$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.mft (raw, json) Hash identifier: DnqvawEFPV13ZOGfZbiaaZbQ1ld5vI+MFcEoxxDJOZs= Subject key identifier: 8F:E2:AA:17:D9:31:1C:E6:86:5C:EA:30:BB:71:9D:A8:7D:E0:DC:13 Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 Certificate issuer: /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Certificate serial: 092BD6C3EB8D87E32D22B1F353E6323D0416328E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft Manifest number: 0129 Signing time: Tue 13 May 2025 02:22:09 +0000 Manifest this update: Tue 13 May 2025 02:17:09 +0000 Manifest next update: Fri 16 May 2025 10:08:09 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: GrJVZH2XLjk4iPFISGvTkE2baBZez6VcH1QmZaOF9VQ=) 2: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: u2OxUjGJp5EY0Is7n37pLXNSDNsDnh6kAVMVyYyWXOw=) 3: 46E596CAE0AEADA8B4135425216E8783D92E6C76.crl (hash: 4EN2Wb1lbEe/MVFDMsUnC5NBW4/xbyovjCY/BtOEZic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 10:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2b:d6:c3:eb:8d:87:e3:2d:22:b1:f3:53:e6:32:3d:04:16:32:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Validity Not Before: May 13 02:17:09 2025 GMT Not After : May 16 10:08:09 2025 GMT Subject: CN=8FE2AA17D9311CE6865CEA30BB719DA87DE0DC13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:6d:5f:0c:fc:27:7a:1e:73:ab:fa:8d:9c:a2: 1a:77:ca:5e:9d:bf:03:3c:1a:a7:55:2b:4d:74:30: f8:95:9b:66:79:41:11:5c:db:d7:52:aa:c4:8c:70: 53:4a:6b:33:cb:db:b4:67:95:e5:35:27:aa:e2:fb: f6:b2:0b:c9:85:2d:d0:6e:9c:d2:94:73:88:d7:07: 56:6e:cd:03:65:db:af:42:59:66:0a:6f:bf:fe:4a: 4f:5d:b1:29:17:26:42:fc:6c:87:07:ee:7e:5c:3d: 6f:ef:05:04:c1:3c:ee:3c:5e:56:ee:6f:6a:d3:49: c8:2a:d3:90:36:51:6f:c9:5e:70:68:8f:1d:18:22: 51:90:81:cd:e7:ff:69:2f:dc:60:f0:16:8e:dd:d4: 2f:5b:e7:ae:5a:04:35:32:5c:28:05:5b:a3:66:8b: 60:eb:04:a7:2c:1d:a0:c5:6d:dc:90:6c:99:c4:d9: 85:8e:a6:55:06:b0:8a:df:25:0a:a4:b2:ff:0a:5d: a0:54:f6:77:92:61:c3:99:a6:83:f6:9b:7d:1a:fa: 91:da:68:b1:a6:df:2a:62:61:0a:d0:14:c1:7b:a9: 62:a6:61:db:9e:5d:e7:62:df:0d:92:b6:69:55:5b: c0:2a:a7:76:cf:d5:d4:f0:fa:5e:e7:20:22:fd:f6: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E2:AA:17:D9:31:1C:E6:86:5C:EA:30:BB:71:9D:A8:7D:E0:DC:13 X509v3 Authority Key Identifier: keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a2:da:ee:ba:67:c2:a1:fb:91:04:a1:7d:7f:ab:af:73:b6: c8:81:0d:4c:eb:c7:90:a2:6c:5b:ae:01:a7:cb:74:36:90:b8: d9:57:e0:a3:0e:f8:f0:78:e4:e1:87:94:93:d0:19:bd:ba:6a: 01:59:16:27:01:db:e8:a7:47:41:38:91:c3:bb:38:09:17:fd: ae:53:9e:7b:8c:bd:26:6d:cf:47:0a:23:f8:5c:32:62:ec:1b: d0:6e:26:40:fd:2c:9f:2f:a1:22:10:3a:5b:63:e4:2d:c7:9c: 49:5b:d6:43:f6:21:47:c8:7b:cc:75:79:54:43:31:14:9a:6d: 5d:ed:9a:7a:7a:90:a4:a9:92:57:fb:ae:02:01:72:54:ff:f5: 5b:2f:62:e8:4b:47:80:ea:23:62:8b:b4:94:06:a5:b7:7b:3e: 6c:ef:8d:fb:a2:44:07:36:f5:6d:6a:d4:e1:0e:df:97:f0:24: 2b:f5:0b:29:76:66:31:a0:90:d7:80:1b:29:4f:90:c1:9e:3e: 6e:c6:7d:f3:ac:a4:88:bc:ce:e8:25:06:dc:49:13:2b:5e:22: 9e:4d:f9:b3:9f:1b:a3:8b:86:98:7d:67:27:16:04:a1:99:c2: db:d7:aa:a8:8a:52:4a:e2:5e:ad:35:38:e9:63:c5:5b:66:4b: dd:23:82:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSvWw+uNh+MtIrHzU+YyPQQWMo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNE OTJFNkM3NjAeFw0yNTA1MTMwMjE3MDlaFw0yNTA1MTYxMDA4MDlaMDMxMTAvBgNV BAMTKDhGRTJBQTE3RDkzMTFDRTY4NjVDRUEzMEJCNzE5REE4N0RFMERDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6bV8M/Cd6HnOr+o2cohp3yl6d vwM8GqdVK010MPiVm2Z5QRFc29dSqsSMcFNKazPL27RnleU1J6ri+/ayC8mFLdBu nNKUc4jXB1ZuzQNl269CWWYKb7/+Sk9dsSkXJkL8bIcH7n5cPW/vBQTBPO48Xlbu b2rTScgq05A2UW/JXnBojx0YIlGQgc3n/2kv3GDwFo7d1C9b565aBDUyXCgFW6Nm i2DrBKcsHaDFbdyQbJnE2YWOplUGsIrfJQqksv8KXaBU9neSYcOZpoP2m30a+pHa aLGm3ypiYQrQFMF7qWKmYdueXedi3w2StmlVW8Aqp3bP1dTw+l7nICL99n+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+KqF9kxHOaGXOowu3GdqH3g3BMwHwYDVR0j BBgwFoAURuWWyuCurai0E1QlIW6Hg9kubHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMC80NkU1OTZDQUUw QUVBREE4QjQxMzU0MjUyMTZFODc4M0Q5MkU2Qzc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNEOTJF NkM3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3 ODNEOTJFNkM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqi2u66Z8Kh+5EEoX1/q69ztsiBDUzrx5Ci bFuuAafLdDaQuNlX4KMO+PB45OGHlJPQGb26agFZFicB2+inR0E4kcO7OAkX/a5T nnuMvSZtz0cKI/hcMmLsG9BuJkD9LJ8voSIQOltj5C3HnElb1kP2IUfIe8x1eVRD MRSabV3tmnp6kKSpklf7rgIBclT/9VsvYuhLR4DqI2KLtJQGpbd7PmzvjfuiRAc2 9W1q1OEO35fwJCv1Cyl2ZjGgkNeAGylPkMGePm7GffOspIi8zuglBtxJEyteIp5N +bOfG6OLhph9ZycWBKGZwtvXqqiKUkriXq01OOljxVtmS90jgnY= -----END CERTIFICATE-----Generated at Wed May 14 22:25:20 2025 by rpki-client