$ rpki-client -vvf repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft File: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft (raw, json) Hash identifier: /mBKPfkkVkFyQFe8cXVNzhe3NIXiHbfzeR3Dk7vRbDg= Subject key identifier: C4:13:62:8D:36:CD:30:71:91:95:DD:06:A2:9D:13:93:9B:7F:34:FA Authority key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 Certificate issuer: /CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Certificate serial: 25119D26E91439B1E60928295D7FC7DDF5563619 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft Manifest number: C3 Signing time: Thu 21 Aug 2025 10:52:13 +0000 Manifest this update: Thu 21 Aug 2025 10:47:13 +0000 Manifest next update: Sun 24 Aug 2025 15:29:13 +0000 Files and hashes: 1: 3130332e36302e39302e302f32342d3234203d3e20313531353730.roa (hash: YhTpL/afIyHAI7098wyo60hPl3dD1A2rEVVKj7Elh/k=) 2: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl (hash: 0Cx2BAAtGopyKzsd6wt8VHSZ5lyIu6PSJyTZ5koJwQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:11:9d:26:e9:14:39:b1:e6:09:28:29:5d:7f:c7:dd:f5:56:36:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Validity Not Before: Aug 21 10:47:13 2025 GMT Not After : Aug 24 15:29:13 2025 GMT Subject: CN=C413628D36CD30719195DD06A29D13939B7F34FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:88:3a:c7:79:ec:10:94:1e:2f:7b:6e:fe: cf:cf:79:60:d6:b7:7d:a6:72:f2:a5:25:ad:c2:85: a8:bd:eb:e9:11:f2:37:49:a9:f2:19:9e:6b:f9:15: 34:f6:71:13:a5:c8:fe:1c:d2:b1:3e:d3:a6:81:4e: 60:d8:1b:cc:ec:9e:87:bf:76:9c:f9:c3:72:14:8e: 72:88:b6:f0:dd:c0:55:c3:79:40:54:04:53:ee:e6: 9c:34:d4:53:a8:2a:cc:a5:e0:14:c7:01:36:bd:41: 9f:25:09:7f:63:35:e5:f9:9b:bb:37:3d:5e:50:33: 41:fc:e1:d0:64:1d:90:5e:bd:79:d1:d4:92:17:52: 8f:fb:f2:35:9c:56:2a:f5:93:63:45:d2:d1:88:5a: cd:3e:73:a9:cf:36:38:a6:ee:d8:af:f3:a5:aa:da: 10:3d:90:dd:3e:90:5b:f3:93:77:4f:30:3d:fe:b3: 35:89:2f:ef:e2:60:f3:63:29:f5:f9:6c:d9:c3:b3: 45:37:cb:20:20:a5:05:93:9d:7a:e7:e5:f4:36:b7: 1c:11:d9:b5:b3:35:ce:0a:bd:4f:4a:b0:b3:06:4f: a7:26:04:70:ed:27:16:84:12:cd:62:1e:a1:01:a2: 03:96:e9:62:4e:49:5e:c3:58:e3:c4:38:9d:28:df: f1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:13:62:8D:36:CD:30:71:91:95:DD:06:A2:9D:13:93:9B:7F:34:FA X509v3 Authority Key Identifier: keyid:46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:13:f9:e2:b7:c7:8c:ef:41:6a:43:12:e9:bd:6c:df:b9:da: f9:36:f5:4d:99:56:f5:6b:1b:aa:49:67:b1:f8:20:62:4c:2c: 36:c6:71:aa:07:86:4d:75:e9:02:e0:c2:91:9b:f9:ec:52:b1: f8:27:01:92:9a:50:4f:b9:c2:19:b3:de:92:6b:00:9a:9e:a1: be:f2:fb:0c:0f:c3:91:5f:8c:7b:a0:b1:df:07:d3:f9:67:b7: ed:ba:25:94:7f:a8:11:fc:cc:a5:57:9b:29:e3:4e:eb:bf:84: ee:56:70:90:6e:31:58:9d:20:60:f6:13:ea:7b:fb:a7:f2:e2: b0:a9:1a:2c:ca:4e:ab:ac:7c:70:d9:f9:56:63:2a:35:99:cd: 39:02:57:00:31:09:3b:e7:f4:44:37:9c:7f:ff:ba:00:d3:af: 18:51:84:32:91:cb:71:d8:bc:6f:6f:1b:4c:cb:cd:4a:32:18: 14:e3:f2:31:0e:86:bf:ff:4a:08:3b:27:92:7a:c0:63:5c:0f: 6a:d5:b8:36:4f:6d:d1:44:21:38:73:d5:3f:4a:56:19:dc:97: 35:21:50:c5:b9:1c:67:6e:7a:4f:29:1c:da:1b:0d:28:da:c7: 58:cf:ce:70:96:ae:71:03:52:91:9c:a4:7f:d8:e5:6b:70:3b: f1:fc:e4:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRGdJukUObHmCSgpXX/H3fVWNhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNG NkM1QUQ5MzAeFw0yNTA4MjExMDQ3MTNaFw0yNTA4MjQxNTI5MTNaMDMxMTAvBgNV BAMTKEM0MTM2MjhEMzZDRDMwNzE5MTk1REQwNkEyOUQxMzkzOUI3RjM0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/l4g6x3nsEJQeL3tu/s/PeWDW t32mcvKlJa3Chai96+kR8jdJqfIZnmv5FTT2cROlyP4c0rE+06aBTmDYG8zsnoe/ dpz5w3IUjnKItvDdwFXDeUBUBFPu5pw01FOoKsyl4BTHATa9QZ8lCX9jNeX5m7s3 PV5QM0H84dBkHZBevXnR1JIXUo/78jWcVir1k2NF0tGIWs0+c6nPNjim7tiv86Wq 2hA9kN0+kFvzk3dPMD3+szWJL+/iYPNjKfX5bNnDs0U3yyAgpQWTnXrn5fQ2txwR 2bWzNc4KvU9KsLMGT6cmBHDtJxaEEs1iHqEBogOW6WJOSV7DWOPEOJ0o3/EDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxBNijTbNMHGRld0Gop0Tk5t/NPowHwYDVR0j BBgwFoAURr99aQfH41cmpBgPC8XxM/bFrZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTQ2NjMyYS1iMmUxLTQyMGEtYTg5NS1jNGExZTIyMTdkYTMvMC80NkJGN0Q2OTA3 QzdFMzU3MjZBNDE4MEYwQkM1RjEzM0Y2QzVBRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNGNkM1 QUQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE0NjYzMmEtYjJlMS00MjBhLWE4 OTUtYzRhMWUyMjE3ZGEzLzAvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYx MzNGNkM1QUQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMT+eK3x4zvQWpDEum9bN+52vk29U2ZVvVr G6pJZ7H4IGJMLDbGcaoHhk116QLgwpGb+exSsfgnAZKaUE+5whmz3pJrAJqeob7y +wwPw5FfjHugsd8H0/lnt+26JZR/qBH8zKVXmynjTuu/hO5WcJBuMVidIGD2E+p7 +6fy4rCpGizKTqusfHDZ+VZjKjWZzTkCVwAxCTvn9EQ3nH//ugDTrxhRhDKRy3HY vG9vG0zLzUoyGBTj8jEOhr//Sgg7J5J6wGNcD2rVuDZPbdFEIThz1T9KVhnclzUh UMW5HGduek8pHNobDSjax1jPznCWrnEDUpGcpH/Y5WtwO/H85Ic= -----END CERTIFICATE-----Generated at Sat Aug 23 13:58:40 2025 by rpki-client