$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: B98S5/2j647eEzeEatbn7czbiNJ5EtZEBgP8DL3QOco= Subject key identifier: 05:64:31:93:CE:F1:FD:EF:E4:DE:F3:7D:20:9C:EE:3E:E2:26:7A:78 Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 6384B05ECAD2324712B441363BBEE55323D2BF4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 022C Signing time: Thu 21 Aug 2025 22:50:04 +0000 Manifest this update: Thu 21 Aug 2025 22:45:04 +0000 Manifest next update: Mon 25 Aug 2025 03:28:04 +0000 Files and hashes: 1: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: nbN9c+qCxhB2NCcml0vaalZKKVa7GvbBiXN8J8Aunz8=) 2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: gC29j+yO4i7uQ2lQ5TlSgcpEgKWPrlDicf9vHKUSroM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:84:b0:5e:ca:d2:32:47:12:b4:41:36:3b:be:e5:53:23:d2:bf:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Aug 21 22:45:04 2025 GMT Not After : Aug 25 03:28:04 2025 GMT Subject: CN=05643193CEF1FDEFE4DEF37D209CEE3EE2267A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:ad:2b:97:b5:7d:4f:74:a5:0f:72:0e:95: 5d:61:2b:dd:5f:81:8c:a2:4f:d5:a3:80:5e:98:92: 06:ba:23:55:75:d8:3d:91:76:18:07:dc:0a:ad:18: c5:b4:b0:bf:45:94:dc:a1:2b:b4:c7:17:a3:75:07: c1:82:c6:97:d5:77:21:21:0d:1b:64:1f:2e:80:9c: ce:58:ff:cc:7e:7c:6a:33:7b:9d:12:58:03:a9:dd: 5d:61:46:4a:40:cc:64:5a:91:de:fa:55:48:19:bd: 37:f5:dd:15:17:d0:ee:27:ba:f8:13:98:b8:7a:f1: 12:0d:4e:c2:c2:22:55:b7:ba:77:58:42:60:93:eb: f5:85:9e:2d:ce:c8:1d:e3:c0:15:0e:0b:cc:f6:ad: 65:0c:3b:a9:66:ed:b8:44:27:ab:29:f3:a5:3a:7f: 1b:2b:c3:ad:29:64:ee:4d:f1:b7:10:22:60:46:87: b9:4b:eb:04:3a:99:27:a8:5e:18:5c:f6:5e:b0:56: 45:c9:18:a9:7b:c4:0b:04:a5:70:a2:0b:25:22:b0: a7:ca:6f:6a:b7:dc:02:fb:9e:81:0f:26:c0:1f:21: 38:3e:73:b9:c6:52:99:90:f6:c1:d0:a4:25:43:4a: e9:8c:2d:39:18:87:63:71:fc:5d:64:bd:4d:3f:95: ce:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:64:31:93:CE:F1:FD:EF:E4:DE:F3:7D:20:9C:EE:3E:E2:26:7A:78 X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d5:51:a9:f5:31:43:f7:bc:7d:a6:c2:b4:46:ee:22:2c:9e: 4c:cb:2c:58:69:f8:64:b9:7a:a6:39:77:26:2d:39:e7:5b:b1: b3:f4:99:c4:a4:fc:a5:56:4b:a0:50:00:18:3d:d1:2a:5a:1c: 8e:de:1f:8d:c8:58:26:52:86:df:97:82:cc:e5:c5:d7:6a:c2: 5b:f1:40:1c:81:29:c3:e1:da:aa:73:8f:08:12:ef:e5:a9:47: 5a:6e:41:15:c8:29:28:de:42:49:45:bb:15:af:72:c4:6c:03: 70:4f:31:9b:ee:b5:fb:6e:22:0d:b4:15:72:85:46:a1:77:41: cc:c2:96:4e:40:60:e6:55:11:58:17:a6:f3:88:c8:ca:0f:c6: bb:04:3c:d9:91:62:d8:03:62:12:35:d2:81:11:40:0b:ca:1f: b8:b9:02:f9:90:d3:fa:e0:49:9c:53:a3:62:e7:8d:b6:ff:6c: ce:4c:3c:65:e3:ab:14:fb:4a:ec:1c:5a:d5:ac:ff:b3:af:df: 66:9a:04:43:82:09:17:d2:dc:55:b0:95:8d:50:df:07:65:26: ed:91:71:c8:0f:57:13:17:0b:5e:0a:59:3d:7e:49:d6:98:ad: 4e:c3:8b:33:65:1a:a8:18:0c:98:91:92:b3:0b:fb:c9:d4:7f: f8:43:40:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4SwXsrSMkcStEE2O77lUyPSv0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNTA4MjEyMjQ1MDRaFw0yNTA4MjUwMzI4MDRaMDMxMTAvBgNV BAMTKDA1NjQzMTkzQ0VGMUZERUZFNERFRjM3RDIwOUNFRTNFRTIyNjdBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jq0rl7V9T3SlD3IOlV1hK91f gYyiT9WjgF6Ykga6I1V12D2RdhgH3AqtGMW0sL9FlNyhK7THF6N1B8GCxpfVdyEh DRtkHy6AnM5Y/8x+fGoze50SWAOp3V1hRkpAzGRakd76VUgZvTf13RUX0O4nuvgT mLh68RINTsLCIlW3undYQmCT6/WFni3OyB3jwBUOC8z2rWUMO6lm7bhEJ6sp86U6 fxsrw60pZO5N8bcQImBGh7lL6wQ6mSeoXhhc9l6wVkXJGKl7xAsEpXCiCyUisKfK b2q33AL7noEPJsAfITg+c7nGUpmQ9sHQpCVDSumMLTkYh2Nx/F1kvU0/lc5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBWQxk87x/e/k3vN9IJzuPuImengwHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbVUan1MUP3vH2mwrRG7iIsnkzLLFhp+GS5 eqY5dyYtOedbsbP0mcSk/KVWS6BQABg90SpaHI7eH43IWCZSht+Xgszlxddqwlvx QByBKcPh2qpzjwgS7+WpR1puQRXIKSjeQklFuxWvcsRsA3BPMZvutftuIg20FXKF RqF3QczClk5AYOZVEVgXpvOIyMoPxrsEPNmRYtgDYhI10oERQAvKH7i5AvmQ0/rg SZxTo2Lnjbb/bM5MPGXjqxT7SuwcWtWs/7Ov32aaBEOCCRfS3FWwlY1Q3wdlJu2R ccgPVxMXC14KWT1+SdaYrU7DizNlGqgYDJiRkrML+8nUf/hDQMk= -----END CERTIFICATE-----Generated at Sat Aug 23 19:54:07 2025 by rpki-client