$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: 8bvlU/byB9+1DeTebKGKLeVbkq0xNTfC13usTZGVfe0= Subject key identifier: 6E:A8:3A:C3:8C:13:F3:93:CA:AF:34:0F:93:85:94:AF:50:41:F2:D8 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 0C5FDE75DCCF2B9B5280FCB8C4A37483B0F59F80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 0483 Signing time: Wed 03 Sep 2025 22:20:49 +0000 Manifest this update: Wed 03 Sep 2025 22:15:49 +0000 Manifest next update: Sun 07 Sep 2025 08:03:49 +0000 Files and hashes: 1: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: cYhzKT8RJy3TWXtTkSe6eHNGwfUNJgX1ge4Gp+5CqHc=) 2: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) 3: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 4: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 08:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5f:de:75:dc:cf:2b:9b:52:80:fc:b8:c4:a3:74:83:b0:f5:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Sep 3 22:15:49 2025 GMT Not After : Sep 7 08:03:49 2025 GMT Subject: CN=6EA83AC38C13F393CAAF340F938594AF5041F2D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:74:3c:8b:6a:44:72:c1:f6:99:96:0d:63: 4e:86:8b:ba:e4:18:4f:9e:f8:d0:35:4a:c5:a1:15: 92:e3:c2:e7:0c:32:a4:89:e1:89:54:dc:6b:96:ab: aa:ee:12:6d:2d:c8:f4:0c:7a:f9:f1:fe:5b:28:cf: b8:f1:07:3c:d8:5d:e5:0f:f7:a8:2c:30:cf:ee:e9: 9d:a5:20:36:a2:6a:c8:05:f0:a0:c9:00:83:7c:a8: 26:3d:f1:3b:0f:f8:18:19:be:64:1a:34:25:c0:11: e0:97:0d:21:dc:1a:31:be:14:98:ce:11:9b:83:0b: bc:62:d6:68:e0:de:7c:3c:09:64:9f:fe:85:73:05: f9:69:ed:27:f6:b2:06:4c:e7:90:ca:b8:f9:fd:86: 72:2c:c8:d1:8d:bb:82:97:90:20:35:1f:b9:8a:8c: a2:db:59:99:3f:dc:b4:08:f1:03:c3:a8:81:d9:62: 22:ba:be:87:e6:81:e5:96:b0:4c:60:4d:12:dd:da: a3:c8:c3:70:2e:32:70:23:89:01:aa:34:2f:fa:95: 6d:c5:26:b5:a6:0b:fa:85:5a:ed:c7:a7:bf:13:9c: fc:dc:c8:8e:b4:f0:3c:83:44:08:0e:bd:12:a3:02: eb:13:77:2d:e2:27:17:4e:60:a5:ff:39:6c:37:c2: 52:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A8:3A:C3:8C:13:F3:93:CA:AF:34:0F:93:85:94:AF:50:41:F2:D8 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d7:0d:59:07:92:57:66:ad:cb:30:9e:d1:f2:c4:3d:a2:49: 5a:8d:ac:ea:18:13:f8:26:1c:1f:63:42:3e:67:71:08:80:75: 29:e0:32:b1:ac:f6:81:99:22:17:44:05:be:89:72:45:cf:f2: 24:92:42:c2:5b:ee:f5:e0:12:7c:4e:e2:a8:24:01:0a:ff:15: 11:d8:28:cf:17:5e:7b:2a:f9:f1:28:a2:93:d9:2b:ae:aa:73: 7f:01:13:6e:6a:b0:cc:69:af:4e:1f:f5:d3:9c:1f:3e:98:ea: 15:2c:9e:c5:01:cc:99:74:08:f8:f5:88:d7:87:da:a1:46:21: fe:2e:75:83:80:d5:1a:b7:16:1c:8e:19:01:b5:31:56:cb:ce: 4e:35:e5:bd:b9:6a:8e:df:f6:08:3d:fd:6b:ad:e0:9e:8c:7f: ff:ad:2d:74:5f:73:82:4a:27:ee:b9:30:3a:17:5e:c9:45:36: 49:7d:85:e1:77:8d:f6:61:06:da:b3:b3:01:a3:fb:8c:ab:fb: d4:e5:93:cd:25:26:3a:49:3d:8b:16:f4:4e:70:29:1c:24:a3: 36:c7:85:57:f2:8b:f3:c8:6b:21:0f:01:ed:5a:37:d3:94:b0: 40:bd:a6:8f:b8:d3:3b:34:92:68:48:c6:bb:32:a9:a7:8e:97: 51:24:62:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDF/eddzPK5tSgPy4xKN0g7D1n4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTA5MDMyMjE1NDlaFw0yNTA5MDcwODAzNDlaMDMxMTAvBgNV BAMTKDZFQTgzQUMzOEMxM0YzOTNDQUFGMzQwRjkzODU5NEFGNTA0MUYyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC003Q8i2pEcsH2mZYNY06Gi7rk GE+e+NA1SsWhFZLjwucMMqSJ4YlU3GuWq6ruEm0tyPQMevnx/lsoz7jxBzzYXeUP 96gsMM/u6Z2lIDaiasgF8KDJAIN8qCY98TsP+BgZvmQaNCXAEeCXDSHcGjG+FJjO EZuDC7xi1mjg3nw8CWSf/oVzBflp7Sf2sgZM55DKuPn9hnIsyNGNu4KXkCA1H7mK jKLbWZk/3LQI8QPDqIHZYiK6vofmgeWWsExgTRLd2qPIw3AuMnAjiQGqNC/6lW3F JrWmC/qFWu3Hp78TnPzcyI608DyDRAgOvRKjAusTdy3iJxdOYKX/OWw3wlILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbqg6w4wT85PKrzQPk4WUr1BB8tgwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDXDVkHkldmrcswntHyxD2iSVqNrOoYE/gm HB9jQj5ncQiAdSngMrGs9oGZIhdEBb6JckXP8iSSQsJb7vXgEnxO4qgkAQr/FRHY KM8XXnsq+fEoopPZK66qc38BE25qsMxpr04f9dOcHz6Y6hUsnsUBzJl0CPj1iNeH 2qFGIf4udYOA1Rq3FhyOGQG1MVbLzk415b25ao7f9gg9/Wut4J6Mf/+tLXRfc4JK J+65MDoXXslFNkl9heF3jfZhBtqzswGj+4yr+9Tlk80lJjpJPYsW9E5wKRwkozbH hVfyi/PIayEPAe1aN9OUsEC9po+40zs0kmhIxrsyqaeOl1EkYlY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:10:43 2025 by rpki-client