$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: u6x98Y7bMff2LUmua6YKxJJjtQoGUeNNqZJCj/lmtLg= Subject key identifier: FE:5C:AB:3D:D3:7F:51:EA:C0:AB:4D:B5:FD:F4:76:06:63:34:FE:A9 Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 5D4A752574711A348A75C1C6BE6DDD7DF3DB4276 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 01FE Signing time: Fri 09 May 2025 08:00:03 +0000 Manifest this update: Fri 09 May 2025 07:55:03 +0000 Manifest next update: Mon 12 May 2025 17:24:03 +0000 Files and hashes: 1: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: gC29j+yO4i7uQ2lQ5TlSgcpEgKWPrlDicf9vHKUSroM=) 2: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: XboXXNkgBkZZh9/yAs/eY7NrfK7mB2bNS+mxw7d1oyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 17:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4a:75:25:74:71:1a:34:8a:75:c1:c6:be:6d:dd:7d:f3:db:42:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: May 9 07:55:03 2025 GMT Not After : May 12 17:24:03 2025 GMT Subject: CN=FE5CAB3DD37F51EAC0AB4DB5FDF476066334FEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:2a:a8:fd:62:c3:b5:19:da:3d:4e:da:f4: 2b:b6:26:2b:da:e9:1a:1d:c7:01:67:4c:1b:04:7c: f3:c8:90:44:8d:8e:a4:8f:f0:52:ce:57:95:73:84: 33:bb:b1:27:fe:13:b7:07:08:50:7e:37:0a:b7:c8: 0a:b6:a7:22:65:16:48:fa:0e:7c:e9:d8:d7:54:3c: 5c:d8:cc:f2:ce:8d:af:a2:dd:12:f2:db:ab:a3:22: 25:9e:0b:99:54:91:ef:48:15:eb:56:0b:02:f1:ab: c9:d4:1c:4d:84:da:b7:ce:7e:04:f3:14:89:08:89: 4b:09:a7:3a:83:ff:1c:4b:c5:84:03:12:e2:98:24: 1b:9e:1b:05:56:45:ab:9a:e0:60:b2:f7:98:21:af: 6c:2c:94:40:e2:d3:37:7c:7e:93:ad:85:24:6c:8e: 24:82:8e:93:3c:23:66:c1:d5:48:8c:63:0d:7c:bd: d9:6f:e3:d1:16:27:54:3f:00:5c:aa:33:06:95:69: 77:94:6d:44:82:f3:9b:a0:d0:5f:11:fe:a3:f1:50: 8d:5d:13:c0:f2:b0:61:b2:47:b4:d2:d7:87:74:02: af:65:01:06:86:f4:38:84:47:8d:48:b8:74:4a:5f: 09:ee:68:7d:84:6c:0b:69:c3:f3:f9:50:71:6e:1c: f9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5C:AB:3D:D3:7F:51:EA:C0:AB:4D:B5:FD:F4:76:06:63:34:FE:A9 X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8c:d0:b1:c0:96:f4:e6:f3:98:99:9d:e2:53:68:08:23:5d: 14:47:f0:6e:c4:96:8e:08:fe:99:08:a1:96:96:5e:f9:1b:8b: b3:f5:fb:73:20:7a:2d:43:25:74:55:91:fa:fd:4e:74:11:1b: 7b:34:28:d7:a7:5c:c8:1a:e8:cd:4a:bf:8d:d1:96:77:fb:18: c2:ab:3a:b9:a4:8d:ce:30:bd:b2:6c:3e:8f:a1:1b:2d:a9:c7: a5:20:3c:7b:42:f2:22:cf:36:fe:57:51:80:45:84:3f:e8:bb: c9:20:23:b6:09:af:4d:d8:83:ac:c5:32:58:f6:5d:ba:98:bd: 6e:9d:a1:9b:f5:42:ea:05:d9:76:82:00:b2:81:fd:07:7a:b8: cd:d4:ad:88:a4:15:91:cd:38:8c:13:e8:cd:2f:22:c2:2c:c7: c9:b3:ef:01:3d:70:24:55:30:5b:8d:42:91:b6:f7:1b:6c:af: c0:ad:b9:68:3f:94:17:98:a2:56:01:53:ff:3f:05:89:1e:11: 39:e2:63:86:ae:87:75:33:22:00:7b:28:00:9d:f6:5b:ea:16: da:4f:51:26:17:97:32:81:20:7d:c2:85:f7:85:25:ed:ad:e3: 45:15:bb:8e:90:67:d6:6b:4f:79:c6:26:2e:9e:e9:e2:0c:53: 09:f3:5d:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUp1JXRxGjSKdcHGvm3dffPbQnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNTA1MDkwNzU1MDNaFw0yNTA1MTIxNzI0MDNaMDMxMTAvBgNV BAMTKEZFNUNBQjNERDM3RjUxRUFDMEFCNERCNUZERjQ3NjA2NjMzNEZFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthiqo/WLDtRnaPU7a9Cu2Jiva 6RodxwFnTBsEfPPIkESNjqSP8FLOV5VzhDO7sSf+E7cHCFB+Nwq3yAq2pyJlFkj6 Dnzp2NdUPFzYzPLOja+i3RLy26ujIiWeC5lUke9IFetWCwLxq8nUHE2E2rfOfgTz FIkIiUsJpzqD/xxLxYQDEuKYJBueGwVWRaua4GCy95ghr2wslEDi0zd8fpOthSRs jiSCjpM8I2bB1UiMYw18vdlv49EWJ1Q/AFyqMwaVaXeUbUSC85ug0F8R/qPxUI1d E8DysGGyR7TS14d0Aq9lAQaG9DiER41IuHRKXwnuaH2EbAtpw/P5UHFuHPnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/lyrPdN/UerAq021/fR2BmM0/qkwHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqM0LHAlvTm85iZneJTaAgjXRRH8G7Elo4I /pkIoZaWXvkbi7P1+3Mgei1DJXRVkfr9TnQRG3s0KNenXMga6M1Kv43Rlnf7GMKr Ormkjc4wvbJsPo+hGy2px6UgPHtC8iLPNv5XUYBFhD/ou8kgI7YJr03Yg6zFMlj2 XbqYvW6doZv1QuoF2XaCALKB/Qd6uM3UrYikFZHNOIwT6M0vIsIsx8mz7wE9cCRV MFuNQpG29xtsr8CtuWg/lBeYolYBU/8/BYkeETniY4auh3UzIgB7KACd9lvqFtpP USYXlzKBIH3ChfeFJe2t40UVu46QZ9ZrT3nGJi6e6eIMUwnzXTk= -----END CERTIFICATE-----Generated at Fri May 9 21:27:03 2025 by rpki-client