$ rpki-client -vvf repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft File: 466F8934F3FED9355C9ED09E3826CBE32B25D402.mft (raw, json) Hash identifier: c1zXtEVGoFU85zGcxYMSMGlxJ+QrW6PwL2iJ01OzduA= Subject key identifier: C7:E7:E7:55:DE:50:93:FD:17:9A:4E:95:2A:A8:BC:CB:49:B2:E6:A3 Authority key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02 Certificate issuer: /CN=466F8934F3FED9355C9ED09E3826CBE32B25D402 Certificate serial: 4BCEF31A85690E78E17D8476F1B4CF395FD245AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft Manifest number: 046F Signing time: Sun 02 Nov 2025 13:11:02 +0000 Manifest this update: Sun 02 Nov 2025 13:06:01 +0000 Manifest next update: Wed 05 Nov 2025 22:24:01 +0000 Files and hashes: 1: 466F8934F3FED9355C9ED09E3826CBE32B25D402.crl (hash: 9CKKNTs7aU+YdLrw0PzfUGtY1X2dBAqyyAz0k4BL17g=) 2: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: 4Z5eDrrHZmqs6QxVIkyuY07V0t6QahOws6as1cnmdoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ce:f3:1a:85:69:0e:78:e1:7d:84:76:f1:b4:cf:39:5f:d2:45:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402 Validity Not Before: Nov 2 13:06:01 2025 GMT Not After : Nov 5 22:24:01 2025 GMT Subject: CN=C7E7E755DE5093FD179A4E952AA8BCCB49B2E6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:30:c9:aa:91:db:89:dd:ca:4d:02:12:c3: 5f:af:ad:8a:41:79:87:1a:fa:47:bf:da:73:d3:86: f1:68:8c:03:45:df:6b:93:2f:46:20:b9:c4:bb:ee: ab:02:a8:6a:5b:87:d7:cb:de:d9:ad:83:9c:da:05: 4c:e3:c5:d6:cc:b4:9e:9a:37:ae:88:53:d2:fa:27: 85:8a:5f:c4:07:3c:83:f6:ed:d4:a7:f6:1e:36:14: 7d:19:18:00:8d:a6:84:98:3e:62:35:40:f6:ed:ed: 14:6e:ba:50:48:bf:c0:55:3d:48:15:40:d0:04:aa: b3:36:5d:35:91:41:e1:99:36:35:88:2f:97:6c:45: fe:8c:eb:4f:be:86:58:f8:d3:1f:27:e0:43:2c:bc: 85:39:df:c5:3d:db:fd:cc:53:ef:e5:d5:6c:1c:22: aa:40:c2:1f:93:53:99:16:c0:69:48:29:a7:e6:bb: 51:e3:90:dc:f1:a4:63:f9:d6:f0:72:b8:3f:b8:b0: 1d:ea:7d:b6:81:19:6b:26:97:2c:5d:8c:10:94:60: 93:c8:12:18:ed:38:35:66:a7:2c:9d:1e:37:c8:44: c1:31:38:fa:5f:25:ff:39:ab:30:16:d4:05:78:73: a7:e9:ec:24:63:fa:24:c8:e5:98:04:29:2e:1f:4a: 97:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E7:E7:55:DE:50:93:FD:17:9A:4E:95:2A:A8:BC:CB:49:B2:E6:A3 X509v3 Authority Key Identifier: keyid:46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:b9:65:f2:64:4b:58:d7:35:93:24:4d:a7:5a:51:f5:04:d4: 7f:fe:9a:6e:ff:99:c5:40:fc:86:06:3b:3b:65:a8:3a:14:0e: 0e:06:e3:cc:6d:d7:2e:ba:5d:b5:7a:9a:75:c0:ef:5b:0c:52: 97:c5:2d:71:a2:5c:03:37:3f:f9:0d:74:4e:99:ac:a5:98:b2: 53:df:9e:a1:78:6a:a6:10:4b:d6:ab:c4:be:a0:ee:52:8e:cf: e9:f5:3e:40:0b:06:c9:72:09:79:b1:52:f6:f0:26:52:0d:ec: eb:59:eb:60:aa:15:e6:8c:63:54:ec:d5:2a:4e:83:17:c9:30: fa:8c:63:3c:b1:e4:0e:96:c1:43:74:37:92:7a:fc:66:e5:74: 58:e1:70:e0:9b:4b:08:2c:30:55:21:26:7f:f1:93:d2:4e:2d: c3:91:e5:b1:eb:17:ba:3f:06:50:3a:52:e6:b8:e3:0a:8a:e7: 51:95:08:c2:d5:54:b8:60:94:46:dc:86:d9:c2:f0:b4:3c:3c: 81:60:82:b9:cc:0e:8c:31:04:08:2a:86:3c:2a:e2:f4:fb:73: 84:1e:2b:5b:dc:89:d0:a6:3d:8a:14:43:a4:96:da:e3:81:3d: fe:aa:9d:02:00:f8:be:d5:c5:4d:c1:ee:02:fa:b9:74:b5:7c: 34:02:15:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS87zGoVpDnjhfYR28bTPOV/SRaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNCRTMy QjI1RDQwMjAeFw0yNTExMDIxMzA2MDFaFw0yNTExMDUyMjI0MDFaMDMxMTAvBgNV BAMTKEM3RTdFNzU1REU1MDkzRkQxNzlBNEU5NTJBQThCQ0NCNDlCMkU2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyODDJqpHbid3KTQISw1+vrYpB eYca+ke/2nPThvFojANF32uTL0YgucS77qsCqGpbh9fL3tmtg5zaBUzjxdbMtJ6a N66IU9L6J4WKX8QHPIP27dSn9h42FH0ZGACNpoSYPmI1QPbt7RRuulBIv8BVPUgV QNAEqrM2XTWRQeGZNjWIL5dsRf6M60++hlj40x8n4EMsvIU538U92/3MU+/l1Wwc IqpAwh+TU5kWwGlIKafmu1HjkNzxpGP51vByuD+4sB3qfbaBGWsmlyxdjBCUYJPI EhjtODVmpyydHjfIRMExOPpfJf85qzAW1AV4c6fp7CRj+iTI5ZgEKS4fSpfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx+fnVd5Qk/0Xmk6VKqi8y0my5qMwHwYDVR0j BBgwFoAURm+JNPP+2TVcntCeOCbL4ysl1AIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzM5NzhmOC1hZWFiLTQyN2EtYmQ3NS0yY2RmMWQ5ZWI1MTcvMC80NjZGODkzNEYz RkVEOTM1NUM5RUQwOUUzODI2Q0JFMzJCMjVENDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNCRTMyQjI1 RDQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk NzUtMmNkZjFkOWViNTE3LzAvNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNC RTMyQjI1RDQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+5ZfJkS1jXNZMkTadaUfUE1H/+mm7/mcVA /IYGOztlqDoUDg4G48xt1y66XbV6mnXA71sMUpfFLXGiXAM3P/kNdE6ZrKWYslPf nqF4aqYQS9arxL6g7lKOz+n1PkALBslyCXmxUvbwJlIN7OtZ62CqFeaMY1Ts1SpO gxfJMPqMYzyx5A6WwUN0N5J6/GbldFjhcOCbSwgsMFUhJn/xk9JOLcOR5bHrF7o/ BlA6Uua44wqK51GVCMLVVLhglEbchtnC8LQ8PIFggrnMDowxBAgqhjwq4vT7c4Qe K1vcidCmPYoUQ6SW2uOBPf6qnQIA+L7VxU3B7gL6uXS1fDQCFRk= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:36 2025 by rpki-client