$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: f+kDs1xf6N1DKRE+hrRzDtrBj+xF8TIX167mtA7+fwA= Subject key identifier: C4:EA:60:EE:3D:33:88:4D:59:9A:E2:05:57:17:D9:8D:5C:FC:23:3D Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 53950FB0AFAD532191663E702546C3EEFF012B63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 036A Signing time: Fri 05 Sep 2025 05:11:52 +0000 Manifest this update: Fri 05 Sep 2025 05:06:52 +0000 Manifest next update: Mon 08 Sep 2025 07:24:52 +0000 Files and hashes: 1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: 44a9+5eSpumDChXnTK8Urf00E+1akkQpGzKVFel2fFs=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:95:0f:b0:af:ad:53:21:91:66:3e:70:25:46:c3:ee:ff:01:2b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Sep 5 05:06:52 2025 GMT Not After : Sep 8 07:24:52 2025 GMT Subject: CN=C4EA60EE3D33884D599AE2055717D98D5CFC233D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:df:15:8f:18:8b:39:27:bb:b9:7a:53:18: da:84:19:81:89:af:7c:e0:45:15:60:92:df:c1:24: fb:02:e3:3c:b8:2a:4d:fd:01:5b:72:54:aa:9e:d8: 2f:33:47:73:f5:53:40:a1:28:b7:71:2a:dc:3d:23: 93:50:44:ba:3c:07:c1:31:06:6e:3d:d8:90:3c:24: fa:c6:1d:7a:8f:44:d9:65:61:0f:7d:2e:57:55:0d: f9:bf:e3:e5:bd:62:e8:98:3d:d8:6f:71:97:e8:16: d1:e4:33:42:87:3a:b1:3a:fa:ba:85:6c:fb:15:f3: 22:5a:cf:0b:85:31:3f:9a:93:8e:01:f2:a9:0b:ca: 9e:7d:93:1c:20:3a:51:a6:a8:9e:99:41:ea:da:6c: 21:37:d9:8f:07:aa:86:ca:3d:1d:c7:16:1d:fd:38: 32:20:2f:fd:96:b6:9f:10:cd:bb:5d:c2:4c:84:28: be:e0:bb:17:60:94:1a:6d:97:6b:1f:5e:95:05:ac: 75:35:24:e5:9f:d7:5b:b8:e8:af:4c:ab:04:29:83: 74:92:91:d5:73:63:28:6b:13:ab:e4:53:21:c6:0d: f9:14:77:f2:0b:4b:6d:ae:21:1f:34:81:3b:18:33: 88:a0:94:71:7e:71:fe:bb:e5:c5:3f:da:c2:6b:33: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EA:60:EE:3D:33:88:4D:59:9A:E2:05:57:17:D9:8D:5C:FC:23:3D X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8b:4d:93:7f:48:d7:c4:54:a7:0d:67:36:05:62:49:e6:16: 28:b2:9b:19:73:e6:37:6e:09:df:92:f1:5e:be:5f:48:d1:c7: d9:83:f1:ae:b9:9e:b7:30:3b:6f:ca:04:3a:52:45:14:a2:f5: 28:45:46:3e:57:cc:10:ca:1b:f2:32:95:cd:f5:73:d7:37:e8: 51:74:37:75:87:08:0f:a7:c6:24:f1:db:ac:01:70:73:73:31: 5f:7b:f0:cc:ef:49:9b:a0:66:fa:6c:32:cd:8c:5b:56:64:73: 6f:d0:a9:bc:71:d6:1c:23:7f:7b:e8:56:56:b7:dc:d7:64:c7: 89:6f:94:c7:ee:57:82:9c:d5:69:9b:c1:dd:9d:a9:e9:67:03: 84:7d:32:d5:40:77:d9:11:df:e7:ee:e8:a0:24:18:47:71:9d: 60:64:70:e8:76:61:a9:40:19:2a:df:e7:d1:20:11:c2:a5:89: bf:c9:2a:da:da:e5:84:47:8c:0e:e1:47:4a:c8:c9:53:ed:fc: 49:ad:7a:b4:d4:1f:08:a4:6a:27:69:a7:2d:95:57:f2:46:de: 27:51:26:68:c0:1d:15:80:98:bb:85:dd:55:40:8f:09:ce:9f: 26:86:ce:38:8e:22:b4:1f:06:a9:31:11:b0:f5:29:6c:ef:5a: 46:c3:1c:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5UPsK+tUyGRZj5wJUbD7v8BK2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTA5MDUwNTA2NTJaFw0yNTA5MDgwNzI0NTJaMDMxMTAvBgNV BAMTKEM0RUE2MEVFM0QzMzg4NEQ1OTlBRTIwNTU3MTdEOThENUNGQzIzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4d98VjxiLOSe7uXpTGNqEGYGJ r3zgRRVgkt/BJPsC4zy4Kk39AVtyVKqe2C8zR3P1U0ChKLdxKtw9I5NQRLo8B8Ex Bm492JA8JPrGHXqPRNllYQ99LldVDfm/4+W9YuiYPdhvcZfoFtHkM0KHOrE6+rqF bPsV8yJazwuFMT+ak44B8qkLyp59kxwgOlGmqJ6ZQerabCE32Y8HqobKPR3HFh39 ODIgL/2Wtp8QzbtdwkyEKL7guxdglBptl2sfXpUFrHU1JOWf11u46K9MqwQpg3SS kdVzYyhrE6vkUyHGDfkUd/ILS22uIR80gTsYM4iglHF+cf675cU/2sJrM8XfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxOpg7j0ziE1ZmuIFVxfZjVz8Iz0wHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyLTZN/SNfEVKcNZzYFYknmFiiymxlz5jdu Cd+S8V6+X0jRx9mD8a65nrcwO2/KBDpSRRSi9ShFRj5XzBDKG/Iylc31c9c36FF0 N3WHCA+nxiTx26wBcHNzMV978MzvSZugZvpsMs2MW1Zkc2/Qqbxx1hwjf3voVla3 3Ndkx4lvlMfuV4Kc1Wmbwd2dqelnA4R9MtVAd9kR3+fu6KAkGEdxnWBkcOh2YalA GSrf59EgEcKlib/JKtra5YRHjA7hR0rIyVPt/EmterTUHwikaidppy2VV/JG3idR JmjAHRWAmLuF3VVAjwnOnyaGzjiOIrQfBqkxEbD1KWzvWkbDHOM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:20 2025 by rpki-client