$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: Zv3B/d9bBMYStr5fBAIEpAlNQb1hfIohM6sf/wfuD5w= Subject key identifier: 5B:B1:CC:26:3D:08:0D:75:3D:30:75:D5:C5:1D:C0:E5:C7:BF:1C:24 Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 2FD3DBAAA70B4A25F890968E72A6BA1EBE91F563 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: 0109 Signing time: Tue 22 Jul 2025 19:50:49 +0000 Manifest this update: Tue 22 Jul 2025 19:45:49 +0000 Manifest next update: Sat 26 Jul 2025 05:44:49 +0000 Files and hashes: 1: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: CWusehBvGZNNsn+dCS0FYwQ7Kf8Tf3bC6vxVNPY/Fm8=) 2: 3130332e3231332e3233342e302f32332d3233203d3e20313531303033.roa (hash: 3HptcgwF9kr6TssFN64cDAiN6icULJSRQhu/pYKZbEU=) 3: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: gPVdaAaY2TfjTPpZqFqLJaE7V9PbvT7MT9rn8eG/uBg=) 4: 3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (hash: 98fawBN8lcuV1BpV1P5Bi+MmBkZ4ZywKpxF8wCR2MbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d3:db:aa:a7:0b:4a:25:f8:90:96:8e:72:a6:ba:1e:be:91:f5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Jul 22 19:45:49 2025 GMT Not After : Jul 26 05:44:49 2025 GMT Subject: CN=5BB1CC263D080D753D3075D5C51DC0E5C7BF1C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:0e:a1:6c:27:4b:b8:cd:6d:83:19:58:83: ba:53:e0:67:1b:7d:b4:b4:b0:52:5f:29:d0:94:e4: 85:7b:65:d9:ed:ea:15:77:f6:27:11:21:50:b2:92: 16:9b:f5:ff:f0:a5:9f:e7:96:0b:eb:23:74:cb:66: b1:15:f5:47:c7:ca:8c:60:bd:52:65:a5:5b:36:d7: 29:a5:28:a4:b7:09:ab:3e:fb:2a:f3:18:43:8e:57: 44:63:8a:0a:3d:34:c4:4c:14:a6:0f:af:31:20:93: e1:70:de:01:51:72:ed:68:8c:b1:f4:91:2a:8b:06: ba:d8:68:b3:1b:08:9a:3a:43:b7:0a:53:3e:32:e2: cf:1f:25:53:4a:50:a7:12:e9:1d:f4:9b:06:af:00: 32:56:9f:a5:ee:67:7b:82:63:6a:d9:6a:4b:b9:18: 73:9c:57:ba:37:a7:d2:ba:0d:d5:f4:a7:90:8b:ba: 4c:20:0b:e2:39:1e:f1:d6:a9:21:7c:b6:fa:ca:6d: cf:71:1c:4f:ec:a2:7d:c3:53:e3:a5:0e:b9:18:47: 31:17:ac:4c:ac:53:2a:86:85:e3:0f:1f:08:f8:89: e4:10:3a:4c:e8:e0:94:b2:6d:7a:83:08:97:d1:00: 40:7b:8d:98:5d:56:3f:8e:74:aa:5d:51:51:d4:7c: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B1:CC:26:3D:08:0D:75:3D:30:75:D5:C5:1D:C0:E5:C7:BF:1C:24 X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:89:43:14:e7:17:f0:83:78:5c:0f:90:8b:cb:61:ef:89:4f: 86:59:bd:2f:eb:e7:75:07:5c:5b:4d:92:a0:33:e1:89:12:d0: 45:e9:94:aa:5a:b4:74:71:06:d6:f3:63:ac:57:19:a4:33:b8: d3:c4:b1:ca:72:23:bd:80:47:9f:d2:54:29:cf:a5:f9:76:02: 8a:cd:27:87:7c:14:bf:ee:5a:1c:ae:71:c5:00:27:3a:ae:1a: 72:f1:da:8f:af:aa:0b:8a:72:25:3b:d4:71:66:54:74:66:5a: e2:45:77:37:51:64:3b:f4:1b:46:61:b5:c9:cc:be:ea:6c:2d: f9:c0:bc:5f:98:15:41:40:69:6f:5f:4f:23:97:99:9d:d4:b1: be:d9:7e:90:1f:01:41:e9:e9:47:4b:50:24:d0:4c:81:02:6f: b3:7c:31:3e:fd:50:63:54:e8:2e:6d:2c:be:d4:c7:8f:b3:4a: a7:3d:3f:20:c6:1f:9c:cf:e2:0c:61:48:5f:12:4b:44:06:36: 52:e4:a3:49:c2:22:a1:ec:07:f3:16:a5:11:d0:67:8b:36:7c: 18:84:25:50:53:f3:03:80:ac:f6:11:1e:22:e5:77:81:ad:f7: 8a:ee:5c:81:78:e7:04:ba:22:78:b9:c5:29:5e:c7:bd:92:13: 2a:8e:8c:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL9PbqqcLSiX4kJaOcqa6Hr6R9WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNTA3MjIxOTQ1NDlaFw0yNTA3MjYwNTQ0NDlaMDMxMTAvBgNV BAMTKDVCQjFDQzI2M0QwODBENzUzRDMwNzVENUM1MURDMEU1QzdCRjFDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpcQ6hbCdLuM1tgxlYg7pT4Gcb fbS0sFJfKdCU5IV7Zdnt6hV39icRIVCykhab9f/wpZ/nlgvrI3TLZrEV9UfHyoxg vVJlpVs21ymlKKS3Cas++yrzGEOOV0Rjigo9NMRMFKYPrzEgk+Fw3gFRcu1ojLH0 kSqLBrrYaLMbCJo6Q7cKUz4y4s8fJVNKUKcS6R30mwavADJWn6XuZ3uCY2rZaku5 GHOcV7o3p9K6DdX0p5CLukwgC+I5HvHWqSF8tvrKbc9xHE/son3DU+OlDrkYRzEX rEysUyqGheMPHwj4ieQQOkzo4JSybXqDCJfRAEB7jZhdVj+OdKpdUVHUfNMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW7HMJj0IDXU9MHXVxR3A5ce/HCQwHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2JQxTnF/CDeFwPkIvLYe+JT4ZZvS/r53UH XFtNkqAz4YkS0EXplKpatHRxBtbzY6xXGaQzuNPEscpyI72AR5/SVCnPpfl2AorN J4d8FL/uWhyuccUAJzquGnLx2o+vqguKciU71HFmVHRmWuJFdzdRZDv0G0ZhtcnM vupsLfnAvF+YFUFAaW9fTyOXmZ3Usb7ZfpAfAUHp6UdLUCTQTIECb7N8MT79UGNU 6C5tLL7Ux4+zSqc9PyDGH5zP4gxhSF8SS0QGNlLko0nCIqHsB/MWpRHQZ4s2fBiE JVBT8wOArPYRHiLld4Gt94ruXIF45wS6Ini5xSlex72SEyqOjKc= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:14 2025 by rpki-client