$ rpki-client -vvf repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft File: 580F61C23A4857BE23095E060FE36642F86DA6E8.mft (raw, json) Hash identifier: hkdCrzd0987wvM+Gwa7cLGbooHN5WRl9n8SOMsVUyRw= Subject key identifier: F6:2B:47:33:A4:9A:40:79:32:2B:3D:8D:9F:75:BF:CC:F3:3D:6B:FD Authority key identifier: 58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 Certificate issuer: /CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Certificate serial: 6412A2F158314BB205D1DE017A7813B2A3CBEE37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft Manifest number: 02B0 Signing time: Wed 02 Jul 2025 04:50:34 +0000 Manifest this update: Wed 02 Jul 2025 04:45:34 +0000 Manifest next update: Sat 05 Jul 2025 14:57:34 +0000 Files and hashes: 1: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: qgfha00pYYMcksaq2+JUhPWSf25KpZIfyFc9lsfpKQo=) 2: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: SISmoMd9IDy7UIhYINg4jNQmxZBYxELrgbvx7I2ZzYc=) 3: 580F61C23A4857BE23095E060FE36642F86DA6E8.crl (hash: TKaqQzq6Rxis8l6DQlZhX9Dk2RS+XMzcoobejUyUQZM=) 4: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: AtSVkFWy+RPF/Rog89oVSGAye/7C+5O/wyn2g4eUns4=) 5: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: vYSSiPVfjHBRD1DbhEq71sSwPeD8q/o4Uv0WnfeglN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:12:a2:f1:58:31:4b:b2:05:d1:de:01:7a:78:13:b2:a3:cb:ee:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Validity Not Before: Jul 2 04:45:34 2025 GMT Not After : Jul 5 14:57:34 2025 GMT Subject: CN=F62B4733A49A4079322B3D8D9F75BFCCF33D6BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:91:76:f0:fe:3f:63:f2:e9:45:f3:5a:b4:24: c0:f4:4c:59:97:9f:37:aa:bb:ed:1b:fc:08:61:6e: 6a:5c:10:3e:7d:40:61:0a:d1:64:4e:cc:2a:f6:3a: 6a:e5:9f:0a:7f:ce:97:ae:52:09:a5:2d:d8:1b:6e: a5:a2:7f:54:8b:66:da:08:ea:33:f9:8c:b5:99:14: c6:76:5e:76:93:12:f0:a0:30:73:7d:e3:23:c8:de: 71:31:9a:ba:49:e0:cf:83:79:7f:d3:cf:05:6a:b1: f5:2f:49:62:0d:d4:27:cf:aa:e2:9c:44:0d:34:b1: 73:42:4c:76:71:e6:2a:76:d6:fb:06:ea:bd:7e:27: a4:9c:1b:97:65:dd:61:2c:47:4a:f7:be:df:32:66: 6e:e4:1f:78:a2:e4:62:aa:55:d8:64:9b:ba:2c:f4: 87:58:b5:e2:07:05:4b:8a:9f:ff:8e:aa:a3:63:3e: 99:33:06:cc:47:c5:e9:c7:95:72:e1:2c:8f:f0:7c: 2e:49:85:b3:c0:48:cb:3e:2c:c3:77:c3:23:94:65: c5:8c:17:60:3a:3d:ef:df:59:9f:f4:03:85:41:69: ad:fb:bd:e5:e0:02:62:e4:34:66:1a:31:22:f9:0c: 82:de:16:6c:97:7b:91:ef:11:ae:aa:83:36:0d:e8: 0f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2B:47:33:A4:9A:40:79:32:2B:3D:8D:9F:75:BF:CC:F3:3D:6B:FD