$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: 3l3WmTE9VjePDpmTVFtgUXViaV832bhw2vMb8gCMO7o= Subject key identifier: F1:D7:FE:44:6E:AB:2E:E7:F8:93:08:F4:E6:A6:8D:EA:70:96:5E:94 Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 07CD7C3BC4B7F737146018B9CDE62D66A22D3EFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: 0123 Signing time: Sat 23 Aug 2025 00:52:18 +0000 Manifest this update: Sat 23 Aug 2025 00:47:18 +0000 Manifest next update: Tue 26 Aug 2025 10:05:18 +0000 Files and hashes: 1: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: JLabqGnM8+YvvH11bFEaYilBFvdmjlNw60f4ngZNgvw=) 2: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: D1vuPumD7CQWCmfD/WXIXKecXnvgCfd+JtilF1Nzx3s=) 3: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: HFThGBdFjmidhJmHMDXCoS6ycnhZcQfS2zGjsOicK3g=) 4: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: eSDeohW1AIrtqkyx+N42CigZjVYBQYQN7zrX2JowEv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cd:7c:3b:c4:b7:f7:37:14:60:18:b9:cd:e6:2d:66:a2:2d:3e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Aug 23 00:47:18 2025 GMT Not After : Aug 26 10:05:18 2025 GMT Subject: CN=F1D7FE446EAB2EE7F89308F4E6A68DEA70965E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:67:52:aa:f4:72:ba:47:15:fa:69:a2:9f: c0:dc:dc:3b:64:1f:b1:24:c2:bf:49:87:30:2f:94: fc:a3:6d:8d:6d:fb:37:7f:c5:e0:13:09:d9:09:e8: f2:b6:50:b5:fa:fb:02:6a:17:53:d9:b7:45:fb:4c: 06:2a:5b:44:63:84:34:53:54:e9:fc:56:c6:ad:fc: c5:b6:a6:e1:73:08:2d:ad:a7:a3:03:00:26:f7:13: aa:a8:a3:26:77:9a:5e:ae:a0:45:bc:ae:5a:09:0d: 0b:35:2d:08:22:ac:45:e0:6f:00:db:ee:22:ac:dd: 83:86:b9:f0:ed:2a:59:62:99:80:e1:89:6c:af:9f: 86:52:4e:37:56:63:f4:70:ce:e7:c9:18:2c:16:fe: ba:aa:84:62:93:95:c0:fd:3d:95:6e:c8:62:d0:36: 63:4d:dd:3f:96:36:2c:c8:54:52:7a:c1:45:50:00: de:ef:d7:d4:e9:ee:77:3e:9f:c5:1f:94:3c:f2:d8: f4:64:1d:a7:af:75:d1:ca:12:1f:64:8a:fd:2a:02: e7:a2:11:79:e8:50:37:6b:42:e4:73:84:fa:93:2e: 11:8f:ac:1c:41:f8:2d:21:96:7d:00:03:c6:69:e4: d8:64:be:6f:7e:44:45:85:75:2e:f0:75:b6:69:26: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D7:FE:44:6E:AB:2E:E7:F8:93:08:F4:E6:A6:8D:EA:70:96:5E:94 X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e9:82:95:9e:ca:36:4b:7c:d8:75:8d:94:2b:7f:5d:6c:13: 7f:a1:fa:c8:26:39:58:dc:1c:e4:94:b4:a8:82:ea:9a:8c:fa: 37:88:62:0e:b4:59:71:77:dd:26:43:8b:e2:b0:f2:7c:71:0b: c6:fe:3b:c6:e6:2b:6d:ef:63:36:5d:90:14:89:24:a4:68:60: 37:29:ad:71:d6:dd:8c:38:a7:e6:dc:fc:bb:cb:7b:ce:57:cf: d3:49:fb:a1:e3:7f:25:b8:d8:5c:3f:74:70:8a:36:1a:80:1f: 6e:5e:52:cf:86:c5:ec:e0:1b:6f:a1:31:73:98:88:a4:b1:89: f0:4d:a1:31:34:9a:d4:0b:b7:bb:0e:3f:dc:27:75:ab:ba:5c: 4b:27:9d:4b:7c:d2:76:3e:2c:8a:c7:da:de:ec:93:99:00:a6: 3c:37:ea:cf:2e:f2:36:06:9a:ce:7a:2a:99:28:bd:c7:b2:ef: 57:ab:64:67:af:fd:24:d1:e3:1c:9c:e9:3c:cd:6c:32:e6:ca: 17:ea:2f:14:b0:6e:72:5e:d1:11:3b:2c:c1:45:a5:6e:40:49: 08:6c:4b:48:29:b0:c4:28:cf:71:62:ce:79:68:dc:3d:0c:43: 14:1e:a0:fc:5d:23:e7:1e:74:34:a5:57:c8:40:44:65:dc:0f: 3b:2e:05:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB818O8S39zcUYBi5zeYtZqItPvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTA4MjMwMDQ3MThaFw0yNTA4MjYxMDA1MThaMDMxMTAvBgNV BAMTKEYxRDdGRTQ0NkVBQjJFRTdGODkzMDhGNEU2QTY4REVBNzA5NjVFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79GdSqvRyukcV+mmin8Dc3Dtk H7Ekwr9JhzAvlPyjbY1t+zd/xeATCdkJ6PK2ULX6+wJqF1PZt0X7TAYqW0RjhDRT VOn8Vsat/MW2puFzCC2tp6MDACb3E6qooyZ3ml6uoEW8rloJDQs1LQgirEXgbwDb 7iKs3YOGufDtKllimYDhiWyvn4ZSTjdWY/RwzufJGCwW/rqqhGKTlcD9PZVuyGLQ NmNN3T+WNizIVFJ6wUVQAN7v19Tp7nc+n8UflDzy2PRkHaevddHKEh9kiv0qAuei EXnoUDdrQuRzhPqTLhGPrBxB+C0hln0AA8Zp5Nhkvm9+REWFdS7wdbZpJlLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8df+RG6rLuf4kwj05qaN6nCWXpQwHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvpgpWeyjZLfNh1jZQrf11sE3+h+sgmOVjc HOSUtKiC6pqM+jeIYg60WXF33SZDi+Kw8nxxC8b+O8bmK23vYzZdkBSJJKRoYDcp rXHW3Yw4p+bc/LvLe85Xz9NJ+6HjfyW42Fw/dHCKNhqAH25eUs+GxezgG2+hMXOY iKSxifBNoTE0mtQLt7sOP9wndau6XEsnnUt80nY+LIrH2t7sk5kApjw36s8u8jYG ms56Kpkovcey71erZGev/STR4xyc6TzNbDLmyhfqLxSwbnJe0RE7LMFFpW5ASQhs S0gpsMQoz3Fiznlo3D0MQxQeoPxdI+cedDSlV8hARGXcDzsuBYM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:02:46 2025 by rpki-client