$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: YgDLEkhKMdSGFbU1UORTZLAaiq1tQgyfWhXOj9GJguw= Subject key identifier: 17:75:BE:CE:0F:20:CF:7D:49:EC:DB:F8:2B:9F:90:8B:F5:AD:71:25 Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 4BAAA605E6A7D24515212DB040E131DEF7ED3516 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: 010B Signing time: Sun 29 Jun 2025 11:42:17 +0000 Manifest this update: Sun 29 Jun 2025 11:37:17 +0000 Manifest next update: Wed 02 Jul 2025 21:47:17 +0000 Files and hashes: 1: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: HFThGBdFjmidhJmHMDXCoS6ycnhZcQfS2zGjsOicK3g=) 2: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: eSDeohW1AIrtqkyx+N42CigZjVYBQYQN7zrX2JowEv8=) 3: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: Hnu4XlRrD0p/T1f9mmSiLLwWRVc0mg1lZRc47DFx0vo=) 4: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: JLabqGnM8+YvvH11bFEaYilBFvdmjlNw60f4ngZNgvw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:aa:a6:05:e6:a7:d2:45:15:21:2d:b0:40:e1:31:de:f7:ed:35:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Jun 29 11:37:17 2025 GMT Not After : Jul 2 21:47:17 2025 GMT Subject: CN=1775BECE0F20CF7D49ECDBF82B9F908BF5AD7125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:3e:2d:33:6f:96:f0:f7:2c:36:6a:c5:28: e1:25:5a:30:8f:0a:ab:24:13:80:c8:a8:fc:14:1e: db:98:e2:fd:48:0e:be:74:3b:71:f4:e4:da:70:a5: 55:08:03:29:b5:3c:cc:92:d9:34:56:df:47:e6:6b: 62:24:6a:ad:01:ac:95:be:d2:fd:89:7a:64:36:9c: c5:4c:7f:1e:30:bf:4d:3d:dc:de:ba:e1:b9:17:9f: 02:2c:ed:86:9e:2e:ee:bd:1d:a6:2d:a5:95:0a:bd: 32:50:6e:bf:14:3b:3f:d9:e2:b9:ea:42:e6:5b:41: 3d:33:14:b9:04:8f:ad:81:bf:37:8e:7f:33:2b:1f: 9a:83:01:fc:55:2b:6a:8a:bb:1f:8f:bd:8e:3d:ea: c2:37:59:09:d8:7f:3e:12:2d:f3:50:a4:de:08:ee: 52:04:76:18:11:d9:8a:f0:25:f3:3e:00:ad:f7:49: 5a:e7:aa:73:45:4a:d2:e2:f5:d8:5e:f6:c6:5c:d7: 67:1a:f2:db:1e:39:66:19:c3:f4:28:22:a6:50:83: 71:5e:4e:74:36:b6:5d:19:19:ce:8c:f0:d0:f4:8c: ea:20:55:b4:b1:ed:e3:28:1f:73:7c:3f:4a:0d:54: c4:73:36:93:63:50:de:b2:4f:16:f0:c4:c4:08:78: 03:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:75:BE:CE:0F:20:CF:7D:49:EC:DB:F8:2B:9F:90:8B:F5:AD:71:25 X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:50:8a:a3:a9:f2:3a:b2:97:29:9b:05:ee:53:34:57:fb:d3: 88:a2:b1:b2:aa:09:e6:0c:1f:c6:a7:fb:43:2f:92:df:9b:26: bc:43:01:3b:e2:e2:41:70:c3:0b:57:be:0f:15:47:27:53:05: 43:66:a1:da:e3:f9:e1:88:0e:b4:2a:bf:36:26:c8:49:15:2f: a9:27:91:64:0f:06:a8:d2:b9:3f:64:de:18:f8:3d:00:0e:c5: 47:73:40:0d:b5:83:07:c4:54:3e:fe:1a:f6:8f:c8:52:59:22: 11:04:9e:3f:a5:96:6d:20:79:9e:52:8d:17:57:99:46:cc:96: da:67:6f:c2:2d:38:bc:ee:20:ca:51:ff:ee:12:87:14:c2:f6: 2b:72:4a:1d:be:6a:ff:47:07:f8:b8:d0:75:71:ac:09:ff:ea: 79:41:c1:ed:ad:32:52:e2:ed:5d:79:ee:d1:4d:01:d7:b1:3b: 28:81:f4:74:8c:fe:83:dd:38:e7:23:bb:ae:65:91:3a:45:64: cc:53:68:8e:58:26:ba:ac:04:32:7c:93:95:ab:91:10:39:d2: 88:40:7c:48:98:af:0a:27:d1:69:af:60:5c:2f:ae:ad:eb:0a: af:d5:2d:f4:ff:75:05:8b:53:03:df:02:6d:2d:51:85:da:c1: 43:49:53:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6qmBean0kUVIS2wQOEx3vftNRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTA2MjkxMTM3MTdaFw0yNTA3MDIyMTQ3MTdaMDMxMTAvBgNV BAMTKDE3NzVCRUNFMEYyMENGN0Q0OUVDREJGODJCOUY5MDhCRjVBRDcxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUj4tM2+W8PcsNmrFKOElWjCP CqskE4DIqPwUHtuY4v1IDr50O3H05NpwpVUIAym1PMyS2TRW30fma2Ikaq0BrJW+ 0v2JemQ2nMVMfx4wv0093N664bkXnwIs7YaeLu69HaYtpZUKvTJQbr8UOz/Z4rnq QuZbQT0zFLkEj62BvzeOfzMrH5qDAfxVK2qKux+PvY496sI3WQnYfz4SLfNQpN4I 7lIEdhgR2YrwJfM+AK33SVrnqnNFStLi9dhe9sZc12ca8tseOWYZw/QoIqZQg3Fe TnQ2tl0ZGc6M8ND0jOogVbSx7eMoH3N8P0oNVMRzNpNjUN6yTxbwxMQIeAM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF3W+zg8gz31J7Nv4K5+Qi/WtcSUwHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANQiqOp8jqylymbBe5TNFf704iisbKqCeYM H8an+0Mvkt+bJrxDATvi4kFwwwtXvg8VRydTBUNmodrj+eGIDrQqvzYmyEkVL6kn kWQPBqjSuT9k3hj4PQAOxUdzQA21gwfEVD7+GvaPyFJZIhEEnj+llm0geZ5SjRdX mUbMltpnb8ItOLzuIMpR/+4ShxTC9itySh2+av9HB/i40HVxrAn/6nlBwe2tMlLi 7V157tFNAdexOyiB9HSM/oPdOOcju65lkTpFZMxTaI5YJrqsBDJ8k5WrkRA50ohA fEiYrwon0WmvYFwvrq3rCq/VLfT/dQWLUwPfAm0tUYXawUNJU10= -----END CERTIFICATE-----Generated at Mon Jun 30 14:12:39 2025 by rpki-client