$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: dAJwMTkIyYUD257rjFuwJBZx5zJN7WQ9wNzZ4fCXdpg= Subject key identifier: D6:9D:6D:BE:8B:51:F3:93:5D:33:8B:66:F8:3E:80:3B:19:E1:DC:18 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 0FF34CDB1B8C902AE6E51F933443184C913ED39B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 0497 Signing time: Sun 19 Oct 2025 08:10:50 +0000 Manifest this update: Sun 19 Oct 2025 08:05:50 +0000 Manifest next update: Wed 22 Oct 2025 13:42:50 +0000 Files and hashes: 1: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) 2: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: Mxf2CMAmdNC68YxnL91SxKNpPCZHb/NUKvTryjTXSts=) 3: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 4: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f3:4c:db:1b:8c:90:2a:e6:e5:1f:93:34:43:18:4c:91:3e:d3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Oct 19 08:05:50 2025 GMT Not After : Oct 22 13:42:50 2025 GMT Subject: CN=D69D6DBE8B51F3935D338B66F83E803B19E1DC18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:d8:f7:d1:24:82:2b:7c:0d:f5:08:92:a2: 97:d4:e2:29:d1:ee:cb:98:04:db:1b:a9:48:63:3a: 31:05:c4:0a:08:ae:a3:e3:80:c0:ee:a5:91:51:29: db:c5:f5:ff:bc:ba:90:01:c7:84:e6:88:65:cc:11: ed:a5:42:e9:75:7c:c0:f0:e3:e5:d3:bf:fe:40:6b: 63:67:1c:0b:f1:b7:b4:1d:7b:90:af:55:5b:ca:d8: a6:2f:5e:2c:b3:d4:b8:8a:5f:16:7c:3f:cc:e7:de: b3:56:81:6d:b7:12:c9:22:a4:3a:33:b1:9f:ea:d7: 12:85:e2:73:08:66:2f:72:09:ba:75:20:49:34:48: cc:ec:fb:dc:aa:4e:06:a4:d1:3d:78:67:bb:62:46: 9d:db:6b:3d:05:68:e3:22:4e:7c:09:a9:9d:4b:06: e9:6c:18:fa:71:b9:5d:a1:45:8c:e2:9e:dc:54:be: bc:32:52:8f:23:00:a3:c3:8b:a6:e5:ae:e4:2e:90: a7:35:ef:72:e8:ab:d2:cb:98:6a:a6:1c:3f:a3:b7: d8:b5:75:13:a1:ec:d5:2f:db:e3:a9:6f:8d:4e:36: 1d:2c:dc:48:44:51:a3:6e:38:10:4f:eb:df:ed:ac: 1c:f2:fa:e8:d3:28:1d:fd:fd:9f:b3:65:04:a5:4d: 2c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9D:6D:BE:8B:51:F3:93:5D:33:8B:66:F8:3E:80:3B:19:E1:DC:18 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f1:d2:5e:c7:36:11:20:9c:85:28:80:85:1b:f0:b0:86:a8: 9f:16:f0:a6:ef:9a:65:51:ba:6d:7e:bf:57:c3:25:20:fe:ff: ea:46:50:69:f1:73:be:15:85:94:6e:3f:c8:91:51:11:0f:2d: 79:99:ef:5f:8a:3f:c4:7d:b4:82:71:5c:02:67:c1:00:5a:71: 6a:b7:f4:74:b3:4d:66:3b:c1:86:fa:cf:93:78:77:14:81:b5: 02:00:56:da:8d:52:6c:4a:51:79:2d:1a:2c:7c:22:25:db:1c: bc:f6:e0:9d:40:57:f2:3e:49:16:c7:85:73:c6:38:9c:b1:bd: f2:99:9e:d5:48:82:8f:22:a6:b1:ea:12:40:6a:88:6f:01:34: 2f:ca:21:f4:c4:b5:64:03:fe:13:1a:7c:f8:f5:6c:01:d6:82: cc:77:81:0e:12:23:29:c1:3d:ed:30:37:57:59:75:c1:4d:4b: 38:a9:81:27:3d:29:f9:58:f6:d5:81:0f:37:59:bd:c1:c6:b3: 76:52:ad:3e:60:a7:ae:29:92:1d:02:9c:91:b5:e6:26:fd:35: 4a:21:c4:43:d2:95:32:b9:f8:e0:06:38:d9:a9:05:e9:94:08: a1:09:6e:92:c8:e6:5b:59:e5:7f:a2:4b:fa:39:b6:68:88:7d: 36:1f:46:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/NM2xuMkCrm5R+TNEMYTJE+05swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTEwMTkwODA1NTBaFw0yNTEwMjIxMzQyNTBaMDMxMTAvBgNV BAMTKEQ2OUQ2REJFOEI1MUYzOTM1RDMzOEI2NkY4M0U4MDNCMTlFMURDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BNj30SSCK3wN9QiSopfU4inR 7suYBNsbqUhjOjEFxAoIrqPjgMDupZFRKdvF9f+8upABx4TmiGXMEe2lQul1fMDw 4+XTv/5Aa2NnHAvxt7Qde5CvVVvK2KYvXiyz1LiKXxZ8P8zn3rNWgW23EskipDoz sZ/q1xKF4nMIZi9yCbp1IEk0SMzs+9yqTgak0T14Z7tiRp3baz0FaOMiTnwJqZ1L BulsGPpxuV2hRYzintxUvrwyUo8jAKPDi6blruQukKc173Loq9LLmGqmHD+jt9i1 dROh7NUv2+Opb41ONh0s3EhEUaNuOBBP69/trBzy+ujTKB39/Z+zZQSlTSwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1p1tvotR85NdM4tm+D6AOxnh3BgwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLx0l7HNhEgnIUogIUb8LCGqJ8W8KbvmmVR um1+v1fDJSD+/+pGUGnxc74VhZRuP8iRUREPLXmZ71+KP8R9tIJxXAJnwQBacWq3 9HSzTWY7wYb6z5N4dxSBtQIAVtqNUmxKUXktGix8IiXbHLz24J1AV/I+SRbHhXPG OJyxvfKZntVIgo8iprHqEkBqiG8BNC/KIfTEtWQD/hMafPj1bAHWgsx3gQ4SIynB Pe0wN1dZdcFNSzipgSc9KflY9tWBDzdZvcHGs3ZSrT5gp64pkh0CnJG15ib9NUoh xEPSlTK5+OAGONmpBemUCKEJbpLI5ltZ5X+iS/o5tmiIfTYfRj8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:42:36 2025 by rpki-client