$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft File: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft (raw, json) Hash identifier: 7Zcuk9SlPaFXS4mu1yTpcRpaKSIwlIr/YJauZ3pAffI= Subject key identifier: AA:98:68:CC:CD:0E:5E:6B:95:27:D7:11:18:49:5D:5F:C0:F6:02:D5 Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Certificate serial: 73FFE069E885D4DB0EEDD674AA8F3C98E60BEE46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft Manifest number: 04D4 Signing time: Mon 28 Apr 2025 03:01:02 +0000 Manifest this update: Mon 28 Apr 2025 02:56:02 +0000 Manifest next update: Thu 01 May 2025 10:24:02 +0000 Files and hashes: 1: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl (hash: e/Vm+/WuS5Lo5nD7hue6rSyeGpIUiKeTaEyaqDu1aM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ff:e0:69:e8:85:d4:db:0e:ed:d6:74:aa:8f:3c:98:e6:0b:ee:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Validity Not Before: Apr 28 02:56:02 2025 GMT Not After : May 1 10:24:02 2025 GMT Subject: CN=AA9868CCCD0E5E6B9527D71118495D5FC0F602D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:04:31:13:19:9c:73:91:b2:db:05:e0:fc: c8:0b:e2:67:98:f2:47:d7:f6:1e:0a:14:28:aa:a7: e6:b5:4a:e9:54:59:9c:fc:11:34:88:39:be:cc:e7: f6:af:8e:b3:d6:f1:76:16:21:f7:d2:d5:bf:b4:b7: 74:46:7a:84:2b:ab:b0:8c:32:59:66:34:4b:77:5b: f6:3b:74:59:e8:40:14:f4:47:cd:d2:ec:a3:13:a0: 98:40:11:f1:e4:4d:f4:cd:53:50:ef:c3:69:0f:52: 55:63:de:1e:75:63:d2:41:d6:b7:d0:9e:ee:d4:7b: c7:75:9f:dd:14:80:4c:d3:ba:97:38:1a:70:4a:a9: 9e:e9:96:30:b9:c0:83:bc:18:52:2d:b7:0a:df:53: 5d:bd:67:10:1c:02:8f:ee:30:4b:0d:92:13:29:e8: e2:cc:a4:dd:a3:b4:80:b7:f8:71:66:49:81:17:56: 62:ff:49:ea:9c:e5:9d:73:52:7b:ae:b6:fc:60:77: 9f:36:6a:0c:4c:e7:6e:45:4d:03:9f:b8:4c:6a:5c: 2a:1b:2f:cd:11:69:3a:fb:d5:4f:2d:49:3d:5c:82: dc:4a:5e:0f:b2:19:a3:a3:de:4a:eb:09:07:fa:2f: 57:d9:5f:65:ce:ec:ad:40:b3:bd:f0:10:89:df:fd: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:98:68:CC:CD:0E:5E:6B:95:27:D7:11:18:49:5D:5F:C0:F6:02:D5 X509v3 Authority Key Identifier: keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:96:f1:04:97:e7:73:f5:86:6c:25:33:69:ff:ff:6f:e7:82: 01:0b:ed:77:a4:a8:0f:c1:1f:8b:ba:0c:7b:b3:8f:4f:de:fd: cb:d5:f7:26:4f:b6:2f:dc:42:98:b4:1d:1e:91:92:d8:33:ee: af:e1:ae:57:73:51:e9:64:25:5d:b8:24:20:01:e2:0b:b4:df: 56:f7:b2:0f:1b:72:93:bd:28:43:9f:36:d6:62:6a:08:11:72: 2c:45:73:15:cb:fa:02:74:3d:ef:ed:4b:71:c4:b6:ee:fb:43: 68:33:f3:e7:c0:55:04:e2:4c:40:ca:ae:8d:e0:90:7e:58:3a: f6:a9:cf:25:27:5d:75:75:32:aa:d0:75:f5:01:9d:09:d0:27: 4b:fc:eb:e6:4b:f5:c7:a9:73:ef:f2:a2:89:b7:06:9a:74:4a: 9f:62:19:d6:58:c7:14:19:12:a6:56:c5:d4:fe:c8:3a:2b:14: ff:fb:bb:19:bd:a5:0f:11:4b:f0:d3:22:23:88:fd:35:a1:4b: d2:35:f0:7f:a8:a6:1d:a4:ee:d8:df:6d:fa:20:0b:e2:b3:e9: 84:0d:be:6f:9c:b0:d1:73:d5:ad:cc:1a:98:a1:b3:07:5d:b9: 3e:41:03:e9:3c:86:f2:da:80:df:6b:06:ae:80:95:3e:d8:bc: a2:ce:14:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc//gaeiF1NsO7dZ0qo88mOYL7kYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFC NjdENjFFQTAeFw0yNTA0MjgwMjU2MDJaFw0yNTA1MDExMDI0MDJaMDMxMTAvBgNV BAMTKEFBOTg2OENDQ0QwRTVFNkI5NTI3RDcxMTE4NDk1RDVGQzBGNjAyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiywQxExmcc5Gy2wXg/MgL4meY 8kfX9h4KFCiqp+a1SulUWZz8ETSIOb7M5/avjrPW8XYWIffS1b+0t3RGeoQrq7CM MllmNEt3W/Y7dFnoQBT0R83S7KMToJhAEfHkTfTNU1Dvw2kPUlVj3h51Y9JB1rfQ nu7Ue8d1n90UgEzTupc4GnBKqZ7pljC5wIO8GFIttwrfU129ZxAcAo/uMEsNkhMp 6OLMpN2jtIC3+HFmSYEXVmL/Seqc5Z1zUnuutvxgd582agxM525FTQOfuExqXCob L80RaTr71U8tST1cgtxKXg+yGaOj3krrCQf6L1fZX2XO7K1As73wEInf/aY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqphozM0OXmuVJ9cRGEldX8D2AtUwHwYDVR0j BBgwFoAUWNfcUw87pKzQSIBiFw4VgbZ9YeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhM2EzOS1lMGVjLTRmYzEtOWI1NC0zNTNlMDdmMDA1ZGQvMC81OEQ3REM1MzBG M0JBNEFDRDA0ODgwNjIxNzBFMTU4MUI2N0Q2MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFCNjdE NjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1 ODFCNjdENjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOW8QSX53P1hmwlM2n//2/nggEL7XekqA/B H4u6DHuzj0/e/cvV9yZPti/cQpi0HR6Rktgz7q/hrldzUelkJV24JCAB4gu031b3 sg8bcpO9KEOfNtZiaggRcixFcxXL+gJ0Pe/tS3HEtu77Q2gz8+fAVQTiTEDKro3g kH5YOvapzyUnXXV1MqrQdfUBnQnQJ0v86+ZL9cepc+/yoom3Bpp0Sp9iGdZYxxQZ EqZWxdT+yDorFP/7uxm9pQ8RS/DTIiOI/TWhS9I18H+oph2k7tjfbfogC+Kz6YQN vm+csNFz1a3MGpihswdduT5BA+k8hvLagN9rBq6AlT7YvKLOFDY= -----END CERTIFICATE-----Generated at Mon Apr 28 05:58:49 2025 by rpki-client on console.sobornost.net