$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json) Hash identifier: bDk6Ha84tqDFV0Av8jERooxc1tvdIGD/d5lQtv2oLWM= Subject key identifier: A6:31:80:FC:27:34:BB:C7:CB:89:F5:47:F2:64:E7:3C:60:D0:DA:00 Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Certificate serial: 1224D6A04B2C117BFC36895BD017F9988A9D7C0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft Manifest number: 01D7 Signing time: Sat 18 Oct 2025 17:51:36 +0000 Manifest this update: Sat 18 Oct 2025 17:46:36 +0000 Manifest next update: Tue 21 Oct 2025 18:29:36 +0000 Files and hashes: 1: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: n1vxqT01MHNJQCue1F/8LHi9S+iotjvGE4Enfb7Gpo0=) 2: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: wrf8mcEeCVlATJKnlywEV2PdsJV/K57DDg9qpoZxr60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:24:d6:a0:4b:2c:11:7b:fc:36:89:5b:d0:17:f9:98:8a:9d:7c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Validity Not Before: Oct 18 17:46:36 2025 GMT Not After : Oct 21 18:29:36 2025 GMT Subject: CN=A63180FC2734BBC7CB89F547F264E73C60D0DA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:cf:d3:a1:a4:30:8f:ff:5e:5f:9a:12:c0: cc:d5:ae:83:2a:89:82:25:ca:ad:e1:88:13:9d:bc: 33:60:47:0f:f1:5b:41:d6:df:b5:69:fa:84:ef:88: 10:cc:b2:ef:16:94:da:f1:02:f7:ba:e4:16:65:62: de:9f:4e:c3:ea:ff:90:9d:b5:a1:57:8b:41:2f:bd: fe:4b:c4:4c:7f:79:f6:c7:10:51:86:89:5f:c5:61: dd:da:f5:4e:e3:d2:ff:70:eb:11:22:1f:47:93:71: 44:2c:1e:10:d3:c9:a4:38:cd:5a:49:6c:90:4b:e6: c2:34:23:64:dc:33:d3:c3:17:b6:36:9b:b6:65:dc: 1d:84:99:90:15:45:35:23:b8:9a:53:72:4c:c3:b1: 45:a5:38:42:92:e1:3c:34:50:c1:e4:28:8c:a3:b0: 54:9b:24:78:b6:b3:9c:a7:ee:84:32:ab:45:55:02: 5b:6c:4c:70:98:37:21:58:95:95:f4:c0:ed:15:24: af:60:64:ed:ab:5e:b7:53:a3:ef:32:a4:b9:82:f6: 4a:30:2e:50:5e:29:81:3a:dc:0f:1a:81:f5:14:db: aa:91:64:4a:31:ca:5e:37:45:86:e8:d3:0f:a2:53: f4:ac:62:45:5a:cc:f4:c3:15:9d:bc:22:b3:6c:9c: 24:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:31:80:FC:27:34:BB:C7:CB:89:F5:47:F2:64:E7:3C:60:D0:DA:00 X509v3 Authority Key Identifier: keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:19:72:8c:8e:73:39:bf:9b:d4:7a:3b:a9:10:e0:27:6f:1c: 23:a5:21:2f:27:f6:83:a6:de:ce:3b:22:5d:5b:a4:75:46:19: b2:f4:6e:67:80:a1:c7:74:2f:88:83:de:f1:0e:d8:4c:a9:d3: 4e:69:9b:14:ea:49:c5:f1:ce:3c:2a:91:8e:f1:0d:23:06:25: 5f:cf:4f:05:eb:ab:4c:af:13:36:58:5a:d7:3c:34:ec:5c:94: b1:0c:0d:78:63:4d:ed:54:20:a8:b3:53:05:d9:33:dc:57:87: ed:87:27:13:32:05:4c:53:82:5d:b9:33:c5:e5:41:d5:42:03: 9e:2a:a0:b5:42:ed:c5:15:8a:2f:6e:b7:27:c8:0e:a4:73:34: b9:a1:12:fb:06:14:75:23:63:96:93:3b:6b:ea:cd:18:bf:c3: 99:79:ac:3c:9f:ad:c0:f4:2f:46:c7:1a:af:b5:e9:7c:d4:39: 2d:7b:ca:01:02:69:16:b0:31:28:01:42:f6:e1:b6:42:8f:0f: 65:1f:d3:07:e4:06:33:4b:eb:2a:6c:47:7b:ef:d4:52:64:d4: 40:b4:83:08:67:71:6a:4e:eb:5c:3d:7f:94:af:83:ed:2e:3f: db:0a:e8:f9:d1:7a:0a:0a:01:0c:39:5a:75:1e:81:da:e3:b0: 75:8e:df:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEiTWoEssEXv8Nolb0Bf5mIqdfAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1 RDI2MTU4NTAeFw0yNTEwMTgxNzQ2MzZaFw0yNTEwMjExODI5MzZaMDMxMTAvBgNV BAMTKEE2MzE4MEZDMjczNEJCQzdDQjg5RjU0N0YyNjRFNzNDNjBEMERBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/c/ToaQwj/9eX5oSwMzVroMq iYIlyq3hiBOdvDNgRw/xW0HW37Vp+oTviBDMsu8WlNrxAve65BZlYt6fTsPq/5Cd taFXi0Evvf5LxEx/efbHEFGGiV/FYd3a9U7j0v9w6xEiH0eTcUQsHhDTyaQ4zVpJ bJBL5sI0I2TcM9PDF7Y2m7Zl3B2EmZAVRTUjuJpTckzDsUWlOEKS4Tw0UMHkKIyj sFSbJHi2s5yn7oQyq0VVAltsTHCYNyFYlZX0wO0VJK9gZO2rXrdTo+8ypLmC9kow LlBeKYE63A8agfUU26qRZEoxyl43RYbo0w+iU/SsYkVazPTDFZ28IrNsnCTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpjGA/Cc0u8fLifVH8mTnPGDQ2gAwHwYDVR0j BBgwFoAUSEa5sNax3treSpwbtvkTaV0mFYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTMxZmFlOS02MjdhLTRhMDgtYmU1Yy00NGEwYzE1NzE0ODcvMC80ODQ2QjlCMEQ2 QjFERURBREU0QTlDMUJCNkY5MTM2OTVEMjYxNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1RDI2 MTU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkzMWZhZTktNjI3YS00YTA4LWJl NWMtNDRhMGMxNTcxNDg3LzAvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEz Njk1RDI2MTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUZcoyOczm/m9R6O6kQ4CdvHCOlIS8n9oOm 3s47Il1bpHVGGbL0bmeAocd0L4iD3vEO2Eyp005pmxTqScXxzjwqkY7xDSMGJV/P TwXrq0yvEzZYWtc8NOxclLEMDXhjTe1UIKizUwXZM9xXh+2HJxMyBUxTgl25M8Xl QdVCA54qoLVC7cUVii9utyfIDqRzNLmhEvsGFHUjY5aTO2vqzRi/w5l5rDyfrcD0 L0bHGq+16XzUOS17ygECaRawMSgBQvbhtkKPD2Uf0wfkBjNL6ypsR3vv1FJk1EC0 gwhncWpO61w9f5Svg+0uP9sK6PnRegoKAQw5WnUegdrjsHWO3xs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:49 2025 by rpki-client