$ rpki-client -vvf repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft (raw, json) Hash identifier: HOCQgnxTVnq2lDzxP9EKBTPXPwvGQ8BZeJ/qzsoWGHQ= Subject key identifier: 56:F3:26:CC:DD:70:79:85:14:5D:BA:D6:4F:B3:6A:1E:6A:C6:77:9D Authority key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Certificate issuer: /CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Certificate serial: 072FA961E361061BC3A5EC6C88EA19001033C13E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft Manifest number: 0497 Signing time: Fri 09 May 2025 00:51:21 +0000 Manifest this update: Fri 09 May 2025 00:46:21 +0000 Manifest next update: Mon 12 May 2025 04:44:21 +0000 Files and hashes: 1: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: zhjLKdHiZJAAA60z4kxaHFx03Q2DU/hes1jKQwL/5G8=) 2: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl (hash: XBFE6bN/L66xLzEEHpHNtmKsse+4coGjfG86mzbbqbQ=) 3: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: cLVCVvcvprgwkkF82bMcfbs0h+bsaPJp7VIWMvcz0os=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2f:a9:61:e3:61:06:1b:c3:a5:ec:6c:88:ea:19:00:10:33:c1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Validity Not Before: May 9 00:46:21 2025 GMT Not After : May 12 04:44:21 2025 GMT Subject: CN=56F326CCDD707985145DBAD64FB36A1E6AC6779D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:89:ca:31:cf:2b:1b:e3:c2:08:ca:07:2f:66: 89:41:c4:c6:9f:39:cc:6e:52:7c:86:98:1b:f6:65: 7e:be:d4:40:33:8a:1c:cf:a9:fd:31:46:cc:1f:85: 4f:1c:5d:e0:9c:69:e9:72:d0:87:6b:7e:22:1d:04: 5a:8e:db:f1:b5:99:7b:da:ea:b9:66:57:2a:ef:02: 93:23:b4:c8:2c:eb:a3:42:d9:91:7e:55:22:38:eb: 11:bb:04:75:57:f3:ed:23:92:bf:6a:89:9a:93:3e: 69:e9:0b:6c:79:16:e8:4f:c4:8c:c4:25:e4:fe:8f: 1e:31:45:2d:fc:28:84:4d:ed:21:aa:3e:61:10:10: ac:fa:21:c3:17:cb:59:5b:b9:d7:89:96:a2:82:7f: 61:12:36:f9:de:c6:70:7b:8e:b1:d6:b7:cc:0c:fc: 0f:91:e5:f9:2b:1a:6d:0e:37:cb:7a:c4:9b:e0:70: fb:9c:28:7b:5c:ce:e0:f2:e5:b1:54:aa:a1:e4:3c: b0:ee:72:55:b3:04:80:97:be:65:67:8a:69:29:a3: 50:d7:38:e7:b3:33:cd:ae:43:79:18:3d:6a:f1:ed: ce:e4:ed:e7:2e:e9:a9:84:2e:2d:33:e3:1e:e8:79: a6:65:e4:10:15:8a:ef:5e:92:a1:72:00:aa:e7:e9: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F3:26:CC:DD:70:79:85:14:5D:BA:D6:4F:B3:6A:1E:6A:C6:77:9D X509v3 Authority Key Identifier: keyid:58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c7:69:9d:50:f3:af:29:15:1b:89:18:7b:e1:a7:32:9c:e4: 30:3e:13:79:5b:87:80:48:f1:c1:9f:83:09:7c:cd:d4:fa:64: c0:1d:d8:f2:38:6d:b5:8b:c8:bd:32:34:36:5c:fb:03:c5:85: 4e:52:66:01:c6:7a:97:a5:0c:ae:dd:2d:7c:7c:9b:f1:90:44: b1:54:04:79:cf:4c:64:16:20:c4:53:2a:1f:7e:af:21:3e:02: 4f:f3:63:35:a1:75:30:c5:af:ee:59:ad:6c:1f:38:20:99:6a: 43:1e:59:81:16:53:93:8d:c8:bc:c3:50:64:a3:68:d6:16:9c: 3c:17:c5:4d:f3:d8:43:0d:2b:e2:15:4b:32:14:a6:ec:0c:b5: 0e:6a:e4:35:1e:0d:90:52:ff:0e:fb:e8:5f:de:3a:4f:49:35: b0:3f:1f:2a:1d:2f:47:f0:cf:76:6e:aa:2b:bf:6e:7d:de:35: 3a:ce:88:2b:82:78:3b:bf:c2:c4:eb:7e:40:f9:64:44:13:c7: 6c:30:23:a0:1e:82:8a:ba:36:c3:5e:75:7c:05:7b:e0:ba:90: ae:87:f9:c2:37:f2:3e:92:69:93:43:25:cd:f9:40:fb:3d:c2: a7:7b:f6:b0:d4:7d:96:1e:b7:dc:cd:b7:d0:28:69:74:c3:62: 88:1d:9c:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBy+pYeNhBhvDpexsiOoZABAzwT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIw M0Q1MzVERjAeFw0yNTA1MDkwMDQ2MjFaFw0yNTA1MTIwNDQ0MjFaMDMxMTAvBgNV BAMTKDU2RjMyNkNDREQ3MDc5ODUxNDVEQkFENjRGQjM2QTFFNkFDNjc3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnicoxzysb48IIygcvZolBxMaf OcxuUnyGmBv2ZX6+1EAzihzPqf0xRswfhU8cXeCcaely0IdrfiIdBFqO2/G1mXva 6rlmVyrvApMjtMgs66NC2ZF+VSI46xG7BHVX8+0jkr9qiZqTPmnpC2x5FuhPxIzE JeT+jx4xRS38KIRN7SGqPmEQEKz6IcMXy1lbudeJlqKCf2ESNvnexnB7jrHWt8wM /A+R5fkrGm0ON8t6xJvgcPucKHtczuDy5bFUqqHkPLDuclWzBICXvmVnimkpo1DX OOezM82uQ3kYPWrx7c7k7ecu6amELi0z4x7oeaZl5BAViu9ekqFyAKrn6ZCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVvMmzN1weYUUXbrWT7NqHmrGd50wHwYDVR0j BBgwFoAUWG/o0n/01r1PqDn8WIRKSwPVNd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMC81ODZGRThEMjdG RjRENkJENEZBODM5RkM1ODg0NEE0QjAzRDUzNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIwM0Q1 MzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRB NEIwM0Q1MzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXHaZ1Q868pFRuJGHvhpzKc5DA+E3lbh4BI 8cGfgwl8zdT6ZMAd2PI4bbWLyL0yNDZc+wPFhU5SZgHGepelDK7dLXx8m/GQRLFU BHnPTGQWIMRTKh9+ryE+Ak/zYzWhdTDFr+5ZrWwfOCCZakMeWYEWU5ONyLzDUGSj aNYWnDwXxU3z2EMNK+IVSzIUpuwMtQ5q5DUeDZBS/w776F/eOk9JNbA/HyodL0fw z3Zuqiu/bn3eNTrOiCuCeDu/wsTrfkD5ZEQTx2wwI6Aegoq6NsNedXwFe+C6kK6H +cI38j6SaZNDJc35QPs9wqd79rDUfZYet9zNt9AoaXTDYogdnCU= -----END CERTIFICATE-----Generated at Sat May 10 05:39:35 2025 by rpki-client