$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: 2Vd8VraVR5luf2vMU8dDvI2Fu+IlkGiMV1A16TtgOB8= Subject key identifier: 3D:6A:87:88:9B:FF:84:9C:72:EF:01:B0:C3:68:00:B2:09:F0:ED:C9 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 1824A641DA96DB3DC69408256A02C3DDF3FB4ECA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 04AA Signing time: Thu 05 Jun 2025 21:02:00 +0000 Manifest this update: Thu 05 Jun 2025 20:57:00 +0000 Manifest next update: Mon 09 Jun 2025 06:59:00 +0000 Files and hashes: 1: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: YwE+UrBIdJChzzky/B1cyIMVCcodIiUc4aS8d6d7+co=) 2: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: 4IMiOvHiUu4Ux+eoB8JsufBBnxinrzlgVCXu77Pwq/U=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: vrRICHKdrX5bsoj+V7upbCct/K0FWIRbEMdPjprjMe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 06:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:24:a6:41:da:96:db:3d:c6:94:08:25:6a:02:c3:dd:f3:fb:4e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Jun 5 20:57:00 2025 GMT Not After : Jun 9 06:59:00 2025 GMT Subject: CN=3D6A87889BFF849C72EF01B0C36800B209F0EDC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:63:e6:aa:93:48:da:86:1f:52:4e:ee:d9:6c: 4c:b9:2b:f9:b2:e3:6e:a3:ed:6e:b7:48:ac:3c:06: e3:0c:03:49:70:fa:00:6e:99:c1:a5:37:6b:b9:32: 33:29:92:76:a5:8f:c0:9f:7a:98:0e:ba:7b:45:a9: f7:48:5c:87:a1:68:95:d8:57:d8:33:72:75:79:03: 6e:30:24:b2:15:3a:ad:b9:ae:9c:48:e7:79:f3:91: 06:7c:5c:38:f6:72:25:39:43:1d:3d:6d:11:9a:ae: 80:78:05:c0:7b:26:2a:b8:d3:64:62:b8:84:fe:53: 4d:3f:52:75:0f:62:fa:27:f5:41:c7:55:a4:0c:60: 86:90:46:a2:51:53:db:be:55:23:47:b2:81:bd:e7: 62:eb:f7:5f:c8:40:0e:b3:03:53:8c:f1:22:4f:28: 83:bf:88:d7:b2:0b:cf:0b:d7:24:13:01:d0:ce:16: 13:e4:5d:77:41:e5:15:90:c1:24:fb:63:b2:72:8f: d0:ed:0c:6a:b0:88:98:af:c9:51:2c:16:ed:46:89: eb:6c:dc:e2:f6:b5:78:83:7c:09:9b:23:1d:8d:58: 0c:a5:fe:db:13:14:f9:c1:98:d8:9e:e9:89:ff:cc: 74:51:0b:cc:18:83:f6:da:f4:2e:1e:58:40:70:91: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6A:87:88:9B:FF:84:9C:72:EF:01:B0:C3:68:00:B2:09:F0:ED:C9 X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:dc:c6:d0:cf:d7:79:d6:6f:33:80:1f:f1:63:5f:e7:9d:6c: b3:96:10:17:22:1d:60:cb:a0:08:b7:5b:11:28:ad:3b:ab:3a: 83:e1:c4:65:9b:2c:ce:e4:0b:04:d7:e6:34:db:97:da:49:ed: 6b:8b:b3:ae:fd:96:1f:89:98:da:a4:96:b8:5d:12:73:ed:57: a6:08:86:b6:dc:dc:94:16:49:27:6f:33:31:5f:5b:ae:00:82: b1:73:80:c0:f0:b5:e6:8c:87:48:44:90:26:2f:b6:3f:3a:0f: 2e:c8:61:7f:e6:50:0c:0c:df:18:99:22:7c:33:34:7a:b9:09: c1:1a:36:36:5c:1a:88:2d:42:e4:85:33:3c:6e:8f:2b:a5:c4: db:4f:1b:04:6a:b7:eb:39:32:bf:6f:44:9b:52:69:da:d4:ad: a5:b1:a5:6d:f6:b3:6f:1d:85:27:6e:d2:02:dc:2f:23:0e:61: 94:04:90:3a:c4:53:e7:98:17:fe:bc:f8:93:ce:39:df:af:06: be:ec:bf:ab:a9:6e:63:88:5d:5b:19:de:f2:64:39:f8:03:fd: 0d:4f:ed:56:f0:ce:7c:9a:e0:96:66:5d:bb:c6:11:ca:fc:8c: 12:b7:a6:3e:f8:62:d8:03:d8:cc:16:e4:63:6c:dc:19:6a:38: 4c:4b:fb:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGCSmQdqW2z3GlAglagLD3fP7TsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTA2MDUyMDU3MDBaFw0yNTA2MDkwNjU5MDBaMDMxMTAvBgNV BAMTKDNENkE4Nzg4OUJGRjg0OUM3MkVGMDFCMEMzNjgwMEIyMDlGMEVEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvY+aqk0jahh9STu7ZbEy5K/my 426j7W63SKw8BuMMA0lw+gBumcGlN2u5MjMpknalj8CfepgOuntFqfdIXIehaJXY V9gzcnV5A24wJLIVOq25rpxI53nzkQZ8XDj2ciU5Qx09bRGaroB4BcB7Jiq402Ri uIT+U00/UnUPYvon9UHHVaQMYIaQRqJRU9u+VSNHsoG952Lr91/IQA6zA1OM8SJP KIO/iNeyC88L1yQTAdDOFhPkXXdB5RWQwST7Y7Jyj9DtDGqwiJivyVEsFu1Giets 3OL2tXiDfAmbIx2NWAyl/tsTFPnBmNie6Yn/zHRRC8wYg/ba9C4eWEBwkY29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPWqHiJv/hJxy7wGww2gAsgnw7ckwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHcxtDP13nWbzOAH/FjX+edbLOWEBciHWDL oAi3WxEorTurOoPhxGWbLM7kCwTX5jTbl9pJ7WuLs679lh+JmNqklrhdEnPtV6YI hrbc3JQWSSdvMzFfW64AgrFzgMDwteaMh0hEkCYvtj86Dy7IYX/mUAwM3xiZInwz NHq5CcEaNjZcGogtQuSFMzxujyulxNtPGwRqt+s5Mr9vRJtSadrUraWxpW32s28d hSdu0gLcLyMOYZQEkDrEU+eYF/68+JPOOd+vBr7sv6upbmOIXVsZ3vJkOfgD/Q1P 7Vbwznya4JZmXbvGEcr8jBK3pj74YtgD2MwW5GNs3BlqOExL+5k= -----END CERTIFICATE-----Generated at Sat Jun 7 04:25:19 2025 by rpki-client