$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json) Hash identifier: LDX1BkVWLiCINkY9J4jQ6hmuB4PThUU+u5Qibn2NJEk= Subject key identifier: 47:59:41:6F:F4:CC:A6:5A:55:0A:DE:94:8E:1A:5A:0D:93:79:78:13 Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Certificate serial: 58C902230D97811F4C60C46AC04EC5965D0F6B1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft Manifest number: 89 Signing time: Tue 17 Jun 2025 03:50:38 +0000 Manifest this update: Tue 17 Jun 2025 03:45:38 +0000 Manifest next update: Fri 20 Jun 2025 04:03:38 +0000 Files and hashes: 1: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: sjnv0kxJaxEi6sclnRFUsdyt7YdNjZ2aRQGf5YMsmj8=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: lWon/bpPDruvghAxoP8snJ5P79Rkgid1TXsqKBojJB4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c9:02:23:0d:97:81:1f:4c:60:c4:6a:c0:4e:c5:96:5d:0f:6b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Validity Not Before: Jun 17 03:45:38 2025 GMT Not After : Jun 20 04:03:38 2025 GMT Subject: CN=4759416FF4CCA65A550ADE948E1A5A0D93797813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:72:33:1f:5c:96:6a:77:7f:5f:b3:9c:d7: 73:a8:53:77:d5:bd:98:aa:b0:bf:0f:90:e4:51:90: 3c:bb:8c:d5:e1:8d:5b:9c:c5:ac:c8:fa:2b:78:f2: b5:de:a7:7d:9f:25:3f:f9:7b:56:3f:af:3b:29:4c: 10:2e:b6:b4:68:40:e5:f8:9b:76:a2:b0:d4:87:12: 55:b6:d0:03:59:3c:41:6c:8e:94:36:65:21:d3:6f: bb:d3:fe:1a:51:b0:a8:8c:c2:b3:67:d0:58:9d:b7: 5b:71:21:ab:f1:7d:5a:83:3b:45:60:0b:d6:4c:50: dc:a0:83:c2:05:71:21:9f:08:08:62:df:c3:36:91: e1:5d:15:1d:a6:86:09:fc:c6:2a:85:8e:01:3d:9d: b9:d0:86:4a:83:f3:cd:b8:89:b9:a7:1d:e6:dd:b2: 6e:9d:1d:4d:44:79:e4:8d:8a:30:fd:9e:cd:e4:30: fe:11:0f:3c:7b:b6:16:54:67:a2:b9:45:6d:3a:12: c7:58:b0:c7:e3:f6:6c:d4:25:b7:06:4c:b4:0b:0c: d8:c5:41:64:2d:ad:63:c6:17:de:ba:af:89:98:d6: f3:64:8f:a3:45:2d:78:61:8a:cf:56:18:b0:0d:5b: ae:fa:1a:74:04:8c:9d:b4:40:44:d9:04:b1:1f:1e: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:59:41:6F:F4:CC:A6:5A:55:0A:DE:94:8E:1A:5A:0D:93:79:78:13 X509v3 Authority Key Identifier: keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ef:7e:4c:26:6a:33:39:89:da:54:d6:50:81:1b:58:a2:21: cf:3a:b2:74:3d:44:f9:d8:2e:57:85:d4:43:0e:1a:f6:24:e2: aa:43:aa:63:2d:4c:50:8f:0b:61:2c:88:16:ed:92:92:3d:f0: 09:c4:67:33:7c:40:01:c7:6b:a7:05:d4:11:22:53:f0:01:56: 06:00:40:0e:ae:d1:3f:b2:3b:67:70:b0:12:66:c7:f1:a4:c1: 4e:5e:08:cc:6f:56:9f:d1:22:7e:97:16:7f:53:ec:9f:bf:5c: 35:ff:50:93:65:5e:25:38:95:51:2b:97:05:82:5e:ba:a5:e4: 37:38:c6:c6:32:3e:0c:2c:f0:51:08:12:15:a8:5c:27:af:04: 3c:73:5a:fb:d2:84:c6:66:c1:26:a4:cc:20:28:e8:13:2b:45: d9:78:c2:59:03:51:fe:e3:81:50:ab:bd:36:29:e9:b5:33:44: 4d:d8:1c:05:52:d4:de:cb:3a:df:87:76:a2:38:39:eb:b9:c9: a9:2d:96:70:4a:4c:a1:cd:e7:f8:f1:a0:b6:ad:3e:65:4c:a7: 3b:75:f0:e1:29:6d:f8:0f:23:a4:a0:4a:5f:1d:53:ae:b0:fe: 1b:9b:bc:66:12:94:5f:e3:d0:bd:91:f2:e3:84:a7:3e:8b:50: e8:09:17:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWMkCIw2XgR9MYMRqwE7Fll0PaxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy REMxRTg3NjAeFw0yNTA2MTcwMzQ1MzhaFw0yNTA2MjAwNDAzMzhaMDMxMTAvBgNV BAMTKDQ3NTk0MTZGRjRDQ0E2NUE1NTBBREU5NDhFMUE1QTBEOTM3OTc4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5gXIzH1yWand/X7Oc13OoU3fV vZiqsL8PkORRkDy7jNXhjVucxazI+it48rXep32fJT/5e1Y/rzspTBAutrRoQOX4 m3aisNSHElW20ANZPEFsjpQ2ZSHTb7vT/hpRsKiMwrNn0Fidt1txIavxfVqDO0Vg C9ZMUNygg8IFcSGfCAhi38M2keFdFR2mhgn8xiqFjgE9nbnQhkqD8824ibmnHebd sm6dHU1EeeSNijD9ns3kMP4RDzx7thZUZ6K5RW06EsdYsMfj9mzUJbcGTLQLDNjF QWQtrWPGF966r4mY1vNkj6NFLXhhis9WGLANW676GnQEjJ20QETZBLEfHsBfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR1lBb/TMplpVCt6UjhpaDZN5eBMwHwYDVR0j BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5 MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbvfkwmajM5idpU1lCBG1iiIc86snQ9RPnY LleF1EMOGvYk4qpDqmMtTFCPC2EsiBbtkpI98AnEZzN8QAHHa6cF1BEiU/ABVgYA QA6u0T+yO2dwsBJmx/GkwU5eCMxvVp/RIn6XFn9T7J+/XDX/UJNlXiU4lVErlwWC Xrql5Dc4xsYyPgws8FEIEhWoXCevBDxzWvvShMZmwSakzCAo6BMrRdl4wlkDUf7j gVCrvTYp6bUzRE3YHAVS1N7LOt+HdqI4Oeu5yaktlnBKTKHN5/jxoLatPmVMpzt1 8OEpbfgPI6SgSl8dU66w/hubvGYSlF/j0L2R8uOEpz6LUOgJF48= -----END CERTIFICATE-----Generated at Tue Jun 17 11:00:25 2025 by rpki-client