$ rpki-client -vvf repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft File: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft (raw, json) Hash identifier: BzPK0aPxcbn8NsB9QaGZ1L2s2Ao6w76DMV4gksNf05I= Subject key identifier: 1A:2B:3F:B1:E1:CB:61:3B:BB:95:F9:4D:F5:B7:71:FD:64:46:E2:DA Authority key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 Certificate issuer: /CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Certificate serial: 1D4673FB112E83D2A72C0E13C25C6870D7C1EA55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft Manifest number: B5 Signing time: Tue 22 Jul 2025 03:22:08 +0000 Manifest this update: Tue 22 Jul 2025 03:17:08 +0000 Manifest next update: Fri 25 Jul 2025 03:26:08 +0000 Files and hashes: 1: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl (hash: Hgo7MthYXrqeaLO/LlnQhMJcZ5MY0G/4ncoxscaBnqY=) 2: 3130332e36302e39302e302f32342d3234203d3e20313531353730.roa (hash: YhTpL/afIyHAI7098wyo60hPl3dD1A2rEVVKj7Elh/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:46:73:fb:11:2e:83:d2:a7:2c:0e:13:c2:5c:68:70:d7:c1:ea:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Validity Not Before: Jul 22 03:17:08 2025 GMT Not After : Jul 25 03:26:08 2025 GMT Subject: CN=1A2B3FB1E1CB613BBB95F94DF5B771FD6446E2DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:da:f2:c1:5f:22:e9:4d:30:a2:8b:78:c0: 92:55:7f:ab:31:07:f8:4b:4e:1a:93:7d:b9:ff:e0: ba:24:38:08:9b:6d:69:18:0a:51:2a:6a:1f:d6:f4: f8:4b:85:63:2b:29:33:30:cf:04:ca:3f:5d:75:91: c0:17:58:c5:cb:5c:bf:78:cb:ac:6b:05:f4:65:de: 3e:6d:e8:b3:60:66:26:19:09:7a:d3:c6:37:7b:7e: 48:5d:b8:8a:e4:a3:26:93:6b:5b:ea:f6:39:06:c2: 6f:33:8b:54:0a:e0:9a:7a:85:7e:76:cf:b0:5a:17: a4:8f:7e:de:e0:85:cd:02:98:58:7b:c2:ed:25:fd: f7:02:06:b7:d2:12:04:fe:87:90:f6:c4:9e:ca:80: 3e:fc:24:40:73:ba:64:98:70:36:66:dd:8c:96:66: d5:5c:d1:84:94:31:e9:ea:bf:de:68:63:5b:f1:13: 97:64:da:00:82:b8:85:23:02:42:e7:ca:2b:0e:c4: 5d:4b:51:3b:3c:76:63:24:1a:4c:b7:b8:eb:2c:4b: be:eb:8d:f6:45:45:07:c0:8f:b9:4a:43:25:b4:99: 06:11:20:f6:5e:9e:2e:bb:e2:5c:7d:67:80:f1:0a: 31:0c:ad:b5:a9:30:0b:4f:9b:c1:b8:d6:2f:0c:0e: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2B:3F:B1:E1:CB:61:3B:BB:95:F9:4D:F5:B7:71:FD:64:46:E2:DA X509v3 Authority Key Identifier: keyid:46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c0:b6:52:39:22:78:57:39:92:3f:e7:a1:90:95:9c:ef:a8: 62:53:82:0b:de:d6:04:47:b2:1f:e4:04:30:51:0d:fa:16:5e: f6:e0:7d:b6:ac:de:67:cb:8a:2c:02:41:45:b1:e1:fe:ab:6e: 84:71:eb:68:63:94:64:49:c1:44:08:27:26:57:65:33:a8:e6: 7d:44:f3:d0:ce:09:ed:85:68:73:c8:04:2d:f4:5e:b3:d2:b2: 98:cc:05:f3:47:45:5c:50:e1:77:be:4b:86:3e:21:65:be:e3: 5a:e2:88:f4:66:34:93:f1:9e:32:1a:cf:ea:b6:c4:5d:61:e8: 0e:7d:cd:eb:01:2c:1a:e4:fa:ed:94:a1:49:c7:8c:7d:6c:b3: d2:a9:e0:79:b5:87:52:b2:e8:7a:2d:c8:23:94:87:32:e7:56: 81:4c:32:2f:03:e9:16:dc:26:04:c0:f6:45:15:94:13:08:81: 22:9f:49:c0:6b:43:44:72:9d:31:3a:d0:67:13:f2:80:e1:23: d8:32:5b:25:ff:4f:08:0a:66:e7:28:0a:da:f0:cd:1f:e2:52: c8:2b:a8:86:8b:48:c4:0e:82:49:fe:7f:b3:c5:e6:ad:92:32: 43:f0:cd:53:42:93:a8:76:6c:de:1a:f9:46:8a:86:be:b3:28: 10:7d:9c:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHUZz+xEug9KnLA4TwlxocNfB6lUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNG NkM1QUQ5MzAeFw0yNTA3MjIwMzE3MDhaFw0yNTA3MjUwMzI2MDhaMDMxMTAvBgNV BAMTKDFBMkIzRkIxRTFDQjYxM0JCQjk1Rjk0REY1Qjc3MUZENjQ0NkUyREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsudrywV8i6U0woot4wJJVf6sx B/hLThqTfbn/4LokOAibbWkYClEqah/W9PhLhWMrKTMwzwTKP111kcAXWMXLXL94 y6xrBfRl3j5t6LNgZiYZCXrTxjd7fkhduIrkoyaTa1vq9jkGwm8zi1QK4Jp6hX52 z7BaF6SPft7ghc0CmFh7wu0l/fcCBrfSEgT+h5D2xJ7KgD78JEBzumSYcDZm3YyW ZtVc0YSUMenqv95oY1vxE5dk2gCCuIUjAkLnyisOxF1LUTs8dmMkGky3uOssS77r jfZFRQfAj7lKQyW0mQYRIPZeni674lx9Z4DxCjEMrbWpMAtPm8G41i8MDtRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGis/seHLYTu7lflN9bdx/WRG4towHwYDVR0j BBgwFoAURr99aQfH41cmpBgPC8XxM/bFrZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTQ2NjMyYS1iMmUxLTQyMGEtYTg5NS1jNGExZTIyMTdkYTMvMC80NkJGN0Q2OTA3 QzdFMzU3MjZBNDE4MEYwQkM1RjEzM0Y2QzVBRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNGNkM1 QUQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE0NjYzMmEtYjJlMS00MjBhLWE4 OTUtYzRhMWUyMjE3ZGEzLzAvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYx MzNGNkM1QUQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHAtlI5InhXOZI/56GQlZzvqGJTggve1gRH sh/kBDBRDfoWXvbgfbas3mfLiiwCQUWx4f6rboRx62hjlGRJwUQIJyZXZTOo5n1E 89DOCe2FaHPIBC30XrPSspjMBfNHRVxQ4Xe+S4Y+IWW+41riiPRmNJPxnjIaz+q2 xF1h6A59zesBLBrk+u2UoUnHjH1ss9Kp4Hm1h1Ky6HotyCOUhzLnVoFMMi8D6Rbc JgTA9kUVlBMIgSKfScBrQ0RynTE60GcT8oDhI9gyWyX/TwgKZucoCtrwzR/iUsgr qIaLSMQOgkn+f7PF5q2SMkPwzVNCk6h2bN4a+UaKhr6zKBB9nJ0= -----END CERTIFICATE-----Generated at Wed Jul 23 08:01:49 2025 by rpki-client