$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: 5uNBXay+QbxeCuPqJ0eFjwLbNNY0A2y2FBLLcJQ1XHA= Subject key identifier: 44:D3:17:E3:E1:A3:4C:C6:E2:35:6A:6E:DA:AD:8B:D4:1C:06:9D:D8 Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 1F21B0389CE178B5431A431F7781138BE719E377 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 01FE Signing time: Sat 23 Aug 2025 06:51:09 +0000 Manifest this update: Sat 23 Aug 2025 06:46:09 +0000 Manifest next update: Tue 26 Aug 2025 14:24:09 +0000 Files and hashes: 1: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: jzcCuMzgA2hFvogRgeLk2i1RvRvQmpOi1ucxBzHIX1A=) 2: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: PGYkDr/HmahpOkImwKOdbXrJyfS7VU4mbvukS5+Zr0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:21:b0:38:9c:e1:78:b5:43:1a:43:1f:77:81:13:8b:e7:19:e3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Aug 23 06:46:09 2025 GMT Not After : Aug 26 14:24:09 2025 GMT Subject: CN=44D317E3E1A34CC6E2356A6EDAAD8BD41C069DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:55:44:9a:6d:53:bf:6a:55:43:86:55:d9: 91:92:80:14:3e:fe:d6:03:cc:c2:78:7c:49:51:07: 9a:81:59:51:61:53:26:5d:01:84:70:f1:14:72:9b: 33:44:70:98:1d:f7:85:73:27:ec:a3:13:28:3f:e9: 1d:d5:32:67:71:05:8b:8a:29:70:53:b5:a7:dd:81: cf:e5:7e:bc:bc:f6:89:14:1e:ca:33:1a:fc:cb:2b: be:6d:8e:6b:0d:e6:7e:45:37:b1:12:6b:0d:47:a2: 68:af:0d:b2:9b:e1:f3:1e:41:bd:21:fb:af:c6:ce: 3c:c6:eb:de:92:e5:d0:ab:72:2e:6c:c9:9e:4c:19: 89:1c:db:ed:6f:47:81:76:6f:57:13:52:f4:0a:56: 6f:a1:9e:0f:13:84:c7:0d:fd:89:ae:3e:30:78:90: f4:e5:56:3c:77:08:09:d1:53:d4:6c:b5:a8:6b:70: be:cb:ac:a0:db:79:0d:f1:83:9c:bb:48:b5:4b:c6: 75:74:d9:fe:af:0e:4a:97:82:37:14:dc:68:a7:eb: 9f:da:6c:25:51:18:b9:94:cd:a9:ee:11:20:44:d6: 5a:d9:e4:92:3e:2a:b1:03:7f:b1:7e:a1:22:f5:08: 22:1d:01:8b:c3:20:bd:39:24:51:ac:f9:2b:5b:dd: 5a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D3:17:E3:E1:A3:4C:C6:E2:35:6A:6E:DA:AD:8B:D4:1C:06:9D:D8 X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e4:e3:b6:b9:fc:9d:95:34:73:72:41:a0:21:5b:92:4c:b1: 9b:c3:b4:8c:47:03:f5:0b:bf:38:12:89:ed:18:61:08:df:ac: 6c:85:46:dd:e0:1a:46:c7:c5:e5:5a:b2:d9:ea:33:71:e4:3c: bc:20:91:2a:29:f6:1e:b2:84:bf:9f:fe:20:ce:2d:b7:81:a5: c4:8b:56:86:8b:41:fa:c9:16:30:65:bb:09:1e:45:e8:10:70: 65:fc:92:85:4f:0c:2c:a1:eb:93:b4:d3:cc:39:3e:1e:24:72: 1e:c3:83:ab:35:54:fd:c6:1a:a7:f8:54:d8:f0:56:67:3c:3d: 1f:6d:c3:45:14:0e:35:0a:96:86:58:e6:17:63:a1:9e:1b:91: 84:1c:47:d5:0b:e6:6d:b6:c4:35:c8:41:7b:44:d9:c5:00:8a: 7a:88:36:ab:e4:0b:56:ef:65:df:ea:60:4d:a4:91:90:ce:a9: 11:97:23:ef:3d:4a:f0:f4:83:d9:12:0d:f2:d8:97:62:a7:85: 4d:32:fb:e8:56:bb:1d:a6:7c:c4:3f:a8:2a:05:db:56:d7:ec: 10:e7:41:a3:1c:5f:e8:40:ac:c6:d0:ff:a4:38:fc:c3:1c:1d: 9a:a6:5b:fd:96:10:da:6b:58:8a:6e:d5:c1:98:ad:ec:1d:ee: f9:c4:a1:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHyGwOJzheLVDGkMfd4ETi+cZ43cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNTA4MjMwNjQ2MDlaFw0yNTA4MjYxNDI0MDlaMDMxMTAvBgNV BAMTKDQ0RDMxN0UzRTFBMzRDQzZFMjM1NkE2RURBQUQ4QkQ0MUMwNjlERDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uVVEmm1Tv2pVQ4ZV2ZGSgBQ+ /tYDzMJ4fElRB5qBWVFhUyZdAYRw8RRymzNEcJgd94VzJ+yjEyg/6R3VMmdxBYuK KXBTtafdgc/lfry89okUHsozGvzLK75tjmsN5n5FN7ESaw1HomivDbKb4fMeQb0h +6/GzjzG696S5dCrci5syZ5MGYkc2+1vR4F2b1cTUvQKVm+hng8ThMcN/YmuPjB4 kPTlVjx3CAnRU9RstahrcL7LrKDbeQ3xg5y7SLVLxnV02f6vDkqXgjcU3Gin65/a bCVRGLmUzanuESBE1lrZ5JI+KrEDf7F+oSL1CCIdAYvDIL05JFGs+Stb3VojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURNMX4+GjTMbiNWpu2q2L1BwGndgwHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXk47a5/J2VNHNyQaAhW5JMsZvDtIxHA/UL vzgSie0YYQjfrGyFRt3gGkbHxeVastnqM3HkPLwgkSop9h6yhL+f/iDOLbeBpcSL VoaLQfrJFjBluwkeRegQcGX8koVPDCyh65O008w5Ph4kch7Dg6s1VP3GGqf4VNjw Vmc8PR9tw0UUDjUKloZY5hdjoZ4bkYQcR9UL5m22xDXIQXtE2cUAinqINqvkC1bv Zd/qYE2kkZDOqRGXI+89SvD0g9kSDfLYl2KnhU0y++hWux2mfMQ/qCoF21bX7BDn QaMcX+hArMbQ/6Q4/MMcHZqmW/2WENprWIpu1cGYrewd7vnEoRk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:01:55 2025 by rpki-client