$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.mft (raw, json) Hash identifier: Vq54/+ENn6RY/iHo0AycaKWn67wj+L/JPaqb70Bat+k= Subject key identifier: 13:71:22:F8:5B:AB:0E:3D:5E:AF:2E:F7:52:4D:BF:2E:2B:3D:09:72 Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 Certificate issuer: /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Certificate serial: 39294BFF73A4EA5C80F4A4C8BE9F34F80BE3C66C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft Manifest number: 0171 Signing time: Sat 18 Oct 2025 10:22:11 +0000 Manifest this update: Sat 18 Oct 2025 10:17:11 +0000 Manifest next update: Tue 21 Oct 2025 17:50:11 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: 6h0PS6sD0cpo/dFFiqhzCPsiuizhkV5A6x6l4CJlcqA=) 2: 46E596CAE0AEADA8B4135425216E8783D92E6C76.crl (hash: 8cpXjYwOIlkBNu7k1qxPusHl3rrvFTpph1OkL+RAXCI=) 3: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: n+/j+X0EHKdzJwOO4f/AMp89n5rbo9zZecMjnTepVSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:29:4b:ff:73:a4:ea:5c:80:f4:a4:c8:be:9f:34:f8:0b:e3:c6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Validity Not Before: Oct 18 10:17:11 2025 GMT Not After : Oct 21 17:50:11 2025 GMT Subject: CN=137122F85BAB0E3D5EAF2EF7524DBF2E2B3D0972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:f6:d3:c1:4b:7c:9e:7b:3d:d5:54:df:79: b4:66:2c:ad:c8:65:6b:33:e6:35:fc:cf:ed:1d:71: 9d:ac:78:c0:5e:75:59:c0:52:42:42:fe:6e:36:ac: 77:a0:f8:04:b0:e4:d5:fd:7c:15:e7:f0:c6:2d:b4: 1d:6a:bd:b3:78:b3:cc:db:2d:cd:35:e9:9c:51:f3: f8:24:05:fd:35:fc:72:c7:cb:40:6e:79:53:d8:bd: 49:03:93:67:e7:57:08:e4:dc:3d:5a:ac:ee:5e:4a: 36:c0:43:10:17:8b:e0:b3:fb:13:00:12:e6:cb:0b: 0e:b1:33:1d:d0:4f:27:39:af:c0:dc:c7:29:ad:b6: 72:e0:28:5a:24:10:7a:44:6a:3f:25:58:80:48:28: c4:76:48:98:da:74:eb:63:45:b5:49:ed:69:b6:cb: de:10:5f:c2:e4:b8:ad:5d:f0:07:67:5c:e5:0e:60: 50:c1:e6:d2:48:b7:9f:79:72:96:1b:b6:a7:cf:0d: 9d:63:7b:52:fe:e3:f4:13:3d:ac:90:2d:3d:c3:1f: e0:fc:6e:00:da:7c:fd:da:e7:9b:44:3f:58:c6:ae: 33:95:fe:77:02:2d:63:86:64:1c:41:3c:d3:41:8e: e0:e7:b1:76:27:bd:cf:cf:4d:93:e4:b5:a7:2f:a0: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:71:22:F8:5B:AB:0E:3D:5E:AF:2E:F7:52:4D:BF:2E:2B:3D:09:72 X509v3 Authority Key Identifier: keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:58:e1:88:e0:36:98:21:8b:dd:5f:04:f0:7b:f8:f0:f9:02: 8f:fb:6b:12:c3:e8:fb:fe:50:bd:03:f4:f3:25:22:46:7d:bf: 12:0a:51:2e:b3:cd:dd:e1:1e:f8:3b:d1:a6:75:64:09:65:f6: 19:04:1f:8b:49:64:ba:d2:81:36:3b:31:08:b2:4c:61:50:b9: 15:85:1d:c9:18:b9:eb:9c:b1:e0:e6:9b:7e:78:26:09:7a:2b: 3b:44:e0:8d:e2:8d:7e:4f:fe:77:a3:d0:e4:1f:73:c0:03:8c: 08:35:29:20:55:7a:d8:eb:95:79:3e:3e:70:28:62:dd:4c:ba: 10:58:f5:ee:cb:a4:35:97:b9:e2:c5:a7:7e:2f:b2:92:a1:ee: a1:2f:c0:59:06:26:f7:58:65:a7:1f:f3:00:3e:f2:06:04:0b: 8b:34:7c:f5:90:e4:4f:17:e0:a0:b7:72:90:28:8e:95:a1:2d: 83:71:26:1d:c6:e3:8b:ed:9c:27:ad:3a:33:d3:84:0f:30:44: d4:97:ab:88:30:5e:43:bb:9a:86:aa:74:d0:31:e1:94:10:b8: 17:31:7f:1d:d9:2f:56:e2:b6:31:d1:88:b7:46:39:a1:f5:2f: 4e:7b:ec:09:8f:45:c1:09:12:2a:c8:9b:14:4c:ae:f5:73:83: 12:85:1b:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSlL/3Ok6lyA9KTIvp80+AvjxmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNE OTJFNkM3NjAeFw0yNTEwMTgxMDE3MTFaFw0yNTEwMjExNzUwMTFaMDMxMTAvBgNV BAMTKDEzNzEyMkY4NUJBQjBFM0Q1RUFGMkVGNzUyNERCRjJFMkIzRDA5NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YPbTwUt8nns91VTfebRmLK3I ZWsz5jX8z+0dcZ2seMBedVnAUkJC/m42rHeg+ASw5NX9fBXn8MYttB1qvbN4s8zb Lc016ZxR8/gkBf01/HLHy0BueVPYvUkDk2fnVwjk3D1arO5eSjbAQxAXi+Cz+xMA EubLCw6xMx3QTyc5r8DcxymttnLgKFokEHpEaj8lWIBIKMR2SJjadOtjRbVJ7Wm2 y94QX8LkuK1d8AdnXOUOYFDB5tJIt595cpYbtqfPDZ1je1L+4/QTPayQLT3DH+D8 bgDafP3a55tEP1jGrjOV/ncCLWOGZBxBPNNBjuDnsXYnvc/PTZPktacvoEtDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE3Ei+FurDj1ery73Uk2/Lis9CXIwHwYDVR0j BBgwFoAURuWWyuCurai0E1QlIW6Hg9kubHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMC80NkU1OTZDQUUw QUVBREE4QjQxMzU0MjUyMTZFODc4M0Q5MkU2Qzc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNEOTJF NkM3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3 ODNEOTJFNkM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBY4YjgNpghi91fBPB7+PD5Ao/7axLD6Pv+ UL0D9PMlIkZ9vxIKUS6zzd3hHvg70aZ1ZAll9hkEH4tJZLrSgTY7MQiyTGFQuRWF HckYueucseDmm354Jgl6KztE4I3ijX5P/nej0OQfc8ADjAg1KSBVetjrlXk+PnAo Yt1MuhBY9e7LpDWXueLFp34vspKh7qEvwFkGJvdYZacf8wA+8gYEC4s0fPWQ5E8X 4KC3cpAojpWhLYNxJh3G44vtnCetOjPThA8wRNSXq4gwXkO7moaqdNAx4ZQQuBcx fx3ZL1bitjHRiLdGOaH1L0577AmPRcEJEirImxRMrvVzgxKFG80= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:13 2025 by rpki-client