$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: hmuHDSUmB4ZoV8yuQBV3RnArdn0Mla6DuKA3Lt0y8Hc= Subject key identifier: F6:15:EE:BF:B5:57:69:BA:7D:13:A2:81:DB:3A:8C:20:95:AC:EE:2E Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 47C5FFEFA1FA23CAC39D60487CDA2203F4293AEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 0176 Signing time: Sun 20 Jul 2025 02:30:59 +0000 Manifest this update: Sun 20 Jul 2025 02:25:59 +0000 Manifest next update: Wed 23 Jul 2025 04:05:59 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: xAh6iVTptzdWaiN0lzQItEzdBxkBB7Jmc75/4/WIUXc=) 2: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: 17ChIozSdmJ+qCeyTnh6PolCU0A1lGl43AAQ9utL0Ec=) 3: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: 36JNQoWoEcG0XddMVhG6Y5xuDi4KHB52Q2RH2cUrQzc=) 4: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: LXXUODoZsajNRN4UQlGt1PoaXQn/ODzstT9xGobhC5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c5:ff:ef:a1:fa:23:ca:c3:9d:60:48:7c:da:22:03:f4:29:3a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Jul 20 02:25:59 2025 GMT Not After : Jul 23 04:05:59 2025 GMT Subject: CN=F615EEBFB55769BA7D13A281DB3A8C2095ACEE2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:1a:01:78:e4:0b:2f:49:0d:6b:33:9c:c1: aa:27:25:f1:4a:c7:a3:b7:45:42:f4:ab:85:28:92: 9a:5c:a0:07:4d:69:28:51:08:c2:63:32:3b:6b:d5: 5a:d5:1e:10:ad:78:72:6a:6f:b1:91:80:be:d9:3c: b0:5e:67:38:cd:f5:19:ac:73:80:86:f2:19:b9:3d: dd:37:cd:b1:f4:cd:62:e9:b9:6a:61:aa:98:13:3d: 90:8c:78:02:25:33:97:f3:67:ef:e6:bd:4d:5c:83: ea:02:20:49:76:0f:1a:bc:a9:8f:03:7e:28:8c:4b: 67:d7:9e:34:3a:80:bd:53:9c:b1:3a:05:4a:57:14: be:c5:c4:9c:eb:42:ab:4f:bb:34:5c:17:b4:a7:6f: a9:3f:a8:26:93:72:9d:f2:0d:11:71:0b:5b:88:4a: 4d:12:5d:16:5c:83:cb:88:0f:88:fb:5d:74:25:4d: 0e:7f:b1:45:8f:2f:a8:fd:bf:10:9f:4f:11:22:22: bb:6c:18:f3:8f:ef:ca:7a:bf:9a:6e:25:64:1e:a2: 7a:72:78:dc:35:d1:df:fa:eb:8b:93:3a:40:ef:f3: 6b:0b:c7:25:38:69:72:e7:22:67:8b:39:48:19:62: 18:f6:58:8c:96:4a:43:8e:2e:a3:0b:07:ee:87:5c: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:15:EE:BF:B5:57:69:BA:7D:13:A2:81:DB:3A:8C:20:95:AC:EE:2E X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:98:17:e0:43:04:67:c3:ec:e7:9b:c2:d3:47:bc:63:ad:35: bc:ef:c2:ae:1d:b0:ad:53:bc:8e:fb:06:6a:61:96:4b:48:15: e5:b6:13:03:87:14:f1:61:0b:13:87:9c:1d:e1:d7:86:6d:fc: 2e:ef:11:15:aa:01:24:95:8e:37:7e:84:27:56:76:aa:70:bf: a4:84:7b:bf:00:a3:de:8e:a7:86:cf:0f:6a:e8:0c:c9:e8:3f: 75:cb:7b:5f:ec:4a:95:5c:67:cd:32:b0:e6:50:21:69:c7:79: 7c:4d:03:22:35:bf:b3:a2:3d:3b:0a:72:75:15:84:71:4b:84: 2f:e0:98:d9:ae:59:85:d2:30:98:1e:aa:1a:64:a8:54:dd:e0: cf:22:4c:6c:d0:93:3f:1b:7b:88:f5:6e:ee:68:cd:2e:88:77: 2f:72:8b:9b:ab:f4:f4:50:16:f4:70:2c:bf:ce:b8:45:a0:73: 0e:ab:6e:9b:f3:43:1b:2a:2a:5f:61:58:9f:05:78:ac:51:af: cd:2e:83:63:b6:88:b6:75:bf:39:8d:67:cc:e7:de:e1:3a:2e: d7:7b:a5:79:2e:94:eb:53:be:76:7c:2f:88:9d:62:8b:94:37: 5c:84:37:e0:52:f7:29:a9:cb:f4:b9:0b:e3:6f:0a:d7:0e:98: 0b:49:b8:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8X/76H6I8rDnWBIfNoiA/QpOu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNTA3MjAwMjI1NTlaFw0yNTA3MjMwNDA1NTlaMDMxMTAvBgNV BAMTKEY2MTVFRUJGQjU1NzY5QkE3RDEzQTI4MURCM0E4QzIwOTVBQ0VFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYIBoBeOQLL0kNazOcwaonJfFK x6O3RUL0q4UokppcoAdNaShRCMJjMjtr1VrVHhCteHJqb7GRgL7ZPLBeZzjN9Rms c4CG8hm5Pd03zbH0zWLpuWphqpgTPZCMeAIlM5fzZ+/mvU1cg+oCIEl2Dxq8qY8D fiiMS2fXnjQ6gL1TnLE6BUpXFL7FxJzrQqtPuzRcF7Snb6k/qCaTcp3yDRFxC1uI Sk0SXRZcg8uID4j7XXQlTQ5/sUWPL6j9vxCfTxEiIrtsGPOP78p6v5puJWQeonpy eNw10d/664uTOkDv82sLxyU4aXLnImeLOUgZYhj2WIyWSkOOLqMLB+6HXB5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9hXuv7VXabp9E6KB2zqMIJWs7i4wHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmYF+BDBGfD7OebwtNHvGOtNbzvwq4dsK1T vI77BmphlktIFeW2EwOHFPFhCxOHnB3h14Zt/C7vERWqASSVjjd+hCdWdqpwv6SE e78Ao96Op4bPD2roDMnoP3XLe1/sSpVcZ80ysOZQIWnHeXxNAyI1v7OiPTsKcnUV hHFLhC/gmNmuWYXSMJgeqhpkqFTd4M8iTGzQkz8be4j1bu5ozS6Idy9yi5ur9PRQ FvRwLL/OuEWgcw6rbpvzQxsqKl9hWJ8FeKxRr80ug2O2iLZ1vzmNZ8zn3uE6Ltd7 pXkulOtTvnZ8L4idYouUN1yEN+BS9ympy/S5C+NvCtcOmAtJuGA= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:24 2025 by rpki-client