$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: bfSeFfpzZBBQzYSdtRfTT4c8XJTGbO96KiMKa9JrCm4= Subject key identifier: 70:BF:2C:14:BE:59:12:15:59:5C:1A:8E:90:49:97:2D:4E:0F:2A:1E Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 4C718699D78167459ED11EB19DAD645A88FFF244 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 0121 Signing time: Mon 03 Nov 2025 09:50:04 +0000 Manifest this update: Mon 03 Nov 2025 09:45:04 +0000 Manifest next update: Thu 06 Nov 2025 19:26:04 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=) 2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: QtVJm3pZdDL9ybByw6AudzOqkUkKx9Rvr1UdovkgysE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:71:86:99:d7:81:67:45:9e:d1:1e:b1:9d:ad:64:5a:88:ff:f2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Nov 3 09:45:04 2025 GMT Not After : Nov 6 19:26:04 2025 GMT Subject: CN=70BF2C14BE591215595C1A8E9049972D4E0F2A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:10:ea:7a:41:36:07:9b:90:73:93:9a:cb: 31:ce:60:4b:ed:dc:28:65:5f:a0:38:13:b4:ad:61: 5f:b9:bd:80:01:e0:b3:f4:65:17:ec:91:6a:59:bc: 28:46:8c:6a:15:f2:41:d4:73:ca:fd:bb:3d:64:90: 61:cf:fd:a1:fd:d2:bf:90:d2:b3:03:9a:c6:1c:14: 1f:e5:bb:c0:37:40:c6:72:22:9d:45:c8:0a:f2:70: c9:7e:ca:9b:a5:87:64:31:41:3b:71:99:63:e5:af: 30:21:59:34:5d:48:21:e8:ae:85:f0:1c:db:8d:98: 8d:2f:9c:fe:fd:eb:11:77:74:7e:9a:78:eb:4c:11: a3:28:c1:ab:19:ae:93:2f:df:3d:71:d4:c4:3b:4a: a9:10:09:c8:ac:e4:c8:08:9b:4b:7d:0c:12:80:7b: b1:5b:30:7a:a7:fb:45:e8:c3:80:10:16:09:2d:fd: 49:67:2e:e7:50:ac:dd:1d:ca:2e:e0:8f:a1:83:37: 4a:23:77:02:4d:e7:cb:a6:c6:c9:c3:a7:79:96:7a: d6:8e:d6:bf:80:06:31:04:72:ef:7f:75:d5:fb:09: 23:a1:22:0f:76:8c:2d:64:63:00:d1:fb:8f:fd:d8: f9:79:e4:c7:58:d0:2f:42:e4:7e:b1:1d:23:5b:ab: f1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BF:2C:14:BE:59:12:15:59:5C:1A:8E:90:49:97:2D:4E:0F:2A:1E X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:61:d8:2a:4a:5a:e8:f2:b7:9f:9e:ae:2a:94:05:dc:f0:ec: c2:4c:e2:05:91:b1:10:b2:33:7f:d7:22:72:ad:96:16:e0:47: 87:17:ea:cf:61:69:ee:99:f5:71:89:33:33:17:44:ad:5a:d1: 27:fb:42:4e:26:c7:5a:33:39:42:93:f4:9b:3a:a9:2a:6d:d9: e0:24:df:e8:dd:67:ef:ea:00:1c:65:75:21:dc:1d:54:e1:7b: 67:f1:ca:0f:c3:c9:fc:13:b1:e7:41:7b:41:c3:61:bc:57:70: 92:71:f8:2c:1c:69:cf:42:47:38:b4:a5:92:ca:1a:10:49:97: bb:7c:45:cf:b4:af:e2:1a:e4:d1:4b:ab:0c:4d:b2:4f:36:bb: 96:e1:76:bc:d9:d3:93:30:5d:13:60:0e:ff:d9:f1:42:2b:e4: 07:e8:82:7b:d4:31:a4:02:2d:c1:8e:a4:f0:30:c0:3a:3d:e0: 37:77:e2:16:43:6b:72:cf:2c:95:35:5f:f0:67:41:07:a6:86: 44:8b:0c:d5:9f:74:95:4e:50:ac:5c:54:c4:bd:34:42:ee:35: 53:ec:69:2a:29:8b:1c:73:8b:bb:b4:b2:cc:a6:74:9f:8f:56: 0a:81:3e:7c:1e:af:4e:da:27:df:a1:2b:b3:d7:69:1a:b2:03: d8:a7:8d:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHGGmdeBZ0We0R6xna1kWoj/8kQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTExMDMwOTQ1MDRaFw0yNTExMDYxOTI2MDRaMDMxMTAvBgNV BAMTKDcwQkYyQzE0QkU1OTEyMTU1OTVDMUE4RTkwNDk5NzJENEUwRjJBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52RDqekE2B5uQc5OayzHOYEvt 3ChlX6A4E7StYV+5vYAB4LP0ZRfskWpZvChGjGoV8kHUc8r9uz1kkGHP/aH90r+Q 0rMDmsYcFB/lu8A3QMZyIp1FyArycMl+ypulh2QxQTtxmWPlrzAhWTRdSCHoroXw HNuNmI0vnP796xF3dH6aeOtMEaMowasZrpMv3z1x1MQ7SqkQCcis5MgIm0t9DBKA e7FbMHqn+0Xow4AQFgkt/UlnLudQrN0dyi7gj6GDN0ojdwJN58umxsnDp3mWetaO 1r+ABjEEcu9/ddX7CSOhIg92jC1kYwDR+4/92Pl55MdY0C9C5H6xHSNbq/G3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcL8sFL5ZEhVZXBqOkEmXLU4PKh4wHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBh2CpKWujyt5+eriqUBdzw7MJM4gWRsRCy M3/XInKtlhbgR4cX6s9hae6Z9XGJMzMXRK1a0Sf7Qk4mx1ozOUKT9Js6qSpt2eAk 3+jdZ+/qABxldSHcHVThe2fxyg/DyfwTsedBe0HDYbxXcJJx+Cwcac9CRzi0pZLK GhBJl7t8Rc+0r+Ia5NFLqwxNsk82u5bhdrzZ05MwXRNgDv/Z8UIr5AfognvUMaQC LcGOpPAwwDo94Dd34hZDa3LPLJU1X/BnQQemhkSLDNWfdJVOUKxcVMS9NELuNVPs aSopixxzi7u0ssymdJ+PVgqBPnwer07aJ9+hK7PXaRqyA9injU4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:21:57 2025 by rpki-client