$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: 5c6uLXgc/gea9yFG3Fp3vV7mU4/ZJrobANebJdXo2O8= Subject key identifier: 19:25:42:BB:A4:21:06:E9:CF:69:58:A9:F8:76:FB:11:98:1B:27:BF Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 65EEFC63342264CB43F545F2ECE346388EC51183 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: 012C Signing time: Fri 12 Sep 2025 13:02:18 +0000 Manifest this update: Fri 12 Sep 2025 12:57:18 +0000 Manifest next update: Mon 15 Sep 2025 15:29:18 +0000 Files and hashes: 1: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: eSDeohW1AIrtqkyx+N42CigZjVYBQYQN7zrX2JowEv8=) 2: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: SHqzeCpVFFipLUbUff29Zhfgvcvo7JSzWCORh31ApkQ=) 3: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: JLabqGnM8+YvvH11bFEaYilBFvdmjlNw60f4ngZNgvw=) 4: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: HFThGBdFjmidhJmHMDXCoS6ycnhZcQfS2zGjsOicK3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 15:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ee:fc:63:34:22:64:cb:43:f5:45:f2:ec:e3:46:38:8e:c5:11:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Sep 12 12:57:18 2025 GMT Not After : Sep 15 15:29:18 2025 GMT Subject: CN=192542BBA42106E9CF6958A9F876FB11981B27BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:7c:6d:55:91:40:d4:e8:1f:80:87:f8:11: 3d:17:64:c4:ce:53:4d:f2:5f:9b:28:b7:23:68:30: 60:be:f0:b6:46:44:20:00:4f:3e:8c:bc:59:54:66: 97:67:52:f9:92:a3:c4:32:d6:ed:eb:5d:40:05:eb: 7a:29:c9:30:b2:a0:7e:55:00:cb:9b:f9:5c:47:ff: 69:49:84:ab:ab:6d:0a:ee:66:3d:f2:bd:8b:1d:9f: 15:88:25:76:45:81:83:e3:41:e4:b6:3e:cc:a9:81: aa:99:40:6d:0f:98:c1:4a:71:4c:40:1d:58:d8:fa: cc:74:f7:8a:55:e1:6d:15:6c:1f:24:a2:f9:24:7a: 5d:b7:eb:a3:5c:c0:40:e6:f6:db:b0:4e:e2:ea:69: 24:b3:1b:e2:3d:59:53:55:93:66:ae:7b:72:22:2c: 98:dc:44:0f:ce:d8:e5:a8:30:f3:f7:92:be:c9:5b: e2:26:83:87:37:d8:99:ae:94:81:66:d9:41:7e:15: a5:14:73:7a:53:02:77:b6:07:fe:7b:db:81:e9:b4: 48:fc:53:5c:6f:87:42:51:13:d0:89:30:a2:be:fe: 6e:37:8c:bd:4f:2f:6a:03:87:7b:29:09:1c:27:11: 6e:c4:86:b8:3e:b8:2c:4c:97:27:95:b7:51:35:62: 70:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:25:42:BB:A4:21:06:E9:CF:69:58:A9:F8:76:FB:11:98:1B:27:BF X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:62:87:3b:2f:a9:06:23:97:8a:67:75:f0:e8:12:30:e2:f4: 8c:d5:2a:86:fb:42:07:cd:51:34:9b:0b:db:5f:c9:a6:01:5e: 66:be:f2:ad:f6:e9:d7:7b:8c:34:e7:10:ae:65:6f:41:41:61: 85:76:87:02:c4:a5:19:c0:09:f1:c4:a0:67:d7:af:90:49:ab: bc:b2:6c:5a:06:ea:0c:83:87:9e:69:72:84:53:0a:d5:ce:4c: c7:29:e9:2d:cf:a8:d2:14:0b:29:c0:9e:5f:32:66:5c:6c:37: fc:ba:5b:ec:c2:9b:28:06:a3:e4:e0:0a:6f:8a:87:a5:76:a2: 73:42:fe:8b:12:98:b9:28:3f:f5:ec:34:e3:1f:df:7a:85:be: 5e:db:6d:16:6b:b3:24:51:be:57:ab:31:11:e2:50:fc:cb:0e: 12:7f:39:ee:2b:3e:64:03:f1:17:8b:d2:8c:90:3a:82:27:84: cc:cc:00:4d:d6:53:cf:b3:44:09:08:51:9d:5c:8b:a3:c5:a3: 80:63:50:96:a6:c1:0f:be:07:4f:9f:e1:0c:55:24:ad:28:1a: ff:d7:da:d7:42:28:89:2a:20:7a:f1:3d:d2:51:3b:ef:d7:9f: 3c:bb:a2:bb:45:6a:37:b0:e1:14:b9:e3:18:1b:74:c8:8b:6e: c5:dc:d0:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZe78YzQiZMtD9UXy7ONGOI7FEYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTA5MTIxMjU3MThaFw0yNTA5MTUxNTI5MThaMDMxMTAvBgNV BAMTKDE5MjU0MkJCQTQyMTA2RTlDRjY5NThBOUY4NzZGQjExOTgxQjI3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qnxtVZFA1OgfgIf4ET0XZMTO U03yX5sotyNoMGC+8LZGRCAATz6MvFlUZpdnUvmSo8Qy1u3rXUAF63opyTCyoH5V AMub+VxH/2lJhKurbQruZj3yvYsdnxWIJXZFgYPjQeS2PsypgaqZQG0PmMFKcUxA HVjY+sx094pV4W0VbB8kovkkel2366NcwEDm9tuwTuLqaSSzG+I9WVNVk2aue3Ii LJjcRA/O2OWoMPP3kr7JW+Img4c32JmulIFm2UF+FaUUc3pTAne2B/5724HptEj8 U1xvh0JRE9CJMKK+/m43jL1PL2oDh3spCRwnEW7Ehrg+uCxMlyeVt1E1YnD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGSVCu6QhBunPaVip+Hb7EZgbJ78wHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApihzsvqQYjl4pndfDoEjDi9IzVKob7QgfN UTSbC9tfyaYBXma+8q326dd7jDTnEK5lb0FBYYV2hwLEpRnACfHEoGfXr5BJq7yy bFoG6gyDh55pcoRTCtXOTMcp6S3PqNIUCynAnl8yZlxsN/y6W+zCmygGo+TgCm+K h6V2onNC/osSmLkoP/XsNOMf33qFvl7bbRZrsyRRvlerMRHiUPzLDhJ/Oe4rPmQD 8ReL0oyQOoInhMzMAE3WU8+zRAkIUZ1ci6PFo4BjUJamwQ++B0+f4QxVJK0oGv/X 2tdCKIkqIHrxPdJRO+/Xnzy7ortFajew4RS54xgbdMiLbsXc0D4= -----END CERTIFICATE-----Generated at Sat Sep 13 21:24:19 2025 by rpki-client