$ rpki-client -vvf repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft File: 466F8934F3FED9355C9ED09E3826CBE32B25D402.mft (raw, json) Hash identifier: N8Avw0k2p7BCahByzALe6vnMC7OL6IfArilRrPuiKVU= Subject key identifier: 7E:98:1E:9B:86:48:42:91:76:BB:94:19:D5:1E:8A:AB:F5:DB:73:F8 Authority key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02 Certificate issuer: /CN=466F8934F3FED9355C9ED09E3826CBE32B25D402 Certificate serial: 3B611056CE6906403E600C5701E5099E04E7A215 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft Manifest number: 0436 Signing time: Sat 28 Jun 2025 14:41:00 +0000 Manifest this update: Sat 28 Jun 2025 14:36:00 +0000 Manifest next update: Tue 01 Jul 2025 21:15:00 +0000 Files and hashes: 1: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: 4Z5eDrrHZmqs6QxVIkyuY07V0t6QahOws6as1cnmdoY=) 2: 466F8934F3FED9355C9ED09E3826CBE32B25D402.crl (hash: mijWRN492k9rOk0UhDr57ylqjCDg3zqI6qsakQsoBlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:61:10:56:ce:69:06:40:3e:60:0c:57:01:e5:09:9e:04:e7:a2:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402 Validity Not Before: Jun 28 14:36:00 2025 GMT Not After : Jul 1 21:15:00 2025 GMT Subject: CN=7E981E9B8648429176BB9419D51E8AABF5DB73F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:bc:99:8b:f5:52:ba:9f:0e:58:6f:f0:01: 00:6a:25:a7:6e:c6:ab:a5:73:9e:0c:ca:2c:a6:a8: 68:33:04:7e:53:d2:eb:4c:04:57:01:6b:0f:32:1d: f9:c0:b6:ad:e6:70:2a:f7:39:66:69:8e:bc:cb:8e: 9d:9b:ce:dd:b1:9c:71:d3:31:f1:db:a3:4e:84:35: ec:68:34:bc:7f:5c:82:34:5a:54:f9:29:e4:aa:f3: 74:d5:a7:7c:8a:10:1c:08:74:44:f3:1a:d0:8e:fb: ef:e7:97:98:8d:3f:56:ee:0e:9a:43:a4:43:00:38: bb:d4:49:bf:15:cc:f1:a1:b0:82:4e:b9:70:fe:84: c3:96:d5:d3:80:8d:fe:5f:3b:f6:5d:75:c5:a1:9b: 64:e3:6f:03:44:55:12:60:04:c9:65:dd:e5:4b:68: 64:8f:16:a4:c3:70:1a:f2:73:57:a1:f2:ba:2d:b9: a3:d9:25:2f:74:a7:3d:46:3a:e2:80:67:63:2d:c9: 79:db:1a:a1:97:43:d9:c6:99:55:ee:03:b2:d6:c1: bc:b5:b2:e6:78:ad:5a:68:70:0e:80:0d:a8:78:5b: f1:7a:54:6f:8f:14:ea:3e:2f:86:4c:c5:2c:bf:72: c5:a6:9e:f4:02:80:7b:ab:67:73:09:c6:63:78:35: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:98:1E:9B:86:48:42:91:76:BB:94:19:D5:1E:8A:AB:F5:DB:73:F8 X509v3 Authority Key Identifier: keyid:46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e0:44:7b:0c:b1:e4:8c:2b:f4:ad:bd:1b:41:d6:ba:57:76: