$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft File: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft (raw, json) Hash identifier: mEo0hAS+8w2Sl/4JR2GF4e6yP5LUuHTiE+y9Pc1Hy3k= Subject key identifier: A0:B3:18:CB:26:4A:92:DC:0B:C6:52:A2:38:78:D6:51:33:03:87:9C Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6 Certificate issuer: /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6 Certificate serial: 3E6A13B47E7051C55C2008D812A172A011C1C027 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft Manifest number: 0202 Signing time: Sat 18 Oct 2025 20:02:23 +0000 Manifest this update: Sat 18 Oct 2025 19:57:23 +0000 Manifest next update: Wed 22 Oct 2025 02:09:23 +0000 Files and hashes: 1: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl (hash: nG3G88VXFY9g0rbRvnkPVM28DeMxS70iwePqOqkyl5s=) 2: 3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (hash: 1BptPYQTBVQCwnCGCAmQpdkJZuT5jDyDH1mIYb86asQ=) 3: 3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (hash: ud1p/krhRE3733a1j5mqZ8KrI1sOH5O1a7m3DIDez2o=) 4: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (hash: k33UC/S59fL9YnbENocJ8tvAJ1sRtIu7ddJOWvA5ll8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6a:13:b4:7e:70:51:c5:5c:20:08:d8:12:a1:72:a0:11:c1:c0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6 Validity Not Before: Oct 18 19:57:23 2025 GMT Not After : Oct 22 02:09:23 2025 GMT Subject: CN=A0B318CB264A92DC0BC652A23878D6513303879C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:e6:76:d1:8d:4b:b8:3f:4c:ac:00:cb:e3: 18:b3:f5:fe:3e:78:f8:2b:34:a9:57:db:32:4f:9b: cd:16:f2:c6:32:50:bb:32:5a:25:ff:64:d9:4f:2c: 48:61:da:1a:63:53:08:ee:ec:f2:0f:bd:e8:ce:22: b1:b8:86:dc:a9:af:25:0e:ca:fa:f5:aa:04:73:be: 8b:35:e3:bd:95:e7:3f:ab:70:a2:51:41:36:be:91: b6:e9:c3:4f:28:82:b1:c6:d2:c5:e2:0e:4d:1b:7a: 91:1b:26:b6:fb:16:d6:cc:32:0e:21:92:3d:e5:88: 0d:f1:93:60:f8:17:de:fd:e0:b8:d8:33:51:6c:40: 1c:b3:f6:61:e2:12:8c:5f:2f:28:8a:2f:b9:95:de: d4:cd:2b:1d:a8:a2:57:c4:52:f7:4f:a6:ed:b7:22: de:b2:70:16:02:7e:aa:2b:82:77:16:7e:66:ac:f1: a0:c5:53:42:ac:2e:69:48:33:8a:d5:2b:ce:6f:5a: 41:13:2a:3a:c1:cf:e4:bd:5a:7a:f7:c6:cf:92:73: 3f:aa:17:07:a2:9b:04:fe:ef:5c:d4:52:f4:23:29: 81:45:3b:8e:89:7b:fd:a3:31:5a:5f:60:e6:b4:2e: e7:13:a2:52:16:0f:c8:33:69:a1:14:c7:77:65:b7: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B3:18:CB:26:4A:92:DC:0B:C6:52:A2:38:78:D6:51:33:03:87:9C X509v3 Authority Key Identifier: keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e4:c5:71:71:fe:42:74:c5:2b:1a:d5:f1:f7:13:62:5f:85: cb:3a:d7:47:7c:97:2a:b6:ba:24:44:cf:23:ed:86:f8:db:63: b7:df:65:87:72:0f:de:96:2d:7d:32:94:52:f5:8f:09:ba:0e: cb:b9:95:9b:d5:2e:52:1d:32:f5:82:2f:e1:af:b4:31:b3:75: aa:cd:c8:7d:2f:c0:09:53:02:3f:8d:d7:d9:57:99:77:29:84: 46:9e:31:b5:85:46:f2:68:13:2a:53:95:ba:25:38:16:c7:26: ab:c6:3a:6f:d5:99:17:a2:36:13:89:fd:54:69:d1:5b:8f:f9: ef:4c:62:34:bf:14:ba:d9:64:83:36:fc:6a:85:1a:27:49:c0: a5:16:b2:8a:03:7b:a5:fd:da:63:e0:6d:ed:6b:28:b4:97:9e: c5:90:bd:0c:fe:d1:82:b2:99:a9:1e:1e:33:35:16:bb:7a:a5: 3f:3d:3f:49:14:02:6e:ab:80:8e:b7:2f:d8:95:5d:c8:24:30: dc:0b:ea:32:a4:98:56:4b:52:0b:b0:8e:b6:cd:e3:91:16:38: d4:80:a2:da:7d:2a:e8:40:22:b4:98:7f:e3:c2:c1:0f:31:74: 75:fa:83:55:30:95:9a:59:96:12:d9:1e:a4:c3:72:03:72:6c: 0f:22:f1:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmoTtH5wUcVcIAjYEqFyoBHBwCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNFOUU5 MkM5QTBDNjAeFw0yNTEwMTgxOTU3MjNaFw0yNTEwMjIwMjA5MjNaMDMxMTAvBgNV BAMTKEEwQjMxOENCMjY0QTkyREMwQkM2NTJBMjM4NzhENjUxMzMwMzg3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIcuZ20Y1LuD9MrADL4xiz9f4+ ePgrNKlX2zJPm80W8sYyULsyWiX/ZNlPLEhh2hpjUwju7PIPvejOIrG4htypryUO yvr1qgRzvos1472V5z+rcKJRQTa+kbbpw08ogrHG0sXiDk0bepEbJrb7FtbMMg4h kj3liA3xk2D4F9794LjYM1FsQByz9mHiEoxfLyiKL7mV3tTNKx2oolfEUvdPpu23 It6ycBYCfqorgncWfmas8aDFU0KsLmlIM4rVK85vWkETKjrBz+S9Wnr3xs+Scz+q FweimwT+71zUUvQjKYFFO46Je/2jMVpfYOa0LucTolIWD8gzaaEUx3dlt/WXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLMYyyZKktwLxlKiOHjWUTMDh5wwHwYDVR0j BBgwFoAURmyUKv/bJi2r97ZdkT8+npLJoMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTZkMGI3OC03ZTgxLTRhOGMtYTg3NS05NTUyMmI0Njc5MzgvMC80NjZDOTQyQUZG REIyNjJEQUJGN0I2NUQ5MTNGM0U5RTkyQzlBMEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNFOUU5MkM5 QTBDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU2ZDBiNzgtN2U4MS00YThjLWE4 NzUtOTU1MjJiNDY3OTM4LzAvNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNF OUU5MkM5QTBDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnkxXFx/kJ0xSsa1fH3E2Jfhcs610d8lyq2 uiREzyPthvjbY7ffZYdyD96WLX0ylFL1jwm6Dsu5lZvVLlIdMvWCL+GvtDGzdarN yH0vwAlTAj+N19lXmXcphEaeMbWFRvJoEypTlbolOBbHJqvGOm/VmReiNhOJ/VRp 0VuP+e9MYjS/FLrZZIM2/GqFGidJwKUWsooDe6X92mPgbe1rKLSXnsWQvQz+0YKy makeHjM1Frt6pT89P0kUAm6rgI63L9iVXcgkMNwL6jKkmFZLUguwjrbN45EWONSA otp9KuhAIrSYf+PCwQ8xdHX6g1UwlZpZlhLZHqTDcgNybA8i8VY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:28 2025 by rpki-client