$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: w2eagCQZh88p5L4p6NKPCmL3YNjlyBRfjvjUFTOCZLg= Subject key identifier: B5:FC:AC:D7:63:76:06:F7:B0:5E:5F:49:7E:3B:66:38:8D:46:DE:6B Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 4EF5189BCF7FF75D84934D8FE907EE329AB4C601 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 0217 Signing time: Sat 18 Oct 2025 21:41:08 +0000 Manifest this update: Sat 18 Oct 2025 21:36:08 +0000 Manifest next update: Wed 22 Oct 2025 09:20:08 +0000 Files and hashes: 1: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: jzcCuMzgA2hFvogRgeLk2i1RvRvQmpOi1ucxBzHIX1A=) 2: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: ftkdbeoCf+H6xkSp1uJ3y1exsVF0qez5C2vkreADnqE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f5:18:9b:cf:7f:f7:5d:84:93:4d:8f:e9:07:ee:32:9a:b4:c6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Oct 18 21:36:08 2025 GMT Not After : Oct 22 09:20:08 2025 GMT Subject: CN=B5FCACD7637606F7B05E5F497E3B66388D46DE6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:ee:f6:23:c8:a9:94:b8:68:e7:ad:84:a3: 52:26:1d:7a:1f:02:37:9f:e9:1f:93:af:dc:f7:1b: c6:94:3a:18:89:14:c5:0d:19:c9:97:22:69:26:aa: a0:6d:cc:9e:c1:d4:80:db:30:8f:d8:ca:12:ec:19: c2:6d:cf:6d:70:ef:a6:48:fe:69:25:e5:52:a8:31: 08:6d:12:97:46:5c:a4:dc:06:19:3d:78:5f:a5:da: 09:86:94:2f:fe:f4:32:f5:a4:99:81:a0:06:68:8c: fb:57:2b:ef:56:00:2d:ea:72:d3:6b:2b:08:12:74: ce:c3:4f:59:53:18:38:5e:66:98:90:86:21:34:69: bf:44:a5:6a:16:00:10:fe:60:c8:43:63:51:08:78: be:75:4e:1a:84:cb:3c:2e:2b:c8:23:4a:8e:41:cc: e4:bc:0b:cf:f3:6b:7c:d7:ec:7d:a6:99:38:7b:bf: de:6c:64:19:3a:a6:b2:d7:65:96:ab:28:02:4b:c1: 27:c7:25:d0:e7:35:8f:c9:cd:75:01:3f:c9:b6:27: ae:e8:f9:98:bd:ca:e4:99:f5:b8:3d:44:81:bf:11: fd:b9:82:4a:41:0c:24:bc:40:9a:72:f4:1a:4a:f6: 60:42:11:78:ab:f1:ea:a9:d4:85:21:fa:84:a3:cb: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FC:AC:D7:63:76:06:F7:B0:5E:5F:49:7E:3B:66:38:8D:46:DE:6B X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:bd:ff:47:1d:8b:10:e0:ea:ce:3f:6f:e7:81:ef:bb:0d:e6: d9:e7:22:5a:4f:49:1f:ae:9d:26:41:82:8a:e6:f9:a6:fd:de: d4:0f:af:87:76:1c:7a:84:65:f4:dc:df:1e:eb:3c:da:f3:53: 5b:b8:f8:9e:a6:8e:8a:6a:9c:e5:f5:c7:f0:71:e0:de:26:3e: 32:fa:1b:e5:92:5c:44:52:af:d4:52:bc:4b:31:fa:2e:b0:52: d9:30:bd:e4:a9:c2:66:f4:d8:4f:46:25:17:f1:68:6c:f5:de: 5a:a5:2b:6b:25:82:89:58:a4:6e:b4:d7:55:d0:1d:d7:9e:ab: b7:7e:f2:ff:ad:13:f8:7b:28:c3:d2:9d:f4:46:0c:c9:8d:cd: d2:54:d6:57:43:57:0b:52:52:a7:ea:81:55:ea:ea:1a:ad:a9: 46:f7:c6:6e:eb:21:4f:b3:e7:60:6c:c3:de:0a:7e:c1:90:92: d9:c7:eb:28:cf:0d:26:44:ec:11:19:21:d3:dd:1b:62:f0:ed: 9a:52:7a:27:b3:58:31:8c:3a:41:1e:b1:05:c8:27:88:55:ed: 07:b1:27:c7:4c:1a:89:f8:6c:e6:87:b8:73:8a:c4:2e:11:cb: fb:64:dc:75:20:e7:78:a1:f0:1b:69:f6:ba:d4:c1:77:4b:a2: 9b:31:1e:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvUYm89/912Ek02P6QfuMpq0xgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNTEwMTgyMTM2MDhaFw0yNTEwMjIwOTIwMDhaMDMxMTAvBgNV BAMTKEI1RkNBQ0Q3NjM3NjA2RjdCMDVFNUY0OTdFM0I2NjM4OEQ0NkRFNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAO72I8iplLho562Eo1ImHXof Ajef6R+Tr9z3G8aUOhiJFMUNGcmXImkmqqBtzJ7B1IDbMI/YyhLsGcJtz21w76ZI /mkl5VKoMQhtEpdGXKTcBhk9eF+l2gmGlC/+9DL1pJmBoAZojPtXK+9WAC3qctNr KwgSdM7DT1lTGDheZpiQhiE0ab9EpWoWABD+YMhDY1EIeL51ThqEyzwuK8gjSo5B zOS8C8/za3zX7H2mmTh7v95sZBk6prLXZZarKAJLwSfHJdDnNY/JzXUBP8m2J67o +Zi9yuSZ9bg9RIG/Ef25gkpBDCS8QJpy9BpK9mBCEXir8eqp1IUh+oSjy2J1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtfys12N2BvewXl9JfjtmOI1G3mswHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABi9/0cdixDg6s4/b+eB77sN5tnnIlpPSR+u nSZBgorm+ab93tQPr4d2HHqEZfTc3x7rPNrzU1u4+J6mjopqnOX1x/Bx4N4mPjL6 G+WSXERSr9RSvEsx+i6wUtkwveSpwmb02E9GJRfxaGz13lqlK2slgolYpG6011XQ Hdeeq7d+8v+tE/h7KMPSnfRGDMmNzdJU1ldDVwtSUqfqgVXq6hqtqUb3xm7rIU+z 52Bsw94KfsGQktnH6yjPDSZE7BEZIdPdG2Lw7ZpSeiezWDGMOkEesQXIJ4hV7Qex J8dMGon4bOaHuHOKxC4Ry/tk3HUg53ih8Btp9rrUwXdLopsxHno= -----END CERTIFICATE-----Generated at Mon Oct 20 12:33:04 2025 by rpki-client