$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: 54HkIaDbgAPS5wHBdRd9H7fE0NLnUIUKaMo5d/u+RJg= Subject key identifier: D1:CC:4C:68:05:9A:9C:C0:6D:2E:4F:19:2B:C5:BD:8B:ED:9D:23:FC Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 3F79EF6769B45B4C666B40BE408D3B8607875885 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 049D Signing time: Wed 07 May 2025 17:42:04 +0000 Manifest this update: Wed 07 May 2025 17:37:04 +0000 Manifest next update: Sun 11 May 2025 04:33:04 +0000 Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: vrRICHKdrX5bsoj+V7upbCct/K0FWIRbEMdPjprjMe8=) 2: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: oCqqVgt7yMTKPzAXUmBBK4MQOdNaickJVIcIc5R7y6w=) 3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: YwE+UrBIdJChzzky/B1cyIMVCcodIiUc4aS8d6d7+co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 04:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:79:ef:67:69:b4:5b:4c:66:6b:40:be:40:8d:3b:86:07:87:58:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: May 7 17:37:04 2025 GMT Not After : May 11 04:33:04 2025 GMT Subject: CN=D1CC4C68059A9CC06D2E4F192BC5BD8BED9D23FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d3:9f:d4:10:23:20:0b:a8:3b:ff:b3:68:d9: a5:13:20:80:68:5b:91:b0:c8:cc:03:4c:19:82:79: bb:28:8b:b8:77:47:7d:53:a7:10:79:39:bb:83:84: 79:d0:46:77:38:ab:76:a8:fd:17:07:f1:b4:0b:29: 9b:1a:c5:22:8f:bf:4a:d6:f8:59:b7:6f:eb:48:2a: 71:81:87:2a:11:39:b8:56:4d:ef:85:05:e6:4f:5a: 03:84:aa:56:20:bf:52:e3:9a:30:0b:00:da:36:be: 92:93:2c:d3:2b:7e:c5:82:ed:84:fe:35:a7:48:40: d8:85:28:ab:96:30:81:6f:48:70:bd:34:9e:00:e5: 86:ee:72:b8:70:ea:9b:2f:66:77:b8:25:ac:71:ab: 22:e3:06:19:52:6f:9f:25:75:7d:0d:e6:32:86:a8: 20:89:c5:36:77:a0:9c:56:3f:35:37:a7:de:c3:fc: d0:9e:c9:42:72:f6:2f:85:b8:11:71:82:97:4b:12: 85:9c:a9:60:f4:2b:c9:99:81:ff:73:ab:22:66:6b: f3:a7:34:4f:4e:c7:2f:36:9c:ad:b1:85:c7:97:e0: 07:21:a8:da:22:dd:0f:ff:33:96:77:7f:16:f2:16: 28:40:a1:1c:0b:df:5b:52:4a:e7:13:6b:8e:8e:64: b8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CC:4C:68:05:9A:9C:C0:6D:2E:4F:19:2B:C5:BD:8B:ED:9D:23:FC X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:00:88:84:ea:ce:c1:8a:45:7e:86:77:da:b9:2f:72:15:0b: fa:72:d8:74:06:80:dc:cb:cd:17:8d:d2:ac:26:12:f1:4d:84: 2e:39:36:97:df:df:83:7b:f7:91:23:60:85:11:56:d5:09:7c: a0:a4:f1:19:41:df:6e:d5:f8:c0:61:21:9c:4c:a5:47:ab:c6: ee:7a:89:cb:2c:b4:a1:db:3b:93:1f:26:9f:a3:41:bc:a0:42: 05:67:08:8e:0f:cb:2d:f0:6c:12:e9:ab:b0:73:28:31:c8:86: 20:ea:8d:bf:2e:9f:52:3c:12:76:f1:a5:a8:c4:56:78:0b:16: 1d:62:01:7e:b4:51:45:7d:8e:2f:ee:aa:6f:ca:66:f5:a3:6e: 6a:3a:c8:4a:51:21:84:ff:f2:ec:31:ef:69:a0:67:94:47:91: 76:5a:2c:44:8c:8d:42:46:c7:77:2e:a0:3e:80:15:f4:d1:a4: a3:13:ed:78:b9:6e:c2:f0:29:52:6e:2d:00:02:8c:5d:b3:7a: 6a:f5:b6:0f:0a:a4:81:a1:b0:cf:34:b2:ad:13:97:43:d2:44: e4:c4:8d:d3:14:a3:20:c1:2b:0d:bb:30:3c:eb:9c:cc:b7:39: 96:a5:96:78:27:ac:eb:e5:73:86:6f:4d:14:1b:74:00:d9:a7: 68:50:0b:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3nvZ2m0W0xma0C+QI07hgeHWIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTA1MDcxNzM3MDRaFw0yNTA1MTEwNDMzMDRaMDMxMTAvBgNV BAMTKEQxQ0M0QzY4MDU5QTlDQzA2RDJFNEYxOTJCQzVCRDhCRUQ5RDIzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp05/UECMgC6g7/7No2aUTIIBo W5GwyMwDTBmCebsoi7h3R31TpxB5ObuDhHnQRnc4q3ao/RcH8bQLKZsaxSKPv0rW +Fm3b+tIKnGBhyoRObhWTe+FBeZPWgOEqlYgv1LjmjALANo2vpKTLNMrfsWC7YT+ NadIQNiFKKuWMIFvSHC9NJ4A5Ybucrhw6psvZne4JaxxqyLjBhlSb58ldX0N5jKG qCCJxTZ3oJxWPzU3p97D/NCeyUJy9i+FuBFxgpdLEoWcqWD0K8mZgf9zqyJma/On NE9Oxy82nK2xhceX4AchqNoi3Q//M5Z3fxbyFihAoRwL31tSSucTa46OZLjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cxMaAWanMBtLk8ZK8W9i+2dI/wwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIAiITqzsGKRX6Gd9q5L3IVC/py2HQGgNzL zReN0qwmEvFNhC45Npff34N795EjYIURVtUJfKCk8RlB327V+MBhIZxMpUerxu56 icsstKHbO5MfJp+jQbygQgVnCI4Pyy3wbBLpq7BzKDHIhiDqjb8un1I8EnbxpajE VngLFh1iAX60UUV9ji/uqm/KZvWjbmo6yEpRIYT/8uwx72mgZ5RHkXZaLESMjUJG x3cuoD6AFfTRpKMT7Xi5bsLwKVJuLQACjF2zemr1tg8KpIGhsM80sq0Tl0PSROTE jdMUoyDBKw27MDzrnMy3OZallngnrOvlc4ZvTRQbdADZp2hQCzw= -----END CERTIFICATE-----Generated at Thu May 8 18:54:05 2025 by rpki-client