$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: zbkbyf8UxvjvipY4i8Cah3jfyc5vnaDC/KXXdEzVLlY= Subject key identifier: 36:D0:73:9E:9B:7E:5B:28:C6:23:C3:58:0B:66:9B:13:26:4D:29:88 Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 439BCE52F54CC246E87E1DA953471FF0806E6DAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 021B Signing time: Mon 27 Oct 2025 23:51:07 +0000 Manifest this update: Mon 27 Oct 2025 23:46:07 +0000 Manifest next update: Fri 31 Oct 2025 11:03:07 +0000 Files and hashes: 1: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: jzcCuMzgA2hFvogRgeLk2i1RvRvQmpOi1ucxBzHIX1A=) 2: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: e3/i5+NkY6ypzqQ6wHQus/dx+DfdnRJQhOiXISiMymw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:9b:ce:52:f5:4c:c2:46:e8:7e:1d:a9:53:47:1f:f0:80:6e:6d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Oct 27 23:46:07 2025 GMT Not After : Oct 31 11:03:07 2025 GMT Subject: CN=36D0739E9B7E5B28C623C3580B669B13264D2988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d3:69:31:73:be:ca:65:9b:95:ac:ec:6f:5a: 51:44:84:95:90:e7:4a:57:df:ce:4c:d2:fe:81:c1: 18:a7:83:e9:0f:f0:3e:68:44:6c:4c:b3:00:b9:f4: 10:95:83:f2:0c:dd:59:1a:02:fd:9f:7f:c5:8a:a9: a4:36:1f:8f:78:b6:c0:3f:3d:18:cc:d6:f4:b6:ce: 68:8e:ee:99:85:57:f9:3a:87:0d:f0:ab:22:48:9c: 9a:34:60:0b:15:f3:cb:14:d3:18:18:48:48:db:2f: 97:55:f2:72:4d:29:72:ee:51:7a:16:11:e1:a9:f2: 43:23:5c:10:ac:e1:4a:10:84:f1:2f:0b:5d:6c:56: c4:90:43:06:70:f8:ca:2a:38:d1:61:56:0d:4e:db: 85:04:ef:0e:c5:cb:b7:61:ec:57:35:d8:dc:2d:3f: 5a:88:7f:67:b5:cb:68:68:ad:49:fd:b2:c8:4b:49: 02:fa:20:13:ee:36:6e:df:f3:2f:d0:27:ee:13:d5: 50:be:86:ab:cb:1c:a7:67:19:b1:21:55:e8:88:02: a8:2b:8a:b7:00:b5:2f:a7:8a:1d:ff:55:2b:8d:25: 1a:a8:2f:31:fd:75:78:e9:a4:bd:38:62:36:f9:dd: 8a:2b:ab:88:99:0d:1c:99:df:f5:db:b7:35:71:62: 36:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D0:73:9E:9B:7E:5B:28:C6:23:C3:58:0B:66:9B:13:26:4D:29:88 X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3b:33:eb:ad:5c:ba:11:01:89:e9:a0:94:a2:ba:58:ea:c9: cd:9e:86:b6:a0:94:3b:60:ed:b4:df:19:92:ee:ac:59:aa:95: df:da:21:17:b2:f5:22:aa:66:94:cc:6d:26:11:c0:28:fe:6e: c2:bb:e8:47:98:38:18:30:22:cf:f3:14:46:32:47:27:53:4e: cd:a7:87:21:88:50:2e:2a:79:33:ad:a9:85:74:26:f6:98:82: ab:1c:ac:8a:6c:cb:0e:1c:62:94:e0:27:cb:1b:94:ec:53:48: d3:54:fc:90:71:0e:57:0a:bf:c7:7a:a5:8e:d5:fd:0d:f3:e0: 07:c0:53:35:a1:1b:04:6a:8b:37:3f:77:79:59:85:7d:93:79: b4:7a:4a:8a:01:45:3a:d7:54:8c:19:55:54:36:95:b0:6b:5d: 03:b8:2c:41:93:2f:62:22:89:0f:9f:79:05:26:c9:44:61:ec: 50:ed:04:82:ef:7d:bc:f5:70:4a:0c:c7:78:82:d5:61:85:c9: 1f:4c:73:69:ca:73:55:98:62:cd:47:47:13:eb:e9:e3:7f:8a: 6c:bd:95:bc:96:5f:49:4b:2b:d3:2b:8d:27:75:e9:88:30:32: c8:5c:f7:1a:4c:12:dd:d1:21:3f:69:91:f9:e8:b5:70:be:5c: b7:07:b8:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5vOUvVMwkbofh2pU0cf8IBubaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNTEwMjcyMzQ2MDdaFw0yNTEwMzExMTAzMDdaMDMxMTAvBgNV BAMTKDM2RDA3MzlFOUI3RTVCMjhDNjIzQzM1ODBCNjY5QjEzMjY0RDI5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh02kxc77KZZuVrOxvWlFEhJWQ 50pX385M0v6BwRing+kP8D5oRGxMswC59BCVg/IM3VkaAv2ff8WKqaQ2H494tsA/ PRjM1vS2zmiO7pmFV/k6hw3wqyJInJo0YAsV88sU0xgYSEjbL5dV8nJNKXLuUXoW EeGp8kMjXBCs4UoQhPEvC11sVsSQQwZw+MoqONFhVg1O24UE7w7Fy7dh7Fc12Nwt P1qIf2e1y2horUn9sshLSQL6IBPuNm7f8y/QJ+4T1VC+hqvLHKdnGbEhVeiIAqgr ircAtS+nih3/VSuNJRqoLzH9dXjppL04Yjb53Yorq4iZDRyZ3/XbtzVxYjZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNtBznpt+WyjGI8NYC2abEyZNKYgwHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU7M+utXLoRAYnpoJSiuljqyc2ehraglDtg 7bTfGZLurFmqld/aIRey9SKqZpTMbSYRwCj+bsK76EeYOBgwIs/zFEYyRydTTs2n hyGIUC4qeTOtqYV0JvaYgqscrIpsyw4cYpTgJ8sblOxTSNNU/JBxDlcKv8d6pY7V /Q3z4AfAUzWhGwRqizc/d3lZhX2TebR6SooBRTrXVIwZVVQ2lbBrXQO4LEGTL2Ii iQ+feQUmyURh7FDtBILvfbz1cEoMx3iC1WGFyR9Mc2nKc1WYYs1HRxPr6eN/imy9 lbyWX0lLK9MrjSd16YgwMshc9xpMEt3RIT9pkfnotXC+XLcHuNQ= -----END CERTIFICATE-----Generated at Tue Oct 28 15:59:26 2025 by rpki-client