$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft File: 46F8E3AC44B2F2208037674979268378CA60B901.mft (raw, json) Hash identifier: oY2PYbz9PlpTqIdGZ++U9gYEWH624E1qJ6+k4OliKVk= Subject key identifier: B3:51:FA:78:6F:A0:09:9F:4C:6D:31:13:F8:B9:14:D9:82:2A:C9:8D Authority key identifier: 46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 Certificate issuer: /CN=46F8E3AC44B2F2208037674979268378CA60B901 Certificate serial: 60B33531649A47A81E4653B61B36B12CA034CCB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft Manifest number: D1 Signing time: Tue 01 Jul 2025 17:01:01 +0000 Manifest this update: Tue 01 Jul 2025 16:56:01 +0000 Manifest next update: Sat 05 Jul 2025 01:01:01 +0000 Files and hashes: 1: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: lEKQqCDUmBCxPybh1zwAuhAJa6FoeEwr4Hftj79+ZXw=) 2: 46F8E3AC44B2F2208037674979268378CA60B901.crl (hash: WkhbH+RVpeKNuAb/QiL7ZZK0WUNgum5pkB1/0Twge3k=) 3: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: 0XtLIEJG3py88w82k3Uk1bJyRF5CgN3WezTFPdzYJTo=) 4: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: w6SUeBV7r7eMx4zjejoHugvjH0LAjK8+Ny4oivQOtS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.crl rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b3:35:31:64:9a:47:a8:1e:46:53:b6:1b:36:b1:2c:a0:34:cc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46F8E3AC44B2F2208037674979268378CA60B901 Validity Not Before: Jul 1 16:56:01 2025 GMT Not After : Jul 5 01:01:01 2025 GMT Subject: CN=B351FA786FA0099F4C6D3113F8B914D9822AC98D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:24:55:83:50:cc:c8:91:6e:5f:ae:70:46:ad: 9f:ee:8c:41:ce:17:cf:2d:fe:4f:75:38:71:a2:ed: 8f:54:d7:19:cb:95:c2:0e:ff:86:36:20:b7:db:bb: 03:47:a9:f5:b0:b2:47:c9:f2:9b:74:34:82:3e:06: 5d:a4:22:8e:5c:18:26:2f:5b:4a:fd:87:cb:ec:67: f0:41:96:20:6d:ed:56:3e:24:dd:9e:12:83:10:ad: 9e:3e:0a:f1:4d:a2:d3:7a:83:bb:2d:f8:b3:77:97: 87:98:20:4b:22:e2:a5:5a:ca:bd:29:86:c4:74:23: dd:f6:86:9b:5f:9f:84:86:7a:83:6a:b3:eb:49:1c: ce:53:7f:4f:3f:63:d7:7e:f0:b8:e3:82:8f:06:2a: ad:b8:c1:e4:2e:6e:09:ed:6f:07:2e:ca:e1:b6:4e: cd:73:5c:9f:34:63:d7:30:81:77:56:13:a0:2f:a4: 59:53:d6:2d:31:7f:57:34:cf:e8:6a:dc:35:dc:ff: 84:4c:f0:e2:cc:aa:05:fe:b7:fa:79:e5:06:fa:f4: 16:26:71:10:03:b0:db:9c:8d:f2:19:6c:31:ff:65: 1b:22:81:e2:c7:44:90:00:76:ef:f3:3b:98:c8:1f: 5f:30:e3:38:8b:5b:6a:52:54:4a:ee:e4:df:04:14: 79:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:51:FA:78:6F:A0:09:9F:4C:6D:31:13:F8:B9:14:D9:82:2A:C9:8D