$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: gM/hpU0PMIu/NPjmUoytRAtv+vcbMQI75cC8pA5LZ3Q= Subject key identifier: 59:34:11:AD:A8:D1:32:C8:72:2D:2D:0B:84:10:D2:24:DE:F8:3A:F0 Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 032CB0B0357AA92AA0E05BA92001D3D10C0924F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 01EF Signing time: Sun 20 Jul 2025 09:11:05 +0000 Manifest this update: Sun 20 Jul 2025 09:06:05 +0000 Manifest next update: Wed 23 Jul 2025 17:51:05 +0000 Files and hashes: 1: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: jzcCuMzgA2hFvogRgeLk2i1RvRvQmpOi1ucxBzHIX1A=) 2: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: /l4GhN0WB/45YPTtO8x4vy2OO6nmETGP86rF+ppxU4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2c:b0:b0:35:7a:a9:2a:a0:e0:5b:a9:20:01:d3:d1:0c:09:24:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Jul 20 09:06:05 2025 GMT Not After : Jul 23 17:51:05 2025 GMT Subject: CN=593411ADA8D132C8722D2D0B8410D224DEF83AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:ca:12:b2:86:cf:b5:bb:47:32:42:eb:c6: 10:bf:91:cf:86:0f:68:2d:f1:7b:69:a6:17:c5:56: 8f:c9:70:a1:17:eb:1a:e1:b8:e7:a1:0a:0a:f6:a5: 21:e9:ce:90:b1:f4:45:ff:da:c9:99:38:95:f7:7f: ad:73:30:7d:da:00:73:68:4e:e2:9c:32:bd:4c:04: 48:f9:d3:c6:33:b0:80:88:ba:8e:44:78:13:bc:77: 5c:09:8a:eb:85:9e:39:14:28:bd:b5:77:32:11:74: fc:d2:d5:60:9a:6e:de:98:77:99:57:b3:cd:9a:c9: 84:25:be:c7:37:61:0d:d9:55:61:c7:f6:b0:f8:8f: f6:cf:e7:a0:88:aa:b3:85:13:f1:f8:18:a7:98:0e: 35:36:19:52:95:fe:70:b1:83:14:1e:20:3c:4f:44: 6b:e5:96:b6:db:af:9c:67:90:b1:74:e4:d9:b7:77: ee:f7:5e:e3:86:bb:13:d4:f1:e7:0f:1a:0a:28:22: e3:1c:79:99:d6:fc:25:d3:a3:37:be:d3:3e:15:83: 93:5b:2e:4e:3f:eb:fc:f6:f3:24:4c:ed:d2:e4:37: ec:16:dd:80:66:6b:5b:52:d7:a2:c0:0b:91:68:56: 00:d0:99:3b:86:05:38:4d:31:34:ba:90:12:c9:8e: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:34:11:AD:A8:D1:32:C8:72:2D:2D:0B:84:10:D2:24:DE:F8:3A:F0 X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c1:61:c7:90:51:13:f8:d5:44:91:79:ca:0d:6a:99:84:25: d2:98:f2:9e:15:50:ae:73:eb:c6:c8:91:65:6d:e5:fb:4f:d7: 69:d8:24:c9:32:dc:d4:1d:46:9a:54:56:f3:f1:70:44:68:c7: b6:db:81:df:fc:ae:4f:1c:0a:12:a5:f9:f4:bd:81:b0:66:f7: a6:d7:a9:69:1a:3d:42:11:3c:d7:9b:6b:28:de:4b:8e:7d:3a: c7:46:5a:af:f3:fe:07:47:c8:41:3e:3b:91:4e:99:9f:45:f6: 90:09:dd:67:69:22:f2:82:b4:23:80:d4:a4:31:cf:2b:cd:b0: f0:db:f6:f6:31:2a:d9:48:e7:41:18:39:7d:07:0f:31:48:47: d9:a5:92:78:5e:84:41:9b:38:7a:ca:a3:bd:67:a7:b5:f2:7a: 63:9e:6c:42:b5:5b:32:d1:a9:f5:86:2e:bf:4a:9e:6c:ad:45: 92:69:c7:0e:78:30:00:53:1e:2c:00:53:6a:e3:41:2d:52:d5: e4:fd:a6:49:67:67:be:0f:27:ff:9e:df:96:7b:71:e8:36:22: 49:b8:77:6c:04:2d:8b:d8:77:b0:49:e0:c2:d2:61:4b:d0:d0: fc:66:9a:8a:a2:cf:94:ef:9b:14:cd:92:82:05:7d:27:ef:d3: 17:c1:5c:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyywsDV6qSqg4FupIAHT0QwJJPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNTA3MjAwOTA2MDVaFw0yNTA3MjMxNzUxMDVaMDMxMTAvBgNV BAMTKDU5MzQxMUFEQThEMTMyQzg3MjJEMkQwQjg0MTBEMjI0REVGODNBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqWsoSsobPtbtHMkLrxhC/kc+G D2gt8XtpphfFVo/JcKEX6xrhuOehCgr2pSHpzpCx9EX/2smZOJX3f61zMH3aAHNo TuKcMr1MBEj508YzsICIuo5EeBO8d1wJiuuFnjkUKL21dzIRdPzS1WCabt6Yd5lX s82ayYQlvsc3YQ3ZVWHH9rD4j/bP56CIqrOFE/H4GKeYDjU2GVKV/nCxgxQeIDxP RGvllrbbr5xnkLF05Nm3d+73XuOGuxPU8ecPGgooIuMceZnW/CXToze+0z4Vg5Nb Lk4/6/z28yRM7dLkN+wW3YBma1tS16LAC5FoVgDQmTuGBThNMTS6kBLJjjJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWTQRrajRMshyLS0LhBDSJN74OvAwHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/BYceQURP41USRecoNapmEJdKY8p4VUK5z 68bIkWVt5ftP12nYJMky3NQdRppUVvPxcERox7bbgd/8rk8cChKl+fS9gbBm96bX qWkaPUIRPNebayjeS459OsdGWq/z/gdHyEE+O5FOmZ9F9pAJ3WdpIvKCtCOA1KQx zyvNsPDb9vYxKtlI50EYOX0HDzFIR9mlknhehEGbOHrKo71np7XyemOebEK1WzLR qfWGLr9KnmytRZJpxw54MABTHiwAU2rjQS1S1eT9pklnZ74PJ/+e35Z7ceg2Ikm4 d2wELYvYd7BJ4MLSYUvQ0Pxmmoqiz5TvmxTNkoIFfSfv0xfBXPw= -----END CERTIFICATE-----Generated at Mon Jul 21 08:32:06 2025 by rpki-client