$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: hIGntOauPBmdQFVk6Dc8GK7mcZ/XkodxkJFVE7F2ZZ4= Subject key identifier: BF:44:1D:E3:E0:2F:41:B4:E5:6E:7C:C8:2A:CD:6F:1C:18:9D:2C:3E Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 302F6729EBA3E63A16CB9CC6B878B49E010589FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 011B Signing time: Mon 20 Oct 2025 17:30:04 +0000 Manifest this update: Mon 20 Oct 2025 17:25:04 +0000 Manifest next update: Fri 24 Oct 2025 02:05:04 +0000 Files and hashes: 1: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: 73KuqRKDyZ6MVQJ2xGKyIUXfwf4JcuFbg42q+ySRWJs=) 2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2f:67:29:eb:a3:e6:3a:16:cb:9c:c6:b8:78:b4:9e:01:05:89:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Oct 20 17:25:04 2025 GMT Not After : Oct 24 02:05:04 2025 GMT Subject: CN=BF441DE3E02F41B4E56E7CC82ACD6F1C189D2C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:59:1d:88:0d:03:57:70:74:ca:c7:9a:a0: e8:6d:66:69:2d:86:18:7b:cc:c8:c7:a5:d5:87:a1: b0:59:c8:dc:73:23:94:8d:76:cd:14:3c:c2:8c:5e: c0:61:4f:42:c1:3d:3a:48:fc:f2:3a:7e:23:92:af: c6:f0:1a:b1:03:be:b7:2a:af:ec:4f:0a:da:26:60: 7a:de:f5:c5:48:a6:68:83:70:b7:a9:3e:c7:e4:b6: 88:64:f7:38:e7:a2:9e:1b:2e:f3:8c:5b:28:8e:dc: 5a:97:99:0a:72:5c:d9:9a:f6:5c:f2:41:e3:ea:74: ad:bc:7d:5a:55:60:13:c2:86:ba:42:fa:25:e8:cf: 21:77:e3:67:86:e7:a5:3f:ef:9d:52:c6:f0:40:dd: af:a7:e1:1a:69:e6:c3:35:57:71:0b:19:66:5a:f5: 0a:9b:c6:d5:69:76:39:8a:44:25:bd:f6:d2:c9:ad: 91:41:41:6a:18:bb:20:10:b6:9a:6b:9e:1a:a3:85: f3:41:6a:26:9d:95:01:08:4b:57:ba:21:67:87:45: 0d:84:1a:85:f3:23:d1:40:19:32:63:36:16:8a:b7: af:14:b2:ff:ff:82:bc:9a:56:5c:9c:e5:80:26:aa: 80:39:d0:5f:3f:50:bd:cf:0d:af:42:11:ac:86:12: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:44:1D:E3:E0:2F:41:B4:E5:6E:7C:C8:2A:CD:6F:1C:18:9D:2C:3E X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d5:98:20:0e:df:76:09:0b:94:17:d9:db:70:a5:ef:98:e0: ea:78:23:48:4e:6e:d0:6f:81:8a:26:c3:64:77:37:48:e0:41: b4:eb:f8:bb:78:8f:10:97:85:dd:00:cd:57:7e:8f:e7:12:d1: 29:3b:c0:8b:e5:5d:a4:25:4e:4a:e4:37:f5:50:b1:45:40:6e: 7b:ab:95:a1:e9:f4:08:77:92:a1:86:62:07:e2:38:3d:fc:88: 8f:cd:7c:45:64:18:34:c1:5f:63:19:9a:31:3d:49:43:4b:3a: 51:cd:88:30:a0:d1:e4:7d:8d:d9:2c:fb:fc:cf:36:f9:2b:cc: 26:48:f1:73:b1:00:9f:c1:ed:40:79:11:f4:c6:6f:8f:e2:7f: 20:36:09:47:89:8a:89:14:d3:41:4c:6a:d5:fe:48:a1:a9:c7: b6:ab:63:24:bf:50:6c:c5:e2:56:2f:38:40:e3:7e:1b:c0:29: 5b:25:09:89:60:c0:76:85:86:76:b4:01:85:31:0a:33:ab:fe: fe:c3:80:f5:40:86:4e:6b:ee:44:62:40:56:0a:8c:89:36:2e: 8c:c8:59:d9:fd:4d:81:84:1a:95:81:7b:3c:55:ec:ea:37:38: eb:73:d8:39:a3:da:5d:97:03:ce:57:c4:44:5f:33:b5:19:67: 86:76:84:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMC9nKeuj5joWy5zGuHi0ngEFifwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTEwMjAxNzI1MDRaFw0yNTEwMjQwMjA1MDRaMDMxMTAvBgNV BAMTKEJGNDQxREUzRTAyRjQxQjRFNTZFN0NDODJBQ0Q2RjFDMTg5RDJDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+m1kdiA0DV3B0yseaoOhtZmkt hhh7zMjHpdWHobBZyNxzI5SNds0UPMKMXsBhT0LBPTpI/PI6fiOSr8bwGrEDvrcq r+xPCtomYHre9cVIpmiDcLepPsfktohk9zjnop4bLvOMWyiO3FqXmQpyXNma9lzy QePqdK28fVpVYBPChrpC+iXozyF342eG56U/751SxvBA3a+n4Rpp5sM1V3ELGWZa 9QqbxtVpdjmKRCW99tLJrZFBQWoYuyAQtpprnhqjhfNBaiadlQEIS1e6IWeHRQ2E GoXzI9FAGTJjNhaKt68Usv//gryaVlyc5YAmqoA50F8/UL3PDa9CEayGEjNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv0Qd4+AvQbTlbnzIKs1vHBidLD4wHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXVmCAO33YJC5QX2dtwpe+Y4Op4I0hObtBv gYomw2R3N0jgQbTr+Lt4jxCXhd0AzVd+j+cS0Sk7wIvlXaQlTkrkN/VQsUVAbnur laHp9Ah3kqGGYgfiOD38iI/NfEVkGDTBX2MZmjE9SUNLOlHNiDCg0eR9jdks+/zP NvkrzCZI8XOxAJ/B7UB5EfTGb4/ifyA2CUeJiokU00FMatX+SKGpx7arYyS/UGzF 4lYvOEDjfhvAKVslCYlgwHaFhna0AYUxCjOr/v7DgPVAhk5r7kRiQFYKjIk2LozI Wdn9TYGEGpWBezxV7Oo3OOtz2Dmj2l2XA85XxERfM7UZZ4Z2hOw= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:46 2025 by rpki-client