$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: iazmrOu5VvOO/5I0SD3ndcfTKQd7rZv+jJZnZ7diw6k= Subject key identifier: F6:66:AE:01:D8:B3:D6:4F:DD:C5:F0:83:5D:F2:B5:85:D9:B6:FA:5E Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 700FEB2F3EDBFB7B153AEC3CC55F7C65B4FD4CC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: 0130 Signing time: Sat 18 Oct 2025 10:10:48 +0000 Manifest this update: Sat 18 Oct 2025 10:05:48 +0000 Manifest next update: Tue 21 Oct 2025 11:21:48 +0000 Files and hashes: 1: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: Ycr6zymlHtbdwnO/cdB3sFyq5DjQ/S/D+IzuLvepQXE=) 2: 3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (hash: 98fawBN8lcuV1BpV1P5Bi+MmBkZ4ZywKpxF8wCR2MbU=) 3: 3130332e3231332e3233342e302f32332d3233203d3e20313531303033.roa (hash: 3HptcgwF9kr6TssFN64cDAiN6icULJSRQhu/pYKZbEU=) 4: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: CWusehBvGZNNsn+dCS0FYwQ7Kf8Tf3bC6vxVNPY/Fm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0f:eb:2f:3e:db:fb:7b:15:3a:ec:3c:c5:5f:7c:65:b4:fd:4c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Oct 18 10:05:48 2025 GMT Not After : Oct 21 11:21:48 2025 GMT Subject: CN=F666AE01D8B3D64FDDC5F0835DF2B585D9B6FA5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e7:4c:e8:e4:59:38:e3:c2:0d:6c:a6:bd:43: c5:19:e3:ee:d7:04:f4:3d:56:43:7f:80:f9:b8:07: ad:fe:d8:69:d6:19:8e:66:31:da:04:57:e6:27:15: d1:07:f4:27:10:93:10:20:02:7a:31:a4:b6:b3:e4: 22:8a:38:cd:29:d1:85:36:16:4c:47:31:28:b4:40: be:91:d8:f3:b0:b2:3b:24:20:0d:b9:5b:b2:97:58: ed:f5:8d:62:80:6a:b2:74:5c:9f:15:db:25:1e:cb: 2e:a9:fb:af:6b:6b:93:dd:cd:16:ac:78:7c:ae:9d: 60:98:90:b9:8a:3e:8b:17:96:70:0f:2b:61:52:69: 9f:ba:cb:6b:96:38:1e:14:04:6b:4b:06:23:7f:22: e5:1d:b1:67:b1:9e:6d:77:42:78:37:dd:9d:7c:78: 30:ce:06:f6:29:03:b4:f3:22:a1:e2:ee:e2:4c:6c: 96:ab:64:93:4a:c1:42:de:f6:d5:19:e7:f4:a2:71: 0c:bf:65:ae:15:84:a3:e3:25:9e:a2:e9:5c:e5:d5: 7b:fc:79:8d:bd:41:41:fa:a3:7d:8c:6e:a5:5a:65: da:ed:ef:bb:aa:4d:6a:45:56:d1:25:67:57:4e:eb: 87:b5:7c:be:64:4e:4d:76:1d:a9:51:3d:a8:55:c1: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:66:AE:01:D8:B3:D6:4F:DD:C5:F0:83:5D:F2:B5:85:D9:B6:FA:5E X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4a:30:a0:96:db:76:dc:3d:fd:20:3e:41:8c:b5:52:cb:4e: a0:bb:20:14:53:c4:aa:ef:96:03:67:fd:f4:bb:d6:38:de:23: 6b:63:c8:f8:2a:99:f2:3f:c5:51:0c:aa:38:88:b4:40:87:58: 23:68:f7:f9:65:8e:96:6c:ac:f4:32:6c:df:92:05:7a:44:3e: 35:0e:87:d9:c5:ed:d8:62:70:fe:c0:24:25:aa:32:49:bc:2b: 19:1c:d0:de:de:8f:32:15:61:dc:1b:b6:18:a7:11:9e:58:16: c2:b4:ba:00:0a:38:bb:df:26:4b:6b:c2:fa:0b:98:42:b1:4c: 1e:ad:cd:0f:f7:8f:60:41:07:d6:c2:3a:ac:13:7c:57:91:02: 5a:e9:4c:8c:e8:92:44:40:8e:a8:ca:7b:ba:90:65:2e:13:34: 1e:17:db:3e:0c:90:f6:3d:de:f1:ca:da:fa:b0:a3:c5:4f:53: 44:80:56:09:32:b2:10:08:ba:ba:a5:cf:74:95:c8:44:8d:f8: ff:f7:01:31:c4:71:e6:89:03:e2:aa:e6:4d:b7:10:b9:f7:1c: 25:e8:f7:dc:24:10:35:89:e0:61:9a:e0:c2:b2:40:1b:97:b8: c4:43:b5:e4:5f:72:0f:27:d9:3d:6d:f1:e9:15:f4:b8:b7:58: c5:d8:a4:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcA/rLz7b+3sVOuw8xV98ZbT9TMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNTEwMTgxMDA1NDhaFw0yNTEwMjExMTIxNDhaMDMxMTAvBgNV BAMTKEY2NjZBRTAxRDhCM0Q2NEZEREM1RjA4MzVERjJCNTg1RDlCNkZBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp50zo5Fk448INbKa9Q8UZ4+7X BPQ9VkN/gPm4B63+2GnWGY5mMdoEV+YnFdEH9CcQkxAgAnoxpLaz5CKKOM0p0YU2 FkxHMSi0QL6R2POwsjskIA25W7KXWO31jWKAarJ0XJ8V2yUeyy6p+69ra5PdzRas eHyunWCYkLmKPosXlnAPK2FSaZ+6y2uWOB4UBGtLBiN/IuUdsWexnm13Qng33Z18 eDDOBvYpA7TzIqHi7uJMbJarZJNKwULe9tUZ5/SicQy/Za4VhKPjJZ6i6Vzl1Xv8 eY29QUH6o32MbqVaZdrt77uqTWpFVtElZ1dO64e1fL5kTk12HalRPahVwYWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9mauAdiz1k/dxfCDXfK1hdm2+l4wHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBKMKCW23bcPf0gPkGMtVLLTqC7IBRTxKrv lgNn/fS71jjeI2tjyPgqmfI/xVEMqjiItECHWCNo9/lljpZsrPQybN+SBXpEPjUO h9nF7dhicP7AJCWqMkm8Kxkc0N7ejzIVYdwbthinEZ5YFsK0ugAKOLvfJktrwvoL mEKxTB6tzQ/3j2BBB9bCOqwTfFeRAlrpTIzokkRAjqjKe7qQZS4TNB4X2z4MkPY9 3vHK2vqwo8VPU0SAVgkyshAIurqlz3SVyESN+P/3ATHEceaJA+Kq5k23ELn3HCXo 99wkEDWJ4GGa4MKyQBuXuMRDteRfcg8n2T1t8ekV9Li3WMXYpGo= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:25 2025 by rpki-client