$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: qDlG3VGImmnkjAdzfHKieWjUnaZZeel142KOoGRKUh8= Subject key identifier: 07:47:52:4B:9E:60:0A:66:9A:5A:41:81:E7:0E:1B:CF:6D:CA:92:58 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 090B6E06D88D0E6C0969205591C1BE0A7A462753 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 017F Signing time: Sun 07 Sep 2025 15:02:15 +0000 Manifest this update: Sun 07 Sep 2025 14:57:15 +0000 Manifest next update: Wed 10 Sep 2025 20:12:15 +0000 Files and hashes: 1: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: Xz0ci3jGWAe3fMQbcOhE22Mx7JQKdf8PVY7jsTZFs0Q=) 2: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) 3: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 4: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 20:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0b:6e:06:d8:8d:0e:6c:09:69:20:55:91:c1:be:0a:7a:46:27:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Sep 7 14:57:15 2025 GMT Not After : Sep 10 20:12:15 2025 GMT Subject: CN=0747524B9E600A669A5A4181E70E1BCF6DCA9258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:63:d9:4e:8f:b4:4e:02:23:73:b4:07:7f: 1c:5d:ae:ec:c3:fa:5f:71:0b:cb:5b:c9:e3:50:9a: 0b:c0:ba:1b:4d:df:42:89:c4:09:77:90:a5:7d:9e: 9c:b5:d8:56:40:38:db:b3:32:4f:b8:86:66:9e:ed: d7:d9:c5:be:e1:d1:dd:f1:4a:48:71:60:c9:f2:00: 3d:8b:16:ad:5e:6f:d3:1a:cf:aa:d5:3b:18:7b:76: 78:40:9b:b3:d6:08:02:f3:91:1c:dd:2e:81:ac:c3: c3:00:65:ef:3d:f1:84:25:dd:12:1f:da:a6:0d:18: d2:00:0c:b0:78:fb:3a:c9:d5:36:89:92:76:02:50: 1a:a7:e1:22:74:9a:a2:21:8e:84:e8:e0:f4:74:fe: f0:52:b2:f7:85:e3:65:37:f4:fc:d0:c1:4d:3f:64: e8:e6:d5:57:be:79:1c:c4:c1:cf:4c:58:18:07:d0: 5e:11:53:7e:be:b1:ff:b0:c9:7c:f0:40:15:44:2a: 77:78:7e:3a:56:e3:f8:cf:39:df:58:7d:c6:d7:86: 9a:5a:6c:f5:7c:c9:28:46:4d:82:f6:57:96:1f:f2: 77:69:8e:db:32:29:6d:3e:0b:9b:23:d1:d6:6a:ea: 9d:74:9a:60:e1:a6:ef:a4:45:e7:54:7c:a0:ac:a0: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:47:52:4B:9E:60:0A:66:9A:5A:41:81:E7:0E:1B:CF:6D:CA:92:58 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f0:20:84:e6:61:c0:e9:8e:58:ac:a2:6a:d7:4a:ab:9e:8b: 4c:43:d2:c1:52:a0:31:ad:f7:96:fa:48:63:ab:c5:4d:8f:e9: 23:d7:28:c2:e0:11:2e:4f:3f:f1:02:b7:6b:4c:0c:02:ee:ed: 7e:34:1a:6b:e8:b6:de:5f:fb:d8:4a:94:8c:f0:f5:d2:09:02: 11:1d:66:1f:f0:a4:e1:b2:f9:3c:14:70:1f:72:95:58:47:4d: 9b:ea:2f:8c:71:13:d7:b9:9d:31:0f:5a:ef:ab:70:10:23:eb: 96:38:7e:74:84:35:40:86:89:78:14:d8:7e:6f:09:52:2e:83: c6:55:3c:4b:b3:d6:06:b1:f3:d9:03:96:03:ae:9f:06:a3:c3: 68:ff:3b:c9:38:c6:e4:b1:47:65:2f:28:1b:84:6d:03:93:ab: 49:65:fd:e6:53:19:28:8d:33:59:d5:57:1f:77:c7:7e:c5:e7: 3d:75:ea:f9:58:45:d2:9b:2a:6f:a1:55:df:17:df:65:c0:bf: c5:5c:89:d7:07:03:7a:6f:96:80:fb:b9:70:d5:1d:b3:bf:b4: 19:64:7c:d2:2a:15:ad:31:4e:29:d7:4d:2f:13:c2:b8:f9:66: 1a:ea:38:13:88:9f:d5:d5:32:bc:96:cb:6c:0d:34:0a:0b:22: a7:67:d9:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQtuBtiNDmwJaSBVkcG+CnpGJ1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTA5MDcxNDU3MTVaFw0yNTA5MTAyMDEyMTVaMDMxMTAvBgNV BAMTKDA3NDc1MjRCOUU2MDBBNjY5QTVBNDE4MUU3MEUxQkNGNkRDQTkyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRWPZTo+0TgIjc7QHfxxdruzD +l9xC8tbyeNQmgvAuhtN30KJxAl3kKV9npy12FZAONuzMk+4hmae7dfZxb7h0d3x SkhxYMnyAD2LFq1eb9Maz6rVOxh7dnhAm7PWCALzkRzdLoGsw8MAZe898YQl3RIf 2qYNGNIADLB4+zrJ1TaJknYCUBqn4SJ0mqIhjoTo4PR0/vBSsveF42U39PzQwU0/ ZOjm1Ve+eRzEwc9MWBgH0F4RU36+sf+wyXzwQBVEKnd4fjpW4/jPOd9YfcbXhppa bPV8yShGTYL2V5Yf8ndpjtsyKW0+C5sj0dZq6p10mmDhpu+kRedUfKCsoHJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB0dSS55gCmaaWkGB5w4bz23KklgwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITwIITmYcDpjlisomrXSquei0xD0sFSoDGt 95b6SGOrxU2P6SPXKMLgES5PP/ECt2tMDALu7X40Gmvott5f+9hKlIzw9dIJAhEd Zh/wpOGy+TwUcB9ylVhHTZvqL4xxE9e5nTEPWu+rcBAj65Y4fnSENUCGiXgU2H5v CVIug8ZVPEuz1gax89kDlgOunwajw2j/O8k4xuSxR2UvKBuEbQOTq0ll/eZTGSiN M1nVVx93x37F5z116vlYRdKbKm+hVd8X32XAv8VcidcHA3pvloD7uXDVHbO/tBlk fNIqFa0xTinXTS8Twrj5ZhrqOBOIn9XVMryWy2wNNAoLIqdn2bo= -----END CERTIFICATE-----Generated at Tue Sep 9 13:39:57 2025 by rpki-client