$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft File: 585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json) Hash identifier: 3AXLnw3ty4yCgAOnesUkdS7Yc1gcHPbWKWsoLiBvIDU= Subject key identifier: 6F:5D:D6:00:C2:36:C3:65:61:CC:D3:90:9C:FB:82:83:E4:FA:00:EA Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 Certificate issuer: /CN=585D79944E315672D413B937BFC042F7C0AAB990 Certificate serial: 2935D90079ADA289137FDFB705DA49294807764F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft Manifest number: 0116 Signing time: Sat 18 Oct 2025 09:11:02 +0000 Manifest this update: Sat 18 Oct 2025 09:06:02 +0000 Manifest next update: Tue 21 Oct 2025 14:30:02 +0000 Files and hashes: 1: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: jeEsDMd/+EovuK4uL5Q5qgB89wPIiu04eYRInb+Xh5s=) 2: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: hL7nBR/vzyKM64kIHTBM7Rh2f2zsZkmiqaU1yFPXYmA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:35:d9:00:79:ad:a2:89:13:7f:df:b7:05:da:49:29:48:07:76:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990 Validity Not Before: Oct 18 09:06:02 2025 GMT Not After : Oct 21 14:30:02 2025 GMT Subject: CN=6F5DD600C236C36561CCD3909CFB8283E4FA00EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:16:f7:9d:6b:66:e3:ac:fa:56:6d:32:ef:3d: 95:c6:a9:5d:70:3c:64:65:5c:48:ec:4e:d9:0e:20: 2b:7a:f9:b3:94:9c:d6:74:a1:83:32:31:62:28:fe: 87:7e:c6:63:80:8b:68:94:ca:0a:5b:13:e3:62:8a: 11:d8:8c:e2:49:c1:e4:8d:d9:2d:8f:71:b5:55:d3: 2b:40:a1:48:14:d3:4b:11:df:5a:57:8e:31:4b:cb: 61:0c:46:e7:b8:c5:14:f0:94:cb:bb:cf:86:13:b9: 33:6c:f6:01:18:ad:35:f7:5f:d9:cc:51:e9:29:8d: 67:1e:3c:d0:01:59:d0:9d:a2:a8:7c:45:6b:d9:2c: a8:57:cd:aa:4a:cd:be:48:3b:34:45:e9:c0:1c:e4: c6:90:87:d0:3f:bd:3e:5a:69:c1:0f:cc:73:40:26: 3c:e2:25:32:83:1e:3a:31:0a:69:96:32:7a:e9:db: da:99:07:ee:97:3e:dc:5b:89:2c:24:ce:33:3f:d7: e3:b2:14:b7:d2:44:6a:0e:4e:6e:6a:02:26:f8:c6: f0:f6:e5:8e:b1:52:61:1b:fb:69:0c:2e:3e:ec:37: a0:ca:1b:2f:c4:51:72:b1:2c:84:38:1a:8e:34:0e: 18:98:19:c8:65:66:31:67:85:f4:a5:b4:72:5e:8a: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5D:D6:00:C2:36:C3:65:61:CC:D3:90:9C:FB:82:83:E4:FA:00:EA X509v3 Authority Key Identifier: keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:41:7e:4a:38:ee:4d:b6:2d:6b:45:de:f3:eb:33:8c:9e:c9: ff:9e:64:dc:6e:85:87:a2:b4:01:32:51:e8:bc:09:7f:e6:1d: c0:79:77:61:03:24:ec:df:2a:72:27:c7:d3:61:f0:78:2e:17: 2b:a9:38:1c:eb:b6:a4:c2:cd:8a:23:c7:b9:d8:be:1d:a1:41: 87:d9:17:9b:b5:00:a4:ed:fa:3a:3d:a3:2b:9f:d6:38:90:b0: 0c:f3:7d:45:bb:04:f2:b5:48:9f:b5:ca:df:f5:11:fc:01:3d: 32:26:e2:43:fa:8e:24:65:55:2a:37:5a:02:68:a0:63:8c:8c: f4:6d:5d:7a:41:ee:bc:06:1a:07:97:ce:48:ce:9d:b8:6b:d5: 36:a1:d8:18:59:6f:af:9a:59:ce:7e:7f:ef:0e:d4:5e:3e:9f: 5f:ef:11:99:c2:f3:3a:59:4f:86:e1:c0:b0:e1:c5:90:a1:99: 05:c1:93:75:0e:ac:da:54:83:61:c0:fd:2d:ca:5a:3a:5e:bf: 10:4b:45:5d:52:33:10:6a:e7:b1:c3:24:f5:ad:60:7c:11:ac: ca:1b:7b:22:47:f6:37:aa:ed:39:c4:30:9a:4d:7b:aa:51:74: f6:62:3e:ca:fd:3a:a4:d9:62:b0:ad:f3:83:34:da:43:6f:72: 52:01:46:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTXZAHmtookTf9+3BdpJKUgHdk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdD MEFBQjk5MDAeFw0yNTEwMTgwOTA2MDJaFw0yNTEwMjExNDMwMDJaMDMxMTAvBgNV BAMTKDZGNURENjAwQzIzNkMzNjU2MUNDRDM5MDlDRkI4MjgzRTRGQTAwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVFveda2bjrPpWbTLvPZXGqV1w PGRlXEjsTtkOICt6+bOUnNZ0oYMyMWIo/od+xmOAi2iUygpbE+NiihHYjOJJweSN 2S2PcbVV0ytAoUgU00sR31pXjjFLy2EMRue4xRTwlMu7z4YTuTNs9gEYrTX3X9nM UekpjWcePNABWdCdoqh8RWvZLKhXzapKzb5IOzRF6cAc5MaQh9A/vT5aacEPzHNA JjziJTKDHjoxCmmWMnrp29qZB+6XPtxbiSwkzjM/1+OyFLfSRGoOTm5qAib4xvD2 5Y6xUmEb+2kMLj7sN6DKGy/EUXKxLIQ4Go40DhiYGchlZjFnhfSltHJeih5hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb13WAMI2w2VhzNOQnPuCg+T6AOowHwYDVR0j BBgwFoAUWF15lE4xVnLUE7k3v8BC98CquZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC81ODVENzk5NDRF MzE1NjcyRDQxM0I5MzdCRkMwNDJGN0MwQUFCOTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdDMEFB Qjk5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQy RjdDMEFBQjk5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5Bfko47k22LWtF3vPrM4yeyf+eZNxuhYei tAEyUei8CX/mHcB5d2EDJOzfKnInx9Nh8HguFyupOBzrtqTCzYojx7nYvh2hQYfZ F5u1AKTt+jo9oyuf1jiQsAzzfUW7BPK1SJ+1yt/1EfwBPTIm4kP6jiRlVSo3WgJo oGOMjPRtXXpB7rwGGgeXzkjOnbhr1Tah2BhZb6+aWc5+f+8O1F4+n1/vEZnC8zpZ T4bhwLDhxZChmQXBk3UOrNpUg2HA/S3KWjpevxBLRV1SMxBq57HDJPWtYHwRrMob eyJH9jeq7TnEMJpNe6pRdPZiPsr9OqTZYrCt84M02kNvclIBRtc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:55 2025 by rpki-client