$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: RQ2A0N+EvUqHM5/ry8vKoanxHdp5bIZ+i9IGAc8djS8= Subject key identifier: BA:CF:19:5D:C1:FF:02:BE:CA:23:16:AA:36:B1:7B:1A:66:9F:6D:55 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 3B9AEF973EBECA2BC45521CEA6C2A3A44ECE7036 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 045F Signing time: Mon 16 Jun 2025 04:02:24 +0000 Manifest this update: Mon 16 Jun 2025 03:57:24 +0000 Manifest next update: Thu 19 Jun 2025 13:50:24 +0000 Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) 2: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 3: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: aGBeLNGL/dhyWq3T0LjLStojoAMB+GeBKuNSaDuSDuo=) 4: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: q3D0gokLtaoTWGXZ65FjjWiIlEBRw2BR2w0tZwoughw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 13:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9a:ef:97:3e:be:ca:2b:c4:55:21:ce:a6:c2:a3:a4:4e:ce:70:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Jun 16 03:57:24 2025 GMT Not After : Jun 19 13:50:24 2025 GMT Subject: CN=BACF195DC1FF02BECA2316AA36B17B1A669F6D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:dc:d3:b1:be:ea:61:0b:4f:9e:9c:30:a5: 24:71:91:d2:32:93:ac:f3:3f:ba:5b:1a:20:2d:5e: 5e:46:94:b9:ab:40:70:d8:92:bc:87:5e:2e:bd:48: 39:0a:23:e4:7e:24:f6:b1:5b:17:29:78:d7:07:f9: 11:1f:15:be:f9:61:d6:4f:5c:ec:93:b2:87:0d:6f: 51:de:e1:d4:2b:0c:fe:96:d0:0a:e2:94:7c:9a:54: b7:99:67:bb:67:df:9e:82:39:02:04:42:0d:51:b1: b8:04:fe:89:e0:a6:cb:94:2d:d4:dd:af:e4:91:8e: 6f:da:e5:6a:56:d2:9f:23:77:57:cd:6d:08:a2:f7: 15:21:17:a9:61:92:15:aa:b7:20:b4:80:7c:a0:80: 51:c8:98:da:dc:0a:31:a8:12:15:72:72:c4:84:08: f1:ec:50:53:54:ba:f8:80:05:3a:08:21:91:b6:16: e1:c6:de:8d:8c:2b:ea:40:10:e4:aa:e5:86:c2:83: f3:cb:d0:a7:81:97:05:55:06:f6:67:58:3b:0f:12: 5f:cc:48:af:3e:37:4f:3d:30:d9:40:01:e5:89:4e: 37:46:c9:34:5e:c3:c6:cd:34:d2:ef:e3:cc:8e:5e: f5:aa:96:b9:c4:fd:80:49:84:ea:9f:ac:50:a8:24: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CF:19:5D:C1:FF:02:BE:CA:23:16:AA:36:B1:7B:1A:66:9F:6D:55 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:36:58:cb:e1:a8:2d:fe:71:5e:12:7b:09:12:eb:d0:be:9a: 6b:ec:0c:7d:40:cf:07:3a:8e:b7:d7:c9:14:dd:e9:b4:17:c3: b0:77:18:ae:e4:8f:6a:61:6f:df:93:3c:1c:d2:72:83:1c:5b: 83:b1:ad:a5:86:08:0a:b1:19:1f:5e:b3:69:d7:00:7b:a6:6d: ac:88:d3:9b:bf:34:86:72:fe:ab:5f:9b:1d:c6:75:bb:86:30: 13:9e:a3:90:00:af:e8:17:ac:7c:7b:c8:7b:81:7a:c0:95:4f: 32:bf:51:44:70:a4:37:a1:65:7f:62:b5:05:5a:76:8f:b2:11: 29:6c:99:16:8e:17:d4:73:28:49:a1:b2:43:30:c9:8d:4a:ec: b3:21:33:6a:52:79:90:54:88:09:a8:86:ae:15:bf:83:ca:bd: b8:92:60:00:ef:25:94:90:cc:f3:88:82:05:01:80:84:07:dd: 4d:77:e9:82:26:90:24:b2:9f:a2:9b:fa:03:f9:c1:ba:46:07: 62:17:1c:bb:0e:eb:96:9d:d3:34:c0:b8:39:ec:53:49:c3:03: a5:0e:19:56:1c:7f:aa:76:77:bf:9b:9b:12:b8:d5:78:4e:54: 61:e8:22:38:d1:85:be:dc:71:1d:57:b2:d1:66:f1:53:0a:17: 1f:7e:07:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5rvlz6+yivEVSHOpsKjpE7OcDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTA2MTYwMzU3MjRaFw0yNTA2MTkxMzUwMjRaMDMxMTAvBgNV BAMTKEJBQ0YxOTVEQzFGRjAyQkVDQTIzMTZBQTM2QjE3QjFBNjY5RjZENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIuNzTsb7qYQtPnpwwpSRxkdIy k6zzP7pbGiAtXl5GlLmrQHDYkryHXi69SDkKI+R+JPaxWxcpeNcH+REfFb75YdZP XOyTsocNb1He4dQrDP6W0ArilHyaVLeZZ7tn356COQIEQg1RsbgE/ongpsuULdTd r+SRjm/a5WpW0p8jd1fNbQii9xUhF6lhkhWqtyC0gHyggFHImNrcCjGoEhVycsSE CPHsUFNUuviABToIIZG2FuHG3o2MK+pAEOSq5YbCg/PL0KeBlwVVBvZnWDsPEl/M SK8+N089MNlAAeWJTjdGyTRew8bNNNLv48yOXvWqlrnE/YBJhOqfrFCoJNyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUus8ZXcH/Ar7KIxaqNrF7GmafbVUwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD82WMvhqC3+cV4SewkS69C+mmvsDH1Azwc6 jrfXyRTd6bQXw7B3GK7kj2phb9+TPBzScoMcW4OxraWGCAqxGR9es2nXAHumbayI 05u/NIZy/qtfmx3GdbuGMBOeo5AAr+gXrHx7yHuBesCVTzK/UURwpDehZX9itQVa do+yESlsmRaOF9RzKEmhskMwyY1K7LMhM2pSeZBUiAmohq4Vv4PKvbiSYADvJZSQ zPOIggUBgIQH3U136YImkCSyn6Kb+gP5wbpGB2IXHLsO65ad0zTAuDnsU0nDA6UO GVYcf6p2d7+bmxK41XhOVGHoIjjRhb7ccR1XstFm8VMKFx9+B/g= -----END CERTIFICATE-----Generated at Tue Jun 17 08:15:12 2025 by rpki-client