$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: ZdSgbEtefGAsXJoxFTBapZcoI7SlwNfzlDpchIOAjwE= Subject key identifier: 17:26:F0:C6:EB:0D:5F:C3:BA:3F:51:FD:10:FB:04:D5:3A:00:21:39 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 075D523657F689227E4E4BD48BB39D511627B389 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 04CC Signing time: Fri 22 Aug 2025 11:32:03 +0000 Manifest this update: Fri 22 Aug 2025 11:27:03 +0000 Manifest next update: Mon 25 Aug 2025 17:54:03 +0000 Files and hashes: 1: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: YwE+UrBIdJChzzky/B1cyIMVCcodIiUc4aS8d6d7+co=) 2: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: ei4KYI9dY6j+HxcwYfcOPtuoXwB0rzrbCyxRQULI0q4=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: vrRICHKdrX5bsoj+V7upbCct/K0FWIRbEMdPjprjMe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:5d:52:36:57:f6:89:22:7e:4e:4b:d4:8b:b3:9d:51:16:27:b3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Aug 22 11:27:03 2025 GMT Not After : Aug 25 17:54:03 2025 GMT Subject: CN=1726F0C6EB0D5FC3BA3F51FD10FB04D53A002139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e9:de:e6:2d:40:ec:70:b0:6b:83:67:89:07: f6:c2:1d:9f:3a:b6:11:01:4d:66:f5:80:87:99:eb: f5:0e:88:b9:ab:d4:f7:c9:c5:b2:ce:6a:86:ae:aa: cd:af:86:c9:3a:6a:96:b2:da:bc:a4:de:b0:8b:c9: 88:bd:36:7b:29:44:1e:f8:02:89:2b:78:fd:b1:75: 11:0e:12:3b:4c:b9:21:27:9d:79:8f:e4:8f:fc:84: 10:8e:62:48:32:7b:e0:60:8b:46:f1:d1:64:ad:b2: d7:12:4c:e8:50:83:48:19:a6:c1:ee:b6:a0:70:05: d8:1c:83:2a:0f:3b:d5:4e:6d:37:05:fd:a1:b4:b7: 94:50:ee:95:ca:40:08:8a:6b:de:65:0b:83:f6:3c: e7:fc:4a:21:0c:1d:ad:93:56:c2:6b:ed:6c:93:71: 01:9c:69:f5:0b:9a:7f:c6:46:bf:21:eb:f8:55:d5: 0c:12:47:45:3e:cf:49:5c:cc:fb:a2:36:55:bc:c7: a8:38:db:c0:b5:c7:60:b7:c0:6d:33:a1:e7:a4:16: a1:d7:bb:fe:a9:c7:91:52:c9:3f:94:e6:11:99:11: 3e:8d:f1:ae:ed:48:a6:94:19:a6:31:34:8c:bc:5c: 55:95:a8:00:45:24:59:ca:7c:6e:59:0f:62:87:19: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:26:F0:C6:EB:0D:5F:C3:BA:3F:51:FD:10:FB:04:D5:3A:00:21:39 X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e1:fc:d2:5b:67:a0:79:21:42:37:c2:83:c0:ca:8a:44:59: 9a:39:fc:54:cd:96:a7:cc:d6:95:0e:df:45:17:7a:df:94:6d: de:4d:29:d8:e5:31:dc:15:72:e4:8f:90:b8:3e:76:6d:6e:ea: 7e:61:30:6c:16:19:72:89:14:c7:04:b2:c7:cf:91:1d:d7:dc: 25:19:0b:98:ee:9e:7a:f7:39:87:82:85:5b:77:b9:e2:8d:63: e5:9c:2b:80:41:a7:a2:bd:d1:1c:33:5a:6c:d1:97:8d:52:f6: 6d:9f:30:09:24:78:2a:8f:b5:4e:90:64:e6:a9:76:69:a9:c5: 0e:c9:13:39:2f:af:e0:f1:53:99:fb:58:ea:d1:7b:80:07:19: 03:05:02:aa:05:ad:cf:92:67:63:51:cd:d0:f4:b2:5b:90:ce: 16:a2:79:02:64:63:fd:47:98:46:26:27:67:a6:4e:f7:e1:1b: 8d:b5:50:eb:6a:10:9d:7e:cf:95:4c:6c:f3:9c:31:c6:52:70: d6:3c:9c:bb:f8:0e:87:cd:87:66:84:ae:3d:3f:75:24:e0:5e: 62:9f:21:05:a9:60:79:93:7d:84:8c:61:7f:5c:de:7d:8b:45: 70:46:6a:7a:fe:00:78:37:cc:44:50:f1:94:49:d4:18:8f:c5: 39:80:ec:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB11SNlf2iSJ+TkvUi7OdURYns4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTA4MjIxMTI3MDNaFw0yNTA4MjUxNzU0MDNaMDMxMTAvBgNV BAMTKDE3MjZGMEM2RUIwRDVGQzNCQTNGNTFGRDEwRkIwNEQ1M0EwMDIxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6d7mLUDscLBrg2eJB/bCHZ86 thEBTWb1gIeZ6/UOiLmr1PfJxbLOaoauqs2vhsk6apay2ryk3rCLyYi9NnspRB74 AokreP2xdREOEjtMuSEnnXmP5I/8hBCOYkgye+Bgi0bx0WStstcSTOhQg0gZpsHu tqBwBdgcgyoPO9VObTcF/aG0t5RQ7pXKQAiKa95lC4P2POf8SiEMHa2TVsJr7WyT cQGcafULmn/GRr8h6/hV1QwSR0U+z0lczPuiNlW8x6g428C1x2C3wG0zoeekFqHX u/6px5FSyT+U5hGZET6N8a7tSKaUGaYxNIy8XFWVqABFJFnKfG5ZD2KHGXnVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFybwxusNX8O6P1H9EPsE1ToAITkwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzh/NJbZ6B5IUI3woPAyopEWZo5/FTNlqfM 1pUO30UXet+Ubd5NKdjlMdwVcuSPkLg+dm1u6n5hMGwWGXKJFMcEssfPkR3X3CUZ C5junnr3OYeChVt3ueKNY+WcK4BBp6K90RwzWmzRl41S9m2fMAkkeCqPtU6QZOap dmmpxQ7JEzkvr+DxU5n7WOrRe4AHGQMFAqoFrc+SZ2NRzdD0sluQzhaieQJkY/1H mEYmJ2emTvfhG421UOtqEJ1+z5VMbPOcMcZScNY8nLv4DofNh2aErj0/dSTgXmKf IQWpYHmTfYSMYX9c3n2LRXBGanr+AHg3zERQ8ZRJ1BiPxTmA7GE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:54 2025 by rpki-client