$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: GYf3cp6uSf5uv8dEpekVZzh8T1Zgt3G0ZUF/3cmPWuY= Subject key identifier: D2:30:F5:36:3C:42:8C:CD:A8:9F:A2:A1:04:1B:93:8C:1D:E5:CB:1F Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 4F8DEB3B8B064F0E561AF5A0E2408590B2CA33FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 0522 Signing time: Tue 04 Nov 2025 02:41:45 +0000 Manifest this update: Tue 04 Nov 2025 02:36:45 +0000 Manifest next update: Fri 07 Nov 2025 04:30:45 +0000 Files and hashes: 1: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: 58dXU2Ni2nle+/R2DWJPvYSPCgGBfML/GaA1egXmEZw=) 2: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) 3: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: I/le6Te2VCdo9U/Jhbu6/dBd0G0Ft1HGDM8GZasvyxk=) 4: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8d:eb:3b:8b:06:4f:0e:56:1a:f5:a0:e2:40:85:90:b2:ca:33:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Nov 4 02:36:45 2025 GMT Not After : Nov 7 04:30:45 2025 GMT Subject: CN=D230F5363C428CCDA89FA2A1041B938C1DE5CB1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:c2:b1:6b:2e:1b:e7:11:bf:a1:53:97:a3: 0b:6e:db:eb:17:67:bb:85:b9:a9:21:5b:66:cb:8e: 50:23:14:10:7b:0e:20:53:61:97:e3:fb:1e:05:bd: 34:b4:a4:72:01:47:2b:73:57:ce:13:ed:09:d4:6b: ea:8e:90:1e:d2:82:5b:b4:89:6f:c9:3f:e0:53:b2: f9:a4:47:ae:45:28:68:c5:7b:9e:cf:87:e2:26:2f: 2e:86:ae:4f:fd:b5:ff:33:64:2a:4e:59:65:ed:c6: 9a:97:31:5d:db:4b:c7:94:ca:04:f2:c3:db:7a:f8: 47:fc:f7:b2:c7:f6:ce:e3:9b:ce:f8:10:39:56:72: 72:42:d6:1e:9f:fd:bb:93:06:13:51:c4:27:55:d1: c1:71:96:20:94:73:36:4a:ac:e0:e5:e0:1b:85:72: 2c:4e:ba:6a:90:40:34:8e:35:1a:10:b9:1d:57:49: f7:ea:b7:9e:e2:8b:cd:89:36:85:46:d1:8a:a3:ca: 8e:fa:4a:ed:da:5e:49:a7:9c:5f:89:cf:52:a0:70: 56:8f:9a:7a:df:1b:53:4d:60:24:49:1e:4c:f6:1c: ed:8e:c1:7e:d1:0a:14:ce:0c:db:2b:88:ba:ea:ae: 99:91:48:52:93:78:2f:44:50:ed:5e:d3:d5:f0:46: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:30:F5:36:3C:42:8C:CD:A8:9F:A2:A1:04:1B:93:8C:1D:E5:CB:1F X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c3:de:49:31:16:6f:02:64:5e:83:69:a8:11:47:44:00:30: b6:87:3f:c6:d2:8a:0a:45:60:ae:c3:50:44:e9:7e:b9:1b:2d: 77:52:ba:3e:fd:c2:45:fe:be:be:af:cb:9f:40:62:9b:6a:58: 8c:d4:b3:d5:18:24:84:0b:dd:a9:18:f4:c7:3c:cf:9e:fc:be: 81:7e:38:98:c1:51:87:27:f2:3e:7a:da:cb:6b:a0:72:b5:12: 5c:c4:f5:e6:9a:49:92:50:c2:10:b9:81:c9:4a:7b:1b:1b:d4: c9:99:a8:93:f3:c6:71:6f:a9:70:b1:dc:4f:85:7c:39:35:39: 73:f7:43:84:64:dc:a1:16:bb:0b:51:a4:c7:17:44:0e:d9:a5: 30:d5:6e:34:b9:15:38:3a:6a:15:57:e8:84:fc:50:98:48:a3: b1:f2:c3:7f:50:8c:0f:a2:a0:23:d4:c0:2e:92:58:c0:41:71: 00:20:3e:4a:eb:b3:bb:9e:fc:5f:b4:51:f0:1d:da:e9:4f:9d: 81:6a:90:47:56:34:e1:50:25:8f:35:72:27:a7:04:5d:5f:dd: a3:cc:31:ad:03:69:76:a2:dd:42:5e:44:62:79:6d:78:d7:37: 02:f1:1a:23:7c:66:56:99:17:35:db:20:37:17:05:f2:43:6d: 21:a4:50:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT43rO4sGTw5WGvWg4kCFkLLKM/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTExMDQwMjM2NDVaFw0yNTExMDcwNDMwNDVaMDMxMTAvBgNV BAMTKEQyMzBGNTM2M0M0MjhDQ0RBODlGQTJBMTA0MUI5MzhDMURFNUNCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD08Kxay4b5xG/oVOXowtu2+sX Z7uFuakhW2bLjlAjFBB7DiBTYZfj+x4FvTS0pHIBRytzV84T7QnUa+qOkB7Sglu0 iW/JP+BTsvmkR65FKGjFe57Ph+ImLy6Grk/9tf8zZCpOWWXtxpqXMV3bS8eUygTy w9t6+Ef897LH9s7jm874EDlWcnJC1h6f/buTBhNRxCdV0cFxliCUczZKrODl4BuF cixOumqQQDSONRoQuR1XSffqt57ii82JNoVG0Yqjyo76Su3aXkmnnF+Jz1KgcFaP mnrfG1NNYCRJHkz2HO2OwX7RChTODNsriLrqrpmRSFKTeC9EUO1e09XwRjnRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0jD1NjxCjM2on6KhBBuTjB3lyx8wHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3D3kkxFm8CZF6DaagRR0QAMLaHP8bSigpF YK7DUETpfrkbLXdSuj79wkX+vr6vy59AYptqWIzUs9UYJIQL3akY9Mc8z578voF+ OJjBUYcn8j562stroHK1ElzE9eaaSZJQwhC5gclKexsb1MmZqJPzxnFvqXCx3E+F fDk1OXP3Q4Rk3KEWuwtRpMcXRA7ZpTDVbjS5FTg6ahVX6IT8UJhIo7Hyw39QjA+i oCPUwC6SWMBBcQAgPkrrs7ue/F+0UfAd2ulPnYFqkEdWNOFQJY81cienBF1f3aPM Ma0DaXai3UJeRGJ5bXjXNwLxGiN8ZlaZFzXbIDcXBfJDbSGkUOk= -----END CERTIFICATE-----Generated at Tue Nov 4 16:42:50 2025 by rpki-client