$ rpki-client -vvf repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft File: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft (raw, json) Hash identifier: XpXnenptZoqBqMpJslif6L/4J5IgaQ95AwOKBJ1bMPo= Subject key identifier: 12:EA:00:65:30:4F:4D:36:03:E5:83:AC:57:C5:48:D1:9B:2F:5C:5B Authority key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 Certificate issuer: /CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Certificate serial: 6A5E8CA2802D3B6A7993FA571B85F099E42EF84F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft Manifest number: A1 Signing time: Sat 07 Jun 2025 01:52:08 +0000 Manifest this update: Sat 07 Jun 2025 01:47:08 +0000 Manifest next update: Tue 10 Jun 2025 10:29:08 +0000 Files and hashes: 1: 3130332e36302e39302e302f32342d3234203d3e20313531353730.roa (hash: YhTpL/afIyHAI7098wyo60hPl3dD1A2rEVVKj7Elh/k=) 2: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl (hash: 5Z9SbMqWtDW3/GvlH5Scj4Xk47qxaGuFUhZaiNlk1d4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 10:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5e:8c:a2:80:2d:3b:6a:79:93:fa:57:1b:85:f0:99:e4:2e:f8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Validity Not Before: Jun 7 01:47:08 2025 GMT Not After : Jun 10 10:29:08 2025 GMT Subject: CN=12EA0065304F4D3603E583AC57C548D19B2F5C5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:90:8b:2e:3e:41:0a:de:74:60:47:21:da: 64:c3:b6:32:c7:a7:1a:9a:83:5b:6c:bb:00:89:30: ab:04:e0:c3:7c:ff:54:30:91:6a:5c:b3:20:13:dc: 95:f2:de:96:5b:db:4a:97:07:ec:07:7a:da:96:ac: c2:78:63:04:03:7b:b1:aa:9b:1c:4b:8a:48:c9:5a: e6:e2:f6:b5:15:04:11:14:c9:eb:c3:fb:7c:a1:cd: 62:b2:31:f4:09:75:2e:71:1f:47:07:07:99:c7:5d: 76:cd:ff:57:7b:d3:63:0f:f7:90:16:cd:0b:ff:51: 6c:e2:94:3a:84:40:95:f3:cd:0a:1f:f3:06:56:3e: f4:6c:be:87:4e:37:03:6a:a6:2e:82:48:00:56:82: 0f:47:7d:45:90:3c:2e:1a:b8:94:7c:79:80:e2:89: 5b:cd:aa:31:3d:dd:86:2b:88:46:4e:38:9f:60:52: 58:c1:28:d0:68:f4:5b:a9:20:92:55:8c:45:e8:f8: 5d:8b:32:a5:54:3e:94:26:58:69:34:25:74:68:2f: a8:e1:5b:c7:b8:3d:6c:fe:f2:13:03:c5:b2:94:f5: 5d:7c:36:77:dc:84:03:84:09:0a:d6:e5:ec:29:da: 01:f0:6c:0a:2a:af:ed:89:b0:4c:37:2a:56:e6:30: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EA:00:65:30:4F:4D:36:03:E5:83:AC:57:C5:48:D1:9B:2F:5C:5B X509v3 Authority Key Identifier: keyid:46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:53:db:4c:1d:16:6b:eb:08:9e:45:b8:8a:fc:b9:fe:1d:d1: 80:b9:f2:03:41:86:a1:27:55:b3:62:b9:cb:8b:0c:d3:c3:2a: 1b:d7:f4:3a:3b:a1:b5:72:79:41:60:31:21:8d:78:5e:d7:cd: db:61:9e:75:54:af:2b:ef:05:9a:92:84:ae:e4:5d:c2:0f:cb: c0:c8:d7:04:13:e0:98:83:95:17:b6:95:3f:1d:1c:19:da:49: 78:26:5b:91:c6:8e:4b:a4:a3:36:f9:42:54:5c:fd:04:4c:c0: d9:c3:b6:1c:19:29:35:89:14:43:f5:ab:6c:6d:c6:f6:8e:b4: 2c:d0:cd:d8:1b:e1:63:b2:4b:c3:b0:10:a9:d4:fc:c9:dc:90: ea:13:85:f9:9f:e4:69:28:94:41:32:69:eb:46:01:0b:35:86: 7b:57:a1:31:53:23:17:8c:b1:a2:ed:97:2a:e1:03:64:ff:d4: 9e:ac:8d:eb:62:b2:e4:8e:3a:c2:5e:43:b9:7b:5d:68:c8:b7: 65:d9:30:d3:97:b4:41:bc:f4:6e:82:8e:e5:e9:7f:cc:83:4e: b8:94:ba:48:29:fe:20:33:af:ed:05:5c:f8:22:1c:d8:6f:94: 60:41:e3:38:c6:b2:da:a5:5f:f8:a1:87:73:a3:2c:07:bc:c3: b8:4e:dd:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUal6MooAtO2p5k/pXG4XwmeQu+E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNG NkM1QUQ5MzAeFw0yNTA2MDcwMTQ3MDhaFw0yNTA2MTAxMDI5MDhaMDMxMTAvBgNV BAMTKDEyRUEwMDY1MzA0RjREMzYwM0U1ODNBQzU3QzU0OEQxOUIyRjVDNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMX5CLLj5BCt50YEch2mTDtjLH pxqag1tsuwCJMKsE4MN8/1QwkWpcsyAT3JXy3pZb20qXB+wHetqWrMJ4YwQDe7Gq mxxLikjJWubi9rUVBBEUyevD+3yhzWKyMfQJdS5xH0cHB5nHXXbN/1d702MP95AW zQv/UWzilDqEQJXzzQof8wZWPvRsvodONwNqpi6CSABWgg9HfUWQPC4auJR8eYDi iVvNqjE93YYriEZOOJ9gUljBKNBo9FupIJJVjEXo+F2LMqVUPpQmWGk0JXRoL6jh W8e4PWz+8hMDxbKU9V18NnfchAOECQrW5ewp2gHwbAoqr+2JsEw3KlbmMAV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEuoAZTBPTTYD5YOsV8VI0ZsvXFswHwYDVR0j BBgwFoAURr99aQfH41cmpBgPC8XxM/bFrZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTQ2NjMyYS1iMmUxLTQyMGEtYTg5NS1jNGExZTIyMTdkYTMvMC80NkJGN0Q2OTA3 QzdFMzU3MjZBNDE4MEYwQkM1RjEzM0Y2QzVBRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNGNkM1 QUQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE0NjYzMmEtYjJlMS00MjBhLWE4 OTUtYzRhMWUyMjE3ZGEzLzAvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYx MzNGNkM1QUQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpT20wdFmvrCJ5FuIr8uf4d0YC58gNBhqEn VbNiucuLDNPDKhvX9Do7obVyeUFgMSGNeF7XzdthnnVUryvvBZqShK7kXcIPy8DI 1wQT4JiDlRe2lT8dHBnaSXgmW5HGjkukozb5QlRc/QRMwNnDthwZKTWJFEP1q2xt xvaOtCzQzdgb4WOyS8OwEKnU/MnckOoThfmf5GkolEEyaetGAQs1hntXoTFTIxeM saLtlyrhA2T/1J6sjetisuSOOsJeQ7l7XWjIt2XZMNOXtEG89G6CjuXpf8yDTriU ukgp/iAzr+0FXPgiHNhvlGBB4zjGstqlX/ihh3OjLAe8w7hO3ck= -----END CERTIFICATE-----Generated at Sat Jun 7 04:42:08 2025 by rpki-client