$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: B1d0FphP/mMw6cwf+q79miAOJf4Jd4ARphgnwiignZ0= Subject key identifier: 14:1A:9C:8D:2C:B6:75:CD:BF:65:40:4C:93:3C:19:87:7B:1C:66:9E Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 1DAD17412806E75C80FFD2351E6BC0653D2F292D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 0364 Signing time: Fri 22 Aug 2025 22:31:52 +0000 Manifest this update: Fri 22 Aug 2025 22:26:52 +0000 Manifest next update: Tue 26 Aug 2025 10:13:52 +0000 Files and hashes: 1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: 4FvT5jpiwjZS2xPLpgMO/eNs3iNE2Oj+xlTQzMs9u84=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ad:17:41:28:06:e7:5c:80:ff:d2:35:1e:6b:c0:65:3d:2f:29:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Aug 22 22:26:52 2025 GMT Not After : Aug 26 10:13:52 2025 GMT Subject: CN=141A9C8D2CB675CDBF65404C933C19877B1C669E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:5a:e3:a2:a4:f9:96:45:db:e5:b8:d0:fb: a4:0e:46:64:c5:5e:04:18:6a:47:0c:bc:ef:df:d7: e9:1f:6f:31:88:c3:c5:0e:c9:11:36:2a:da:51:90: 9c:6b:e7:9c:a1:6b:9a:ab:ae:11:23:92:d9:f9:37: bf:43:04:4d:d4:e1:05:ab:e6:79:63:79:23:a9:d0: 57:5c:45:37:76:7b:62:be:00:19:c8:1f:f7:7d:87: 84:e1:c3:59:a8:43:3a:40:d2:b5:5e:4c:49:77:8c: d0:2b:78:3e:60:55:78:39:3c:dc:d8:c6:eb:2f:1a: d3:9a:81:ac:26:fc:98:f6:44:02:0f:9b:85:0e:74: 81:34:ac:8f:90:76:d6:c5:cb:80:2d:8f:b8:e2:45: 52:9d:34:4a:21:4a:c0:bc:9c:97:c7:f5:4d:7a:27: c4:9e:ae:a1:79:f2:2a:27:71:f2:35:a5:12:e5:47: 52:84:ca:a6:d5:d1:16:87:ed:98:a2:77:3b:b9:7c: c1:10:ac:bd:f4:b7:ce:26:33:30:3e:be:c7:f9:f1: d3:ea:44:bf:b1:ea:7b:71:2f:1c:9a:2c:ee:db:a9: 4a:d7:84:ce:0e:05:cf:4f:cd:23:b3:0b:94:18:8b: fe:48:ed:5e:2d:8f:95:30:1c:b3:cf:e7:c9:dd:56: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1A:9C:8D:2C:B6:75:CD:BF:65:40:4C:93:3C:19:87:7B:1C:66:9E X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7c:d2:b3:1d:ac:83:2f:82:1a:65:a6:34:f3:a0:45:7c:e9: b8:dc:9f:ef:80:bd:bc:3d:47:70:e0:31:75:5a:55:2c:80:83: f8:04:e7:b8:50:b8:1f:d4:85:4a:eb:d8:a3:32:1f:ff:c7:64: 1c:7d:3a:fb:02:a5:03:a7:b6:46:15:7f:88:0d:2b:38:a4:4b: e7:90:33:41:90:1c:39:cd:e1:b6:76:fb:7f:88:69:9d:8a:a3: b6:18:8d:df:3c:31:81:0a:82:15:10:ca:dd:9b:b1:4e:0c:e8: 92:24:5b:24:db:17:6e:fc:6f:d7:4f:e8:40:e4:b4:8e:be:c6: 1c:ce:ae:4d:e7:f9:98:3d:e1:4d:bc:3e:61:93:dc:11:11:57: be:d3:57:f7:ea:c5:f0:31:a6:32:3b:9f:1a:90:e1:57:93:5b: de:27:9a:de:be:8e:30:bc:7d:8e:a8:bf:58:24:7e:93:a1:5e: 9a:fe:12:a5:29:a7:ae:dc:3c:5b:ec:71:3c:c4:ae:79:b9:d4: d6:06:2e:1a:9f:03:ba:5d:7e:6b:82:16:47:1d:ea:d4:2a:5e: 1d:e4:bb:86:25:8a:68:2c:66:b6:d3:f1:a8:50:11:58:94:4d: 53:df:c6:3b:5f:03:01:92:d7:4b:d3:af:92:a7:2c:4d:a0:85: 63:9b:b9:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHa0XQSgG51yA/9I1HmvAZT0vKS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTA4MjIyMjI2NTJaFw0yNTA4MjYxMDEzNTJaMDMxMTAvBgNV BAMTKDE0MUE5QzhEMkNCNjc1Q0RCRjY1NDA0QzkzM0MxOTg3N0IxQzY2OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9G1rjoqT5lkXb5bjQ+6QORmTF XgQYakcMvO/f1+kfbzGIw8UOyRE2KtpRkJxr55yha5qrrhEjktn5N79DBE3U4QWr 5nljeSOp0FdcRTd2e2K+ABnIH/d9h4Thw1moQzpA0rVeTEl3jNAreD5gVXg5PNzY xusvGtOagawm/Jj2RAIPm4UOdIE0rI+QdtbFy4Atj7jiRVKdNEohSsC8nJfH9U16 J8SerqF58ioncfI1pRLlR1KEyqbV0RaH7Ziidzu5fMEQrL30t84mMzA+vsf58dPq RL+x6ntxLxyaLO7bqUrXhM4OBc9PzSOzC5QYi/5I7V4tj5UwHLPP58ndVm0DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFBqcjSy2dc2/ZUBMkzwZh3scZp4wHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD180rMdrIMvghplpjTzoEV86bjcn++Avbw9 R3DgMXVaVSyAg/gE57hQuB/UhUrr2KMyH//HZBx9OvsCpQOntkYVf4gNKzikS+eQ M0GQHDnN4bZ2+3+IaZ2Ko7YYjd88MYEKghUQyt2bsU4M6JIkWyTbF278b9dP6EDk tI6+xhzOrk3n+Zg94U28PmGT3BERV77TV/fqxfAxpjI7nxqQ4VeTW94nmt6+jjC8 fY6ov1gkfpOhXpr+EqUpp67cPFvscTzErnm51NYGLhqfA7pdfmuCFkcd6tQqXh3k u4YlimgsZrbT8ahQEViUTVPfxjtfAwGS10vTr5KnLE2ghWObuSA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:29:53 2025 by rpki-client