$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft File: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft (raw, json) Hash identifier: NtN9/K79IOT/wb1Czomq0zmaSbHWruPJ1agCOsBHRd4= Subject key identifier: 2D:0B:7D:CE:FF:55:19:86:7C:97:BF:40:1F:D2:A5:56:C9:BA:44:11 Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6 Certificate issuer: /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6 Certificate serial: 0FE8C03D84614CE1BB61CE0A7C1155B3F6B38C5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft Manifest number: 01E9 Signing time: Sat 23 Aug 2025 08:32:15 +0000 Manifest this update: Sat 23 Aug 2025 08:27:15 +0000 Manifest next update: Tue 26 Aug 2025 17:25:15 +0000 Files and hashes: 1: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (hash: k33UC/S59fL9YnbENocJ8tvAJ1sRtIu7ddJOWvA5ll8=) 2: 3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (hash: ud1p/krhRE3733a1j5mqZ8KrI1sOH5O1a7m3DIDez2o=) 3: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl (hash: HwXhCfieGq5YMKUJM4vmclPPFaVXzoZUGy7j2t+an1c=) 4: 3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (hash: 1BptPYQTBVQCwnCGCAmQpdkJZuT5jDyDH1mIYb86asQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e8:c0:3d:84:61:4c:e1:bb:61:ce:0a:7c:11:55:b3:f6:b3:8c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6 Validity Not Before: Aug 23 08:27:15 2025 GMT Not After : Aug 26 17:25:15 2025 GMT Subject: CN=2D0B7DCEFF5519867C97BF401FD2A556C9BA4411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f8:1a:f5:95:43:79:7f:27:4e:ba:0c:17:37: b4:ab:cb:99:93:71:fa:5d:03:33:a5:b5:af:2a:5b: 7e:9a:e7:27:64:67:aa:bc:36:43:85:b7:57:d3:b8: 6f:db:26:80:9b:2d:81:6f:f8:28:a0:f1:76:7f:df: bf:c6:24:71:e1:9f:b9:72:8e:c4:56:dc:88:89:93: f1:0f:fd:0d:a4:50:f7:3a:ad:6d:e2:b2:c6:9f:89: 54:bd:e9:0d:8e:e5:5e:38:61:c9:81:01:6d:08:cc: db:fa:80:2c:74:b4:92:72:51:57:0c:44:f5:b4:24: e7:8f:be:b0:29:2c:14:cb:db:8d:0d:f3:3d:f9:9b: b9:d1:99:be:97:89:f6:9d:a2:9e:a8:e0:a7:6f:2f: ca:6b:94:13:86:a6:51:d7:9b:91:f9:12:e7:d9:15: 4a:92:17:b6:3a:5a:69:64:70:9f:47:ee:43:d4:f5: 86:cf:e0:19:39:f9:d6:8e:cf:72:5b:9e:22:85:e0: 30:94:88:f2:cb:e4:af:3b:0a:ed:d7:1c:e5:19:a7: 5c:4f:83:99:20:94:26:fe:79:c6:e2:b2:3a:0d:02: dc:aa:7f:18:9b:f0:6d:a3:1a:2c:de:84:dd:22:90: 6c:d6:80:74:e3:ae:33:86:4c:99:c4:1d:69:13:15: da:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0B:7D:CE:FF:55:19:86:7C:97:BF:40:1F:D2:A5:56:C9:BA:44:11 X509v3 Authority Key Identifier: keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:54:60:63:27:d4:d2:04:9c:4d:31:7c:3a:d1:fc:33:69:98: c0:1f:14:16:be:76:1c:1c:c9:f0:38:6e:8d:07:59:b6:52:91: 73:47:d1:58:99:dc:93:c8:8b:e5:53:d4:2d:5b:cc:c6:8c:3e: 5b:70:a8:2b:f3:3d:5d:3a:bc:d6:24:87:b2:f4:73:16:4c:40: d9:93:7d:51:8c:cf:dd:c0:40:5d:8c:67:88:a6:77:b1:85:56: b8:05:4a:00:14:e1:3a:13:4a:9f:ec:4a:c5:f6:a5:81:7c:85: d4:0f:7a:73:f1:ec:89:1b:8d:1f:1c:5e:35:2d:fc:2b:07:25: 65:ab:bc:96:8f:18:9a:71:0e:02:14:0b:bf:df:35:df:cd:c7: aa:61:63:ac:95:6a:f8:d6:69:2e:10:f8:7d:26:55:a4:ba:1f: 90:0b:7a:5f:56:59:e4:32:5f:19:34:d9:9b:c8:7b:6b:ef:34: af:b3:c7:f2:a0:5f:15:32:a1:70:49:03:11:2e:53:40:80:f7: b5:e4:e9:ef:5b:70:07:0e:ea:16:68:cf:79:08:8e:d5:24:cf: 75:a5:e8:f2:05:ab:34:4d:fe:60:dc:ee:39:03:57:21:48:22: 63:a9:cc:b5:fa:91:ba:49:65:a7:f2:95:3d:f2:0e:4a:e9:15: 2c:2a:49:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+jAPYRhTOG7Yc4KfBFVs/azjF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNFOUU5 MkM5QTBDNjAeFw0yNTA4MjMwODI3MTVaFw0yNTA4MjYxNzI1MTVaMDMxMTAvBgNV BAMTKDJEMEI3RENFRkY1NTE5ODY3Qzk3QkY0MDFGRDJBNTU2QzlCQTQ0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1+Br1lUN5fydOugwXN7Sry5mT cfpdAzOlta8qW36a5ydkZ6q8NkOFt1fTuG/bJoCbLYFv+Cig8XZ/37/GJHHhn7ly jsRW3IiJk/EP/Q2kUPc6rW3issafiVS96Q2O5V44YcmBAW0IzNv6gCx0tJJyUVcM RPW0JOePvrApLBTL240N8z35m7nRmb6Xifadop6o4KdvL8prlBOGplHXm5H5EufZ FUqSF7Y6WmlkcJ9H7kPU9YbP4Bk5+daOz3JbniKF4DCUiPLL5K87Cu3XHOUZp1xP g5kglCb+ecbisjoNAtyqfxib8G2jGizehN0ikGzWgHTjrjOGTJnEHWkTFdppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULQt9zv9VGYZ8l79AH9KlVsm6RBEwHwYDVR0j BBgwFoAURmyUKv/bJi2r97ZdkT8+npLJoMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTZkMGI3OC03ZTgxLTRhOGMtYTg3NS05NTUyMmI0Njc5MzgvMC80NjZDOTQyQUZG REIyNjJEQUJGN0I2NUQ5MTNGM0U5RTkyQzlBMEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNFOUU5MkM5 QTBDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU2ZDBiNzgtN2U4MS00YThjLWE4 NzUtOTU1MjJiNDY3OTM4LzAvNDY2Qzk0MkFGRkRCMjYyREFCRjdCNjVEOTEzRjNF OUU5MkM5QTBDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVUYGMn1NIEnE0xfDrR/DNpmMAfFBa+dhwc yfA4bo0HWbZSkXNH0ViZ3JPIi+VT1C1bzMaMPltwqCvzPV06vNYkh7L0cxZMQNmT fVGMz93AQF2MZ4imd7GFVrgFSgAU4ToTSp/sSsX2pYF8hdQPenPx7IkbjR8cXjUt /CsHJWWrvJaPGJpxDgIUC7/fNd/Nx6phY6yVavjWaS4Q+H0mVaS6H5ALel9WWeQy Xxk02ZvIe2vvNK+zx/KgXxUyoXBJAxEuU0CA97Xk6e9bcAcO6hZoz3kIjtUkz3Wl 6PIFqzRN/mDc7jkDVyFIImOpzLX6kbpJZafylT3yDkrpFSwqSSA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:27:18 2025 by rpki-client