$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft File: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft (raw, json) Hash identifier: 6KW9Ob6yjE+R9JlP3e77S0GwJpLHhe21Q0RRCTKxt0k= Subject key identifier: 5E:E3:0D:75:5A:F6:5E:4D:58:2D:72:EF:14:09:82:C3:4B:5C:02:13 Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6 Certificate issuer: /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6 Certificate serial: 27CC196B761C80F04867B8EEA8BA6A051260F571 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft Manifest number: 01D0 Signing time: Sat 28 Jun 2025 14:42:12 +0000 Manifest this update: Sat 28 Jun 2025 14:37:12 +0000 Manifest next update: Tue 01 Jul 2025 18:46:12 +0000 Files and hashes: 1: 3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (hash: 1BptPYQTBVQCwnCGCAmQpdkJZuT5jDyDH1mIYb86asQ=) 2: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (hash: k33UC/S59fL9YnbENocJ8tvAJ1sRtIu7ddJOWvA5ll8=) 3: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl (hash: Ph8G6F5EC8XcCBKkzlAf8gQavneGvwCC/I0T95F8xyM=) 4: 3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (hash: ud1p/krhRE3733a1j5mqZ8KrI1sOH5O1a7m3DIDez2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cc:19:6b:76:1c:80:f0:48:67:b8:ee:a8:ba:6a:05:12:60:f5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6 Validity Not Before: Jun 28 14:37:12 2025 GMT Not After : Jul 1 18:46:12 2025 GMT Subject: CN=5EE30D755AF65E4D582D72EF140982C34B5C0213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:32:52:0e:0a:08:ec:2f:e7:50:da:7a:e7: 31:52:de:8c:4b:d9:a3:ce:6f:a4:83:74:9a:14:ea: f9:8e:6f:58:fc:35:e1:26:b2:9a:fa:cb:72:06:1d: c8:9a:0e:a5:c5:5b:b4:8c:59:db:65:d8:bc:f9:79: 52:4d:c0:45:85:d7:03:03:21:45:d0:dd:f2:9d:91: e1:89:75:12:2a:94:3d:08:26:0b:bb:a7:1d:5a:52: f3:95:ef:7c:d7:b6:75:f1:9a:1e:9e:01:9a:da:b1: a9:a5:3d:24:97:79:cd:57:ef:a2:0a:54:8c:a8:b4: 6a:75:84:7d:d1:f2:6c:4e:b4:14:49:e9:49:42:5c: 08:4b:e4:aa:9b:df:c1:77:17:9e:cf:09:01:02:ec: 89:6f:58:41:2c:1f:47:f0:22:06:b0:f8:a9:52:93: 7f:98:44:a6:be:69:d4:df:89:d9:54:04:21:7b:24: 6c:3e:41:02:98:72:2e:d4:fc:43:df:50:7f:f5:e1: 37:6c:42:8b:bd:03:ed:7f:f4:eb:c7:0a:c1:db:8b: 3f:61:b7:8f:f3:8e:d7:11:af:fe:f4:37:28:73:e5: d3:18:42:12:e1:8c:72:cd:55:06:99:b8:98:25:41: f5:55:d8:76:a8:0b:57:c5:db:e5:d0:c7:12:c3:64: 15:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E3:0D:75:5A:F6:5E:4D:58:2D:72:EF:14:09:82:C3:4B:5C:02:13 X509v3 Authority Key Identifier: keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2a:4f:f9:4f:90:96:d0:a2:fb:d5:3e:1b:83:2a:41:79:ab: 71:3d:2d:14:35:f4:66:0f:f5:0c:1e:00:da:3c:ad:b3:bd:d0: 20:b5:97:e2:44:4b:65:9d:2d:87:6e:a5:a1:a5:95:9c:7e:e2: 03:14:de:c1:9d:32:f0:6c:55:8f:18:11:76:a6:2e:6a:57:5f: 56:2e:c9:b2:d7:7d:6f:b9:a6:92:d8:c4:3c:61:62:e9:50:37: df:51:e0:61:2d:3f:94:2e:f6:45:1c:c1:6f:e6:a5:0c:e0:fe: 1a:49:98:ca:f9:17:18:fe:30:1f:b7:af:ed:5f:20:36:f4:f5: 7c:36:99:1f:6f:52:bf:10:56:bf:70:5b:72:17:de:82:61:24: 06:ac:eb:37:b9:30:14:cf:53:4e:1d:32:be:71:3e:c3:7d:82: ff:07:15:ea:9f:ab:61:31:c5:dd:f6:ce:8f:e8:d5:08:af:38: 00:42:a0:93:20:a9:ae:d3:1b:a7:6f:40:11:5e:b4:35:53:75: 40:79:11:8c:18:69:85:8d:9a:5b:73:44:71:9b:ea:17:74:17: 3d:e9:f3:9a:7a:5e:5f:3a:b0:1e:f7:79:39:93:4a:94:58:bb: 8d:86:9f:55:43:3f:dd:12:8e:9d:08:04:eb:e6:e2:8a:8c:39: e4:f5:56:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8wZa3YcgPBIZ7juqLpqBRJg9XEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNFOUU5 MkM5QTBDNjAeFw0yNTA2MjgxNDM3MTJaFw0yNTA3MDExODQ2MTJaMDMxMTAvBgNV BAMTKDVFRTMwRDc1NUFGNjVFNEQ1ODJENzJFRjE0MDk4MkMzNEI1QzAyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIXTJSDgoI7C/nUNp65zFS3oxL 2aPOb6SDdJoU6vmOb1j8NeEmspr6y3IGHciaDqXFW7SMWdtl2Lz5eVJNwEWF1wMD IUXQ3fKdkeGJdRIqlD0IJgu7px1aUvOV73zXtnXxmh6eAZrasamlPSSXec1X76IK VIyotGp1hH3R8mxOtBRJ6UlCXAhL5Kqb38F3F57PCQEC7IlvWEEsH0fwIgaw+KlS k3+YRKa+adTfidlUBCF7JGw+QQKYci7U/EPfUH/14TdsQou9A+1/9OvHCsHbiz9h t4/zjtcRr/70Nyhz5dMYQhLhjHLNVQaZuJglQfVV2HaoC1fF2+XQxxLDZBURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXuMNdVr2Xk1YLXLvFAmCw0tcAhMwHwYDVR0j BBgwFoAURmyUKv/bJi2r97ZdkT8+npLJoMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTZkMGI3OC03ZTgxLTRhOGMtYTg3NS05NTUyMmI0Njc5MzgvMC80NjZDOTQyQUZG REIyNjJEQUJGN0I2NUQ5MTNGM0U5RTkyQzlBMEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNFOUU5MkM5 QTBDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU2ZDBiNzgtN2U4MS00YThjLWE4 NzUtOTU1MjJiNDY3OTM4LzAvNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNF OUU5MkM5QTBDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcqT/lPkJbQovvVPhuDKkF5q3E9LRQ19GYP 9QweANo8rbO90CC1l+JES2WdLYdupaGllZx+4gMU3sGdMvBsVY8YEXamLmpXX1Yu ybLXfW+5ppLYxDxhYulQN99R4GEtP5Qu9kUcwW/mpQzg/hpJmMr5Fxj+MB+3r+1f IDb09Xw2mR9vUr8QVr9wW3IX3oJhJAas6ze5MBTPU04dMr5xPsN9gv8HFeqfq2Ex xd32zo/o1QivOABCoJMgqa7TG6dvQBFetDVTdUB5EYwYaYWNmltzRHGb6hd0Fz3p 85p6Xl86sB73eTmTSpRYu42Gn1VDP90Sjp0IBOvm4oqMOeT1Vo4= -----END CERTIFICATE-----Generated at Mon Jun 30 00:44:10 2025 by rpki-client