$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: NpswRl5gKyjHOZCTI5qMYC3YfbtM5efuFm3cU0adIAY= Subject key identifier: B5:16:21:59:D6:2A:CA:5A:2F:10:A3:8F:05:08:DC:F4:25:24:2C:BD Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 46110DAAF670E85345695F78E66B86BE755FD1EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 0246 Signing time: Sun 19 Oct 2025 05:20:04 +0000 Manifest this update: Sun 19 Oct 2025 05:15:04 +0000 Manifest next update: Wed 22 Oct 2025 05:52:04 +0000 Files and hashes: 1: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: lZAOyAqbkO9zpgL231u5HU/xUJk4EuBeLaqfz9OsogE=) 2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: gC29j+yO4i7uQ2lQ5TlSgcpEgKWPrlDicf9vHKUSroM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:11:0d:aa:f6:70:e8:53:45:69:5f:78:e6:6b:86:be:75:5f:d1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Oct 19 05:15:04 2025 GMT Not After : Oct 22 05:52:04 2025 GMT Subject: CN=B5162159D62ACA5A2F10A38F0508DCF425242CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:15:c5:9f:b4:9b:3b:83:ab:21:c6:dc:c7: f5:55:ff:32:5b:ac:61:e5:3f:52:28:6f:30:49:35: 31:52:b3:21:7c:5a:e6:0b:41:c3:76:d5:22:c5:b1: 9f:12:0e:7e:2b:61:db:14:44:ac:5a:a1:35:d8:a6: 49:82:04:8b:41:b4:10:af:cc:b3:b7:e2:6d:6d:ac: 8e:85:e9:51:46:a5:db:c9:fe:1d:25:0a:a9:2f:a5: 1f:8a:8a:e3:a3:53:73:6a:89:6c:a9:0a:0b:2a:e5: 61:66:4c:03:74:a6:b7:44:a2:b3:f3:cd:60:20:d2: 7d:71:2f:1d:27:7c:60:e4:e9:60:00:61:e2:75:a2: 4d:1f:a6:e4:61:81:2a:63:8a:e7:2a:9d:a4:05:4b: 2c:ff:1e:80:99:f5:6a:53:93:72:50:a7:36:d2:89: 69:e1:d7:45:ef:4c:50:de:09:49:5d:2c:ee:6e:91: ad:c2:74:d8:6d:73:bd:61:cf:07:02:c4:00:30:71: 6c:cd:60:1e:52:5a:f6:33:c0:7a:13:e1:df:00:bb: ad:12:f3:68:22:7c:fd:5f:eb:bc:a9:33:59:10:11: ae:ea:91:6d:fe:bc:d4:d1:01:e9:f4:f1:fb:54:be: ff:dc:64:8e:55:04:6b:c9:0c:8d:52:f3:8a:76:d6: 6a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:16:21:59:D6:2A:CA:5A:2F:10:A3:8F:05:08:DC:F4:25:24:2C:BD X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:33:16:81:bf:bf:73:72:96:e0:9a:b8:a7:c4:7d:5e:37:4d: d7:dd:9c:8a:31:a4:35:c1:0b:5c:89:dc:59:b0:fa:5a:98:b1: a2:e6:41:d5:0a:b6:f7:18:e7:1a:dd:74:28:5f:00:23:62:1f: d0:f6:4e:31:70:44:cd:85:3d:01:bf:c5:cd:20:1c:f1:7d:d3: 39:f3:d6:87:cf:b1:96:37:fb:db:fc:1e:74:c8:30:06:59:ad: e1:fc:a3:1f:a0:22:47:0a:7f:4f:35:36:1d:77:b4:00:24:05: 2e:d9:ef:73:4b:91:4c:d0:02:f6:16:c5:36:93:28:5c:f8:4f: 7a:20:27:a9:ae:80:7b:c7:4b:c1:94:2d:91:f0:c7:25:60:07: da:0e:4e:38:2a:9f:08:0c:16:63:e2:41:12:1a:7c:93:1a:05: b0:f6:01:7e:75:22:d4:7c:58:c2:10:2f:f8:3c:9b:e0:d4:62: ff:7c:e3:e3:9c:a5:18:f0:21:c4:f7:cc:08:f2:4f:b7:64:8b: 81:16:a9:95:a3:f2:a4:6e:c6:b4:9b:d7:c1:1d:05:91:f0:db: 45:bf:c3:17:04:d7:4e:67:86:15:33:cc:a3:94:7a:fb:07:22: 64:ac:3d:9e:30:cf:63:c7:e0:97:63:6e:46:37:36:17:cf:5c: 6a:be:42:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhENqvZw6FNFaV945muGvnVf0eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNTEwMTkwNTE1MDRaFw0yNTEwMjIwNTUyMDRaMDMxMTAvBgNV BAMTKEI1MTYyMTU5RDYyQUNBNUEyRjEwQTM4RjA1MDhEQ0Y0MjUyNDJDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sRXFn7SbO4OrIcbcx/VV/zJb rGHlP1IobzBJNTFSsyF8WuYLQcN21SLFsZ8SDn4rYdsURKxaoTXYpkmCBItBtBCv zLO34m1trI6F6VFGpdvJ/h0lCqkvpR+KiuOjU3NqiWypCgsq5WFmTAN0prdEorPz zWAg0n1xLx0nfGDk6WAAYeJ1ok0fpuRhgSpjiucqnaQFSyz/HoCZ9WpTk3JQpzbS iWnh10XvTFDeCUldLO5uka3CdNhtc71hzwcCxAAwcWzNYB5SWvYzwHoT4d8Au60S 82gifP1f67ypM1kQEa7qkW3+vNTRAen08ftUvv/cZI5VBGvJDI1S84p21mr/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtRYhWdYqylovEKOPBQjc9CUkLL0wHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAzFoG/v3NyluCauKfEfV43TdfdnIoxpDXB C1yJ3Fmw+lqYsaLmQdUKtvcY5xrddChfACNiH9D2TjFwRM2FPQG/xc0gHPF90znz 1ofPsZY3+9v8HnTIMAZZreH8ox+gIkcKf081Nh13tAAkBS7Z73NLkUzQAvYWxTaT KFz4T3ogJ6mugHvHS8GULZHwxyVgB9oOTjgqnwgMFmPiQRIafJMaBbD2AX51ItR8 WMIQL/g8m+DUYv984+OcpRjwIcT3zAjyT7dki4EWqZWj8qRuxrSb18EdBZHw20W/ wxcE105nhhUzzKOUevsHImSsPZ4wz2PH4JdjbkY3NhfPXGq+Qqk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:47 2025 by rpki-client