$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: xNyTI6Zl4KmzXJt9PTC0Zjpu7r3ws693lxFMHfBFs4s= Subject key identifier: 68:A5:8A:83:2E:94:53:B5:24:63:F2:37:FD:6B:6C:2F:85:5E:DE:54 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 03A93DC7FB648303583A1A6256B7D50C0A460072 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 046E Signing time: Sat 19 Jul 2025 15:00:50 +0000 Manifest this update: Sat 19 Jul 2025 14:55:50 +0000 Manifest next update: Tue 22 Jul 2025 17:10:50 +0000 Files and hashes: 1: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: /FtuiRON+bd4kiWsQG79+P6c/D2fhtNEqR/1Zq8bmzk=) 2: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 3: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: q3D0gokLtaoTWGXZ65FjjWiIlEBRw2BR2w0tZwoughw=) 4: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 17:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a9:3d:c7:fb:64:83:03:58:3a:1a:62:56:b7:d5:0c:0a:46:00:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Jul 19 14:55:50 2025 GMT Not After : Jul 22 17:10:50 2025 GMT Subject: CN=68A58A832E9453B52463F237FD6B6C2F855EDE54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1f:af:e9:dd:f3:75:9a:7f:88:86:88:20:9d: d1:e1:a8:6d:26:8c:e9:c7:ef:2f:5d:53:ce:98:ee: f6:b0:40:5c:7d:93:e4:04:c4:9b:c3:10:73:4d:c1: c0:5f:58:b8:21:e2:6d:e6:4b:e6:49:fb:8f:6f:7d: d9:c5:90:75:62:2b:42:0a:af:e9:b7:e7:a0:38:e6: c0:07:5b:11:eb:23:03:39:a0:d0:b3:1d:59:02:af: c2:0a:f7:77:23:2b:5a:06:63:4a:00:f4:8f:68:da: f5:57:0f:5b:d0:bd:c5:81:75:7e:60:0d:7d:56:b6: ec:e9:4e:ce:a8:66:75:38:ba:05:7f:2c:88:b5:c4: ae:c3:7e:25:e5:a1:5f:72:4e:53:88:3a:d2:c4:71: 71:b9:35:a9:48:7a:1c:03:86:ed:45:a9:70:e9:1d: 05:16:4d:61:c7:35:91:2a:fd:2d:4e:86:04:5c:f7: 62:d3:02:83:88:b7:01:05:a4:a8:9b:6f:9e:a2:65: 62:19:cc:35:3c:8d:02:23:98:80:da:2f:82:fa:7e: 80:b7:3e:8e:c2:93:ed:b2:a3:4f:e1:f4:d5:d2:9f: 9d:c8:8d:3e:21:6e:05:e9:40:d3:d0:8a:49:48:1d: a2:c5:02:1c:f0:bf:b9:e7:95:49:3a:73:ce:26:da: 56:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A5:8A:83:2E:94:53:B5:24:63:F2:37:FD:6B:6C:2F:85:5E:DE:54 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1e:5b:66:12:2f:4c:ba:cc:88:6b:97:cd:fe:e6:37:eb:75: 0e:a4:3d:5f:f2:33:75:1a:1b:15:3d:82:94:d6:e3:47:07:59: 86:34:be:05:0b:6e:78:38:19:9e:5f:5a:84:56:9b:3a:44:87: cb:e4:f3:d8:18:f3:f0:56:a6:38:50:ad:9a:92:a8:8d:f8:11: fc:dc:99:8b:12:82:4a:98:fc:60:d3:20:15:65:72:f3:c7:29: 84:65:d4:2a:c6:27:b8:73:df:70:38:c9:01:66:e3:fd:b1:f3: 2c:0b:3f:cb:c9:de:e5:d0:8a:70:09:66:a6:15:1f:20:65:ff: 03:87:86:e3:21:47:42:0e:8d:f2:09:41:fa:b6:b3:b3:3e:25: 41:4c:b5:17:43:01:3d:12:76:9c:90:e9:c6:51:7b:d2:94:5b: ff:81:6b:1d:f5:80:ef:1b:fb:89:a8:e2:61:d9:2c:94:d5:25: 76:dc:43:1f:20:9a:79:ab:1f:0f:a0:86:cc:e8:e0:1c:e4:44: d4:2a:d1:18:3b:83:fa:f2:02:6f:45:c0:cf:52:e8:56:ba:03: 84:27:d5:88:d4:ae:88:92:1e:fe:52:75:37:29:30:e7:55:bb: ad:23:3b:c9:1b:06:c3:ae:03:13:52:cd:78:5c:15:be:43:50: 79:2f:cf:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA6k9x/tkgwNYOhpiVrfVDApGAHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTA3MTkxNDU1NTBaFw0yNTA3MjIxNzEwNTBaMDMxMTAvBgNV BAMTKDY4QTU4QTgzMkU5NDUzQjUyNDYzRjIzN0ZENkI2QzJGODU1RURFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcH6/p3fN1mn+IhoggndHhqG0m jOnH7y9dU86Y7vawQFx9k+QExJvDEHNNwcBfWLgh4m3mS+ZJ+49vfdnFkHViK0IK r+m356A45sAHWxHrIwM5oNCzHVkCr8IK93cjK1oGY0oA9I9o2vVXD1vQvcWBdX5g DX1WtuzpTs6oZnU4ugV/LIi1xK7DfiXloV9yTlOIOtLEcXG5NalIehwDhu1FqXDp HQUWTWHHNZEq/S1OhgRc92LTAoOItwEFpKibb56iZWIZzDU8jQIjmIDaL4L6foC3 Po7Ck+2yo0/h9NXSn53IjT4hbgXpQNPQiklIHaLFAhzwv7nnlUk6c84m2laHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaKWKgy6UU7UkY/I3/WtsL4Ve3lQwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMeW2YSL0y6zIhrl83+5jfrdQ6kPV/yM3Ua GxU9gpTW40cHWYY0vgULbng4GZ5fWoRWmzpEh8vk89gY8/BWpjhQrZqSqI34Efzc mYsSgkqY/GDTIBVlcvPHKYRl1CrGJ7hz33A4yQFm4/2x8ywLP8vJ3uXQinAJZqYV HyBl/wOHhuMhR0IOjfIJQfq2s7M+JUFMtRdDAT0SdpyQ6cZRe9KUW/+Bax31gO8b +4mo4mHZLJTVJXbcQx8gmnmrHw+ghszo4BzkRNQq0Rg7g/ryAm9FwM9S6Fa6A4Qn 1YjUroiSHv5SdTcpMOdVu60jO8kbBsOuAxNSzXhcFb5DUHkvz7w= -----END CERTIFICATE-----Generated at Mon Jul 21 08:58:21 2025 by rpki-client