$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: 3C9y30VA7F9k+amAwQ2dqiiIg1zxr2NkKFv5Zqt9oxs= Subject key identifier: 3F:04:BE:D0:9A:00:1D:85:99:28:86:D3:60:76:9C:82:27:50:2F:9F Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 5107C45A5FB02BCAA937A29F1115F2DF5F628B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 047D Signing time: Fri 22 Aug 2025 07:10:50 +0000 Manifest this update: Fri 22 Aug 2025 07:05:50 +0000 Manifest next update: Mon 25 Aug 2025 17:54:50 +0000 Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) 2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: q3D0gokLtaoTWGXZ65FjjWiIlEBRw2BR2w0tZwoughw=) 3: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: 8KQR1LHn5fBO+9/N9hJGsh4NxNlEgRiziVNXivVHklU=) 4: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:07:c4:5a:5f:b0:2b:ca:a9:37:a2:9f:11:15:f2:df:5f:62:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Aug 22 07:05:50 2025 GMT Not After : Aug 25 17:54:50 2025 GMT Subject: CN=3F04BED09A001D85992886D360769C8227502F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:08:e8:97:cf:88:21:ba:39:6a:0c:48:18: e3:88:04:99:12:db:73:6a:d0:a2:c0:e4:45:a3:37: cb:d8:13:3c:ef:5f:a2:5f:72:b4:fa:6f:a3:1d:35: 9e:d2:f4:a0:a7:0d:f1:b6:17:ea:b8:32:1d:37:ed: e4:6b:cd:3f:39:cd:86:e8:e9:b7:60:6c:0c:e5:e5: d6:0c:eb:ba:ca:a7:9b:03:a8:c1:ab:43:10:50:ac: 95:54:35:2b:8c:7b:96:0b:4b:7a:37:90:1d:9c:ef: eb:51:9b:2f:5b:04:cc:59:f7:f9:f4:0d:13:b3:5e: 0b:a8:f2:37:12:05:f4:50:f5:f1:cf:10:d9:d1:b2: 4d:74:0e:cb:b3:27:9e:89:2a:8c:b2:18:9d:8e:45: 8f:d9:89:28:12:c9:d9:2b:8b:ab:9a:3e:d2:f5:b9: 89:c3:19:d6:96:59:f5:44:2b:5a:9a:f3:f7:aa:5c: 8e:f5:b9:f3:a8:d2:69:c7:61:86:50:49:75:11:0a: f4:d5:58:89:30:95:77:33:96:26:48:42:48:3f:e6: 5b:52:12:c7:ac:43:98:ff:e7:fa:bc:75:51:76:87: 23:79:62:6d:34:2d:22:34:7f:2f:37:db:cd:b5:5e: 15:d6:7d:b3:6f:3b:47:02:6d:ce:0b:3c:49:fb:11: fa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:04:BE:D0:9A:00:1D:85:99:28:86:D3:60:76:9C:82:27:50:2F:9F X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:73:3a:c5:8a:36:b0:08:f1:75:15:e7:d0:90:f8:01:27:fa: 5d:ca:55:7f:c5:5b:92:29:ba:00:72:67:85:3e:86:87:81:1c: 3b:43:39:29:5c:9c:0e:5e:af:78:7f:65:c5:d1:52:f2:f3:c4: 68:29:0d:04:81:17:4c:32:e6:0f:4c:bd:b9:18:fe:87:f1:6a: f7:8b:09:a5:40:6d:e7:8d:6d:6d:54:d6:7f:d1:a4:ce:a5:9a: 3d:e3:d5:e2:85:5a:12:b8:26:86:0f:17:c7:c8:dd:77:d2:72: 3e:1d:1e:7f:5f:31:e4:9a:68:59:03:0c:e5:49:9b:03:c3:ae: 01:ac:e2:6a:b8:10:78:a6:8c:4b:d1:1f:25:3d:0c:fc:f4:55: dd:83:f3:ed:2e:67:eb:21:17:dc:48:20:0d:c1:40:d4:d1:67: 37:b4:15:bb:a9:de:d9:9e:bc:eb:b4:df:ae:63:a5:f4:89:fb: d3:ce:57:d7:52:a7:8b:87:ce:f3:1e:d6:76:9b:01:4b:b6:7b: ce:7b:52:eb:74:ad:1d:93:4b:9a:2c:32:a2:b8:7f:6a:39:ba: 70:3d:4b:bd:f9:43:75:dd:49:72:78:4e:11:cf:0a:cd:e6:b5: a2:c7:64:5e:98:e3:35:43:11:92:ea:7c:1f:a8:7b:aa:98:a2: a3:f8:63:62 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITUQfEWl+wK8qpN6KfERXy319iizANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4RjU4ODkzQjFDRTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIz OEI2Nzc5MB4XDTI1MDgyMjA3MDU1MFoXDTI1MDgyNTE3NTQ1MFowMzExMC8GA1UE AxMoM0YwNEJFRDA5QTAwMUQ4NTk5Mjg4NkQzNjA3NjlDODIyNzUwMkY5RjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALVFCOiXz4ghujlqDEgY44gEmRLb c2rQosDkRaM3y9gTPO9fol9ytPpvox01ntL0oKcN8bYX6rgyHTft5GvNPznNhujp t2BsDOXl1gzrusqnmwOowatDEFCslVQ1K4x7lgtLejeQHZzv61GbL1sEzFn3+fQN E7NeC6jyNxIF9FD18c8Q2dGyTXQOy7MnnokqjLIYnY5Fj9mJKBLJ2SuLq5o+0vW5 icMZ1pZZ9UQrWprz96pcjvW586jSacdhhlBJdREK9NVYiTCVdzOWJkhCSD/mW1IS x6xDmP/n+rx1UXaHI3libTQtIjR/LzfbzbVeFdZ9s287RwJtzgs8SfsR+ikCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQ/BL7QmgAdhZkohtNgdpyCJ1AvnzAfBgNVHSME GDAWgBSPWIk7HOHbhVXXvstj3jQtI4tneTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFi ZGU5MzZiLTUzY2YtNGIwOC1iNWY3LTJiOTBkZTIxZmU5NC8wLzhGNTg4OTNCMUNF MURCODU1NUQ3QkVDQjYzREUzNDJEMjM4QjY3NzkuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi84RjU4ODkzQjFDRTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2 Nzc5LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8xYmRlOTM2Yi01M2NmLTRiMDgtYjVm Ny0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFDRTFEQjg1NTVEN0JFQ0I2M0RFMzQy RDIzOEI2Nzc5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAn3M6xYo2sAjxdRXn0JD4ASf6XcpVf8Vbkim6 AHJnhT6Gh4EcO0M5KVycDl6veH9lxdFS8vPEaCkNBIEXTDLmD0y9uRj+h/Fq94sJ pUBt541tbVTWf9GkzqWaPePV4oVaErgmhg8Xx8jdd9JyPh0ef18x5JpoWQMM5Umb A8OuAaziargQeKaMS9EfJT0M/PRV3YPz7S5n6yEX3EggDcFA1NFnN7QVu6ne2Z68 67TfrmOl9In7085X11Kni4fO8x7WdpsBS7Z7zntS63StHZNLmiwyorh/ajm6cD1L vflDdd1JcnhOEc8Kzea1osdkXpjjNUMRkup8H6h7qpiio/hjYg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:40 2025 by rpki-client