$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: r0zDnPSEkHnqu+Ide4k/+qG92FGbkvTuOgbD0cI7iEw= Subject key identifier: 80:77:50:EA:87:E8:52:81:24:E4:1C:F9:24:0F:69:BE:BE:76:FA:84 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 2274B5484500D6ED32DCBAEA38CC4782C6DCD83F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 016A Signing time: Mon 21 Jul 2025 17:52:13 +0000 Manifest this update: Mon 21 Jul 2025 17:47:13 +0000 Manifest next update: Thu 24 Jul 2025 22:12:13 +0000 Files and hashes: 1: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 2: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) 3: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: eCvZ2FVePlbfVvDlsfG5rJ4TPjR9oAxohf9VRH3ujQc=) 4: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:74:b5:48:45:00:d6:ed:32:dc:ba:ea:38:cc:47:82:c6:dc:d8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Jul 21 17:47:13 2025 GMT Not After : Jul 24 22:12:13 2025 GMT Subject: CN=807750EA87E8528124E41CF9240F69BEBE76FA84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:20:ba:dd:3e:20:90:50:e0:c6:e8:eb:db: 94:d1:76:41:0f:da:ef:e3:fd:4f:ab:48:06:14:f1: a3:5d:68:f8:d5:26:e0:6b:f3:b7:bc:f3:92:c1:bf: ad:a9:88:99:18:22:42:c1:e9:b4:61:10:8e:d7:1a: 18:7c:3c:b1:92:68:20:4d:06:27:03:2d:8f:cc:5e: 06:b5:89:8f:ec:6f:9a:f6:93:3c:bb:91:9e:f7:08: 1a:6b:72:aa:35:b6:5c:64:3d:76:ce:6d:f6:96:e9: c7:e7:5d:04:09:17:39:51:81:1e:f7:63:88:3a:54: 19:70:cf:2b:c0:52:ee:36:69:ea:7c:e6:18:51:a8: da:c0:be:2c:c5:66:87:cb:82:71:34:46:26:eb:ec: 68:15:b4:19:00:37:72:99:49:2b:b6:84:06:f9:85: 26:0e:1f:b2:2a:46:a5:24:8b:d6:c8:fd:4d:5d:ce: bd:e3:f6:b3:6a:c3:f2:9d:a8:0a:8b:3e:d5:4b:37: d8:c4:85:30:52:d0:bb:ef:9a:b8:f1:bd:1e:cc:c7: 95:09:13:90:0d:20:73:c4:1d:67:49:7c:da:0e:68: 37:47:31:23:86:6c:d4:dd:e9:85:03:ea:9e:d1:e6: cc:d4:a4:2f:21:81:d8:69:9d:7a:3c:d4:82:d9:bc: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:77:50:EA:87:E8:52:81:24:E4:1C:F9:24:0F:69:BE:BE:76:FA:84 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c2:57:b6:fc:5b:ba:f2:07:a3:97:5b:de:78:00:a4:55:13: 55:54:e0:24:d6:78:03:e4:d4:03:a9:29:9f:26:e8:21:ba:05: 61:9d:28:4f:e5:cc:19:15:70:bd:17:26:7d:04:ef:ca:8a:ba: 1f:25:75:80:d6:b2:6b:7c:c5:fa:a4:74:16:d2:cb:b0:15:4b: 48:0d:46:ca:f4:53:e4:e9:99:66:84:be:c6:50:6f:e0:58:6f: 4c:f8:e7:2f:ce:0b:9e:0a:4d:b8:66:4d:ab:9d:d1:69:b3:31: 50:79:41:d7:ba:08:2d:6c:37:6d:1a:a9:0c:65:fb:1a:4e:55: 90:83:b6:3e:af:57:71:16:a9:d1:67:b4:35:80:1c:8b:94:bc: c9:e6:0d:dc:25:b0:f1:84:cb:58:58:75:94:5a:2a:54:9a:6f: e6:c7:21:74:f9:ca:24:56:2d:01:fe:2e:a2:6e:85:8c:b3:74: 38:14:96:06:83:dc:dd:71:ec:2f:82:95:c4:dc:9f:d2:43:ce: 27:e3:3b:1f:1d:9f:f5:89:b7:80:a0:ee:11:d1:d1:1d:5f:1c: cc:de:23:e4:96:36:de:5c:97:cb:42:c9:22:2b:3f:28:c7:9b: e4:0d:69:69:90:91:2e:27:22:55:45:52:40:ac:30:9f:3d:a5: 4f:40:22:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInS1SEUA1u0y3LrqOMxHgsbc2D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTA3MjExNzQ3MTNaFw0yNTA3MjQyMjEyMTNaMDMxMTAvBgNV BAMTKDgwNzc1MEVBODdFODUyODEyNEU0MUNGOTI0MEY2OUJFQkU3NkZBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCyC63T4gkFDgxujr25TRdkEP 2u/j/U+rSAYU8aNdaPjVJuBr87e885LBv62piJkYIkLB6bRhEI7XGhh8PLGSaCBN BicDLY/MXga1iY/sb5r2kzy7kZ73CBprcqo1tlxkPXbObfaW6cfnXQQJFzlRgR73 Y4g6VBlwzyvAUu42aep85hhRqNrAvizFZofLgnE0Ribr7GgVtBkAN3KZSSu2hAb5 hSYOH7IqRqUki9bI/U1dzr3j9rNqw/KdqAqLPtVLN9jEhTBS0LvvmrjxvR7Mx5UJ E5ANIHPEHWdJfNoOaDdHMSOGbNTd6YUD6p7R5szUpC8hgdhpnXo81ILZvPqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgHdQ6ofoUoEk5Bz5JA9pvr52+oQwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzCV7b8W7ryB6OXW954AKRVE1VU4CTWeAPk 1AOpKZ8m6CG6BWGdKE/lzBkVcL0XJn0E78qKuh8ldYDWsmt8xfqkdBbSy7AVS0gN Rsr0U+TpmWaEvsZQb+BYb0z45y/OC54KTbhmTaud0WmzMVB5Qde6CC1sN20aqQxl +xpOVZCDtj6vV3EWqdFntDWAHIuUvMnmDdwlsPGEy1hYdZRaKlSab+bHIXT5yiRW LQH+LqJuhYyzdDgUlgaD3N1x7C+ClcTcn9JDzifjOx8dn/WJt4Cg7hHR0R1fHMze I+SWNt5cl8tCySIrPyjHm+QNaWmQkS4nIlVFUkCsMJ89pU9AIjE= -----END CERTIFICATE-----Generated at Tue Jul 22 11:45:52 2025 by rpki-client