f3:86:e8:1c:c9:b1:11:62:24:fc:88:e1:32:12:5e:7c:66:e0: c6:93:20:4e:06:c7:0c:e5:76:7c:11:1d:c5:ee:9d:a1:cf:b8: 7c:e5:fb:c3:a9:07:a4:12:70:e4:46:91:2d:53:0f:24:1d:aa: 34:b2:70:ca:05:fd:47:16:65:b2:49:37:dc:35:bf:47:77:62: 5c:fb:d3:71:85:7b:4d:18:0b:80:91:b8:a1:a4:57:b0:79:2a: d4:63:2e:90:fa:5f:78:3a:ca:ca:ba:84:e7:47:99:20:3a:dd: 3a:b8:90:ae:f7:7e:d0:01:08:98:c8:a8:5d:f3:70:a0:5e:cc: 30:4e:b2:e1:cb:0c:f5:e4:42:34:34:1e:71:c0:e3:d5:3b:94: 11:b1:76:af:54:bb:53:71:4c:60:53:d3:1b:86:8b:9d:66:b6: 7d:3a:34:68:17:af:b4:7f:38:8b:3a:5a:b4:1c:43:4a:9b:a4: e5:31:16:39:46:04:7b:5c:fd:9c:51:92:ff:1e:80:54:5a:21: 1f:1f:5c:79:37:f2:3a:f5:1f:5d:b3:86:17:37:b8:8a:d7:1d: 55:aa:6f:00:89:1c:ab:fb:c4:13:87:01:96:d2:bb:c5:29:d7: fc:7b:a7:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2EQVs5pBkA+YAxXAeUJngTnohUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNCRTMy QjI1RDQwMjAeFw0yNTA2MjgxNDM2MDBaFw0yNTA3MDEyMTE1MDBaMDMxMTAvBgNV BAMTKDdFOTgxRTlCODY0ODQyOTE3NkJCOTQxOUQ1MUU4QUFCRjVEQjczRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6byZi/VSup8OWG/wAQBqJadu xqulc54MyiymqGgzBH5T0utMBFcBaw8yHfnAtq3mcCr3OWZpjrzLjp2bzt2xnHHT MfHbo06ENexoNLx/XII0WlT5KeSq83TVp3yKEBwIdETzGtCO++/nl5iNP1buDppD pEMAOLvUSb8VzPGhsIJOuXD+hMOW1dOAjf5fO/ZddcWhm2TjbwNEVRJgBMll3eVL aGSPFqTDcBryc1eh8rotuaPZJS90pz1GOuKAZ2MtyXnbGqGXQ9nGmVXuA7LWwby1 suZ4rVpocA6ADah4W/F6VG+PFOo+L4ZMxSy/csWmnvQCgHurZ3MJxmN4NUW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfpgem4ZIQpF2u5QZ1R6Kq/Xbc/gwHwYDVR0j BBgwFoAURm+JNPP+2TVcntCeOCbL4ysl1AIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzM5NzhmOC1hZWFiLTQyN2EtYmQ3NS0yY2RmMWQ5ZWI1MTcvMC80NjZGODkzNEYz RkVEOTM1NUM5RUQwOUUzODI2Q0JFMzJCMjVENDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNCRTMyQjI1 RDQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk NzUtMmNkZjFkOWViNTE3LzAvNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNC RTMyQjI1RDQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjgRHsMseSMK/StvRtB1rpXdvOG6BzJsRFi JPyI4TISXnxm4MaTIE4GxwzldnwRHcXunaHPuHzl+8OpB6QScORGkS1TDyQdqjSy cMoF/UcWZbJJN9w1v0d3Ylz703GFe00YC4CRuKGkV7B5KtRjLpD6X3g6ysq6hOdH mSA63Tq4kK73ftABCJjIqF3zcKBezDBOsuHLDPXkQjQ0HnHA49U7lBGxdq9Uu1Nx TGBT0xuGi51mtn06NGgXr7R/OIs6WrQcQ0qbpOUxFjlGBHtc/ZxRkv8egFRaIR8f XHk38jr1H12zhhc3uIrXHVWqbwCJHKv7xBOHAZbSu8Up1/x7p/Q= -----END CERTIFICATE-----Generated at Mon Jun 30 17:03:21 2025 by rpki-client