
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
File:                     5058CBC5AF21280546887DEF6CFA4341A8F99150.mft (raw, json)
Hash identifier:          wej0Cyue0X57n78G6oOg1Y++Rr3PSVc5kx9XTJbq7tM=
Subject key identifier:   D6:42:FB:A7:B1:A8:C9:13:7F:2C:79:3C:52:D3:4E:87:5A:46:33:44
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Certificate issuer:       /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial:       7A23F59BD7E2C270665DDB6B487D88E099CDBB99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
Manifest number:          F8
Signing time:             Sun 02 Nov 2025 16:12:02 +0000
Manifest this update:     Sun 02 Nov 2025 16:07:02 +0000
Manifest next update:     Wed 05 Nov 2025 17:24:02 +0000
Files and hashes:         1: 3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (hash: DCq8NWxNUdZYR2PU43lxvyiXQg84ScqhviiyUTDm8RE=)
                          2: 3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa (hash: H5limOsnw+oXhtBdjEt0fmYaX6A1zxSuyCkqRKHAtzA=)
                          3: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (hash: /r/8FbAnrRY9+Q4m/2LANGmYkN67339eqGM2Pr09v38=)
                          4: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (hash: f7FOJnMyBZ4XNlHdy991ZxwGJQehkmOcfk+LL3+U5Fs=)
                          5: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (hash: +yojSrIhe0qfYYoNaS+bjIGGRqdco9vP3EvqLvXSniA=)
                          6: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (hash: NITrN6jD7nr5oOwLkcfYoDWIPHvMh97xHgy4U3OmoE8=)
                          7: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (hash: vVq7LUx06+oQEtVvYge1Q2+hkKlr27bVyXKL74EChRk=)
                          8: 5058CBC5AF21280546887DEF6CFA4341A8F99150.crl (hash: YskjG/CD9AQzU2o10w9RhJH3+B2Sy4OSri1dHzxk+Ag=)
                          9: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (hash: qykkhhxHnO0ydNs5JBAQOA0f9BAZyPwR6KhTyOO68q8=)
                          10: 3230322e3135322e3230312e302f32342d3234203d3e203633383539.roa (hash: VB7muXOs/KUgbeY56FO085YD+k7/KBG+CVGoqwGS/LQ=)
                          11: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (hash: 5psPknEmypZIRcV8YM/0X/lutsHgczkNWReWTG7yCJE=)
                          12: 3230322e3135322e3139322e302f32342d3234203d3e203633383539.roa (hash: sueljug0A0cLELzQ10q3SYM/qivmbpI6TdGOwm3lCaU=)
                          13: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (hash: 31mkkj2+9HZK3DntlbInuHBDcdFSQRlGXD8Zmc4rUM0=)
                          14: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (hash: q9iza0H2rtEt+ACiqvHrrsVLjS6bvi7IjiExCl+Gt50=)
                          15: 3230322e3135322e3139322e302f32302d3230203d3e203633383539.roa (hash: f8b8ZEBPlEImYkbnkpmvkas1RzOl3JK/cPP6s/pxu7I=)
                          16: 3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa (hash: tgGGslIm+JlwZ3B9SMFEH85qZqhmUeU8C5Oc+jwQtf0=)
                          17: 3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa (hash: CEJ3yKIwnTpt+ImukVgRvxnWPT8Hth1fQgkKpGWcSEo=)
                          18: 3135302e3132392e3139312e302f32342d3234203d3e203338313439.roa (hash: sg9h3bKYAlqGHJDMvyUj6H0/M1Aw0iaDSiX106si2NI=)
                          19: 3130332e332e3231322e302f32342d3234203d3e203338313439.roa (hash: BdFOwYWDeGnfKDAaGDA7BBj23j1cFiNFG1WQ7TDA43I=)
                          20: 3130332e332e3231342e302f32342d3234203d3e203338313439.roa (hash: 1FiHn4gIC4kH5MoP4rKX52q2L0AmuUmzqqq7XVdC5N0=)
                          21: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (hash: U7zsrHiqdt1Qo1B6xfxOyIpSIT6Eg44KAPPrNmLrIG4=)
                          22: 3230322e3135322e3230342e302f32342d3234203d3e203633383539.roa (hash: Axn8ERr+dCmvsiqqyuPKnJfBVVJriYKk4K22F1CTADk=)
