$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: 4PF6fX0rXmulCmfKQyR+tbRrMQXr5SydKCgIb6Uxh38= Subject key identifier: FE:9B:7B:64:7C:7A:EE:88:B9:7B:F2:42:51:22:81:C4:22:2A:47:36 Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 6B02E9234ED9A14B070B08F56E45C79769247041 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: F3 Signing time: Tue 06 May 2025 20:32:24 +0000 Manifest this update: Tue 06 May 2025 20:27:24 +0000 Manifest next update: Sat 10 May 2025 04:59:24 +0000 Files and hashes: 1: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: JLabqGnM8+YvvH11bFEaYilBFvdmjlNw60f4ngZNgvw=) 2: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: pJartUMiq36Ec+2mIP44XN/KAXSqtfbB2AwQmGJHcoE=) 3: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: HFThGBdFjmidhJmHMDXCoS6ycnhZcQfS2zGjsOicK3g=) 4: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: eSDeohW1AIrtqkyx+N42CigZjVYBQYQN7zrX2JowEv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 04:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:02:e9:23:4e:d9:a1:4b:07:0b:08:f5:6e:45:c7:97:69:24:70:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: May 6 20:27:24 2025 GMT Not After : May 10 04:59:24 2025 GMT Subject: CN=FE9B7B647C7AEE88B97BF242512281C4222A4736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:61:ca:a0:6f:05:b7:0a:0b:8d:34:79:4d: fb:84:72:c2:1a:ce:7c:8e:ff:5c:34:8a:7a:43:7a: 2f:5e:5e:25:d9:ee:0f:a3:f6:14:eb:d3:40:cb:71: 9f:d1:ff:9c:2a:f8:7c:e7:57:bf:02:3b:ea:c6:ed: 26:10:08:5c:bb:d0:ee:3d:91:b8:70:8e:9f:32:15: 04:e3:e8:03:51:5e:56:4e:dd:c5:b7:7e:54:e4:03: 19:3f:10:9d:b8:58:93:a5:29:d8:a8:49:53:9b:da: 80:4d:1d:c5:22:1c:66:48:e1:6f:95:1e:ce:4c:79: 59:e5:de:9d:f6:03:fd:ac:cb:75:a6:aa:15:c2:35: ce:7d:28:43:a8:df:90:b1:07:08:d3:ca:00:29:65: bd:ab:fc:79:af:78:ec:a9:05:e0:0f:f7:d0:ad:43: 7f:fc:72:1e:e5:44:fd:c8:4d:6f:c2:84:4a:7c:52: 74:cd:06:3c:43:10:81:5e:77:e7:41:ea:4b:de:9b: 61:82:c2:cd:56:c5:dc:d1:ef:e1:ea:4a:61:3b:e8: d3:27:bf:c6:78:87:27:f2:5c:63:f5:d9:6b:68:9e: 33:96:22:c4:ff:44:1b:44:ef:f0:98:64:a5:55:45: 28:06:ff:21:dd:b6:c2:63:48:bc:47:0a:dc:be:9e: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9B:7B:64:7C:7A:EE:88:B9:7B:F2:42:51:22:81:C4:22:2A:47:36 X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f0:f1:d1:35:fc:9a:1a:47:01:08:6c:70:91:a0:db:8c:4d: 54:7f:5f:33:59:4b:a4:59:ca:38:46:53:c0:9e:9d:0f:24:64: 5f:d0:4e:82:ea:57:1a:3b:d9:05:a5:85:f2:79:29:4e:6b:99: 4c:55:75:65:5f:3b:39:f7:7f:a1:61:7e:51:67:05:d2:fc:a2: 1f:88:33:2e:fa:b8:85:63:56:ba:0b:99:62:23:7d:9e:27:8b: 87:21:e7:3f:07:1d:7a:5a:40:4d:7a:bf:32:25:6d:05:84:28: 18:88:56:66:76:fc:ff:01:fe:0b:63:d2:55:ce:18:1d:00:52: f8:70:9b:18:47:f3:1b:ce:84:57:23:e6:81:28:a8:79:ea:c9: 94:90:11:97:16:55:95:fe:fe:65:35:e3:4a:cf:63:66:bc:e5: 29:e3:0c:42:58:d4:ab:49:44:09:73:26:1f:ce:8d:80:c1:3c: b7:64:df:63:e7:bf:b8:35:28:90:90:5d:45:9b:8d:eb:e9:e0: f2:be:ef:b6:8a:d9:22:0a:b3:d7:24:19:48:59:6b:82:fd:ad: de:9f:6a:f3:99:10:0f:46:63:e6:94:03:be:47:07:8e:85:47: 9b:02:33:27:4f:d8:48:c2:53:6e:0a:5a:66:53:1c:e5:4c:01: fb:23:d2:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawLpI07ZoUsHCwj1bkXHl2kkcEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTA1MDYyMDI3MjRaFw0yNTA1MTAwNDU5MjRaMDMxMTAvBgNV BAMTKEZFOUI3QjY0N0M3QUVFODhCOTdCRjI0MjUxMjI4MUM0MjIyQTQ3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7H2HKoG8FtwoLjTR5TfuEcsIa znyO/1w0inpDei9eXiXZ7g+j9hTr00DLcZ/R/5wq+HznV78CO+rG7SYQCFy70O49 kbhwjp8yFQTj6ANRXlZO3cW3flTkAxk/EJ24WJOlKdioSVOb2oBNHcUiHGZI4W+V Hs5MeVnl3p32A/2sy3WmqhXCNc59KEOo35CxBwjTygApZb2r/HmveOypBeAP99Ct Q3/8ch7lRP3ITW/ChEp8UnTNBjxDEIFed+dB6kvem2GCws1WxdzR7+HqSmE76NMn v8Z4hyfyXGP12WtonjOWIsT/RBtE7/CYZKVVRSgG/yHdtsJjSLxHCty+nh+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/pt7ZHx67oi5e/JCUSKBxCIqRzYwHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjw8dE1/JoaRwEIbHCRoNuMTVR/XzNZS6RZ yjhGU8CenQ8kZF/QToLqVxo72QWlhfJ5KU5rmUxVdWVfOzn3f6FhflFnBdL8oh+I My76uIVjVroLmWIjfZ4ni4ch5z8HHXpaQE16vzIlbQWEKBiIVmZ2/P8B/gtj0lXO GB0AUvhwmxhH8xvOhFcj5oEoqHnqyZSQEZcWVZX+/mU140rPY2a85SnjDEJY1KtJ RAlzJh/OjYDBPLdk32Pnv7g1KJCQXUWbjevp4PK+77aK2SIKs9ckGUhZa4L9rd6f avOZEA9GY+aUA75HB46FR5sCMydP2EjCU24KWmZTHOVMAfsj0m0= -----END CERTIFICATE-----Generated at Thu May 8 05:07:00 2025 by rpki-client