$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: qA/O8agL8Uts9wJtUk7q9DgmfAQYiof/fcfVdABrOHA= Subject key identifier: AD:40:4B:77:56:02:DE:6E:13:1F:99:F1:FA:44:C8:C7:3C:4D:92:12 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 158DAF7822FF1A55478EED7CEB4E3DE3AE08A4AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 04B4 Signing time: Sat 28 Jun 2025 17:02:00 +0000 Manifest this update: Sat 28 Jun 2025 16:57:00 +0000 Manifest next update: Wed 02 Jul 2025 01:48:00 +0000 Files and hashes: 1: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: YwE+UrBIdJChzzky/B1cyIMVCcodIiUc4aS8d6d7+co=) 2: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: g4VL4d/K2PSYVq729JYgE5rx44aedK+g4+7jgo7XsgA=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: vrRICHKdrX5bsoj+V7upbCct/K0FWIRbEMdPjprjMe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8d:af:78:22:ff:1a:55:47:8e:ed:7c:eb:4e:3d:e3:ae:08:a4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Jun 28 16:57:00 2025 GMT Not After : Jul 2 01:48:00 2025 GMT Subject: CN=AD404B775602DE6E131F99F1FA44C8C73C4D9212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:df:93:db:d2:3d:10:15:41:08:1a:82:ad: 1f:f8:14:d5:14:e7:53:91:b2:3e:25:48:94:82:5e: 9a:e0:a1:2b:75:75:87:8c:7c:27:bf:f1:b4:6e:12: 8b:5c:2d:22:17:31:cf:e0:d6:97:ca:f6:af:fa:a7: 65:7a:0d:7e:7a:54:72:82:c4:e2:87:b4:1e:df:15: ab:3d:fd:d9:61:83:ca:19:23:ec:f9:d4:e1:1e:14: 5e:3e:9b:b4:db:98:bc:ca:43:9f:31:5a:07:c8:e8: 85:49:0f:5c:6f:29:0f:31:38:49:e8:c7:b5:45:fd: cf:23:81:8e:db:12:44:54:71:f6:1f:57:8c:d3:a9: 66:fb:16:3c:f0:3c:bd:81:7d:cb:85:67:51:82:b4: 1d:b7:29:53:8d:fd:f0:f6:11:41:3c:c7:1b:2a:35: de:90:87:11:bd:c0:46:39:fa:6c:ec:99:8e:eb:43: a0:e8:5f:cc:68:ad:31:98:af:c4:cd:11:62:20:5d: 91:b7:b3:a1:13:68:a2:10:39:f9:bf:31:de:0f:bc: 3a:2f:e9:4f:dc:9f:4e:31:78:bd:99:86:8f:69:7c: 93:ef:dd:75:ea:85:c7:9c:cd:9d:dd:95:8f:78:c0: a9:74:46:d4:01:c0:da:7a:40:8e:0c:75:aa:9f:44: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:40:4B:77:56:02:DE:6E:13:1F:99:F1:FA:44:C8:C7:3C:4D:92:12 X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:88:91:90:9b:ff:d0:68:7f:4c:ab:4f:9a:03:2a:41:49:95: a0:05:5f:c4:6d:76:5e:95:d1:d4:af:c7:b8:58:a3:dc:27:82: a4:6e:bd:c4:99:3f:6d:f2:25:8b:94:10:88:62:fc:0b:6e:0a: 54:1b:d0:c9:c8:cb:a6:f9:bc:07:e5:48:15:44:b0:4e:41:87: 13:8f:72:e8:9b:b3:21:a2:0e:0e:ca:5c:56:fe:52:54:93:2e: 80:c3:c0:74:b9:c2:65:25:da:3e:8a:25:1f:0c:3f:c6:b7:15: 53:b9:84:20:0e:be:1d:8b:1b:e9:38:f4:a0:64:53:83:fb:13: fd:eb:9c:b9:3f:28:18:02:0e:31:f9:b5:fa:90:8b:93:a4:49: da:5d:7e:35:27:26:6a:8e:e9:29:be:2c:5e:49:9e:9c:36:89: f6:0e:6c:3b:37:fb:08:e6:0b:d3:f7:9b:78:7d:c0:87:a6:59: f5:5a:7f:d6:8f:89:6b:33:a0:fb:0d:ce:c5:8e:1b:88:38:af: d0:67:6f:93:4f:6f:4a:3c:4f:f9:8a:0b:2c:61:5f:57:50:31: eb:87:f2:11:1c:1b:a0:1e:50:63:04:bf:91:d9:b2:4c:15:fd: 87:40:32:23:b2:a9:3f:12:6e:06:66:5b:51:67:0f:37:f3:ae: bc:b0:84:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFY2veCL/GlVHju186049464IpKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTA2MjgxNjU3MDBaFw0yNTA3MDIwMTQ4MDBaMDMxMTAvBgNV BAMTKEFENDA0Qjc3NTYwMkRFNkUxMzFGOTlGMUZBNDRDOEM3M0M0RDkyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYN+T29I9EBVBCBqCrR/4FNUU 51ORsj4lSJSCXprgoSt1dYeMfCe/8bRuEotcLSIXMc/g1pfK9q/6p2V6DX56VHKC xOKHtB7fFas9/dlhg8oZI+z51OEeFF4+m7TbmLzKQ58xWgfI6IVJD1xvKQ8xOEno x7VF/c8jgY7bEkRUcfYfV4zTqWb7FjzwPL2BfcuFZ1GCtB23KVON/fD2EUE8xxsq Nd6QhxG9wEY5+mzsmY7rQ6DoX8xorTGYr8TNEWIgXZG3s6ETaKIQOfm/Md4PvDov 6U/cn04xeL2Zho9pfJPv3XXqhceczZ3dlY94wKl0RtQBwNp6QI4MdaqfRApNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrUBLd1YC3m4TH5nx+kTIxzxNkhIwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANaIkZCb/9Bof0yrT5oDKkFJlaAFX8Rtdl6V 0dSvx7hYo9wngqRuvcSZP23yJYuUEIhi/AtuClQb0MnIy6b5vAflSBVEsE5BhxOP cuibsyGiDg7KXFb+UlSTLoDDwHS5wmUl2j6KJR8MP8a3FVO5hCAOvh2LG+k49KBk U4P7E/3rnLk/KBgCDjH5tfqQi5OkSdpdfjUnJmqO6Sm+LF5Jnpw2ifYObDs3+wjm C9P3m3h9wIemWfVaf9aPiWszoPsNzsWOG4g4r9Bnb5NPb0o8T/mKCyxhX1dQMeuH 8hEcG6AeUGMEv5HZskwV/YdAMiOyqT8SbgZmW1FnDzfzrrywhJE= -----END CERTIFICATE-----Generated at Sun Jun 29 23:42:27 2025 by rpki-client