$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: S7B+pSsaFTMfFylKGfiWbq37Dyq69j48L2ETNJtElMY= Subject key identifier: CB:A3:30:3F:22:40:A9:6A:CC:1D:98:4F:3F:F2:37:67:E2:4F:D6:72 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 680913D1C8DEBF89CFC9CAA80C8BB5196BEB4BDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 0178 Signing time: Sat 23 Aug 2025 02:02:17 +0000 Manifest this update: Sat 23 Aug 2025 01:57:17 +0000 Manifest next update: Tue 26 Aug 2025 02:03:17 +0000 Files and hashes: 1: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) 2: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) 3: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 4: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: Lb83uJFwRRaeGngxdBXRiU75PXRh4N0/ya2Wn4bhSsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:09:13:d1:c8:de:bf:89:cf:c9:ca:a8:0c:8b:b5:19:6b:eb:4b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Aug 23 01:57:17 2025 GMT Not After : Aug 26 02:03:17 2025 GMT Subject: CN=CBA3303F2240A96ACC1D984F3FF23767E24FD672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:ef:12:40:cd:93:a1:c8:c3:75:ca:38:35: 38:0c:2e:70:01:d7:37:08:b4:21:97:13:bb:3f:98: d5:66:77:2c:d6:7b:e3:ee:ee:b9:84:3a:c7:47:10: cc:3f:14:f1:e0:b2:c4:92:c4:28:d6:f3:ce:59:a1: 91:7f:f8:dd:8e:81:08:e0:7d:dd:57:7a:3d:90:04: 54:46:e1:e3:c4:f6:62:ba:aa:d8:9c:82:bb:89:e6: fc:db:c0:5f:83:ff:74:60:7f:f9:0a:3e:b5:46:ea: ff:7d:c2:3f:26:ec:09:69:e7:b5:84:ff:5a:28:c6: 3c:87:b5:4a:e3:44:bb:a0:bb:04:a7:3b:86:88:03: 96:40:c8:80:57:be:d3:10:63:74:b8:ff:d4:3e:54: 59:b4:2e:9a:4b:2c:81:6f:17:f0:f3:1b:0f:f7:65: d0:eb:3a:17:3a:68:44:dd:6d:c1:dc:28:6f:eb:16: 0a:f4:25:ba:d5:3a:30:5d:dc:35:fc:21:1e:7e:5d: c9:db:4d:59:dd:96:c2:dd:a7:f5:10:8f:82:03:12: 40:1e:65:10:de:07:e7:4b:60:48:e9:91:2e:dc:dd: 61:d4:04:b5:7e:18:7b:56:ca:27:7e:b2:24:42:70: 62:7d:19:34:52:5e:c2:17:f8:8c:83:66:5e:83:a1: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:30:3F:22:40:A9:6A:CC:1D:98:4F:3F:F2:37:67:E2:4F:D6:72 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c3:3b:28:29:d2:75:10:55:b8:27:ed:1c:0f:f3:cd:30:22: 17:3a:51:7a:b9:76:03:b4:00:d4:c1:bb:63:9d:5e:bd:b1:ba: 0a:a6:9d:92:b3:ab:a6:ad:0b:0d:49:a6:ed:7a:0c:55:2d:53: 18:83:ad:66:2c:25:8b:67:07:55:00:7e:75:1e:f8:02:29:7e: 33:67:08:42:ce:4d:1d:03:b9:5a:8c:4a:0a:d0:cd:d4:35:e0: 3c:d8:d1:5e:85:7f:a1:87:70:95:90:cf:1a:ab:7b:c6:86:b2: ee:29:36:19:0c:07:e1:38:8c:ea:5a:98:a5:69:cd:53:fe:7f: 49:28:ce:f1:2b:c4:a2:96:b4:73:6b:16:ec:b8:79:14:7c:39: f8:cb:fe:96:a9:96:fa:a9:14:68:66:2c:4c:1b:57:62:e4:4b: 4b:a6:05:aa:5b:ff:cc:d6:ad:2f:a6:77:b0:4e:60:6e:b7:78: 27:c4:f3:36:9f:aa:5d:f4:b7:e8:b1:dc:42:5f:62:ca:ba:62: ea:71:9f:b2:ce:6b:fb:77:9b:42:99:fd:8b:57:fc:be:a6:91: d5:4b:15:9a:0e:56:c1:20:e4:9e:58:82:68:68:22:54:54:a1: 0a:7c:fb:0b:03:32:59:d6:d5:5b:ba:94:c6:41:f6:22:86:52: af:ff:cb:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAkT0cjev4nPycqoDIu1GWvrS90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTA4MjMwMTU3MTdaFw0yNTA4MjYwMjAzMTdaMDMxMTAvBgNV BAMTKENCQTMzMDNGMjI0MEE5NkFDQzFEOTg0RjNGRjIzNzY3RTI0RkQ2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVu8SQM2TocjDdco4NTgMLnAB 1zcItCGXE7s/mNVmdyzWe+Pu7rmEOsdHEMw/FPHgssSSxCjW885ZoZF/+N2OgQjg fd1Xej2QBFRG4ePE9mK6qticgruJ5vzbwF+D/3Rgf/kKPrVG6v99wj8m7Alp57WE /1ooxjyHtUrjRLuguwSnO4aIA5ZAyIBXvtMQY3S4/9Q+VFm0LppLLIFvF/DzGw/3 ZdDrOhc6aETdbcHcKG/rFgr0JbrVOjBd3DX8IR5+XcnbTVndlsLdp/UQj4IDEkAe ZRDeB+dLYEjpkS7c3WHUBLV+GHtWyid+siRCcGJ9GTRSXsIX+IyDZl6DoYhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy6MwPyJAqWrMHZhPP/I3Z+JP1nIwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzDOygp0nUQVbgn7RwP880wIhc6UXq5dgO0 ANTBu2OdXr2xugqmnZKzq6atCw1Jpu16DFUtUxiDrWYsJYtnB1UAfnUe+AIpfjNn CELOTR0DuVqMSgrQzdQ14DzY0V6Ff6GHcJWQzxqre8aGsu4pNhkMB+E4jOpamKVp zVP+f0kozvErxKKWtHNrFuy4eRR8OfjL/paplvqpFGhmLEwbV2LkS0umBapb/8zW rS+md7BOYG63eCfE8zafql30t+ix3EJfYsq6Yupxn7LOa/t3m0KZ/YtX/L6mkdVL FZoOVsEg5J5YgmhoIlRUoQp8+wsDMlnW1Vu6lMZB9iKGUq//y5o= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:24 2025 by rpki-client