$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: YYJq7OjTnNXww+PSR58S7gEUcNcGRagjaG7RPM+JWQI= Subject key identifier: FE:57:A8:6D:43:FC:97:AF:53:4C:14:A1:BB:3C:B9:F9:A1:4F:61:CB Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 4A4D977D948AB6EDB90587F04FBA406C5EDD6CAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 0185 Signing time: Thu 21 Aug 2025 23:51:02 +0000 Manifest this update: Thu 21 Aug 2025 23:46:02 +0000 Manifest next update: Mon 25 Aug 2025 07:51:02 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: xAh6iVTptzdWaiN0lzQItEzdBxkBB7Jmc75/4/WIUXc=) 2: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: 2bJavdDuipfgE01A4cjdhtmjrgfBLBe1TQnypfm7vKw=) 3: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: 36JNQoWoEcG0XddMVhG6Y5xuDi4KHB52Q2RH2cUrQzc=) 4: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: 17ChIozSdmJ+qCeyTnh6PolCU0A1lGl43AAQ9utL0Ec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4d:97:7d:94:8a:b6:ed:b9:05:87:f0:4f:ba:40:6c:5e:dd:6c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Aug 21 23:46:02 2025 GMT Not After : Aug 25 07:51:02 2025 GMT Subject: CN=FE57A86D43FC97AF534C14A1BB3CB9F9A14F61CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:56:7d:7c:af:b1:c0:63:5a:0e:70:0d:14: 61:d2:38:59:3d:71:b1:e2:b9:97:95:c6:25:24:b5: bc:1c:43:ab:d4:39:ee:ef:13:b1:40:51:1b:73:80: 17:05:2e:a6:aa:47:2f:29:1f:30:bf:3b:dc:6c:c3: ac:fe:19:8b:65:f5:55:89:35:d4:39:af:f5:f8:0a: 0b:45:34:be:82:0e:9e:fd:84:32:3e:72:33:90:9d: 03:77:46:71:f7:37:fd:07:66:fe:57:b5:70:50:5f: 88:24:d5:f4:dc:9b:f0:c7:f1:ce:3d:21:fe:db:06: 81:0f:31:a7:81:2f:36:83:8a:73:c9:12:ca:57:b8: 6f:af:36:a7:77:52:be:c5:14:99:12:2c:67:20:a7: 94:65:4c:e5:4c:42:11:12:b0:34:9b:d3:4d:dd:c0: c9:c9:63:83:ef:63:7b:58:73:03:27:f9:b3:f8:d8: 8f:7c:70:28:4f:02:de:83:69:17:bc:46:0d:16:df: 15:84:e9:0d:c1:71:43:9f:a3:4d:2d:4a:0f:f3:07: e4:b8:ac:20:32:65:8f:7a:7d:04:51:f0:99:27:9c: ac:e9:f2:b3:a3:80:de:26:6c:07:0c:34:aa:9c:74: 7f:80:f8:2f:4d:21:63:29:45:c0:8f:56:35:08:65: 7b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:57:A8:6D:43:FC:97:AF:53:4C:14:A1:BB:3C:B9:F9:A1:4F:61:CB X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:9a:d5:3c:09:49:af:16:05:5c:c0:da:d6:43:00:33:be:41: 82:56:e9:fa:1b:5a:6f:b3:7a:d4:ba:db:e6:94:10:6a:46:ac: e6:31:5b:a3:48:68:54:4f:05:b3:b3:17:f9:0a:e6:a6:33:a6: bd:fa:a2:6c:15:c0:7c:f8:0d:3d:a1:e7:a9:af:ae:87:7f:71: 83:a0:b8:3b:33:39:3f:e0:37:ee:3e:35:aa:16:78:ac:16:05: 91:97:e0:e0:c3:da:1e:27:c4:9f:02:01:72:c6:8b:32:29:86: 05:9c:df:0c:ac:5f:9e:91:62:dc:60:03:c9:87:d2:3a:ba:82: 3a:8e:a4:bf:b2:ba:67:32:c7:f0:52:cb:2e:21:5c:ab:71:2a: c9:de:87:b8:e9:82:98:a8:af:95:2e:1a:b9:69:82:a8:56:93: 3d:1a:5b:17:f2:d3:62:3c:2b:8d:e6:b8:66:9e:89:af:d8:ae: c3:20:1a:26:82:39:52:8a:c7:ef:65:12:99:39:47:25:82:59: d2:05:3e:a6:10:1e:ee:1d:19:d4:03:7a:52:76:5e:45:e5:6b: dd:a3:96:39:67:38:19:19:1e:fa:9c:66:2e:7f:a7:f1:41:37: 4a:e7:08:0a:96:74:f5:6d:c6:64:f2:1d:7f:87:bf:5e:c7:a6: 33:66:62:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSk2XfZSKtu25BYfwT7pAbF7dbKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNTA4MjEyMzQ2MDJaFw0yNTA4MjUwNzUxMDJaMDMxMTAvBgNV BAMTKEZFNTdBODZENDNGQzk3QUY1MzRDMTRBMUJCM0NCOUY5QTE0RjYxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTo1Z9fK+xwGNaDnANFGHSOFk9 cbHiuZeVxiUktbwcQ6vUOe7vE7FAURtzgBcFLqaqRy8pHzC/O9xsw6z+GYtl9VWJ NdQ5r/X4CgtFNL6CDp79hDI+cjOQnQN3RnH3N/0HZv5XtXBQX4gk1fTcm/DH8c49 If7bBoEPMaeBLzaDinPJEspXuG+vNqd3Ur7FFJkSLGcgp5RlTOVMQhESsDSb003d wMnJY4PvY3tYcwMn+bP42I98cChPAt6DaRe8Rg0W3xWE6Q3BcUOfo00tSg/zB+S4 rCAyZY96fQRR8JknnKzp8rOjgN4mbAcMNKqcdH+A+C9NIWMpRcCPVjUIZXtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/leobUP8l69TTBShuzy5+aFPYcswHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGea1TwJSa8WBVzA2tZDADO+QYJW6fobWm+z etS62+aUEGpGrOYxW6NIaFRPBbOzF/kK5qYzpr36omwVwHz4DT2h56mvrod/cYOg uDszOT/gN+4+NaoWeKwWBZGX4ODD2h4nxJ8CAXLGizIphgWc3wysX56RYtxgA8mH 0jq6gjqOpL+yumcyx/BSyy4hXKtxKsneh7jpgpior5UuGrlpgqhWkz0aWxfy02I8 K43muGaeia/YrsMgGiaCOVKKx+9lEpk5RyWCWdIFPqYQHu4dGdQDelJ2XkXla92j ljlnOBkZHvqcZi5/p/FBN0rnCAqWdPVtxmTyHX+Hv17HpjNmYhg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:29:44 2025 by rpki-client