUukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTEwMjcyMjQ3MDJaFw0yNTEwMzEwMjIxMDJaMDMxMTAvBgNV BAMTKEI0N0IwMkFERDAwMTBGOTcwM0Y5OUZCQjc4MThBMjlFRTAyRjRDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3ugHLnZuoZxjNDUMw5FTYfV7 qv2ulMxM8mQjykJkjTe/bDrhhoE71k2QZ40rU4wBTo5/jyMwKXiOUgMKk5LGrmZO Kp70TYwvUEo1a9CwfaQpzNj616dE00BIAAtKkPswqN/C2tWCoR8X9cHzf8XBQVnQ rOC2GGkwJSdI0EXsfX5fOC09lpzulYyLeVeBp6M9eINfBcmdBaA6LbOjrAY/evEZ fEynL5JB84HdWtfscBx/dnSC1/aKQ3BRWuCvYhzLRw63VPqS9OHzSp9u5YfFPE3X mEHr+RJIK97xb9yWqlvgl0Bw7NjYDFEMNcGSpeS46sXNdkCa5ij8gNi0OAz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtHsCrdABD5cD+Z+7eBiinuAvTBswHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACN761ZGGZeM2lFZ5J3jRYIvA54ynnkOAbGx 5Yr0ir0KPEOkHYUQqjAaHYr+CZIMJ1er3uRZK3NYazjvKrbz3orOTs1UV7Buvgm0 i9V4GDS85qQpokEGHUv5jtc77rRcR8It4FFNzlHjyUjg6JP7LXveFlvxPBY/qpuj C5dU+cjEHiM2IIzoQhWIPsaQrs+czGIvq6k4y1YPMqy1p0Y+PDgjFz0Q3ZZHGSMQ yaFFjCVXlso0+k3lzwnIR0RD/hODJYFN1aUm6U03UBULzQspEt9+E2JE+TLCP4P7 EeAPF03+35p/lgc+2pnOBuLWcrKz6JekPJGYQdYE+yPZMMfuLYo= -----END CERTIFICATE-----Generated at Tue Oct 28 15:49:34 2025 by rpki-client