$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json) Hash identifier: w9F6J0I4pkeL5pYOO60rI8+d5fODTx3JRH2BfTgC66I= Subject key identifier: 71:0D:79:F5:09:42:95:FF:47:8F:0B:8F:86:F2:4F:A6:14:82:5E:B2 Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Certificate serial: 38A95EC915A6DEFC0557BF09C3DFBDE136643147 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 18:30:43 +0000 Manifest this update: Sat 23 Aug 2025 18:25:43 +0000 Manifest next update: Tue 26 Aug 2025 20:23:43 +0000 Files and hashes: 1: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=) 2: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: 1qw3EZM5Jycq6GigDusfn088F4cOWj9rpO69asRAzGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a9:5e:c9:15:a6:de:fc:05:57:bf:09:c3:df:bd:e1:36:64:31:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Validity Not Before: Aug 23 18:25:43 2025 GMT Not After : Aug 26 20:23:43 2025 GMT Subject: CN=710D79F5094295FF478F0B8F86F24FA614825EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:f2:57:35:25:d3:91:ed:5f:a6:78:57:62: 6b:3f:13:61:d6:b0:af:15:34:56:4f:7e:62:5f:c1: 27:96:9e:e2:8d:34:da:85:1d:e2:cf:57:f0:84:cf: cc:16:51:e4:5f:7e:3c:20:ad:45:84:91:ba:f4:72: 12:51:bd:ec:fe:17:52:49:5f:b2:b4:bb:98:ce:e9: 28:ce:31:ca:8c:7b:d3:2f:a6:90:12:4d:ea:b9:81: 46:78:d0:11:33:b4:aa:9e:2d:29:cf:fd:3d:c7:ce: 62:02:e7:69:96:d5:84:db:dd:a0:bb:e5:3c:63:36: 94:0e:9e:22:62:3e:5e:a0:2a:2a:b4:68:30:17:3c: de:f4:72:05:3d:d1:89:37:b3:69:09:5f:4a:11:97: a7:48:db:d1:34:29:54:65:d4:3c:fd:e8:16:db:9c: 88:0c:6b:1a:64:71:66:b6:ec:9c:99:b6:16:b2:77: 65:f1:b1:2d:af:3f:3a:9a:14:98:29:b6:ac:99:58: 0f:9a:34:8a:f6:41:8c:25:cd:3a:b6:26:7e:be:b8: 7c:d3:d3:e7:fe:fb:d2:da:f7:ec:6a:b1:a9:27:7f: ba:9b:3c:c8:43:f1:57:cf:89:91:8e:bb:ec:e4:cc: 3e:23:75:fb:55:57:18:92:ab:d0:28:2c:6d:f1:e9: d8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0D:79:F5:09:42:95:FF:47:8F:0B:8F:86:F2:4F:A6:14:82:5E:B2 X509v3 Authority Key Identifier: keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:40:e0:04:06:c6:f5:60:12:51:7f:0b:33:55:03:86:aa:7e: e2:67:f2:94:03:be:48:a8:cd:11:4d:73:48:23:99:18:53:92: b4:60:bc:d8:fc:b2:53:ac:33:a1:e7:fd:87:ca:ee:51:dc:0d: f1:71:27:05:05:59:89:a8:83:fe:c3:08:07:2f:c3:7d:e2:a9: 2d:62:2f:e1:ea:39:72:46:6b:e2:19:d0:79:3f:9b:23:cf:68: 80:d7:a6:8d:ac:fe:cf:46:6a:db:95:9f:7b:03:8d:1f:a4:2c: f9:6d:52:45:5f:4c:94:28:07:f6:e8:e0:86:d0:10:94:9c:8f: 3e:48:17:6e:bb:96:01:09:26:30:0e:44:35:a9:2a:e5:07:36: 51:4a:bf:b8:e5:76:5a:18:65:67:dc:15:ec:9a:9e:e3:b6:f1: 04:d0:84:df:7f:64:14:6b:49:6b:92:12:10:2c:5b:43:4b:17: 16:8d:6b:2e:3c:0c:1e:62:23:7c:65:9d:6a:77:e2:9f:14:8d: ac:58:90:e0:94:8f:ee:f1:2d:b5:04:95:9b:e6:a9:95:f0:ec: 91:5b:40:31:f6:87:1f:30:44:20:ca:f7:ea:d3:19:80:5e:90: 5d:cd:06:b6:fd:c9:57:58:29:f7:d8:ce:13:aa:57:cb:ac:a5: 5b:2e:47:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKleyRWm3vwFV78Jw9+94TZkMUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy REMxRTg3NjAeFw0yNTA4MjMxODI1NDNaFw0yNTA4MjYyMDIzNDNaMDMxMTAvBgNV BAMTKDcxMEQ3OUY1MDk0Mjk1RkY0NzhGMEI4Rjg2RjI0RkE2MTQ4MjVFQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg6PJXNSXTke1fpnhXYms/E2HW sK8VNFZPfmJfwSeWnuKNNNqFHeLPV/CEz8wWUeRffjwgrUWEkbr0chJRvez+F1JJ X7K0u5jO6SjOMcqMe9MvppASTeq5gUZ40BEztKqeLSnP/T3HzmIC52mW1YTb3aC7 5TxjNpQOniJiPl6gKiq0aDAXPN70cgU90Yk3s2kJX0oRl6dI29E0KVRl1Dz96Bbb nIgMaxpkcWa27JyZthayd2XxsS2vPzqaFJgptqyZWA+aNIr2QYwlzTq2Jn6+uHzT 0+f++9La9+xqsaknf7qbPMhD8VfPiZGOu+zkzD4jdftVVxiSq9AoLG3x6dilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQ159QlClf9HjwuPhvJPphSCXrIwHwYDVR0j BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5 MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZA4AQGxvVgElF/CzNVA4aqfuJn8pQDvkio zRFNc0gjmRhTkrRgvNj8slOsM6Hn/YfK7lHcDfFxJwUFWYmog/7DCAcvw33iqS1i L+HqOXJGa+IZ0Hk/myPPaIDXpo2s/s9GatuVn3sDjR+kLPltUkVfTJQoB/bo4IbQ EJScjz5IF267lgEJJjAORDWpKuUHNlFKv7jldloYZWfcFeyanuO28QTQhN9/ZBRr SWuSEhAsW0NLFxaNay48DB5iI3xlnWp34p8UjaxYkOCUj+7xLbUElZvmqZXw7JFb QDH2hx8wRCDK9+rTGYBekF3NBrb9yVdYKffYzhOqV8uspVsuR1g= -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:11 2025 by rpki-client