X509v3 Authority Key Identifier: keyid:46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ab:57:9c:04:b8:81:43:e0:81:a8:63:cb:44:23:1d:57:cf: 00:44:8f:07:9b:db:7d:3e:f6:4d:b4:1e:24:17:bd:cc:ee:fa: 6c:bd:1d:b3:df:4c:eb:76:43:99:83:4c:f9:16:c4:55:05:9d: 82:85:2e:e8:42:34:75:79:35:ba:be:40:79:f4:a8:57:4b:c9: d3:86:f5:c4:c0:ac:9c:92:f2:bb:c2:5a:a9:d0:a6:2f:0d:0c: 3b:ff:78:8a:69:58:d1:7c:f7:e7:54:8a:70:03:93:98:e9:6e: 8a:96:f5:d1:5b:1a:f2:0b:c3:57:9e:6f:18:bb:75:40:52:32: de:33:2a:fd:04:84:d5:f0:94:84:e3:c1:f2:f1:33:eb:ad:31: 02:03:41:77:51:d8:48:27:e9:bd:c6:2f:d2:fb:98:0d:bb:ae: 4c:38:85:ac:a3:cd:bb:a1:89:08:06:7d:2a:a8:2a:03:31:31: 0f:92:36:b7:58:39:cd:a2:06:fc:2c:73:29:13:1d:c5:0c:9b: 54:f4:b2:b3:18:0c:18:7f:a9:e6:d5:58:fc:b3:a3:57:25:3d: fa:03:41:73:0c:29:b9:05:2b:3b:e9:a5:81:94:a2:f3:71:c4: 75:df:d4:0f:d1:10:44:e1:f9:68:66:78:7e:47:7a:61:cd:3d: 4c:8a:c7:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLM1MWSaR6geRlO2GzaxLKA0zLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgzNzhD QTYwQjkwMTAeFw0yNTA3MDExNjU2MDFaFw0yNTA3MDUwMTAxMDFaMDMxMTAvBgNV BAMTKEIzNTFGQTc4NkZBMDA5OUY0QzZEMzExM0Y4QjkxNEQ5ODIyQUM5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjJFWDUMzIkW5frnBGrZ/ujEHO F88t/k91OHGi7Y9U1xnLlcIO/4Y2ILfbuwNHqfWwskfJ8pt0NII+Bl2kIo5cGCYv W0r9h8vsZ/BBliBt7VY+JN2eEoMQrZ4+CvFNotN6g7st+LN3l4eYIEsi4qVayr0p hsR0I932hptfn4SGeoNqs+tJHM5Tf08/Y9d+8Ljjgo8GKq24weQubgntbwcuyuG2 Ts1zXJ80Y9cwgXdWE6AvpFlT1i0xf1c0z+hq3DXc/4RM8OLMqgX+t/p55Qb69BYm cRADsNucjfIZbDH/ZRsigeLHRJAAdu/zO5jIH18w4ziLW2pSVEru5N8EFHnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs1H6eG+gCZ9MbTET+LkU2YIqyY0wHwYDVR0j BBgwFoAURvjjrESy8iCAN2dJeSaDeMpguQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU4M2FmZS0zYmRjLTQ0YjItYTcwMi1iNDU1NWRhYTY1ZWEvMC80NkY4RTNBQzQ0 QjJGMjIwODAzNzY3NDk3OTI2ODM3OENBNjBCOTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgzNzhDQTYw QjkwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgz NzhDQTYwQjkwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOrV5wEuIFD4IGoY8tEIx1XzwBEjweb230+ 9k20HiQXvczu+my9HbPfTOt2Q5mDTPkWxFUFnYKFLuhCNHV5Nbq+QHn0qFdLydOG 9cTArJyS8rvCWqnQpi8NDDv/eIppWNF89+dUinADk5jpboqW9dFbGvILw1eebxi7 dUBSMt4zKv0EhNXwlITjwfLxM+utMQIDQXdR2Egn6b3GL9L7mA27rkw4hayjzbuh iQgGfSqoKgMxMQ+SNrdYOc2iBvwscykTHcUMm1T0srMYDBh/qebVWPyzo1clPfoD QXMMKbkFKzvppYGUovNxxHXf1A/REETh+WhmeH5HemHNPUyKx24= -----END CERTIFICATE-----Generated at Wed Jul 2 10:52:02 2025 by rpki-client