$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: hbJ3FW2l/MpDPGe527LKWPWDNPYNnIhYAzWec893KpQ= Subject key identifier: CE:83:0E:D9:9D:85:C9:F6:2E:21:37:51:2B:0A:57:AC:14:47:7B:F7 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 2649D40EE7A940D9AF48B0F036DEEF2FED76FFD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 0476 Signing time: Wed 06 Aug 2025 15:20:51 +0000 Manifest this update: Wed 06 Aug 2025 15:15:51 +0000 Manifest next update: Sat 09 Aug 2025 21:24:51 +0000 Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) 2: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: IM4Qwq9/Fo2nmhY+NKVzKUVCPqBqE3ZJSloxZrgIfsk=) 3: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: q3D0gokLtaoTWGXZ65FjjWiIlEBRw2BR2w0tZwoughw=) 4: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:49:d4:0e:e7:a9:40:d9:af:48:b0:f0:36:de:ef:2f:ed:76:ff:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Aug 6 15:15:51 2025 GMT Not After : Aug 9 21:24:51 2025 GMT Subject: CN=CE830ED99D85C9F62E2137512B0A57AC14477BF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:71:8c:02:cc:65:b0:23:cb:bc:ad:4b:3d: 76:71:06:97:31:1e:08:df:d3:7b:3d:2d:77:bd:3e: a8:b7:13:e9:2d:4d:c8:12:56:95:01:2a:02:dd:08: 01:2b:fb:9c:cb:16:f2:7a:40:96:d0:98:cd:62:7b: 49:72:d9:1e:84:68:2f:d2:04:86:09:ab:14:c5:17: de:15:fc:1c:1f:a8:99:b5:6a:46:7e:fb:63:1a:d0: bb:55:b8:5f:04:f9:14:b7:d1:f1:ae:cd:81:f0:d3: b6:61:bc:2c:b8:77:67:79:97:ff:41:68:56:37:38: c5:08:81:b1:10:e7:f9:5e:b4:72:15:27:52:b0:49: af:88:ee:43:73:35:47:90:61:35:5a:d5:df:52:7f: a8:3d:9b:72:d6:33:03:31:41:10:e8:3f:95:c1:94: c8:5c:2b:f9:d9:0e:a3:2f:65:b2:84:9e:02:fa:e5: 19:8a:29:16:b3:87:c2:06:b3:b1:a0:50:d4:5d:eb: 6c:fa:83:6a:d9:ab:62:e8:2a:45:00:4b:1b:09:ed: 1f:15:95:6f:2e:60:63:30:5c:c9:cb:4c:61:a2:88: 53:22:e4:37:6e:20:db:6f:b7:20:c2:54:2c:e4:92: 12:dd:64:11:9e:8b:12:bc:c5:4e:a5:ee:d2:ff:60: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:83:0E:D9:9D:85:C9:F6:2E:21:37:51:2B:0A:57:AC:14:47:7B:F7 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:af:62:13:0b:bf:49:ab:e8:a4:df:af:fc:83:51:ef:e0:1d: ac:c8:5b:e7:62:e8:68:8b:fd:a9:b5:ef:8e:e6:56:29:cd:13: 90:03:98:7b:66:4c:3f:48:92:6a:20:0b:8a:0c:f7:fc:d5:2a: 88:14:fb:d2:3e:59:37:f8:b2:b1:2f:41:c8:3d:d8:81:f5:d4: 0c:f6:bb:ff:a2:f2:1a:df:03:5c:07:5f:4c:71:2a:aa:61:69: ee:d9:44:ca:00:fc:b4:7b:43:38:1b:bc:c2:7f:a1:02:46:b6: 43:b6:78:a6:68:c0:ba:f6:c1:12:c4:a2:9b:9c:1e:ae:54:00: 1b:14:83:d0:8d:39:66:fb:32:d2:46:70:6a:cc:5d:b0:8a:dc: a7:fa:82:00:75:6c:80:85:04:8a:a2:33:78:5c:7d:c7:ce:71: f3:d7:bf:ab:c4:b3:44:2c:c5:36:de:03:c7:76:cd:cd:8c:4e: 7a:1c:7e:74:15:94:a3:01:d4:b4:c5:06:ed:72:5b:2a:2b:14: f9:3e:89:57:b2:8f:a0:33:52:ce:c3:c8:62:1f:cd:76:79:32: 4b:57:87:90:21:28:2a:70:6c:be:a1:10:a2:36:04:69:26:71: 43:8e:98:26:cc:8c:62:76:d6:88:5c:e8:e9:b6:51:98:d0:3c: e7:fd:13:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJknUDuepQNmvSLDwNt7vL+12/9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTA4MDYxNTE1NTFaFw0yNTA4MDkyMTI0NTFaMDMxMTAvBgNV BAMTKENFODMwRUQ5OUQ4NUM5RjYyRTIxMzc1MTJCMEE1N0FDMTQ0NzdCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZXGMAsxlsCPLvK1LPXZxBpcx Hgjf03s9LXe9Pqi3E+ktTcgSVpUBKgLdCAEr+5zLFvJ6QJbQmM1ie0ly2R6EaC/S BIYJqxTFF94V/BwfqJm1akZ++2Ma0LtVuF8E+RS30fGuzYHw07ZhvCy4d2d5l/9B aFY3OMUIgbEQ5/letHIVJ1KwSa+I7kNzNUeQYTVa1d9Sf6g9m3LWMwMxQRDoP5XB lMhcK/nZDqMvZbKEngL65RmKKRazh8IGs7GgUNRd62z6g2rZq2LoKkUASxsJ7R8V lW8uYGMwXMnLTGGiiFMi5DduINtvtyDCVCzkkhLdZBGeixK8xU6l7tL/YBS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzoMO2Z2FyfYuITdRKwpXrBRHe/cwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWvYhMLv0mr6KTfr/yDUe/gHazIW+di6GiL /am1747mVinNE5ADmHtmTD9IkmogC4oM9/zVKogU+9I+WTf4srEvQcg92IH11Az2 u/+i8hrfA1wHX0xxKqphae7ZRMoA/LR7QzgbvMJ/oQJGtkO2eKZowLr2wRLEopuc Hq5UABsUg9CNOWb7MtJGcGrMXbCK3Kf6ggB1bICFBIqiM3hcfcfOcfPXv6vEs0Qs xTbeA8d2zc2MTnocfnQVlKMB1LTFBu1yWyorFPk+iVeyj6AzUs7DyGIfzXZ5MktX h5AhKCpwbL6hEKI2BGkmcUOOmCbMjGJ21ohc6Om2UZjQPOf9E3E= -----END CERTIFICATE-----Generated at Thu Aug 7 07:16:46 2025 by rpki-client