$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json) Hash identifier: mwHP8P6b3FnKGibIW6T/ECEkFPTtTdONeeloVX2R1Ks= Subject key identifier: E1:9F:5B:53:CA:6A:70:85:F3:D6:14:83:71:AA:73:B2:C1:DA:C0:B3 Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Certificate serial: 61BCBA964D13975CD49B1E2F5D984A3E10E17BA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft Manifest number: 99 Signing time: Sun 20 Jul 2025 09:50:38 +0000 Manifest this update: Sun 20 Jul 2025 09:45:38 +0000 Manifest next update: Wed 23 Jul 2025 09:57:38 +0000 Files and hashes: 1: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: BWvQQDrFM9GFSKYvi9AmuGTGSJzWHBPYslMeh8i20ew=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:bc:ba:96:4d:13:97:5c:d4:9b:1e:2f:5d:98:4a:3e:10:e1:7b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Validity Not Before: Jul 20 09:45:38 2025 GMT Not After : Jul 23 09:57:38 2025 GMT Subject: CN=E19F5B53CA6A7085F3D6148371AA73B2C1DAC0B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:43:5d:fc:08:9a:4e:0a:75:dd:f3:20:83: 38:ae:ad:be:81:e7:6f:56:15:03:49:b3:27:0f:40: 64:6c:4d:18:23:95:be:ca:2a:e1:77:7a:75:cd:f8: fb:18:05:1b:97:f9:1d:00:7b:86:7e:ff:b3:27:0b: c7:e9:c4:b5:1c:ec:41:9c:dd:29:48:55:42:2f:7e: f0:7b:d4:90:30:6c:44:f4:27:ba:26:14:3b:39:b8: cc:8c:35:0b:b6:d2:46:cb:5a:95:4f:35:d7:82:2c: c5:ac:59:ef:af:b2:b6:5a:11:3d:a8:6f:83:0a:d9: 84:5d:78:40:11:bc:a6:69:27:92:59:80:db:13:13: 69:a1:a0:1e:d1:72:61:f9:a5:05:63:fe:2f:cc:98: bd:f3:26:05:b3:a8:19:b5:2e:d8:46:58:e5:15:27: cc:d6:7b:f7:8f:a4:f9:0b:c4:e7:6b:82:b3:6f:1d: b4:80:04:74:1b:31:93:d4:ab:74:51:59:cd:4d:b9: 45:0a:f6:81:fd:14:45:fb:2c:2a:14:5a:2b:dd:83: 80:15:67:80:c9:b4:a0:5f:46:9a:dc:e6:fc:09:b9: 94:64:bc:c4:05:57:1b:26:40:21:c6:9c:d2:1a:0a: f3:bf:41:82:18:0d:e0:0a:20:f6:80:70:6b:e1:b4: eb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9F:5B:53:CA:6A:70:85:F3:D6:14:83:71:AA:73:B2:C1:DA:C0:B3 X509v3 Authority Key Identifier: keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:c7:6e:cd:51:c4:f0:f5:26:17:83:06:40:c0:0a:40:03:1c: b8:e2:f4:fe:24:b3:1b:85:b6:f0:d0:81:92:d3:0e:4e:db:37: 7c:02:b6:ac:11:4b:ae:b0:1c:b6:28:5f:69:34:06:93:08:83: ae:49:53:5f:f0:2b:7c:5e:fc:93:c4:91:f1:36:9e:28:ee:53: fe:44:6f:88:cc:59:5b:17:86:c5:f1:7c:c3:0f:e6:88:ba:1f: 25:80:ca:92:87:50:41:97:4c:92:62:bf:23:ea:47:79:67:db: 86:e7:34:b2:c4:61:90:7e:d3:47:35:ee:14:02:1f:1b:88:1a: 10:8a:bc:48:c5:fc:e1:7b:64:04:70:fc:9a:35:a1:c2:96:ee: 75:0e:0f:27:29:fb:18:69:24:11:58:0c:92:2e:ea:63:9b:96: b5:fa:c7:77:52:24:82:23:76:56:0d:d6:5b:cb:55:2b:52:16: a4:73:73:70:bc:9b:b6:34:be:63:e5:b7:c2:c0:fa:13:b4:96: ef:65:ff:4d:07:04:da:ef:9f:b3:d8:0c:9e:ed:22:cc:ec:b0: c4:be:2b:9b:48:ab:c7:6a:47:4c:40:4a:1b:06:ee:ca:3a:1e: 74:ac:c4:4d:61:f3:f4:8e:4f:16:78:c4:a3:bc:96:37:91:ca: a4:71:bf:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYby6lk0Tl1zUmx4vXZhKPhDhe6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy REMxRTg3NjAeFw0yNTA3MjAwOTQ1MzhaFw0yNTA3MjMwOTU3MzhaMDMxMTAvBgNV BAMTKEUxOUY1QjUzQ0E2QTcwODVGM0Q2MTQ4MzcxQUE3M0IyQzFEQUMwQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbi0Nd/AiaTgp13fMggziurb6B 529WFQNJsycPQGRsTRgjlb7KKuF3enXN+PsYBRuX+R0Ae4Z+/7MnC8fpxLUc7EGc 3SlIVUIvfvB71JAwbET0J7omFDs5uMyMNQu20kbLWpVPNdeCLMWsWe+vsrZaET2o b4MK2YRdeEARvKZpJ5JZgNsTE2mhoB7RcmH5pQVj/i/MmL3zJgWzqBm1LthGWOUV J8zWe/ePpPkLxOdrgrNvHbSABHQbMZPUq3RRWc1NuUUK9oH9FEX7LCoUWivdg4AV Z4DJtKBfRprc5vwJuZRkvMQFVxsmQCHGnNIaCvO/QYIYDeAKIPaAcGvhtOurAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Z9bU8pqcIXz1hSDcapzssHawLMwHwYDVR0j BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5 MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN3Hbs1RxPD1JheDBkDACkADHLji9P4ksxuF tvDQgZLTDk7bN3wCtqwRS66wHLYoX2k0BpMIg65JU1/wK3xe/JPEkfE2nijuU/5E b4jMWVsXhsXxfMMP5oi6HyWAypKHUEGXTJJivyPqR3ln24bnNLLEYZB+00c17hQC HxuIGhCKvEjF/OF7ZARw/Jo1ocKW7nUODycp+xhpJBFYDJIu6mOblrX6x3dSJIIj dlYN1lvLVStSFqRzc3C8m7Y0vmPlt8LA+hO0lu9l/00HBNrvn7PYDJ7tIszssMS+ K5tIq8dqR0xAShsG7so6HnSsxE1h8/SOTxZ4xKO8ljeRyqRxvwg= -----END CERTIFICATE-----Generated at Mon Jul 21 10:34:04 2025 by rpki-client