$ rpki-client -vvf repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft File: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft (raw, json) Hash identifier: 6HA3sRZKQfhuzlGSxUd2kp250x9l91oRWw+omVziklI= Subject key identifier: 15:11:37:14:73:6E:E8:EA:A9:78:F9:26:4D:F1:DA:DC:89:AF:2D:7E Authority key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 Certificate issuer: /CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Certificate serial: 5D641A2944590EEC6D2CB3ACC7ECECB26B8068DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft Manifest number: AC Signing time: Tue 01 Jul 2025 21:52:07 +0000 Manifest this update: Tue 01 Jul 2025 21:47:07 +0000 Manifest next update: Fri 04 Jul 2025 22:58:07 +0000 Files and hashes: 1: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl (hash: v8ZsnOk9D7eBNIqF0bxQmcxITmQCnSk2yCjZZ+AA6Yg=) 2: 3130332e36302e39302e302f32342d3234203d3e20313531353730.roa (hash: YhTpL/afIyHAI7098wyo60hPl3dD1A2rEVVKj7Elh/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:64:1a:29:44:59:0e:ec:6d:2c:b3:ac:c7:ec:ec:b2:6b:80:68:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Validity Not Before: Jul 1 21:47:07 2025 GMT Not After : Jul 4 22:58:07 2025 GMT Subject: CN=15113714736EE8EAA978F9264DF1DADC89AF2D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:92:4c:63:ba:59:13:4f:38:fc:56:57:fc: 8b:c4:37:65:0b:29:4b:34:87:53:7f:1e:be:69:b9: 7e:75:43:2a:08:f0:64:b2:64:03:68:79:1d:da:69: fb:82:36:0c:88:8a:1c:1e:8c:b4:4b:01:f9:25:31: 7e:70:82:9f:0b:78:e2:86:13:c6:45:71:39:70:b2: 68:cf:3e:1d:ae:13:87:04:56:4d:ab:20:ec:a5:92: 1d:3f:e6:81:4e:39:6a:2c:a3:36:04:d0:ed:e1:e3: c0:4b:20:11:30:e7:b5:f6:94:17:eb:6d:c9:b7:9c: e3:84:85:7c:16:cb:20:94:db:4e:2e:b4:56:0c:15: 68:1a:7f:41:ee:41:11:57:b0:de:08:9f:50:4c:f1: 5f:f7:1d:57:e4:1a:75:36:3e:22:2b:f3:bc:37:cb: bd:1a:3e:64:35:9c:f7:54:d2:fe:0e:e9:c7:c7:c1: 91:60:64:6c:1f:96:f0:0a:cf:f9:03:38:fd:1a:da: e0:5d:37:40:07:c1:95:33:97:aa:6d:73:42:a6:d2: 81:b0:6e:58:b6:cb:c1:38:79:dd:be:4c:e2:41:b7: be:59:3d:5c:1e:7c:c1:0b:f3:83:e9:bd:3b:da:1c: 5d:5d:7b:3b:4c:c5:65:4b:db:0b:87:ce:39:b3:29: c3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:11:37:14:73:6E:E8:EA:A9:78:F9:26:4D:F1:DA:DC:89:AF:2D:7E X509v3 Authority Key Identifier: keyid:46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:10:bc:b4:53:9a:5d:9b:0e:f3:76:ec:cd:ff:8e:b2:43:f5: 30:67:2a:a2:ca:ac:2f:64:7b:43:1c:56:e5:c8:fe:76:81:a9: 85:4a:70:d2:b7:36:cd:a2:cd:fd:6a:64:74:c9:3f:34:cc:d5: a6:26:6d:02:bd:c1:1b:8d:0b:24:a2:a3:ee:51:db:97:f0:09: c5:8e:83:0b:b5:f1:44:86:c1:f7:7e:9c:14:6d:40:41:ec:13: 21:56:4d:db:44:87:2b:b0:1c:7f:78:3d:53:b0:75:e5:12:24: a1:1e:d8:14:be:ee:cf:9f:9e:b9:56:87:c6:6d:d6:2e:b5:02: 90:39:16:24:e6:65:7f:0c:1a:ba:91:b7:01:4c:31:14:85:93: 3a:60:4c:d2:8e:d1:5e:6d:cb:d4:f6:67:3b:91:93:86:e3:8c: eb:25:ff:b1:d1:3e:8d:45:b9:c4:09:5e:46:c2:02:21:4a:93: cd:25:fb:dc:d3:5a:51:c0:3c:15:a6:34:3f:75:43:b1:97:96: b3:84:8b:f5:51:11:aa:d3:55:6c:da:9c:c2:ec:c0:ad:16:ed: 53:22:f9:a4:50:d7:c3:02:f1:0a:26:a5:4f:6e:3f:42:85:1d: b8:7a:73:99:e5:67:04:cf:a8:1d:7e:a8:2c:f3:e4:87:06:6c: a0:cf:e0:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWQaKURZDuxtLLOsx+zssmuAaN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNG NkM1QUQ5MzAeFw0yNTA3MDEyMTQ3MDdaFw0yNTA3MDQyMjU4MDdaMDMxMTAvBgNV BAMTKDE1MTEzNzE0NzM2RUU4RUFBOTc4RjkyNjRERjFEQURDODlBRjJEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7P5JMY7pZE084/FZX/IvEN2UL KUs0h1N/Hr5puX51QyoI8GSyZANoeR3aafuCNgyIihwejLRLAfklMX5wgp8LeOKG E8ZFcTlwsmjPPh2uE4cEVk2rIOylkh0/5oFOOWosozYE0O3h48BLIBEw57X2lBfr bcm3nOOEhXwWyyCU204utFYMFWgaf0HuQRFXsN4In1BM8V/3HVfkGnU2PiIr87w3 y70aPmQ1nPdU0v4O6cfHwZFgZGwflvAKz/kDOP0a2uBdN0AHwZUzl6ptc0Km0oGw bli2y8E4ed2+TOJBt75ZPVwefMEL84PpvTvaHF1deztMxWVL2wuHzjmzKcNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFRE3FHNu6OqpePkmTfHa3ImvLX4wHwYDVR0j BBgwFoAURr99aQfH41cmpBgPC8XxM/bFrZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTQ2NjMyYS1iMmUxLTQyMGEtYTg5NS1jNGExZTIyMTdkYTMvMC80NkJGN0Q2OTA3 QzdFMzU3MjZBNDE4MEYwQkM1RjEzM0Y2QzVBRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNGNkM1 QUQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE0NjYzMmEtYjJlMS00MjBhLWE4 OTUtYzRhMWUyMjE3ZGEzLzAvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYx MzNGNkM1QUQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIQvLRTml2bDvN27M3/jrJD9TBnKqLKrC9k e0McVuXI/naBqYVKcNK3Ns2izf1qZHTJPzTM1aYmbQK9wRuNCySio+5R25fwCcWO gwu18USGwfd+nBRtQEHsEyFWTdtEhyuwHH94PVOwdeUSJKEe2BS+7s+fnrlWh8Zt 1i61ApA5FiTmZX8MGrqRtwFMMRSFkzpgTNKO0V5ty9T2ZzuRk4bjjOsl/7HRPo1F ucQJXkbCAiFKk80l+9zTWlHAPBWmND91Q7GXlrOEi/VREarTVWzanMLswK0W7VMi +aRQ18MC8QompU9uP0KFHbh6c5nlZwTPqB1+qCzz5IcGbKDP4AQ= -----END CERTIFICATE-----Generated at Tue Jul 1 23:28:08 2025 by rpki-client