$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: XXr/VJ5IJrIphRgBNW/gE1wr+GUB2nzjaX6KUMwKaNg= Subject key identifier: DE:AB:F4:77:48:D6:2F:4B:86:A6:2B:B0:58:29:FF:73:C5:A1:F3:D3 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 086D378C07F2ED61ABD1E38716117ED42B2BA575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 0171 Signing time: Wed 06 Aug 2025 20:12:16 +0000 Manifest this update: Wed 06 Aug 2025 20:07:16 +0000 Manifest next update: Sun 10 Aug 2025 07:30:16 +0000 Files and hashes: 1: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 2: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) 3: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: +hy9kKD9aOsF9XTP+qoixTTvMQvJ72mSqfucPwP9HaQ=) 4: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6d:37:8c:07:f2:ed:61:ab:d1:e3:87:16:11:7e:d4:2b:2b:a5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Aug 6 20:07:16 2025 GMT Not After : Aug 10 07:30:16 2025 GMT Subject: CN=DEABF47748D62F4B86A62BB05829FF73C5A1F3D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b7:92:cc:ee:29:ff:b6:0a:9f:b3:b3:19:eb: dc:a4:95:c1:35:46:ad:62:42:4e:76:38:f5:c6:74: a0:19:91:b8:8d:12:48:12:82:8d:7e:aa:71:c0:1c: f4:db:71:80:31:e0:7d:e8:ec:59:63:b9:84:8e:67: 5f:79:57:4d:5e:87:24:59:93:b0:33:88:dc:96:c4: 04:d8:cc:61:d4:18:59:c2:99:11:4d:6c:83:da:f6: c0:ad:74:77:ae:e7:22:ea:51:13:5d:86:03:c6:80: 2f:a5:9b:64:b7:e6:84:9b:0c:96:4f:a1:a1:57:8e: b8:46:a0:9f:02:2f:a7:17:4b:a9:ec:4d:06:4d:b5: 02:75:f1:e7:7a:c8:06:27:90:11:fb:b3:ac:4a:56: f9:94:5c:50:8e:cd:67:ae:f8:44:4e:65:82:56:47: 4a:b0:e4:29:11:60:b6:64:09:7e:03:83:d4:4e:ee: 8d:fb:0f:79:f0:37:d4:49:45:e8:ad:9d:b0:0f:f4: 17:c5:bf:28:fa:35:b1:ff:10:68:e9:a7:66:29:6d: 01:8c:86:da:21:0e:0b:29:97:5c:0d:d9:29:52:6e: eb:f6:43:4a:fc:03:28:52:9f:1c:e5:b9:81:f8:31: 60:a1:66:ee:62:36:65:05:82:f3:63:02:aa:7f:18: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AB:F4:77:48:D6:2F:4B:86:A6:2B:B0:58:29:FF:73:C5:A1:F3:D3 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ce:b8:e4:c0:74:d8:82:74:31:e7:80:08:2b:d1:03:be:15: 3b:c5:3d:ef:b8:4a:dc:8d:94:c8:06:e8:1a:33:f6:94:88:b2: 67:5f:07:75:7d:f7:9f:5e:25:b9:a1:9f:a4:01:1e:cb:65:f2: f0:b1:d0:d7:a1:8a:c7:4e:04:ce:3f:c2:ca:4d:4f:7c:c6:ae: ce:e9:3d:ff:f4:c4:44:69:4e:a6:aa:87:86:d5:c3:be:35:0d: 07:25:40:30:72:08:f9:d7:c2:6e:47:e1:d0:f2:47:02:66:5c: 82:8b:d1:c2:43:5c:6e:38:14:29:ae:f6:55:0c:9a:66:5b:7a: 45:93:0f:a5:c8:0e:3d:41:aa:8e:51:e7:cc:76:f8:0c:ad:cc: d7:81:be:d8:71:cd:c8:92:af:25:cc:f7:7c:80:c2:dc:1a:db: 4e:80:0b:b7:8e:21:0b:58:4e:00:61:22:09:9d:15:0f:4c:6a: c4:e7:0a:46:3b:3e:b8:f8:b9:59:8e:b3:cc:68:04:4d:b7:b2: 4a:2f:ee:b7:3f:6f:fe:5d:ae:95:2a:83:8e:ce:ca:81:a4:17: 9a:67:6f:48:8d:f7:b6:eb:d4:7d:b3:b2:77:bd:0b:26:2d:f2: 34:64:54:fd:ea:09:b1:90:61:59:28:14:b7:c4:6f:46:df:c9: 23:d9:44:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCG03jAfy7WGr0eOHFhF+1CsrpXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTA4MDYyMDA3MTZaFw0yNTA4MTAwNzMwMTZaMDMxMTAvBgNV BAMTKERFQUJGNDc3NDhENjJGNEI4NkE2MkJCMDU4MjlGRjczQzVBMUYzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnt5LM7in/tgqfs7MZ69yklcE1 Rq1iQk52OPXGdKAZkbiNEkgSgo1+qnHAHPTbcYAx4H3o7FljuYSOZ195V01ehyRZ k7AziNyWxATYzGHUGFnCmRFNbIPa9sCtdHeu5yLqURNdhgPGgC+lm2S35oSbDJZP oaFXjrhGoJ8CL6cXS6nsTQZNtQJ18ed6yAYnkBH7s6xKVvmUXFCOzWeu+EROZYJW R0qw5CkRYLZkCX4Dg9RO7o37D3nwN9RJReitnbAP9BfFvyj6NbH/EGjpp2YpbQGM htohDgspl1wN2SlSbuv2Q0r8AyhSnxzluYH4MWChZu5iNmUFgvNjAqp/GLQfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3qv0d0jWL0uGpiuwWCn/c8Wh89MwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/OuOTAdNiCdDHngAgr0QO+FTvFPe+4StyN lMgG6Boz9pSIsmdfB3V9959eJbmhn6QBHstl8vCx0NehisdOBM4/wspNT3zGrs7p Pf/0xERpTqaqh4bVw741DQclQDByCPnXwm5H4dDyRwJmXIKL0cJDXG44FCmu9lUM mmZbekWTD6XIDj1Bqo5R58x2+AytzNeBvthxzciSryXM93yAwtwa206AC7eOIQtY TgBhIgmdFQ9MasTnCkY7Prj4uVmOs8xoBE23skov7rc/b/5drpUqg47OyoGkF5pn b0iN97br1H2zsne9CyYt8jRkVP3qCbGQYVkoFLfEb0bfySPZRN8= -----END CERTIFICATE-----Generated at Thu Aug 7 07:16:32 2025 by rpki-client