$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: qxGwaOHyg76AsliVuGMpdMH2Aq/NaN+gL2KE5ZZIAYI= Subject key identifier: CE:71:87:71:A7:81:07:B3:DB:FE:F7:C8:2B:AF:FC:CE:9C:BB:0A:9E Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 3BD2AE7BBDEE2369840E6706C7798AADB60E5DF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: 0116 Signing time: Thu 21 Aug 2025 21:30:48 +0000 Manifest this update: Thu 21 Aug 2025 21:25:48 +0000 Manifest next update: Sun 24 Aug 2025 22:18:48 +0000 Files and hashes: 1: 3130332e3231332e3233342e302f32332d3233203d3e20313531303033.roa (hash: 3HptcgwF9kr6TssFN64cDAiN6icULJSRQhu/pYKZbEU=) 2: 3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (hash: 98fawBN8lcuV1BpV1P5Bi+MmBkZ4ZywKpxF8wCR2MbU=) 3: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: CWusehBvGZNNsn+dCS0FYwQ7Kf8Tf3bC6vxVNPY/Fm8=) 4: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: UOvouam/pzav0L1bTTJjnqgv6na/7fKz/a+p7LqEy/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d2:ae:7b:bd:ee:23:69:84:0e:67:06:c7:79:8a:ad:b6:0e:5d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Aug 21 21:25:48 2025 GMT Not After : Aug 24 22:18:48 2025 GMT Subject: CN=CE718771A78107B3DBFEF7C82BAFFCCE9CBB0A9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:d2:7f:11:e9:e6:b2:c7:29:ff:63:05:cc: b9:81:87:5f:ae:f7:76:dd:12:c1:26:f9:5e:d9:e1: 59:e0:7c:8b:57:6a:c5:3a:42:58:4f:b1:19:21:5a: 27:55:96:d8:e4:5c:80:b5:3c:6f:82:97:21:a5:20: 55:b9:ec:2b:84:71:94:53:ae:09:56:a3:73:ee:7a: 70:87:28:ed:b4:ef:3a:e3:77:35:84:f2:b7:f3:25: da:f1:a6:60:1b:3e:43:36:bf:ab:33:f2:5f:80:85: c2:bc:78:96:52:47:4c:40:f8:c4:09:8a:50:01:f5: 5e:db:40:0b:ae:b3:f8:04:7e:17:c8:d6:d8:1a:89: 61:bc:e7:32:b2:25:9a:b5:34:1c:cc:4d:ab:dd:a8: 9d:7f:c2:4f:cc:6f:5c:91:12:41:67:f5:97:52:1e: 6c:fd:92:52:a2:01:0d:44:ae:00:03:c3:7c:85:68: 0c:0e:89:8d:bf:43:a9:1d:1a:ec:10:67:7c:60:e3: 8f:82:ec:c8:a6:61:7a:94:b3:25:61:3d:ea:63:ad: a9:19:5e:94:aa:48:cc:e3:58:10:43:2b:0a:6a:06: cd:9b:7b:5e:61:cd:04:a7:75:73:c0:1c:41:4e:a1: f6:5f:b1:2f:05:22:2b:1c:98:7e:bf:0b:c9:20:7e: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:71:87:71:A7:81:07:B3:DB:FE:F7:C8:2B:AF:FC:CE:9C:BB:0A:9E X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e5:b0:2f:54:d0:03:de:dc:38:a2:38:f3:c6:a0:9b:7b:c7: 21:70:17:53:83:b7:c6:39:48:0a:46:58:11:13:5e:bf:dc:5c: be:de:27:86:7c:6d:50:93:1a:64:8b:10:0e:bc:8c:31:31:55: da:05:c6:c6:56:29:51:cd:ad:0f:08:e5:53:12:d8:0d:99:7c: 68:41:e7:d7:06:42:ff:ed:30:8d:2a:07:d7:b2:be:11:ef:92: 78:4b:28:1f:67:f8:6a:6a:0f:51:3b:5f:12:f5:3c:55:12:a2: 8c:83:a0:a1:ae:59:26:7c:ee:44:61:58:44:0d:69:8b:bb:87: 89:04:ad:26:2e:a1:b0:7d:66:34:24:c3:16:80:06:d3:d2:e6: df:6f:79:57:74:02:55:5e:33:8b:a9:8b:69:03:82:68:2f:4f: 14:f8:c5:cd:52:85:55:a5:c1:6c:47:5d:ef:d8:92:31:5b:a0: ea:f9:da:92:89:2b:4f:53:53:4b:9e:d6:72:1f:97:5f:e2:ce: f8:1b:93:ef:66:97:69:88:fd:64:d3:df:f0:9f:6c:16:b8:15: dc:d4:0d:16:01:bd:c8:74:5c:22:4a:12:96:f3:1d:d7:09:b6: 77:ff:fc:02:0f:f9:19:19:ba:ab:e4:ae:13:92:bc:28:b4:c2: bf:03:7d:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9Kue73uI2mEDmcGx3mKrbYOXfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNTA4MjEyMTI1NDhaFw0yNTA4MjQyMjE4NDhaMDMxMTAvBgNV BAMTKENFNzE4NzcxQTc4MTA3QjNEQkZFRjdDODJCQUZGQ0NFOUNCQjBBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl59J/Eenmsscp/2MFzLmBh1+u 93bdEsEm+V7Z4VngfItXasU6QlhPsRkhWidVltjkXIC1PG+ClyGlIFW57CuEcZRT rglWo3PuenCHKO207zrjdzWE8rfzJdrxpmAbPkM2v6sz8l+AhcK8eJZSR0xA+MQJ ilAB9V7bQAuus/gEfhfI1tgaiWG85zKyJZq1NBzMTavdqJ1/wk/Mb1yREkFn9ZdS Hmz9klKiAQ1ErgADw3yFaAwOiY2/Q6kdGuwQZ3xg44+C7MimYXqUsyVhPepjrakZ XpSqSMzjWBBDKwpqBs2be15hzQSndXPAHEFOofZfsS8FIiscmH6/C8kgfgS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUznGHcaeBB7Pb/vfIK6/8zpy7Cp4wHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDlsC9U0APe3DiiOPPGoJt7xyFwF1ODt8Y5 SApGWBETXr/cXL7eJ4Z8bVCTGmSLEA68jDExVdoFxsZWKVHNrQ8I5VMS2A2ZfGhB 59cGQv/tMI0qB9eyvhHvknhLKB9n+GpqD1E7XxL1PFUSooyDoKGuWSZ87kRhWEQN aYu7h4kErSYuobB9ZjQkwxaABtPS5t9veVd0AlVeM4upi2kDgmgvTxT4xc1ShVWl wWxHXe/YkjFboOr52pKJK09TU0ue1nIfl1/izvgbk+9ml2mI/WTT3/CfbBa4FdzU DRYBvch0XCJKEpbzHdcJtnf//AIP+RkZuqvkrhOSvCi0wr8DfSk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:29 2025 by rpki-client