$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json) Hash identifier: EWmUIJTe+La3ktUEc8JJo8Es6TrsUUlOERmnp8aa6uM= Subject key identifier: 38:0C:9A:F5:CA:03:96:B0:35:1E:0C:6E:7E:7B:75:D8:F2:26:43:9B Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Certificate serial: 22FCBE2498E99849F5DB823B7C3722634258D51D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft Manifest number: A0 Signing time: Tue 05 Aug 2025 11:10:40 +0000 Manifest this update: Tue 05 Aug 2025 11:05:40 +0000 Manifest next update: Fri 08 Aug 2025 21:46:40 +0000 Files and hashes: 1: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=) 2: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: tpqkfeSe/oPeqbhuXdpQjeaeRjviNYkCCIi6y0QKy0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 21:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fc:be:24:98:e9:98:49:f5:db:82:3b:7c:37:22:63:42:58:d5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Validity Not Before: Aug 5 11:05:40 2025 GMT Not After : Aug 8 21:46:40 2025 GMT Subject: CN=380C9AF5CA0396B0351E0C6E7E7B75D8F226439B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4c:93:3b:d4:ac:36:fb:c4:69:12:c3:da:4f: 54:1e:6d:72:db:d5:29:f8:02:33:06:98:d3:96:d3: df:eb:ca:c2:a2:2b:c4:b4:19:12:7d:18:08:01:ae: 57:4c:da:45:bb:32:71:55:ce:f6:77:42:aa:a3:67: 00:ff:ae:c2:ab:71:6b:b7:7b:56:f2:f7:e3:69:c2: 53:87:0e:51:17:f8:f5:fd:f8:0e:31:39:cd:74:40: 4b:52:da:29:d2:44:df:68:73:81:1f:7f:70:45:56: 87:75:33:ec:d8:e7:3e:39:95:10:99:c9:88:bb:4c: 8a:77:2b:73:2f:9b:9a:4a:91:3f:27:5e:58:24:b0: f8:c5:f6:21:b8:6b:f7:65:73:bf:03:27:9c:b8:fa: f9:40:9e:ab:64:60:aa:41:b6:78:62:b6:59:88:46: 0d:56:e8:3e:f6:fd:3d:67:00:12:32:90:70:4d:9a: 6a:ac:2b:b3:00:9f:87:8e:82:30:5e:46:33:f5:f3: 49:7a:3a:92:05:64:e4:ca:e1:e1:09:4a:b3:cd:2f: 28:3f:d9:ed:7e:23:96:4e:da:da:f1:fe:ac:01:44: df:7b:22:2d:29:2f:ad:79:91:2c:d8:cf:dc:e3:a0: 52:37:ab:c4:7c:19:7f:c8:d1:e7:a3:6d:5d:b1:9f: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0C:9A:F5:CA:03:96:B0:35:1E:0C:6E:7E:7B:75:D8:F2:26:43:9B X509v3 Authority Key Identifier: keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7e:60:89:c7:b9:ad:90:d3:8e:d8:a8:79:a8:c7:ea:57:aa: 65:7f:0a:7d:ff:6a:d2:e2:12:1a:fa:3d:65:0b:9e:8f:6b:60: 4b:eb:83:25:4c:6d:24:7a:cc:22:b4:79:32:71:e3:72:af:54: 97:db:40:05:01:8f:96:99:a2:27:f7:23:ad:f7:2b:1b:8e:7d: de:0b:4e:f8:b8:02:2a:60:5a:0a:97:02:b5:59:87:60:6d:33: f9:50:35:55:ba:81:f1:dc:57:2e:f5:fd:e2:b2:06:06:83:30: 70:7a:fd:9e:d1:ab:d3:52:74:f9:0d:2a:d4:16:cd:cc:c1:45: b2:fe:76:3c:dd:8d:3b:9e:3e:b8:eb:4a:94:08:b1:4f:a9:07: d6:ef:0c:f1:00:c7:45:25:5e:8d:94:42:ad:2f:b3:1e:20:56: f3:c5:63:06:8a:7a:cf:67:5e:a4:60:fc:bb:b0:c2:5a:46:eb: ee:b7:9d:b1:e6:ff:d1:93:2c:47:4f:c9:ea:59:ea:11:c5:44: 48:dc:31:84:40:58:e1:fe:32:01:76:f9:3c:d9:63:51:c8:ab: 51:1e:19:97:4b:f7:a8:c1:01:42:9b:3e:c6:53:8d:e1:3c:10: 35:8d:f2:fb:e3:0c:d6:8f:35:56:7c:ef:3d:64:26:be:44:08: 2f:ad:01:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvy+JJjpmEn124I7fDciY0JY1R0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy REMxRTg3NjAeFw0yNTA4MDUxMTA1NDBaFw0yNTA4MDgyMTQ2NDBaMDMxMTAvBgNV BAMTKDM4MEM5QUY1Q0EwMzk2QjAzNTFFMEM2RTdFN0I3NUQ4RjIyNjQzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnTJM71Kw2+8RpEsPaT1QebXLb 1Sn4AjMGmNOW09/rysKiK8S0GRJ9GAgBrldM2kW7MnFVzvZ3QqqjZwD/rsKrcWu3 e1by9+NpwlOHDlEX+PX9+A4xOc10QEtS2inSRN9oc4Eff3BFVod1M+zY5z45lRCZ yYi7TIp3K3Mvm5pKkT8nXlgksPjF9iG4a/dlc78DJ5y4+vlAnqtkYKpBtnhitlmI Rg1W6D72/T1nABIykHBNmmqsK7MAn4eOgjBeRjP180l6OpIFZOTK4eEJSrPNLyg/ 2e1+I5ZO2trx/qwBRN97Ii0pL615kSzYz9zjoFI3q8R8GX/I0eejbV2xn7ahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOAya9coDlrA1Hgxufnt12PImQ5swHwYDVR0j BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5 MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx+YInHua2Q047YqHmox+pXqmV/Cn3/atLi Ehr6PWULno9rYEvrgyVMbSR6zCK0eTJx43KvVJfbQAUBj5aZoif3I633KxuOfd4L Tvi4AipgWgqXArVZh2BtM/lQNVW6gfHcVy71/eKyBgaDMHB6/Z7Rq9NSdPkNKtQW zczBRbL+djzdjTuePrjrSpQIsU+pB9bvDPEAx0UlXo2UQq0vsx4gVvPFYwaKes9n XqRg/LuwwlpG6+63nbHm/9GTLEdPyepZ6hHFREjcMYRAWOH+MgF2+TzZY1HIq1Ee GZdL96jBAUKbPsZTjeE8EDWN8vvjDNaPNVZ87z1kJr5ECC+tATk= -----END CERTIFICATE-----Generated at Thu Aug 7 20:10:56 2025 by rpki-client