$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: k9BksVP0rgHbWmqnFpo2gG7wYmiV+thWcMGE8LBcGpk= Subject key identifier: 25:72:44:6A:80:33:F7:60:4D:89:18:80:32:72:07:68:8E:3F:B9:13 Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 4B566632A6BE8847F729DC8000C70A620977E9DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 034D Signing time: Wed 02 Jul 2025 23:51:49 +0000 Manifest this update: Wed 02 Jul 2025 23:46:49 +0000 Manifest next update: Sun 06 Jul 2025 05:06:49 +0000 Files and hashes: 1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: TJJ0xYJVboE4vXgNOihAT3uztxNvMlGccTtPD3/i1sw=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:56:66:32:a6:be:88:47:f7:29:dc:80:00:c7:0a:62:09:77:e9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Jul 2 23:46:49 2025 GMT Not After : Jul 6 05:06:49 2025 GMT Subject: CN=2572446A8033F7604D891880327207688E3FB913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:68:f7:7f:22:3e:6c:2b:c2:6e:d5:31:43: 61:29:90:f1:af:62:9f:71:70:a2:c4:1e:61:c9:ee: 65:a4:59:b0:99:57:2f:5f:93:e8:b2:6c:25:f6:bf: 41:ab:f7:0c:d3:ee:c9:3f:72:57:58:e9:2e:68:0e: 8d:db:46:cb:4b:02:b0:20:f0:a3:c5:76:da:63:73: c3:e3:ae:8a:4a:4a:d1:66:ee:ae:f4:ed:5d:93:6e: 49:92:f6:26:2a:0a:65:f3:4e:d9:ca:04:9c:6a:b7: 72:77:01:98:c3:d5:d0:3c:90:ce:a5:f0:d4:5a:d5: 65:61:a2:2c:cd:d6:50:d1:b9:5f:f3:74:e6:ba:d9: 0a:15:10:b6:f8:cd:78:e2:c2:c7:f8:db:8a:bf:08: 41:f6:41:3a:30:db:d6:c6:a4:8e:06:08:35:13:e1: 07:97:6d:72:97:99:9c:04:79:69:6f:c5:73:4f:92: e8:30:3f:91:f9:b4:6c:c1:a5:e8:83:2d:cf:c7:d4: 9f:45:01:5e:93:2d:0b:95:fc:15:56:70:a9:e1:2f: 62:44:7d:c1:93:05:e5:6b:30:0f:ed:a1:62:b6:92: b5:e8:3f:f3:28:31:73:46:ff:2c:eb:f1:0b:86:9c: 2d:9e:e3:b8:d8:27:a5:99:19:dc:fe:46:5e:96:12: 75:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:72:44:6A:80:33:F7:60:4D:89:18:80:32:72:07:68:8E:3F:B9:13 X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0e:ac:31:79:42:d7:4d:79:45:cc:94:49:23:43:fe:59:0d: cb:5e:d9:b7:e2:a7:9e:7a:66:7e:36:6a:88:b9:76:55:a0:ab: af:8a:6f:1c:9d:ad:8d:c1:fb:a7:bb:b3:49:37:cf:0a:2c:a8: 79:19:7c:b8:4c:fb:97:c2:81:4c:30:dd:0b:a0:49:d4:e6:2d: 59:37:cf:65:75:c8:34:09:7e:73:ea:5d:cc:40:77:69:01:66: e8:0a:05:02:79:19:41:8d:77:25:0c:64:bf:02:2b:c6:5f:4a: cc:3a:0c:25:1d:bc:11:85:2d:2d:c1:c2:9c:47:97:d0:c9:7e: dc:2f:67:cb:f4:32:8d:f0:59:71:70:08:33:eb:e8:81:4d:f5: 7f:e4:3d:9d:9f:e3:25:54:ab:df:52:4a:ea:28:ee:4f:ae:93: a5:81:39:c3:d4:2d:fa:7c:4e:3a:82:d4:64:31:c9:43:55:2f: 2e:47:fc:1a:68:2c:73:ce:13:6f:60:1b:97:10:c5:06:06:dd: eb:80:3c:ed:4d:62:5a:7c:f2:e7:4d:c4:ef:1f:02:b5:13:c9: 57:cb:37:b1:0e:00:2b:46:cc:ae:10:d1:f2:1c:a0:f2:74:2b: 93:7b:ed:69:3d:62:ac:b2:36:51:8e:a3:05:31:e9:69:61:6a: d9:cd:3f:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1ZmMqa+iEf3KdyAAMcKYgl36dowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTA3MDIyMzQ2NDlaFw0yNTA3MDYwNTA2NDlaMDMxMTAvBgNV BAMTKDI1NzI0NDZBODAzM0Y3NjA0RDg5MTg4MDMyNzIwNzY4OEUzRkI5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9WWj3fyI+bCvCbtUxQ2EpkPGv Yp9xcKLEHmHJ7mWkWbCZVy9fk+iybCX2v0Gr9wzT7sk/cldY6S5oDo3bRstLArAg 8KPFdtpjc8PjropKStFm7q707V2TbkmS9iYqCmXzTtnKBJxqt3J3AZjD1dA8kM6l 8NRa1WVhoizN1lDRuV/zdOa62QoVELb4zXjiwsf424q/CEH2QTow29bGpI4GCDUT 4QeXbXKXmZwEeWlvxXNPkugwP5H5tGzBpeiDLc/H1J9FAV6TLQuV/BVWcKnhL2JE fcGTBeVrMA/toWK2krXoP/MoMXNG/yzr8QuGnC2e47jYJ6WZGdz+Rl6WEnVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJXJEaoAz92BNiRiAMnIHaI4/uRMwHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwOrDF5QtdNeUXMlEkjQ/5ZDcte2bfip556 Zn42aoi5dlWgq6+KbxydrY3B+6e7s0k3zwosqHkZfLhM+5fCgUww3QugSdTmLVk3 z2V1yDQJfnPqXcxAd2kBZugKBQJ5GUGNdyUMZL8CK8ZfSsw6DCUdvBGFLS3BwpxH l9DJftwvZ8v0Mo3wWXFwCDPr6IFN9X/kPZ2f4yVUq99SSuoo7k+uk6WBOcPULfp8 TjqC1GQxyUNVLy5H/BpoLHPOE29gG5cQxQYG3euAPO1NYlp88udNxO8fArUTyVfL N7EOACtGzK4Q0fIcoPJ0K5N77Wk9YqyyNlGOowUx6WlhatnNP8o= -----END CERTIFICATE-----Generated at Thu Jul 3 13:24:02 2025 by rpki-client