$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: CDGGD/wHNUUf5ERLPGBHGvWEsqfuKZdwqgixwCEtCOQ= Subject key identifier: 75:8F:54:B6:FB:49:92:47:2C:CC:8B:7A:C6:13:39:B1:7C:C4:B9:2A Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 2B6DB16032D583C85F85C4AB6BF21B77412C1CCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 0355 Signing time: Sun 20 Jul 2025 17:01:50 +0000 Manifest this update: Sun 20 Jul 2025 16:56:50 +0000 Manifest next update: Thu 24 Jul 2025 03:04:50 +0000 Files and hashes: 1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: RFdRTNHUD/sGru9VZYf9aNrIPtlzwtYrphPKTx/V/x0=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6d:b1:60:32:d5:83:c8:5f:85:c4:ab:6b:f2:1b:77:41:2c:1c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Jul 20 16:56:50 2025 GMT Not After : Jul 24 03:04:50 2025 GMT Subject: CN=758F54B6FB4992472CCC8B7AC61339B17CC4B92A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:a7:27:73:56:fb:b2:90:3f:dc:69:47:40: d7:ef:69:3b:d1:38:cf:bd:a9:98:b1:18:6e:b7:88: e5:c4:88:38:8a:df:71:b2:cc:37:97:a1:f5:71:de: ed:bd:49:99:e4:8d:66:31:cf:16:9f:88:d9:16:42: 1c:05:7b:04:a3:50:53:74:95:2f:ab:4b:09:9e:b0: ee:ad:b7:3a:e0:de:2c:1e:84:0b:6d:22:66:06:3c: 4c:0a:92:39:8b:20:97:be:90:3d:94:80:d9:2a:2b: be:ed:a0:ab:7e:d5:3d:47:4f:81:15:0c:53:d2:1d: e7:e0:a0:61:87:65:11:3c:01:43:24:3d:70:d9:bc: 1e:7a:0f:29:9d:95:5a:73:02:f8:68:06:43:a5:31: 0a:97:7f:9c:35:88:de:c8:25:c1:52:11:d2:50:63: 26:88:d6:be:07:2e:03:bf:ff:e7:dc:ca:ef:f4:b5: f2:90:8c:ef:14:d8:a0:b1:84:74:44:06:97:3e:d4: 47:37:c3:a3:69:6e:07:8b:7e:f4:ac:fc:c1:7b:43: 84:cf:9e:ca:f5:b3:ee:f8:a2:ad:69:0f:e7:db:95: 8b:36:ac:56:51:2c:12:f3:62:b4:7b:1b:af:2d:6c: 46:e5:e5:3d:13:5c:89:7f:c2:1b:61:9b:66:86:3e: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8F:54:B6:FB:49:92:47:2C:CC:8B:7A:C6:13:39:B1:7C:C4:B9:2A X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:40:0b:5b:d1:69:bf:90:de:ef:71:68:32:38:19:af:30:1d: 75:9a:f0:14:05:e2:e3:10:27:3b:8d:74:00:7c:04:ca:9a:84: df:13:8d:5b:32:6f:9e:14:ed:bb:a9:98:9a:fe:ea:6d:1d:98: bd:da:f1:44:bd:44:d6:97:46:cf:ba:c5:58:7f:cf:31:22:20: d7:29:a8:13:b9:8c:6a:05:e4:6f:12:ef:ae:0f:c0:d1:3a:26: 20:94:8b:ab:84:70:d7:17:59:97:4f:ec:a2:e7:8d:46:b9:d2: b6:54:4f:f9:12:3c:8a:86:d9:8c:b8:15:b5:54:50:f1:e1:b3: e9:75:7c:5e:69:82:89:4b:57:5a:66:ac:a6:76:ce:83:84:c2: 1b:96:3a:c5:bc:e7:7c:59:d6:a3:e9:69:51:01:55:db:c9:09: d6:00:a9:1a:7d:e4:bd:2f:6d:b9:51:51:52:14:04:a3:10:1c: 15:e9:ca:5d:a9:f2:94:07:d0:b2:2e:69:58:d5:9d:cf:0f:2a: 21:f2:0c:f5:40:49:6c:93:54:b6:2a:e6:f9:e2:42:c6:f0:39: 09:3c:f7:5b:49:5f:03:9d:32:b0:8a:a0:cd:e9:b3:23:26:e6: f5:21:50:8a:d8:b8:d8:d4:87:4e:c2:5f:30:bc:5a:c9:75:17: 3e:d5:99:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK22xYDLVg8hfhcSra/Ibd0EsHMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTA3MjAxNjU2NTBaFw0yNTA3MjQwMzA0NTBaMDMxMTAvBgNV BAMTKDc1OEY1NEI2RkI0OTkyNDcyQ0NDOEI3QUM2MTMzOUIxN0NDNEI5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSrKcnc1b7spA/3GlHQNfvaTvR OM+9qZixGG63iOXEiDiK33GyzDeXofVx3u29SZnkjWYxzxafiNkWQhwFewSjUFN0 lS+rSwmesO6ttzrg3iwehAttImYGPEwKkjmLIJe+kD2UgNkqK77toKt+1T1HT4EV DFPSHefgoGGHZRE8AUMkPXDZvB56DymdlVpzAvhoBkOlMQqXf5w1iN7IJcFSEdJQ YyaI1r4HLgO//+fcyu/0tfKQjO8U2KCxhHREBpc+1Ec3w6NpbgeLfvSs/MF7Q4TP nsr1s+74oq1pD+fblYs2rFZRLBLzYrR7G68tbEbl5T0TXIl/whthm2aGPoLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdY9UtvtJkkcszIt6xhM5sXzEuSowHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1AC1vRab+Q3u9xaDI4Ga8wHXWa8BQF4uMQ JzuNdAB8BMqahN8TjVsyb54U7bupmJr+6m0dmL3a8US9RNaXRs+6xVh/zzEiINcp qBO5jGoF5G8S764PwNE6JiCUi6uEcNcXWZdP7KLnjUa50rZUT/kSPIqG2Yy4FbVU UPHhs+l1fF5pgolLV1pmrKZ2zoOEwhuWOsW853xZ1qPpaVEBVdvJCdYAqRp95L0v bblRUVIUBKMQHBXpyl2p8pQH0LIuaVjVnc8PKiHyDPVASWyTVLYq5vniQsbwOQk8 91tJXwOdMrCKoM3psyMm5vUhUIrYuNjUh07CXzC8Wsl1Fz7Vma4= -----END CERTIFICATE-----Generated at Sun Jul 20 22:34:29 2025 by rpki-client