X509v3 Authority Key Identifier: keyid:58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:07:8d:d2:31:3e:e9:e3:50:ea:4b:c2:64:a8:73:e8:62:e1: 6b:d8:28:21:83:6f:8f:fb:ee:33:07:1c:bc:b2:59:74:44:01: 59:ba:07:71:d4:e6:84:90:36:a0:ac:17:e1:ec:82:e6:f3:83: 40:f5:b4:55:f7:e4:13:8f:98:5f:27:b3:11:2d:91:7b:f0:98: e2:ee:3f:73:19:67:3c:ec:f3:38:a4:23:67:4f:e2:c4:c9:5f: 73:8c:9f:cd:e9:0f:d8:b5:78:06:03:55:6d:54:a1:b6:80:a3: 53:77:a2:7e:06:64:ad:65:5c:87:59:b7:29:58:ed:4a:b0:1e: d4:62:e8:b2:63:c1:b2:bd:49:0f:e5:68:bc:a0:23:50:b1:c6: 25:d9:9e:bf:70:df:ea:8e:0a:9f:13:ad:1a:93:05:cc:08:d5: c1:52:77:fc:45:cb:57:8f:4f:65:78:6f:e9:ef:16:2e:a5:47: a2:98:55:8c:3c:ba:7c:32:8b:17:dd:d4:0d:3a:7f:6e:32:36: e6:bd:3d:aa:59:4d:32:21:f7:8e:18:e0:2d:40:f3:29:43:47: 9b:2b:84:df:ee:47:43:02:29:18:5f:5b:c7:9c:31:cd:05:fd: d1:d7:f9:a9:37:f8:b0:dc:3d:37:32:c7:77:bb:a0:05:cb:f4: 90:48:4f:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZBKi8VgxS7IF0d4BengTsqPL7jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJG ODZEQTZFODAeFw0yNTA3MDIwNDQ1MzRaFw0yNTA3MDUxNDU3MzRaMDMxMTAvBgNV BAMTKEY2MkI0NzMzQTQ5QTQwNzkzMjJCM0Q4RDlGNzVCRkNDRjMzRDZCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwkXbw/j9j8ulF81q0JMD0TFmX nzequ+0b/AhhbmpcED59QGEK0WROzCr2Omrlnwp/zpeuUgmlLdgbbqWif1SLZtoI 6jP5jLWZFMZ2XnaTEvCgMHN94yPI3nExmrpJ4M+DeX/TzwVqsfUvSWIN1CfPquKc RA00sXNCTHZx5ip21vsG6r1+J6ScG5dl3WEsR0r3vt8yZm7kH3ii5GKqVdhkm7os 9IdYteIHBUuKn/+OqqNjPpkzBsxHxenHlXLhLI/wfC5JhbPASMs+LMN3wyOUZcWM F2A6Pe/fWZ/0A4VBaa37veXgAmLkNGYaMSL5DILeFmyXe5HvEa6qgzYN6A/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9itHM6SaQHkyKz2Nn3W/zPM9a/0wHwYDVR0j BBgwFoAUWA9hwjpIV74jCV4GD+NmQvhtpugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDBmOWNjNy00YTY5LTRjOWUtYmJhNi00ZDlhYmI1NmVmZjYvMC81ODBGNjFDMjNB NDg1N0JFMjMwOTVFMDYwRkUzNjY0MkY4NkRBNkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJGODZE QTZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2 NDJGODZEQTZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgHjdIxPunjUOpLwmSoc+hi4WvYKCGDb4/7 7jMHHLyyWXREAVm6B3HU5oSQNqCsF+Hsgubzg0D1tFX35BOPmF8nsxEtkXvwmOLu P3MZZzzs8zikI2dP4sTJX3OMn83pD9i1eAYDVW1UobaAo1N3on4GZK1lXIdZtylY 7UqwHtRi6LJjwbK9SQ/laLygI1CxxiXZnr9w3+qOCp8TrRqTBcwI1cFSd/xFy1eP T2V4b+nvFi6lR6KYVYw8unwyixfd1A06f24yNua9PapZTTIh944Y4C1A8ylDR5sr hN/uR0MCKRhfW8ecMc0F/dHX+ak3+LDcPTcyx3e7oAXL9JBIT1c= -----END CERTIFICATE-----Generated at Wed Jul 2 14:18:37 2025 by rpki-client