$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: 7grO5VIpRbJ0tePs3m2eqbimYJC8z/oNZ1L9S3xMwAk= Subject key identifier: EB:58:0E:CE:4B:48:82:A4:57:0F:F2:58:57:17:4E:87:1F:FF:C2:82 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 38A6338FB66DB703E62158FCCF41DA6BA60ACEF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 049A Signing time: Sat 25 Oct 2025 23:00:51 +0000 Manifest this update: Sat 25 Oct 2025 22:55:51 +0000 Manifest next update: Wed 29 Oct 2025 06:36:51 +0000 Files and hashes: 1: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: Nj+F5ngo+LfyhJQ6PE5ESB9LfOi/0WUMrw4UjHytN20=) 2: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) 3: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 4: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 06:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a6:33:8f:b6:6d:b7:03:e6:21:58:fc:cf:41:da:6b:a6:0a:ce:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Oct 25 22:55:51 2025 GMT Not After : Oct 29 06:36:51 2025 GMT Subject: CN=EB580ECE4B4882A4570FF25857174E871FFFC282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7d:21:28:69:53:77:e5:b0:ca:d0:fa:aa:e3: 29:ba:b6:57:7f:53:2f:10:a3:e8:17:05:25:93:16: 57:4d:e1:c0:e9:f9:d1:b4:b7:5e:81:68:ee:e2:f8: 75:41:ec:1a:87:8b:f2:2c:58:7e:01:b9:7a:a4:d9: 50:3a:77:03:45:68:5d:df:c8:f3:55:5d:93:33:38: 64:01:d4:8d:4c:0e:46:54:e7:bd:7a:0b:36:d6:ec: eb:2b:ad:7f:04:9c:fe:e6:86:d5:2c:dd:dd:92:fb: 4e:1d:7d:69:f8:f3:8b:e3:c4:f0:f3:04:70:30:b5: 67:db:1c:f0:f9:86:92:ec:f7:0c:e2:23:db:eb:ed: 92:42:67:81:cf:99:41:e3:41:66:e9:d7:31:65:e5: 4b:c5:97:e2:08:a4:d0:33:af:cc:27:0f:76:c0:e3: ec:fc:44:ad:5a:0c:e3:a6:25:f8:f6:73:77:7c:52: be:d9:d4:d8:bf:f2:42:61:3a:b6:0c:ba:85:02:a6: e5:c5:66:e4:a2:bc:93:7e:01:f1:16:6c:5b:fe:9c: 4f:65:4c:ea:91:89:33:be:f8:4e:54:89:ef:0a:b6: 8c:b0:e9:0b:0b:6b:78:c2:47:56:a3:e2:99:91:1d: d6:6e:b4:23:2f:0d:7a:9b:11:a4:7c:8e:68:e1:1e: 98:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:58:0E:CE:4B:48:82:A4:57:0F:F2:58:57:17:4E:87:1F:FF:C2:82 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:92:cb:f5:39:e6:3c:e5:56:89:d7:27:6f:52:bb:1c:06:1c: a0:de:8f:84:22:24:e5:4e:71:bb:d3:ae:08:1c:f9:a6:d9:d1: 2a:5a:56:b3:3a:1e:9a:55:4d:7e:91:0f:02:42:30:f8:2e:ff: ed:f2:d4:4e:0a:53:7b:f3:74:a3:c6:35:64:fe:2b:ee:23:8c: 3b:f7:9e:40:9d:bf:8f:7b:b8:2c:dd:c8:cb:be:fa:9e:90:71: d2:4b:5d:b6:f8:70:35:75:68:a6:a4:6a:ec:8c:74:18:af:d4: a5:a1:dc:4f:58:d3:d8:4a:31:7d:32:0e:ac:d7:81:40:d4:b6: 2d:e2:cf:a3:c5:8a:4f:1e:6e:53:41:ee:b0:7d:2f:bf:3e:4a: c4:f5:ac:c2:bd:6b:ba:ae:1f:47:1c:dd:20:e0:25:78:db:da: 4c:6e:c8:ea:41:5f:ae:89:47:8c:27:9c:9a:39:19:55:c0:c5: 67:f1:f3:0c:70:63:ed:2a:7a:ef:c9:39:c2:12:af:11:7a:b5: 2d:a8:a5:43:29:4f:55:c2:db:8e:ae:53:75:66:68:eb:67:03: c2:c1:cd:61:63:ef:2e:65:5a:5a:2c:b6:fd:f7:d9:1c:ca:a8: 4e:40:f8:78:5e:28:cb:3e:71:b0:b5:1a:89:b1:9a:eb:d1:bf: b2:17:fe:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKYzj7ZttwPmIVj8z0Haa6YKzvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTEwMjUyMjU1NTFaFw0yNTEwMjkwNjM2NTFaMDMxMTAvBgNV BAMTKEVCNTgwRUNFNEI0ODgyQTQ1NzBGRjI1ODU3MTc0RTg3MUZGRkMyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmfSEoaVN35bDK0Pqq4ym6tld/ Uy8Qo+gXBSWTFldN4cDp+dG0t16BaO7i+HVB7BqHi/IsWH4BuXqk2VA6dwNFaF3f yPNVXZMzOGQB1I1MDkZU5716CzbW7OsrrX8EnP7mhtUs3d2S+04dfWn484vjxPDz BHAwtWfbHPD5hpLs9wziI9vr7ZJCZ4HPmUHjQWbp1zFl5UvFl+IIpNAzr8wnD3bA 4+z8RK1aDOOmJfj2c3d8Ur7Z1Ni/8kJhOrYMuoUCpuXFZuSivJN+AfEWbFv+nE9l TOqRiTO++E5Uie8Ktoyw6QsLa3jCR1aj4pmRHdZutCMvDXqbEaR8jmjhHpjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU61gOzktIgqRXD/JYVxdOhx//woIwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOSy/U55jzlVonXJ29SuxwGHKDej4QiJOVO cbvTrggc+abZ0SpaVrM6HppVTX6RDwJCMPgu/+3y1E4KU3vzdKPGNWT+K+4jjDv3 nkCdv497uCzdyMu++p6QcdJLXbb4cDV1aKakauyMdBiv1KWh3E9Y09hKMX0yDqzX gUDUti3iz6PFik8eblNB7rB9L78+SsT1rMK9a7quH0cc3SDgJXjb2kxuyOpBX66J R4wnnJo5GVXAxWfx8wxwY+0qeu/JOcISrxF6tS2opUMpT1XC246uU3VmaOtnA8LB zWFj7y5lWlostv332RzKqE5A+HheKMs+cbC1GomxmuvRv7IX/kA= -----END CERTIFICATE-----Generated at Mon Oct 27 09:16:06 2025 by rpki-client