$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: WMV7BvYOGeO2QdfeaXw1FvG4F8zDhypjaPBjlhsbCL4= Subject key identifier: FF:FD:67:7D:C2:B1:11:8E:A4:7B:EB:A5:64:F8:90:F3:69:EA:E7:43 Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 2F259A5FB7E80BF346959A786726B25A4B05FC9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 037E Signing time: Sun 19 Oct 2025 04:11:53 +0000 Manifest this update: Sun 19 Oct 2025 04:06:53 +0000 Manifest next update: Wed 22 Oct 2025 10:00:53 +0000 Files and hashes: 1: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) 2: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: /NUXsVE3/WAuhuTY3t82wOZs7ty5CETVvVQcPQf4oBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:25:9a:5f:b7:e8:0b:f3:46:95:9a:78:67:26:b2:5a:4b:05:fc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Oct 19 04:06:53 2025 GMT Not After : Oct 22 10:00:53 2025 GMT Subject: CN=FFFD677DC2B1118EA47BEBA564F890F369EAE743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:7a:82:ed:12:38:16:d0:e3:97:42:be:cd: e0:a7:f0:8b:d7:e8:9e:9e:f5:44:43:7e:6e:2c:ac: f4:78:b2:1c:77:24:bd:2f:94:c1:67:01:b6:27:7d: 7f:ee:07:ed:5c:ee:79:e9:b2:84:34:e8:47:07:50: ef:40:b1:3d:44:f1:55:4c:46:d2:ac:41:a4:31:d2: e8:7d:df:89:22:8b:6a:e5:ca:d9:94:8e:1f:ca:a0: ef:80:fb:3f:8b:1f:ec:05:5c:6b:bd:5b:b4:5e:9b: 46:12:0f:98:e6:74:67:04:49:98:f9:98:8a:7a:e3: 06:7b:dc:3b:3c:9c:b3:1d:51:32:1a:5f:8c:a1:77: 85:3a:09:70:ab:18:35:a4:de:d0:a4:e2:c7:4f:dc: 33:f2:8d:32:95:33:21:c7:0d:6c:ff:5c:a4:99:fe: ee:be:cb:d7:19:9f:74:80:6a:42:f6:d6:31:e7:ee: 31:44:96:9c:b2:85:b9:49:b4:e2:5a:ee:a4:ce:c3: c1:39:3a:25:92:79:d2:b8:61:e0:19:d8:99:04:e0: 1e:74:45:ff:c5:b9:d9:7e:d0:9b:8b:c0:5b:62:8c: 90:78:e1:ce:43:09:23:73:46:80:e3:04:2a:ff:38: 9b:29:a0:46:16:08:a3:68:9c:46:61:98:a4:88:80: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FD:67:7D:C2:B1:11:8E:A4:7B:EB:A5:64:F8:90:F3:69:EA:E7:43 X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:30:51:a3:c7:14:03:52:5c:7f:81:f8:65:50:70:f7:e2:0f: 4a:3a:b6:67:38:ba:2d:eb:8a:53:e4:68:85:b4:8b:04:30:fe: 8d:45:ed:89:21:3a:b3:e4:54:cb:25:b8:6a:e0:1f:ed:4b:b2: 52:85:a3:8b:82:82:b9:ae:2a:d9:02:db:82:45:20:a1:81:17: e6:7d:ac:5f:10:aa:b4:1e:6e:8d:52:dc:8d:6e:48:3f:65:08: 55:c7:04:4f:dc:2b:50:4a:62:f9:86:e7:5e:51:93:a2:72:7a: f2:bb:63:e4:01:ee:10:d4:70:64:b3:7a:48:e9:6d:18:3e:1c: 37:63:6a:7a:34:40:19:9e:e0:cd:4c:5c:00:fe:83:ae:21:5e: 34:69:39:30:c1:09:89:64:44:e7:ac:6d:d9:aa:0c:4c:14:fb: d1:85:08:c2:41:9a:d9:6f:98:f2:b9:33:96:ec:db:2c:1d:17: f5:35:91:7f:29:fd:09:9a:19:2f:13:84:8f:04:72:18:f8:98: df:fa:92:f2:5f:a6:8e:da:82:b3:1f:08:a5:3f:0b:89:45:c2: 0f:28:b7:49:fc:a8:6f:5f:64:5e:07:e4:d6:c0:08:d1:69:cb: 41:ed:99:9a:4f:48:9f:6b:ed:63:81:a9:34:5c:2f:be:d6:cc: 04:ad:bd:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyWaX7foC/NGlZp4ZyayWksF/JswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTEwMTkwNDA2NTNaFw0yNTEwMjIxMDAwNTNaMDMxMTAvBgNV BAMTKEZGRkQ2NzdEQzJCMTExOEVBNDdCRUJBNTY0Rjg5MEYzNjlFQUU3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnHqC7RI4FtDjl0K+zeCn8IvX 6J6e9URDfm4srPR4shx3JL0vlMFnAbYnfX/uB+1c7nnpsoQ06EcHUO9AsT1E8VVM RtKsQaQx0uh934kii2rlytmUjh/KoO+A+z+LH+wFXGu9W7Rem0YSD5jmdGcESZj5 mIp64wZ73Ds8nLMdUTIaX4yhd4U6CXCrGDWk3tCk4sdP3DPyjTKVMyHHDWz/XKSZ /u6+y9cZn3SAakL21jHn7jFElpyyhblJtOJa7qTOw8E5OiWSedK4YeAZ2JkE4B50 Rf/Fudl+0JuLwFtijJB44c5DCSNzRoDjBCr/OJspoEYWCKNonEZhmKSIgJ2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU//1nfcKxEY6ke+ulZPiQ82nq50MwHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMwUaPHFANSXH+B+GVQcPfiD0o6tmc4ui3r ilPkaIW0iwQw/o1F7YkhOrPkVMsluGrgH+1LslKFo4uCgrmuKtkC24JFIKGBF+Z9 rF8QqrQebo1S3I1uSD9lCFXHBE/cK1BKYvmG515Rk6JyevK7Y+QB7hDUcGSzekjp bRg+HDdjano0QBme4M1MXAD+g64hXjRpOTDBCYlkROesbdmqDEwU+9GFCMJBmtlv mPK5M5bs2ywdF/U1kX8p/QmaGS8ThI8Echj4mN/6kvJfpo7agrMfCKU/C4lFwg8o t0n8qG9fZF4H5NbACNFpy0HtmZpPSJ9r7WOBqTRcL77WzAStvXY= -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:55 2025 by rpki-client