$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: R0OCULvi+bQIjSMqjnksHSjM/qRAooaZINUZn2KUS/8= Subject key identifier: 71:85:FF:FA:8E:24:25:C2:9E:CD:38:C7:F8:30:D0:6B:B4:BB:EE:65 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 07BC63A5D0D341C2E3CD42F729CCA3D53F83848C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 049E Signing time: Tue 04 Nov 2025 04:51:50 +0000 Manifest this update: Tue 04 Nov 2025 04:46:50 +0000 Manifest next update: Fri 07 Nov 2025 16:25:50 +0000 Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) 2: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: t5fGLcbZbB+XAv5XyIy1d/r5qIv+N8QeuyQjdc6hz7Q=) 3: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) 4: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:bc:63:a5:d0:d3:41:c2:e3:cd:42:f7:29:cc:a3:d5:3f:83:84:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Nov 4 04:46:50 2025 GMT Not After : Nov 7 16:25:50 2025 GMT Subject: CN=7185FFFA8E2425C29ECD38C7F830D06BB4BBEE65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:43:1d:31:bc:3b:e7:12:9f:6f:e5:dd:a5: 74:26:54:57:d4:20:1d:74:0e:e3:b5:b2:fc:d5:3f: 04:b0:6a:1b:1c:28:ff:df:c2:09:0f:52:b0:ac:54: 68:48:0b:b0:f2:66:82:66:9b:c1:dd:62:94:8a:23: 96:3a:2f:c7:43:bb:10:a0:f8:0a:4b:1f:80:01:4c: 04:52:ef:c4:0f:de:87:ec:96:21:25:d8:ad:13:28: a3:8c:1e:a3:4d:51:50:e9:40:6d:36:03:b9:4d:69: 35:84:42:b2:5a:44:2a:06:a2:15:7d:f7:55:12:e2: 5c:a9:17:5c:5a:31:cd:42:65:88:4f:05:9e:df:f5: 81:f7:b7:4b:5d:59:0d:b6:c2:c9:e3:aa:bd:6a:01: c5:05:17:c9:4e:a8:e5:9f:f8:4d:67:a1:cc:6e:7b: cb:28:29:bb:f3:c5:b4:5a:a3:93:3d:c6:af:b1:9b: 16:8e:fa:f4:c5:78:23:da:36:2b:8f:a8:df:7d:97: e4:87:8b:11:fc:b0:46:24:ec:72:ce:f1:58:93:75: e6:70:d0:09:6e:ba:7f:f6:fd:91:07:a7:b9:24:c5: 4e:23:19:66:dc:ac:60:87:9b:b0:eb:54:1d:6b:a1: 88:30:30:39:41:d4:4e:b7:9a:59:a1:23:cc:2c:41: c7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:85:FF:FA:8E:24:25:C2:9E:CD:38:C7:F8:30:D0:6B:B4:BB:EE:65 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:37:e4:56:d1:6f:f8:1b:f9:e8:41:9d:b0:67:c3:6c:5a:91: 18:32:44:97:d9:d9:43:9c:3b:f7:ca:c9:1b:d7:dc:7f:9c:ca: 4a:82:73:0f:30:69:67:41:38:33:aa:70:32:85:42:30:ff:a8: 47:fe:48:9a:0a:41:4e:d9:af:e8:4a:f9:18:5c:70:f8:06:71: d8:c8:d0:4a:24:54:de:d2:0e:80:03:39:a7:d2:4c:15:05:81: 88:34:7e:e4:b4:e6:0b:dd:d8:a5:cd:a4:18:2f:bf:a9:25:78: fe:3b:a8:fb:3d:e1:ab:5d:e2:db:12:35:a5:3f:91:b4:83:c1: 45:95:94:07:de:9d:9f:90:f7:fe:96:a8:7e:42:8b:74:e1:a7: 77:fe:e9:db:01:4e:39:02:5d:1c:83:6b:bc:f8:c6:8d:6b:95: 85:5a:b2:72:74:71:45:89:6d:89:08:8e:73:c7:a6:45:a5:85: 1d:e8:e4:b3:28:e9:41:91:f4:b6:be:a0:1d:5a:fe:5e:25:3e: 24:9f:ee:9e:f5:c7:be:46:8d:fd:de:89:66:64:a2:e1:1c:b7: 8a:c5:cd:96:bb:44:0b:1d:80:87:2f:6d:9a:2b:68:b9:30:ff: b2:9a:9e:a9:c1:86:3f:a9:83:77:09:7b:39:54:09:0c:53:2e: 63:25:ad:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB7xjpdDTQcLjzUL3Kcyj1T+DhIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTExMDQwNDQ2NTBaFw0yNTExMDcxNjI1NTBaMDMxMTAvBgNV BAMTKDcxODVGRkZBOEUyNDI1QzI5RUNEMzhDN0Y4MzBEMDZCQjRCQkVFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxG0MdMbw75xKfb+XdpXQmVFfU IB10DuO1svzVPwSwahscKP/fwgkPUrCsVGhIC7DyZoJmm8HdYpSKI5Y6L8dDuxCg +ApLH4ABTARS78QP3ofsliEl2K0TKKOMHqNNUVDpQG02A7lNaTWEQrJaRCoGohV9 91US4lypF1xaMc1CZYhPBZ7f9YH3t0tdWQ22wsnjqr1qAcUFF8lOqOWf+E1nocxu e8soKbvzxbRao5M9xq+xmxaO+vTFeCPaNiuPqN99l+SHixH8sEYk7HLO8ViTdeZw 0Aluun/2/ZEHp7kkxU4jGWbcrGCHm7DrVB1roYgwMDlB1E63mlmhI8wsQcerAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcYX/+o4kJcKezTjH+DDQa7S77mUwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHI35FbRb/gb+ehBnbBnw2xakRgyRJfZ2UOc O/fKyRvX3H+cykqCcw8waWdBODOqcDKFQjD/qEf+SJoKQU7Zr+hK+RhccPgGcdjI 0EokVN7SDoADOafSTBUFgYg0fuS05gvd2KXNpBgvv6kleP47qPs94atd4tsSNaU/ kbSDwUWVlAfenZ+Q9/6WqH5Ci3Thp3f+6dsBTjkCXRyDa7z4xo1rlYVasnJ0cUWJ bYkIjnPHpkWlhR3o5LMo6UGR9La+oB1a/l4lPiSf7p71x75Gjf3eiWZkouEct4rF zZa7RAsdgIcvbZoraLkw/7KanqnBhj+pg3cJezlUCQxTLmMlrbI= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:37 2025 by rpki-client