$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: CBY9qg4To5NQhfPVqEvn5xHmZ/SmolOVnRWXtwEubns= Subject key identifier: 8C:B1:E3:26:DF:24:99:E2:61:16:2A:C6:31:FE:A2:DD:C1:76:99:3A Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 580E92C092C7B55DB5FA5C2A445B3D3974470274 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 0203 Signing time: Thu 04 Sep 2025 01:21:06 +0000 Manifest this update: Thu 04 Sep 2025 01:16:06 +0000 Manifest next update: Sun 07 Sep 2025 09:38:06 +0000 Files and hashes: 1: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: jzcCuMzgA2hFvogRgeLk2i1RvRvQmpOi1ucxBzHIX1A=) 2: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: tq4sToTLyB5GfOqMZpqlwtVh6GDvvbrNHSK/AMGSmXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 09:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0e:92:c0:92:c7:b5:5d:b5:fa:5c:2a:44:5b:3d:39:74:47:02:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Sep 4 01:16:06 2025 GMT Not After : Sep 7 09:38:06 2025 GMT Subject: CN=8CB1E326DF2499E261162AC631FEA2DDC176993A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:4c:a4:d9:6d:4a:fa:95:4c:50:1b:40:aa: 2e:68:82:8f:86:c7:5f:88:db:a6:65:90:d5:e8:14: 6a:43:ef:6f:73:db:8d:0b:b2:5a:ba:fa:96:38:0b: c0:34:c7:ee:5c:28:9b:bf:68:68:e4:d9:2f:d6:95: 8c:2f:fa:73:93:f0:64:82:1f:a5:f3:e3:7d:10:be: 41:15:76:7f:4d:93:c6:30:bf:58:e4:d4:5d:ce:3c: 33:6e:3e:9f:d1:e2:0f:38:4c:ff:36:2d:02:8e:8e: 58:f2:d0:fe:3d:bd:e5:3c:ec:1d:3f:b9:75:08:fd: 43:eb:c9:e7:f9:9c:47:a9:56:a4:06:91:ad:33:d8: 58:3f:90:da:a6:9b:9f:f6:32:f7:4f:89:14:9a:ca: 61:6c:6a:a4:b7:14:e2:d2:4e:e8:75:61:5a:db:18: 4a:e8:43:c8:0b:c5:8e:e8:4f:5a:da:7e:69:f2:0c: 7b:d5:3e:47:fb:9e:f5:4f:63:64:53:08:8e:30:0c: 11:4a:74:1e:e6:85:26:16:5c:2a:03:40:4d:f6:f5: ef:cd:a8:96:91:e1:c3:82:91:8b:41:74:c0:af:1e: 40:44:81:cc:2b:fa:be:17:f5:ff:08:b6:c8:53:70: 44:2d:ff:1f:e0:3a:47:47:8c:42:27:9c:13:b4:7f: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B1:E3:26:DF:24:99:E2:61:16:2A:C6:31:FE:A2:DD:C1:76:99:3A X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:bc:44:0c:69:c9:01:85:9c:e8:2e:ca:c9:4c:b5:0e:19:0e: 82:a3:6c:0f:76:3e:36:bf:21:29:e2:f3:fb:76:b3:b0:fb:c3: 56:58:1a:93:29:f5:aa:06:28:58:53:81:fe:4b:3b:86:87:94: a1:38:c2:a8:d4:b8:9e:65:e6:e5:97:40:77:0e:7e:5a:27:df: 2e:70:dc:91:cb:6e:62:a8:e9:5c:83:2c:10:50:cd:98:89:a1: 49:4d:17:49:a9:be:a1:ab:ed:8f:d7:eb:9b:5b:cf:c8:f6:2b: ae:c0:74:76:e1:c4:d5:71:e6:6a:f1:a4:2a:86:0b:b8:62:30: 6a:7a:f6:b3:52:e9:14:0d:ff:a0:fd:d8:4e:5b:54:7b:74:d0: 3c:15:9c:1e:b7:2a:eb:21:f5:53:d8:1f:f6:da:14:e9:6b:d0: e0:8f:23:e6:c9:f1:e3:ef:0e:4a:e6:41:d0:2c:69:9f:39:fc: 13:92:ed:d4:6f:6b:83:55:de:fe:5f:be:44:64:5c:90:6b:93: e8:ba:6e:e8:c7:db:49:05:07:07:e8:84:9e:eb:f0:2a:32:46: 85:d6:72:b9:82:92:e4:dc:f2:44:18:03:0f:03:77:98:1f:25: 29:79:cc:f5:28:67:4d:dc:38:bc:5a:ed:34:ef:86:04:61:df: b1:6b:f2:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWA6SwJLHtV21+lwqRFs9OXRHAnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNTA5MDQwMTE2MDZaFw0yNTA5MDcwOTM4MDZaMDMxMTAvBgNV BAMTKDhDQjFFMzI2REYyNDk5RTI2MTE2MkFDNjMxRkVBMkREQzE3Njk5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNEyk2W1K+pVMUBtAqi5ogo+G x1+I26ZlkNXoFGpD729z240Lslq6+pY4C8A0x+5cKJu/aGjk2S/WlYwv+nOT8GSC H6Xz430QvkEVdn9Nk8Ywv1jk1F3OPDNuPp/R4g84TP82LQKOjljy0P49veU87B0/ uXUI/UPryef5nEepVqQGka0z2Fg/kNqmm5/2MvdPiRSaymFsaqS3FOLSTuh1YVrb GEroQ8gLxY7oT1rafmnyDHvVPkf7nvVPY2RTCI4wDBFKdB7mhSYWXCoDQE329e/N qJaR4cOCkYtBdMCvHkBEgcwr+r4X9f8ItshTcEQt/x/gOkdHjEInnBO0f3LxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjLHjJt8kmeJhFirGMf6i3cF2mTowHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJe8RAxpyQGFnOguyslMtQ4ZDoKjbA92Pja/ ISni8/t2s7D7w1ZYGpMp9aoGKFhTgf5LO4aHlKE4wqjUuJ5l5uWXQHcOflon3y5w 3JHLbmKo6VyDLBBQzZiJoUlNF0mpvqGr7Y/X65tbz8j2K67AdHbhxNVx5mrxpCqG C7hiMGp69rNS6RQN/6D92E5bVHt00DwVnB63Kush9VPYH/baFOlr0OCPI+bJ8ePv DkrmQdAsaZ85/BOS7dRva4NV3v5fvkRkXJBrk+i6bujH20kFBwfohJ7r8CoyRoXW crmCkuTc8kQYAw8Dd5gfJSl5zPUoZ03cOLxa7TTvhgRh37Fr8jg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:22:27 2025 by rpki-client