                          23: 3230322e3135322e3139392e302f32342d3234203d3e203633383539.roa (hash: hEA8tWNHo/TIh0zdljEtCOyHV35vtVjy/xEF9Jp2eSk=)
                          24: 3230322e3135322e3139372e302f32342d3234203d3e203633383539.roa (hash: oYNKTwfcxqyIB1OXRbrwMgJ3fSYv5LQtaFy8X3lU6Gg=)
                          25: 3230322e3135322e3139352e302f32342d3234203d3e203633383539.roa (hash: xIwOhaK9F8GaMLO+48a1gHgLSh8/QXMa+ox/aPfD8ZE=)
                          26: 3230322e3135322e3230372e302f32342d3234203d3e203633383539.roa (hash: Eh7tmqkuq57xlfobk4M7FLmYqi5AfrKI1DM6fiC6my0=)
                          27: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (hash: aHFMnyhh47UaoLaj5P570D9nqN6nQjfKB0KyJ10Bqlo=)
                          28: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (hash: 08dE8+5h5VM8IAQN0ml1YiJAjJEdE4Qbpafz+/inBuI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
                          rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 17:24:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:23:f5:9b:d7:e2:c2:70:66:5d:db:6b:48:7d:88:e0:99:cd:bb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
        Validity
            Not Before: Nov  2 16:07:02 2025 GMT
            Not After : Nov  5 17:24:02 2025 GMT
        Subject: CN=D642FBA7B1A8C9137F2C793C52D34E875A463344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:5f:44:ee:b0:c5:42:05:d3:e1:cc:47:23:
                    57:9c:53:9e:e3:7a:f5:c3:72:f7:74:fd:3c:0a:ef:
                    37:84:12:6a:2f:cd:0e:73:ff:03:94:ea:51:07:6b:
                    0d:72:5e:bb:05:be:e8:56:8a:4b:f6:97:6a:9d:e9:
                    87:8b:12:cf:b4:90:eb:1b:b2:64:7b:11:e0:99:ff:
                    7a:da:2c:d6:ca:e7:b3:22:9c:ea:f4:19:92:f4:d0:
                    8f:91:01:ad:fc:ae:65:a9:ce:33:50:0f:92:9c:7c:
                    1d:01:f4:1e:24:d7:ae:c0:7d:d5:c9:4f:59:78:27:
                    60:2c:40:50:b3:e8:69:11:ef:a2:11:7b:4a:e4:9c:
                    1f:1d:6b:3e:71:d8:81:ab:6f:c5:62:5b:e1:2e:2b:
                    27:a5:d0:7f:df:db:1e:98:32:11:9c:cb:5b:b0:ca:
                    09:cd:be:b0:63:a2:b2:06:27:82:ed:ca:c5:fc:18:
                    d6:dd:3a:db:82:08:5a:ad:db:2d:5c:00:bb:4a:44:
                    d6:ea:70:36:1d:78:88:a1:13:4a:08:72:72:a6:81:
                    e9:d4:03:d4:6c:5e:32:ad:74:7e:63:20:03:3d:9f:
                    7e:11:9a:66:50:ab:7b:34:05:3b:9a:e9:5a:9f:e1:
                    15:dc:8a:ec:97:37:21:b9:af:5c:39:70:f1:e6:4c:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:42:FB:A7:B1:A8:C9:13:7F:2C:79:3C:52:D3:4E:87:5A:46:33:44
            X509v3 Authority Key Identifier:
                keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         9d:7c:fc:f3:77:4d:83:bf:7c:36:75:ed:41:64:35:92:a7:8e:
         b5:a3:4f:f0:46:35:6f:3f:ed:7e:e7:d0:5f:5d:e2:f7:ba:10:
         a6:c4:4f:b1:54:a6:17:bb:fa:41:37:03:a4:65:bb:de:63:1c:
         fe:87:3f:84:7d:88:98:f3:0e:bb:ee:51:8a:24:11:7d:61:b6:
         28:61:24:fa:88:d4:36:cb:66:eb:73:a5:63:e1:b4:61:a0:d0:
         3c:fa:1a:33:c6:3e:e7:01:98:d2:f1:d2:0a:8f:60:70:1d:a5:
         d3:24:7d:99:d5:ba:5b:59:11:5f:09:cf:cd:7a:71:5b:62:2b:
         f7:ef:0b:54:47:67:c0:ef:34:fb:40:f2:db:fd:c4:5d:62:52:
         98:c6:ef:95:aa:c5:0c:6d:40:05:07:3b:09:bf:94:65:48:23:
         6e:3d:6e:0f:5e:df:f2:9c:79:13:ae:a9:cc:41:c4:76:c4:63:
         20:d6:4f:16:39:36:95:ae:63:b0:a7:85:66:6f:bd:6b:90:a1:
         eb:a5:d3:67:cd:b0:4c:67:bd:85:73:d4:8e:db:2c:76:78:b1:
         7e:ce:59:ae:aa:16:3a:86:15:14:bd:9a:5b:68:67:1d:8f:70:
         7f:05:a7:42:f6:44:91:90:63:88:cc:04:11:d0:d5:b9:6e:fd:
         a7:bf:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:56:42 2025 by rpki-client