$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.mft (raw, json) Hash identifier: +Vl8T5VcyNkSTP/5Ocb+5KDRPQYOJkLpgasXvb4AcHs= Subject key identifier: 12:9E:44:0F:77:D5:D9:FB:B4:4C:5E:62:94:35:60:F6:62:4F:10:71 Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 Certificate issuer: /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Certificate serial: 5CC2015E4EC1EE4C221F933DB34CDEA7B7D3F103 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft Manifest number: 0157 Signing time: Thu 21 Aug 2025 08:12:10 +0000 Manifest this update: Thu 21 Aug 2025 08:07:10 +0000 Manifest next update: Sun 24 Aug 2025 10:58:10 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: 6h0PS6sD0cpo/dFFiqhzCPsiuizhkV5A6x6l4CJlcqA=) 2: 46E596CAE0AEADA8B4135425216E8783D92E6C76.crl (hash: gX/Wvz6KFqZGTcGa7vDrOvnDvECvA8G3Qy4wqhkAJPI=) 3: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: n+/j+X0EHKdzJwOO4f/AMp89n5rbo9zZecMjnTepVSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 10:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c2:01:5e:4e:c1:ee:4c:22:1f:93:3d:b3:4c:de:a7:b7:d3:f1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Validity Not Before: Aug 21 08:07:10 2025 GMT Not After : Aug 24 10:58:10 2025 GMT Subject: CN=129E440F77D5D9FBB44C5E62943560F6624F1071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:fa:95:2b:11:77:f5:76:60:0c:98:b9:55: d4:9d:bc:f9:d9:89:13:dc:81:05:72:14:c1:bc:9d: 0b:be:f4:ce:58:7e:90:02:9c:f7:e4:4f:16:9f:1c: b7:65:a0:91:4a:f0:c1:e1:91:71:35:c1:c2:6e:74: 9d:3d:11:a3:21:5a:42:d4:c3:1a:d0:ac:ec:da:e7: da:68:70:43:ee:23:ea:dd:54:85:c7:f0:5f:f1:99: b5:8a:bd:6b:fb:23:13:f3:70:4b:cb:43:5e:71:20: 2b:c6:df:a6:2e:b2:98:c1:9d:6b:cc:21:f3:d0:31: a1:a4:ca:80:55:e2:a9:53:fc:2c:78:4b:8a:ed:49: e8:4a:71:95:a9:8e:13:0b:aa:49:21:e4:72:7b:4b: 92:8e:d0:c3:43:e9:a0:48:a5:ac:fb:86:22:f1:15: 84:cc:25:a7:e5:37:23:06:d7:1f:31:b5:7c:e4:c9: ba:b5:93:fb:2a:73:b1:de:e6:4e:9c:25:dc:e6:08: 03:13:a9:86:4e:6f:0a:1d:e4:bf:29:46:91:c1:e9: ad:85:3d:29:cf:30:80:37:a0:08:4f:0f:97:69:a7: 36:d5:c2:96:30:dc:a2:d2:3d:5a:5f:1a:6d:b6:4d: 42:34:69:28:7f:22:e1:41:93:8a:b8:fe:80:64:a5: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9E:44:0F:77:D5:D9:FB:B4:4C:5E:62:94:35:60:F6:62:4F:10:71 X509v3 Authority Key Identifier: keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:be:a6:f9:34:db:d7:d7:88:47:f6:fb:78:89:bc:b2:f4:1c: b0:9f:8d:18:93:d6:b1:a2:cc:9c:c2:86:36:d6:66:7b:ed:00: 0f:a2:61:13:85:96:59:cb:c6:ae:f6:38:39:b5:9c:4f:d9:48: 60:a0:72:87:95:fd:a5:78:33:7d:5b:5a:a7:2e:3e:0f:c0:85: 25:b6:6e:71:35:d3:d6:f2:1d:ca:cf:56:93:cb:4b:8e:b6:1d: 01:33:10:4e:9d:3f:cd:61:64:5a:3b:ce:90:de:24:63:ff:fe: ec:53:d0:f1:55:31:db:76:fd:9f:a5:36:fe:d3:6b:32:f7:79: b8:12:c3:9e:a6:25:65:60:50:d7:97:fe:20:0c:72:05:b3:42: d1:44:25:e4:5e:bf:73:2e:b8:a8:43:1b:d1:05:63:b4:90:2b: 99:96:1c:60:2f:7e:76:c0:12:35:a9:08:83:dd:b3:a6:41:22: 6e:1b:ce:8d:2c:f2:f3:5e:eb:dd:2b:e6:85:3c:e2:4d:45:5d: 6b:7d:85:55:f4:0d:c8:a0:d7:23:68:52:5a:4a:2b:12:17:d3: 35:ac:7a:4a:3a:bf:2c:a9:d2:de:10:e1:5a:aa:40:a7:65:d7: 14:53:aa:be:91:45:62:e0:f9:a3:66:d5:c2:3d:58:51:e5:14: 29:66:9b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMIBXk7B7kwiH5M9s0zep7fT8QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNE OTJFNkM3NjAeFw0yNTA4MjEwODA3MTBaFw0yNTA4MjQxMDU4MTBaMDMxMTAvBgNV BAMTKDEyOUU0NDBGNzdENUQ5RkJCNDRDNUU2Mjk0MzU2MEY2NjI0RjEwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGfqVKxF39XZgDJi5VdSdvPnZ iRPcgQVyFMG8nQu+9M5YfpACnPfkTxafHLdloJFK8MHhkXE1wcJudJ09EaMhWkLU wxrQrOza59pocEPuI+rdVIXH8F/xmbWKvWv7IxPzcEvLQ15xICvG36YuspjBnWvM IfPQMaGkyoBV4qlT/Cx4S4rtSehKcZWpjhMLqkkh5HJ7S5KO0MND6aBIpaz7hiLx FYTMJaflNyMG1x8xtXzkybq1k/sqc7He5k6cJdzmCAMTqYZObwod5L8pRpHB6a2F PSnPMIA3oAhPD5dppzbVwpYw3KLSPVpfGm22TUI0aSh/IuFBk4q4/oBkpW2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEp5ED3fV2fu0TF5ilDVg9mJPEHEwHwYDVR0j BBgwFoAURuWWyuCurai0E1QlIW6Hg9kubHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMC80NkU1OTZDQUUw QUVBREE4QjQxMzU0MjUyMTZFODc4M0Q5MkU2Qzc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNEOTJF NkM3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3 ODNEOTJFNkM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO+pvk029fXiEf2+3iJvLL0HLCfjRiT1rGi zJzChjbWZnvtAA+iYROFllnLxq72ODm1nE/ZSGCgcoeV/aV4M31bWqcuPg/AhSW2 bnE109byHcrPVpPLS462HQEzEE6dP81hZFo7zpDeJGP//uxT0PFVMdt2/Z+lNv7T azL3ebgSw56mJWVgUNeX/iAMcgWzQtFEJeRev3MuuKhDG9EFY7SQK5mWHGAvfnbA EjWpCIPds6ZBIm4bzo0s8vNe690r5oU84k1FXWt9hVX0Dcig1yNoUlpKKxIX0zWs eko6vyyp0t4Q4VqqQKdl1xRTqr6RRWLg+aNm1cI9WFHlFClmm8A= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:11 2025 by rpki-client