$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft File: 585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json) Hash identifier: NIr9TDSNwb868+uwubPWJCAiCmcvUNrF0z/j1VxY9Wo= Subject key identifier: 8D:F4:3E:E4:7D:45:A5:E8:6B:B5:64:EE:CE:A7:5E:44:37:0A:17:A1 Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 Certificate issuer: /CN=585D79944E315672D413B937BFC042F7C0AAB990 Certificate serial: 76F3259DEAFA7AAEAD5F3C57A04AD08F6864710B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft Manifest number: CF Signing time: Fri 09 May 2025 19:50:59 +0000 Manifest this update: Fri 09 May 2025 19:45:59 +0000 Manifest next update: Tue 13 May 2025 01:25:59 +0000 Files and hashes: 1: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: I3BRYvPjibF6f9wuEgQp7UJ1ZQy1ROJZqk4Q3Tw2+z0=) 2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: jeEsDMd/+EovuK4uL5Q5qgB89wPIiu04eYRInb+Xh5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 01:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f3:25:9d:ea:fa:7a:ae:ad:5f:3c:57:a0:4a:d0:8f:68:64:71:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990 Validity Not Before: May 9 19:45:59 2025 GMT Not After : May 13 01:25:59 2025 GMT Subject: CN=8DF43EE47D45A5E86BB564EECEA75E44370A17A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:14:ab:32:90:43:b7:9d:07:f3:64:78:f8: c9:8f:ce:37:76:3b:bd:95:ca:06:85:fc:28:bc:62: 7a:d8:73:e9:28:de:a4:45:f4:ba:b9:9c:dd:2b:a6: c9:74:63:fd:33:f2:02:f4:79:ef:48:14:a4:75:88: 57:bc:51:b0:97:b4:ce:f7:38:45:e4:56:d7:14:8c: 84:6f:28:2e:1c:64:d5:82:69:13:62:66:90:6a:d8: 7b:5c:55:ab:30:db:52:41:a0:c4:7b:b1:4a:e0:b3: 87:a7:38:b3:73:5a:c3:73:e2:95:5a:0c:72:4a:0f: 36:39:1d:4e:7c:3a:47:54:71:33:1a:45:95:67:41: 18:80:db:66:3d:76:d1:ee:d9:67:ff:0c:56:47:3a: fa:b6:3a:2e:77:07:e9:2d:ed:ce:e0:1b:d4:a0:60: e4:6b:9f:3b:1f:a1:cf:3d:75:4d:a3:79:d4:5e:46: 68:e4:2c:bb:e5:b4:e3:93:87:7d:ad:f1:37:4f:0a: 54:c6:3f:f3:d9:dc:56:30:01:75:8a:f1:00:4a:1e: 99:bf:0f:f4:b6:c3:2e:13:5c:a3:3a:de:71:97:75: c9:e0:45:50:d2:d6:09:1c:05:86:b9:d5:0e:f6:cb: ae:dd:72:bd:bb:53:c8:fc:79:4c:b8:d6:8b:9d:a8: 5a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F4:3E:E4:7D:45:A5:E8:6B:B5:64:EE:CE:A7:5E:44:37:0A:17:A1 X509v3 Authority Key Identifier: keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e8:fe:c9:9e:5b:19:b8:14:b8:f7:e0:98:21:f9:d4:47:59: 97:c7:be:a9:a2:fe:25:d9:42:4b:d5:a3:32:08:ae:e3:a1:28: 8c:7c:d0:a6:72:6e:8b:d3:dd:92:8c:7f:2a:9d:ef:58:eb:c4: fa:d4:d2:11:ec:fd:1b:dd:af:6b:87:f3:48:ae:a4:03:d7:24: 89:f8:93:37:b2:ff:1c:1b:0c:42:13:ad:86:b9:69:52:73:ed: de:25:18:2e:69:20:88:46:db:f0:d0:3d:40:3b:fc:47:cb:2e: db:06:b9:8d:f9:8d:05:90:89:c9:d0:95:9d:a2:f3:33:c5:f1: 47:c0:09:8e:3b:b8:89:72:44:f3:4b:7c:86:57:55:92:ee:57: 82:a3:06:92:24:f7:0d:21:5e:b1:15:82:64:77:99:87:fd:81: aa:19:ba:04:9a:6b:b0:b5:20:32:9e:58:4a:ae:b4:57:e4:46: ff:e5:c0:87:3c:7a:1d:f5:88:d4:83:29:92:67:36:77:47:f7: d0:6b:30:f0:20:fb:70:1d:e5:71:b4:fa:e3:fb:6e:3c:c2:c2: 99:6a:2d:51:1f:6f:df:52:d6:a0:cd:19:72:48:b4:af:ce:7b: eb:4d:b6:9b:d2:15:16:b8:50:33:f7:e1:bf:57:42:13:5f:75: e2:ef:0b:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvMlner6eq6tXzxXoErQj2hkcQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdD MEFBQjk5MDAeFw0yNTA1MDkxOTQ1NTlaFw0yNTA1MTMwMTI1NTlaMDMxMTAvBgNV BAMTKDhERjQzRUU0N0Q0NUE1RTg2QkI1NjRFRUNFQTc1RTQ0MzcwQTE3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqRSrMpBDt50H82R4+MmPzjd2 O72VygaF/Ci8YnrYc+ko3qRF9Lq5nN0rpsl0Y/0z8gL0ee9IFKR1iFe8UbCXtM73 OEXkVtcUjIRvKC4cZNWCaRNiZpBq2HtcVasw21JBoMR7sUrgs4enOLNzWsNz4pVa DHJKDzY5HU58OkdUcTMaRZVnQRiA22Y9dtHu2Wf/DFZHOvq2Oi53B+kt7c7gG9Sg YORrnzsfoc89dU2jedReRmjkLLvltOOTh32t8TdPClTGP/PZ3FYwAXWK8QBKHpm/ D/S2wy4TXKM63nGXdcngRVDS1gkcBYa51Q72y67dcr27U8j8eUy41oudqFqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjfQ+5H1FpehrtWTuzqdeRDcKF6EwHwYDVR0j BBgwFoAUWF15lE4xVnLUE7k3v8BC98CquZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC81ODVENzk5NDRF MzE1NjcyRDQxM0I5MzdCRkMwNDJGN0MwQUFCOTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdDMEFB Qjk5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQy RjdDMEFBQjk5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLo/smeWxm4FLj34Jgh+dRHWZfHvqmi/iXZ QkvVozIIruOhKIx80KZybovT3ZKMfyqd71jrxPrU0hHs/Rvdr2uH80iupAPXJIn4 kzey/xwbDEITrYa5aVJz7d4lGC5pIIhG2/DQPUA7/EfLLtsGuY35jQWQicnQlZ2i 8zPF8UfACY47uIlyRPNLfIZXVZLuV4KjBpIk9w0hXrEVgmR3mYf9gaoZugSaa7C1 IDKeWEqutFfkRv/lwIc8eh31iNSDKZJnNndH99BrMPAg+3Ad5XG0+uP7bjzCwplq LVEfb99S1qDNGXJItK/Oe+tNtpvSFRa4UDP34b9XQhNfdeLvC8M= -----END CERTIFICATE-----Generated at Sun May 11 22:31:45 2025 by rpki-client