$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft File: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft (raw, json) Hash identifier: JKxKVICK2v2+Hbq3/TLeKWJZ6REbGCVoPzD0JZBRLNI= Subject key identifier: 14:B6:84:41:45:68:6A:33:7B:BF:FF:76:BF:2A:50:6D:A6:EA:B0:54 Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Certificate serial: 46AC372FD48BD1DCCDDA5044C201B8E7E4CAE74A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft Manifest number: CE Signing time: Sun 29 Jun 2025 03:41:50 +0000 Manifest this update: Sun 29 Jun 2025 03:36:50 +0000 Manifest next update: Wed 02 Jul 2025 12:12:50 +0000 Files and hashes: 1: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl (hash: K6rZUd6XfPBN4BI2gl9zfrkHmzFt+KdsfhJPvwGJZkY=) 2: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: xyltXPiPOHbvKePnlpJnsx741KzCQWK/N5bnmbeAlMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 12:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ac:37:2f:d4:8b:d1:dc:cd:da:50:44:c2:01:b8:e7:e4:ca:e7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Validity Not Before: Jun 29 03:36:50 2025 GMT Not After : Jul 2 12:12:50 2025 GMT Subject: CN=14B6844145686A337BBFFF76BF2A506DA6EAB054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:da:18:02:dc:87:23:e6:fe:a8:9f:48:83: 2d:56:1c:09:f1:5f:6e:2b:6e:9e:b6:4b:12:0c:15: 32:dd:c0:ae:c5:b7:7a:73:11:87:a4:b5:63:fd:cd: b6:cb:18:21:f2:cc:ed:48:a7:b0:d6:07:e0:33:c0: 81:21:b0:ff:3b:3d:ea:45:69:15:3b:cf:7e:e1:88: 79:51:a1:14:f7:a9:10:3d:37:37:06:9e:95:de:95: 1b:5b:16:6f:e1:0a:00:5e:e3:dd:9e:79:31:4a:7f: 88:70:0d:23:af:ca:5a:4d:a1:92:9e:30:d6:05:40: b1:e1:6e:0d:c1:2c:db:d6:6f:ea:08:ea:61:0f:bc: 51:8d:8c:b9:b8:cb:e5:24:bd:49:4c:d9:40:80:1d: ff:76:4b:b2:c7:4b:6d:60:f8:58:c2:75:2b:a0:f1: 3a:88:b2:b3:ac:ab:ef:43:ab:d2:29:94:e9:5a:60: b6:f9:d9:63:11:c7:10:6f:93:d5:c6:46:24:8e:76: f8:55:e1:25:38:9b:09:0e:48:3e:da:83:b7:a1:85: 9f:d0:13:56:f7:a9:e1:2d:ff:4a:50:e5:87:37:6b: 86:36:89:fe:38:ed:56:18:ae:d6:20:64:2c:b2:d1: 77:35:e5:57:4a:e3:31:ae:8e:da:83:ed:2f:90:bb: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B6:84:41:45:68:6A:33:7B:BF:FF:76:BF:2A:50:6D:A6:EA:B0:54 X509v3 Authority Key Identifier: keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d8:92:8e:9d:d5:e6:93:63:27:c7:88:36:4e:69:70:a6:c7: ac:c3:37:dc:91:38:87:af:ab:e0:f1:be:5f:d1:40:00:3d:9f: e0:67:e9:ac:4f:84:bf:7c:31:70:23:ec:c7:71:52:88:6c:de: 2f:23:82:4e:9e:50:40:b2:0f:b9:60:f2:9d:55:a9:5c:bc:c7: 55:e4:75:2a:8a:1b:13:b0:91:6d:e5:54:f8:2b:25:15:4b:91: f5:f6:7a:07:60:50:5b:e2:07:5b:1e:23:28:b1:26:72:55:bc: 58:81:b4:77:be:f7:1f:4f:f4:ad:95:8c:fa:10:85:b9:a9:17: 78:11:52:cd:b4:63:d0:ed:67:dd:89:e7:4c:8f:06:f5:dc:97: 9c:18:00:bd:7a:27:c2:e0:9c:fa:6d:30:77:3f:11:78:c9:50: 4d:4c:49:74:cd:7c:16:57:1e:48:48:7d:c4:fa:e8:5f:6a:c4: 0b:c0:c2:54:ec:07:51:7c:e4:e4:06:46:0b:f3:ac:92:fd:a1: ed:15:a4:fb:67:68:0c:c1:0c:55:90:1e:2f:f8:1b:b3:e5:ff: 2e:1f:cf:02:da:a7:dd:e1:07:39:4b:04:cc:76:73:c2:f3:31: b2:d7:16:5d:63:a1:cd:25:47:cb:6f:c5:9d:85:4a:64:6e:72: 8a:8c:a9:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqw3L9SL0dzN2lBEwgG45+TK50owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlB QUVCNUQwMzAeFw0yNTA2MjkwMzM2NTBaFw0yNTA3MDIxMjEyNTBaMDMxMTAvBgNV BAMTKDE0QjY4NDQxNDU2ODZBMzM3QkJGRkY3NkJGMkE1MDZEQTZFQUIwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYtoYAtyHI+b+qJ9Igy1WHAnx X24rbp62SxIMFTLdwK7Ft3pzEYektWP9zbbLGCHyzO1Ip7DWB+AzwIEhsP87PepF aRU7z37hiHlRoRT3qRA9NzcGnpXelRtbFm/hCgBe492eeTFKf4hwDSOvylpNoZKe MNYFQLHhbg3BLNvWb+oI6mEPvFGNjLm4y+UkvUlM2UCAHf92S7LHS21g+FjCdSug 8TqIsrOsq+9Dq9IplOlaYLb52WMRxxBvk9XGRiSOdvhV4SU4mwkOSD7ag7ehhZ/Q E1b3qeEt/0pQ5Yc3a4Y2if447VYYrtYgZCyy0Xc15VdK4zGujtqD7S+QuxfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFLaEQUVoajN7v/92vypQbabqsFQwHwYDVR0j BBgwFoAURqLmNP/0CuVF7H22eoiBiarrXQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjg4MGRkYi0zZDk0LTRlMzQtOTJkYy00ZDQ1MzhiOTA1YTIvMC80NkEyRTYzNEZG RjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFBRUI1RDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlBQUVC NUQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgx ODlBQUVCNUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnYko6d1eaTYyfHiDZOaXCmx6zDN9yROIev q+Dxvl/RQAA9n+Bn6axPhL98MXAj7MdxUohs3i8jgk6eUECyD7lg8p1VqVy8x1Xk dSqKGxOwkW3lVPgrJRVLkfX2egdgUFviB1seIyixJnJVvFiBtHe+9x9P9K2VjPoQ hbmpF3gRUs20Y9DtZ92J50yPBvXcl5wYAL16J8LgnPptMHc/EXjJUE1MSXTNfBZX HkhIfcT66F9qxAvAwlTsB1F85OQGRgvzrJL9oe0VpPtnaAzBDFWQHi/4G7Pl/y4f zwLap93hBzlLBMx2c8LzMbLXFl1joc0lR8tvxZ2FSmRucoqMqcw= -----END CERTIFICATE-----Generated at Mon Jun 30 04:43:36 2025 by rpki-client