$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: A5NxNmGbi+j093aDHWTKanT57HoyQOduqdGhYzNsNo0= Subject key identifier: A1:DF:F0:4B:04:2E:77:6D:17:0B:77:95:98:17:E0:85:64:B7:A6:21 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 1FB438AD558FC7B6BB9E14629B1EE3CF637D99E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 04E6 Signing time: Sun 19 Oct 2025 06:42:03 +0000 Manifest this update: Sun 19 Oct 2025 06:37:03 +0000 Manifest next update: Wed 22 Oct 2025 10:02:03 +0000 Files and hashes: 1: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: YwE+UrBIdJChzzky/B1cyIMVCcodIiUc4aS8d6d7+co=) 2: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: G0ZpWlW6EybWs/0gXw6KYH2Cn0ZKcv+fonMXJWs5N2c=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b4:38:ad:55:8f:c7:b6:bb:9e:14:62:9b:1e:e3:cf:63:7d:99:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Oct 19 06:37:03 2025 GMT Not After : Oct 22 10:02:03 2025 GMT Subject: CN=A1DFF04B042E776D170B77959817E08564B7A621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:5e:0c:3a:fc:44:8f:a1:88:ce:03:16:51: 84:7f:a0:db:c4:92:5b:81:13:c3:b5:16:bf:9f:f5: 73:73:fe:9d:b0:1a:8e:98:bc:a9:fe:4c:1c:e2:be: 56:15:2d:58:8b:d0:85:4d:3b:70:e5:61:ed:4e:18: 49:20:d3:fe:76:64:7c:59:fe:da:fd:07:d1:fb:df: 4b:d0:81:ee:7f:9f:31:14:3b:a5:28:42:50:b0:1d: db:be:33:5a:79:6e:d4:38:fd:e6:a3:83:9c:c5:6f: 22:36:86:1b:64:59:84:76:e3:9b:dd:bc:81:5b:9b: b5:b1:29:28:5b:77:62:b9:c3:96:17:d9:d0:7a:85: e1:69:a5:7f:d3:bb:b5:e3:8f:c0:9d:c3:18:08:4c: 95:26:bf:1d:96:07:a9:1b:79:49:4e:80:94:2e:e3: 2c:a0:bc:94:6e:08:58:0e:e2:d6:c9:28:16:c5:86: b2:4d:54:ba:66:87:f2:f0:2a:be:72:00:e8:5e:91: 44:bb:90:aa:77:06:1d:a1:24:ed:15:92:21:79:01: 01:bd:7b:e5:a5:91:ea:55:67:31:ef:a0:7f:27:f0: 3d:56:43:5d:f2:1a:54:18:d7:0c:29:76:c8:9f:e6: 2c:0b:01:27:de:52:d2:75:48:4d:a4:4d:12:58:4b: ec:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DF:F0:4B:04:2E:77:6D:17:0B:77:95:98:17:E0:85:64:B7:A6:21 X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:69:a4:b4:91:c7:74:c4:3e:f7:d4:43:3f:bd:8e:7a:ce:8c: a2:c2:b4:29:b1:b5:e2:6d:9a:f4:01:c7:8a:e5:64:65:95:bf: 0b:24:51:80:b3:5d:7c:34:63:99:e3:a1:25:11:af:6e:a8:99: 9c:6f:2d:93:cd:b6:29:1d:21:27:fb:29:63:e2:29:59:11:66: 92:f3:47:ed:21:15:b1:51:af:7d:88:c8:64:b9:06:70:9a:d9: 7d:02:17:0a:73:41:05:10:8e:4f:4a:5e:40:ea:20:93:bc:0c: 66:3b:81:5d:b2:3d:b5:10:df:c8:6a:10:1a:4f:c1:2b:af:e7: 8e:d6:28:61:06:c5:99:9f:f5:a6:e4:e6:63:f2:c3:9d:1f:2c: 8f:ab:ff:99:0f:b2:21:43:86:2a:b0:f3:6a:f6:84:f4:70:e6: e5:81:6a:b2:7d:4a:eb:62:f2:bd:7f:b0:0f:6d:16:04:41:17: c3:54:7f:c6:5e:ad:04:90:73:e2:95:fc:96:2b:70:61:95:2a: 12:fb:8b:60:72:08:cb:8e:cd:5a:ca:bc:ff:02:11:e0:5f:ce: f4:cb:02:47:4d:0f:70:29:88:1f:c1:c5:2c:fa:45:2e:31:43: c8:fb:54:a9:e8:73:33:fa:2a:cc:06:8e:91:44:60:02:a3:e9: 6c:34:96:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7Q4rVWPx7a7nhRimx7jz2N9mecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTEwMTkwNjM3MDNaFw0yNTEwMjIxMDAyMDNaMDMxMTAvBgNV BAMTKEExREZGMDRCMDQyRTc3NkQxNzBCNzc5NTk4MTdFMDg1NjRCN0E2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxl4MOvxEj6GIzgMWUYR/oNvE kluBE8O1Fr+f9XNz/p2wGo6YvKn+TBzivlYVLViL0IVNO3DlYe1OGEkg0/52ZHxZ /tr9B9H730vQge5/nzEUO6UoQlCwHdu+M1p5btQ4/eajg5zFbyI2hhtkWYR245vd vIFbm7WxKShbd2K5w5YX2dB6heFppX/Tu7Xjj8CdwxgITJUmvx2WB6kbeUlOgJQu 4yygvJRuCFgO4tbJKBbFhrJNVLpmh/LwKr5yAOhekUS7kKp3Bh2hJO0VkiF5AQG9 e+WlkepVZzHvoH8n8D1WQ13yGlQY1wwpdsif5iwLASfeUtJ1SE2kTRJYS+zfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUod/wSwQud20XC3eVmBfghWS3piEwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBppLSRx3TEPvfUQz+9jnrOjKLCtCmxteJt mvQBx4rlZGWVvwskUYCzXXw0Y5njoSURr26omZxvLZPNtikdISf7KWPiKVkRZpLz R+0hFbFRr32IyGS5BnCa2X0CFwpzQQUQjk9KXkDqIJO8DGY7gV2yPbUQ38hqEBpP wSuv547WKGEGxZmf9abk5mPyw50fLI+r/5kPsiFDhiqw82r2hPRw5uWBarJ9Suti 8r1/sA9tFgRBF8NUf8ZerQSQc+KV/JYrcGGVKhL7i2ByCMuOzVrKvP8CEeBfzvTL AkdND3ApiB/BxSz6RS4xQ8j7VKnoczP6KswGjpFEYAKj6Ww0lk0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:41 2025 by rpki-client