$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: 217hS5tgwv3K3MNnJHMlhqjouya0xkHaExn8n6DTxx0= Subject key identifier: 56:C5:E6:B8:C9:B5:AA:E9:48:BC:08:D9:78:C3:CA:13:ED:25:A1:62 Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 2605932BD10A7D394C23BE6E7F3EB0D7CF649A62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 051B Signing time: Sun 19 Oct 2025 15:11:43 +0000 Manifest this update: Sun 19 Oct 2025 15:06:43 +0000 Manifest next update: Wed 22 Oct 2025 23:34:43 +0000 Files and hashes: 1: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: J4WIMkLQajbcQnvhyJo6DwnlAMd5WbN/GkN73az2v00=) 2: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 3: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) 4: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: I/le6Te2VCdo9U/Jhbu6/dBd0G0Ft1HGDM8GZasvyxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:05:93:2b:d1:0a:7d:39:4c:23:be:6e:7f:3e:b0:d7:cf:64:9a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Oct 19 15:06:43 2025 GMT Not After : Oct 22 23:34:43 2025 GMT Subject: CN=56C5E6B8C9B5AAE948BC08D978C3CA13ED25A162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c8:4e:27:14:fe:fd:23:9e:c5:8f:bd:3a:22: cf:38:b8:7b:cd:ed:95:3e:64:97:02:7f:d2:f6:17: b8:1d:fc:17:75:5a:12:b8:81:75:d0:75:be:ce:ed: 7b:3c:03:c6:72:da:99:30:57:09:5c:ae:39:b2:aa: fb:bd:01:5d:00:13:cf:b6:19:1c:97:32:31:d6:bf: f2:9e:9b:f4:86:c4:e3:70:b6:60:88:f0:67:da:9d: 9d:83:e1:22:42:8c:e9:41:64:a5:e8:9f:a5:4d:17: b5:a7:fa:f5:17:f2:1c:c8:39:8d:55:03:b9:f7:a4: 59:1b:48:8c:f4:db:fe:36:0c:ac:7d:7d:db:69:4e: 3b:00:07:f0:30:d6:2d:a1:b9:48:a6:16:bc:05:34: d8:08:45:0f:15:d2:ca:95:28:3b:02:93:49:7d:25: b5:64:3e:d2:e6:98:cf:90:2d:dd:01:05:b1:51:d5: cf:17:dc:63:bb:13:b8:e7:d4:4e:a2:f9:45:6e:0e: 8d:d7:6b:4f:38:06:0c:0f:74:a7:f8:25:75:cd:c3: 37:5b:e2:7a:4f:88:90:5a:09:70:fb:82:75:b0:31: 05:50:69:a7:17:41:ec:77:28:91:7a:13:c5:ba:89: 64:85:10:c6:fb:fa:ea:30:d2:eb:93:8f:24:5b:68: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C5:E6:B8:C9:B5:AA:E9:48:BC:08:D9:78:C3:CA:13:ED:25:A1:62 X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ba:88:84:1e:35:a0:59:2d:aa:dc:bc:e6:dd:94:6b:00:84: 10:ac:ae:07:f3:d6:10:fe:c6:27:36:32:71:e2:d0:2d:67:8e: ec:b4:0b:22:f9:f9:e0:9f:c8:6e:47:85:a8:91:d2:12:06:93: 3d:09:3b:1e:00:09:8e:1e:c6:13:e2:15:7b:b9:de:c7:81:c2: 98:b7:9b:cd:02:ed:f8:58:5f:c7:52:36:52:b5:3a:55:04:b5: db:a5:e3:01:19:1e:cc:fe:d1:af:db:51:46:82:99:88:fc:95: ca:64:79:85:96:06:26:1e:15:d7:8d:f5:ba:a3:a7:92:a8:bc: cf:73:33:b5:c9:5a:bb:0c:60:9e:f9:73:8f:6a:6c:4a:eb:5d: e1:ad:7b:e2:be:9e:ad:d2:93:7a:ff:b2:d0:9e:18:61:d3:0b: 40:52:39:f6:77:97:b7:87:59:68:8a:9e:18:ca:8d:88:58:08: df:8c:02:3a:3b:3b:b6:35:64:c6:b0:81:2b:5f:28:21:19:b4: b9:27:aa:2f:bd:9c:a0:95:0a:69:16:ca:6c:34:7d:5b:37:7c: 6a:df:5b:21:19:bf:7c:d2:ea:b2:65:81:6f:f9:c8:23:a6:8c: 08:63:74:57:4e:4b:f3:f9:95:a2:e6:92:ed:6f:dd:7e:fd:73: b3:27:b4:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgWTK9EKfTlMI75ufz6w189kmmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTEwMTkxNTA2NDNaFw0yNTEwMjIyMzM0NDNaMDMxMTAvBgNV BAMTKDU2QzVFNkI4QzlCNUFBRTk0OEJDMDhEOTc4QzNDQTEzRUQyNUExNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlyE4nFP79I57Fj706Is84uHvN 7ZU+ZJcCf9L2F7gd/Bd1WhK4gXXQdb7O7Xs8A8Zy2pkwVwlcrjmyqvu9AV0AE8+2 GRyXMjHWv/Kem/SGxONwtmCI8GfanZ2D4SJCjOlBZKXon6VNF7Wn+vUX8hzIOY1V A7n3pFkbSIz02/42DKx9fdtpTjsAB/Aw1i2huUimFrwFNNgIRQ8V0sqVKDsCk0l9 JbVkPtLmmM+QLd0BBbFR1c8X3GO7E7jn1E6i+UVuDo3Xa084BgwPdKf4JXXNwzdb 4npPiJBaCXD7gnWwMQVQaacXQex3KJF6E8W6iWSFEMb7+uow0uuTjyRbaJaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVsXmuMm1qulIvAjZeMPKE+0loWIwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGW6iIQeNaBZLarcvObdlGsAhBCsrgfz1hD+ xic2MnHi0C1njuy0CyL5+eCfyG5HhaiR0hIGkz0JOx4ACY4exhPiFXu53seBwpi3 m80C7fhYX8dSNlK1OlUEtdul4wEZHsz+0a/bUUaCmYj8lcpkeYWWBiYeFdeN9bqj p5KovM9zM7XJWrsMYJ75c49qbErrXeGte+K+nq3Sk3r/stCeGGHTC0BSOfZ3l7eH WWiKnhjKjYhYCN+MAjo7O7Y1ZMawgStfKCEZtLknqi+9nKCVCmkWymw0fVs3fGrf WyEZv3zS6rJlgW/5yCOmjAhjdFdOS/P5laLmku1v3X79c7MntKI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:45 2025 by rpki-client