$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft File: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft (raw, json) Hash identifier: vgXbrDKLrieHjmmGCjc9PPcQMrhBja8cZ6jgBHqJm5o= Subject key identifier: 41:C4:AB:D5:0A:0F:E1:5F:86:78:92:C1:C4:36:7F:EF:75:0A:15:89 Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6 Certificate issuer: /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6 Certificate serial: 7C32143494102E977A233FFEEC8B9FED927ADC3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft Manifest number: 01EF Signing time: Fri 05 Sep 2025 23:52:14 +0000 Manifest this update: Fri 05 Sep 2025 23:47:14 +0000 Manifest next update: Tue 09 Sep 2025 05:35:14 +0000 Files and hashes: 1: 3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (hash: 1BptPYQTBVQCwnCGCAmQpdkJZuT5jDyDH1mIYb86asQ=) 2: 3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (hash: ud1p/krhRE3733a1j5mqZ8KrI1sOH5O1a7m3DIDez2o=) 3: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl (hash: RNQBXDoR5erzWaM65xf1hwPS0D+13u3bQPOC+VD92/s=) 4: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (hash: k33UC/S59fL9YnbENocJ8tvAJ1sRtIu7ddJOWvA5ll8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:32:14:34:94:10:2e:97:7a:23:3f:fe:ec:8b:9f:ed:92:7a:dc:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6 Validity Not Before: Sep 5 23:47:14 2025 GMT Not After : Sep 9 05:35:14 2025 GMT Subject: CN=41C4ABD50A0FE15F867892C1C4367FEF750A1589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:69:d7:d3:ea:47:04:83:7b:98:c5:38:59: a9:45:d0:4a:76:16:10:b9:3e:f2:f2:02:9e:a9:e2: a0:48:43:fa:01:49:27:ca:cf:6b:76:ba:45:31:2c: 3a:dd:16:d8:8e:c1:fb:e6:22:53:30:55:bd:db:da: 90:0e:85:20:bb:8a:1d:d4:da:d3:66:c2:f2:cc:40: e3:87:51:75:f5:40:7d:c9:39:05:02:ef:7d:bf:6e: 56:6f:d7:cd:26:ae:39:11:2d:9e:ff:de:3d:ce:3b: 30:97:8e:e2:39:69:3b:aa:02:07:39:8c:d7:01:b0: b9:af:41:20:cf:5a:d3:71:8d:86:80:d6:64:3c:73: e7:31:b7:ef:64:94:22:68:a3:ad:13:e6:c8:fe:a7: bc:6c:f7:10:2f:68:f5:8b:5c:07:59:15:a0:f2:37: a1:69:82:08:68:68:b2:8c:79:42:92:70:31:20:d5: 02:97:39:99:47:05:f7:d7:f4:9a:5f:de:48:75:60: b9:e6:9c:cf:7a:cc:66:70:69:eb:e4:cc:05:51:20: ac:71:f8:f0:c8:75:55:64:d0:34:71:b4:cf:13:3f: 4e:e1:00:e8:6d:d5:ca:70:67:a1:01:75:e7:04:6c: f0:8a:8b:00:2d:3d:99:a5:fe:44:e2:a2:ea:20:2e: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C4:AB:D5:0A:0F:E1:5F:86:78:92:C1:C4:36:7F:EF:75:0A:15:89 X509v3 Authority Key Identifier: keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:93:d7:66:63:2e:8f:49:a3:32:66:c7:47:78:2e:79:d4:e1: 1c:7b:02:36:94:fd:47:8d:cf:51:c2:a4:a0:e1:5b:dd:f5:8f: d0:ec:6c:47:47:e1:74:9f:40:22:56:ac:38:01:5a:a3:02:5b: 04:57:bb:45:2c:d9:98:b5:9b:27:84:49:27:aa:57:4b:55:a9: 9c:e6:76:3f:4c:1f:ea:de:5f:24:32:4c:ab:d4:22:ec:24:81: 71:7f:a0:c0:1f:53:5f:7e:56:5b:33:d7:dd:7b:2a:ca:19:d8: bb:9f:a9:b4:54:bc:69:b8:00:69:c0:84:37:89:7d:62:41:43: f2:2f:fe:6d:89:98:14:c8:52:cd:33:6c:1e:4e:a9:b2:00:21: 0d:6a:2b:70:30:62:08:aa:f7:3d:0c:4a:18:33:54:f3:a1:34: de:a7:17:a2:4d:fa:98:64:ca:93:52:e4:22:8f:0d:54:51:00: 27:2b:d1:4d:d2:79:7e:04:0e:d1:82:87:13:e2:7c:55:cd:37: 73:77:57:da:67:30:a4:c8:3c:d7:3e:a8:59:18:c0:c8:87:b7: 98:8d:89:83:57:ce:15:3e:3e:a9:bb:4e:e7:ab:4f:20:ef:f4: 1e:8f:f8:ce:46:4b:1f:1a:d0:8e:26:7c:a5:36:18:c2:b9:56: bf:45:56:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDIUNJQQLpd6Iz/+7Iuf7ZJ63DwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNFOUU5 MkM5QTBDNjAeFw0yNTA5MDUyMzQ3MTRaFw0yNTA5MDkwNTM1MTRaMDMxMTAvBgNV BAMTKDQxQzRBQkQ1MEEwRkUxNUY4Njc4OTJDMUM0MzY3RkVGNzUwQTE1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mGnX0+pHBIN7mMU4WalF0Ep2 FhC5PvLyAp6p4qBIQ/oBSSfKz2t2ukUxLDrdFtiOwfvmIlMwVb3b2pAOhSC7ih3U 2tNmwvLMQOOHUXX1QH3JOQUC732/blZv180mrjkRLZ7/3j3OOzCXjuI5aTuqAgc5 jNcBsLmvQSDPWtNxjYaA1mQ8c+cxt+9klCJoo60T5sj+p7xs9xAvaPWLXAdZFaDy N6FpgghoaLKMeUKScDEg1QKXOZlHBffX9Jpf3kh1YLnmnM96zGZwaevkzAVRIKxx +PDIdVVk0DRxtM8TP07hAOht1cpwZ6EBdecEbPCKiwAtPZml/kTiouogLshVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQcSr1QoP4V+GeJLBxDZ/73UKFYkwHwYDVR0j BBgwFoAURmyUKv/bJi2r97ZdkT8+npLJoMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTZkMGI3OC03ZTgxLTRhOGMtYTg3NS05NTUyMmI0Njc5MzgvMC80NjZDOTQyQUZG REIyNjJEQUJGN0I2NUQ5MTNGM0U5RTkyQzlBMEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNFOUU5MkM5 QTBDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU2ZDBiNzgtN2U4MS00YThjLWE4 NzUtOTU1MjJiNDY3OTM4LzAvNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNF OUU5MkM5QTBDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmT12ZjLo9JozJmx0d4LnnU4Rx7AjaU/UeN z1HCpKDhW931j9DsbEdH4XSfQCJWrDgBWqMCWwRXu0Us2Zi1myeESSeqV0tVqZzm dj9MH+reXyQyTKvUIuwkgXF/oMAfU19+Vlsz1917KsoZ2LufqbRUvGm4AGnAhDeJ fWJBQ/Iv/m2JmBTIUs0zbB5OqbIAIQ1qK3AwYgiq9z0MShgzVPOhNN6nF6JN+phk ypNS5CKPDVRRACcr0U3SeX4EDtGChxPifFXNN3N3V9pnMKTIPNc+qFkYwMiHt5iN iYNXzhU+Pqm7TuerTyDv9B6P+M5GSx8a0I4mfKU2GMK5Vr9FVu4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:42 2025 by rpki-client