$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: 70QiL+rWOrJF3MJb4jX44OrtGfj/+cqB64BpkNoYL6g= Subject key identifier: 6B:3E:2C:97:71:9C:93:0E:3C:EE:E3:E4:D2:57:05:6B:0D:C3:59:41 Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 464F9DFC01E44628A0359FFC0F5F0C1800E392C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: 0100 Signing time: Wed 02 Jul 2025 03:10:46 +0000 Manifest this update: Wed 02 Jul 2025 03:05:46 +0000 Manifest next update: Sat 05 Jul 2025 05:10:46 +0000 Files and hashes: 1: 3130332e3231332e3233342e302f32332d3233203d3e20313531303033.roa (hash: 3HptcgwF9kr6TssFN64cDAiN6icULJSRQhu/pYKZbEU=) 2: 3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (hash: 98fawBN8lcuV1BpV1P5Bi+MmBkZ4ZywKpxF8wCR2MbU=) 3: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: Ysg+4eubdOI+0pMelmRIPB2EylHW1QkAN4sI87gmlnw=) 4: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: CWusehBvGZNNsn+dCS0FYwQ7Kf8Tf3bC6vxVNPY/Fm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 05:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4f:9d:fc:01:e4:46:28:a0:35:9f:fc:0f:5f:0c:18:00:e3:92:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Jul 2 03:05:46 2025 GMT Not After : Jul 5 05:10:46 2025 GMT Subject: CN=6B3E2C97719C930E3CEEE3E4D257056B0DC35941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:4d:6c:41:65:14:37:17:53:48:a3:1e:db: 69:fd:90:72:f9:b0:44:e9:c8:23:62:73:0d:c9:9e: e9:98:64:1f:d4:23:5c:43:83:81:4f:bd:a7:8e:fb: 08:ae:76:c7:7a:32:a4:07:2c:46:81:c6:cf:d7:c1: 0f:c1:4f:39:00:bd:23:31:67:bd:06:6b:ea:c8:82: b0:d2:7a:fc:94:b7:a7:35:1a:dc:59:89:ad:da:fc: cb:b7:8d:47:56:a1:5a:eb:c5:48:98:62:0d:90:ea: 11:de:db:7b:0c:a5:e7:5b:07:8f:cf:fa:85:dc:35: e2:bb:83:fe:cb:37:14:25:f5:bd:ed:74:23:df:1d: 38:50:43:55:41:ba:d6:e9:9c:c8:0d:cf:41:b8:71: d5:33:0f:74:6e:a6:e9:c3:01:4d:da:68:47:bf:de: 23:03:21:71:b3:2d:3a:8c:7f:e9:73:c5:ce:0c:e7: 5e:32:0b:83:f0:86:b3:aa:79:a0:df:f4:8b:a7:f0: c3:0b:39:09:55:0c:09:82:ed:a8:c0:12:8a:15:82: f0:18:35:75:3d:15:d9:94:89:44:c5:48:c3:38:a8: f8:01:12:d9:f0:47:ab:7e:55:72:1a:1b:9c:dc:14: d5:ea:fd:9d:d1:a1:7d:e6:79:cd:4c:7f:24:68:d2: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3E:2C:97:71:9C:93:0E:3C:EE:E3:E4:D2:57:05:6B:0D:C3:59:41 X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d8:d4:c7:a3:77:26:4e:17:27:49:b9:33:ea:02:43:f2:80: 10:ca:af:9c:f3:15:75:7c:84:8e:a3:97:fe:5a:0d:9c:d7:9c: 8b:8f:f9:83:6f:68:88:be:0e:07:05:43:03:57:33:ba:f6:20: 9e:d9:50:5d:67:12:89:ec:68:59:8a:e9:12:ef:e4:d3:ce:7b: da:94:37:fc:67:19:e9:d7:4b:40:ff:73:9b:a0:1a:d3:1c:90: 02:92:07:9e:d3:65:65:9b:f2:f5:07:d8:b1:e7:05:66:4a:00: 72:52:d8:54:84:f5:86:66:b5:c3:d2:39:36:c8:63:21:66:75: 35:28:b0:fe:87:52:36:3b:cc:3f:73:6c:a6:f5:e3:ee:4c:2b: ac:c0:db:b9:67:b9:51:be:aa:1e:64:d6:5a:09:b3:76:bf:20: 01:46:22:f8:31:a1:28:52:38:a1:98:35:54:50:17:af:b1:b2: e9:ee:b3:e0:2a:28:8a:f2:02:de:eb:32:e2:00:58:b7:79:f4: be:e1:d5:15:2f:35:34:a2:bd:50:81:a1:9a:76:45:fa:c5:2c: ce:bb:6b:6c:49:55:3a:39:02:51:fc:a3:22:74:6d:6a:e9:be: a7:1a:58:e3:36:70:f7:01:c0:9f:cb:43:5e:f5:40:86:97:78: 8b:e8:29:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURk+d/AHkRiigNZ/8D18MGADjksEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNTA3MDIwMzA1NDZaFw0yNTA3MDUwNTEwNDZaMDMxMTAvBgNV BAMTKDZCM0UyQzk3NzE5QzkzMEUzQ0VFRTNFNEQyNTcwNTZCMERDMzU5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyU1sQWUUNxdTSKMe22n9kHL5 sETpyCNicw3JnumYZB/UI1xDg4FPvaeO+wiudsd6MqQHLEaBxs/XwQ/BTzkAvSMx Z70Ga+rIgrDSevyUt6c1GtxZia3a/Mu3jUdWoVrrxUiYYg2Q6hHe23sMpedbB4/P +oXcNeK7g/7LNxQl9b3tdCPfHThQQ1VButbpnMgNz0G4cdUzD3RupunDAU3aaEe/ 3iMDIXGzLTqMf+lzxc4M514yC4PwhrOqeaDf9Iun8MMLOQlVDAmC7ajAEooVgvAY NXU9FdmUiUTFSMM4qPgBEtnwR6t+VXIaG5zcFNXq/Z3RoX3mec1MfyRo0i7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaz4sl3Gckw487uPk0lcFaw3DWUEwHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvY1MejdyZOFydJuTPqAkPygBDKr5zzFXV8 hI6jl/5aDZzXnIuP+YNvaIi+DgcFQwNXM7r2IJ7ZUF1nEonsaFmK6RLv5NPOe9qU N/xnGenXS0D/c5ugGtMckAKSB57TZWWb8vUH2LHnBWZKAHJS2FSE9YZmtcPSOTbI YyFmdTUosP6HUjY7zD9zbKb14+5MK6zA27lnuVG+qh5k1loJs3a/IAFGIvgxoShS OKGYNVRQF6+xsunus+AqKIryAt7rMuIAWLd59L7h1RUvNTSivVCBoZp2RfrFLM67 a2xJVTo5AlH8oyJ0bWrpvqcaWOM2cPcBwJ/LQ171QIaXeIvoKWo= -----END CERTIFICATE-----Generated at Wed Jul 2 04:25:12 2025 by rpki-client