$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: SQVtwHyDH7+6x1vS9RLRXrJGU9wUzsEV6Br1tnArwJc= Subject key identifier: 75:FA:EB:86:75:C1:78:06:23:7F:14:85:89:30:34:DC:E3:8A:9D:69 Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 332CE34B7DE1752FC64E8CFDA4B5858B2D12382B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 033F Signing time: Mon 02 Jun 2025 11:51:50 +0000 Manifest this update: Mon 02 Jun 2025 11:46:50 +0000 Manifest next update: Thu 05 Jun 2025 19:23:50 +0000 Files and hashes: 1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: gbIzzwqlMGLaeJPQxrpQgYA+aIJTE100afCuCRdhTO4=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 19:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2c:e3:4b:7d:e1:75:2f:c6:4e:8c:fd:a4:b5:85:8b:2d:12:38:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Jun 2 11:46:50 2025 GMT Not After : Jun 5 19:23:50 2025 GMT Subject: CN=75FAEB8675C17806237F1485893034DCE38A9D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:84:7d:39:81:ea:b9:6f:e6:49:81:a0:a5: c7:77:1d:68:81:12:59:a3:6a:a3:ad:84:5b:4b:49: 50:b6:cf:16:e7:eb:f6:99:cf:6e:d4:c5:fb:bc:67: da:44:63:31:7b:66:76:27:87:46:b7:32:fc:b6:12: 04:4f:3b:5f:2a:d8:82:e2:b9:34:78:29:f1:f9:63: 1c:dd:4a:a7:80:56:9b:dc:50:1d:c1:5e:09:ac:fb: a6:97:4a:15:98:93:a5:bd:bb:63:d7:dd:eb:dd:89: 54:16:0c:7e:db:15:45:67:71:db:7e:dc:1f:b2:92: f6:1b:fa:50:4b:ce:1e:ae:ae:4f:ff:2c:c6:46:4c: 3e:52:c8:b5:83:53:72:e5:04:c2:1d:3b:eb:dd:11: 61:36:c1:be:98:02:6d:2c:da:98:d0:a2:48:c8:35: 6f:a2:12:d1:fa:76:a4:f0:91:93:0c:e9:f9:63:05: 0f:39:70:82:a5:d6:2a:50:b5:af:5c:ea:c4:94:81: ab:68:2b:25:a9:3a:2a:33:5b:60:54:33:33:6a:96: f4:7d:80:fd:14:5d:78:33:cd:94:47:83:54:c4:f8: 9f:d2:f0:59:de:d8:ac:52:cc:ae:24:84:79:f7:5b: a0:20:87:b4:83:10:32:0e:0d:c1:c6:38:89:81:9c: fa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FA:EB:86:75:C1:78:06:23:7F:14:85:89:30:34:DC:E3:8A:9D:69 X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:40:bd:b4:8e:4d:e2:5a:e6:5e:5c:22:40:09:ca:e4:14:51: 50:a4:6d:41:79:9c:2b:35:b3:57:e6:a7:b4:69:b3:0d:ae:ad: b6:dc:0d:ac:e2:13:9f:23:23:b1:31:64:43:6f:7d:15:6b:72: 4e:3a:06:fb:9b:c7:92:e3:8e:d2:9c:48:80:dc:a5:3e:68:70: 15:68:c2:21:aa:dc:be:e4:cb:0e:95:7f:dc:56:6a:97:1e:69: 94:7b:f4:36:1d:7e:ff:40:b9:2c:63:8a:e8:3f:5b:9e:68:3f: 5e:f1:52:c7:79:e3:73:70:3e:b5:dc:a1:a2:38:78:8b:e1:10: 72:cc:dd:84:1d:c5:88:98:e4:56:a1:bf:75:e4:eb:80:73:92: 5e:c5:00:6d:74:ba:f9:e9:4a:46:a5:1f:8f:7a:50:26:93:4f: 39:9c:67:29:ab:34:dd:7c:de:66:b5:90:f5:20:4f:04:aa:3c: ba:70:40:df:26:ed:88:ec:41:d5:e3:63:8d:bd:5a:dc:4b:6c: ca:30:0e:ed:2b:14:d7:31:17:19:a0:5f:e5:bb:45:5d:03:fc: 69:f4:8a:ea:c4:d2:26:5e:32:c5:77:e3:a7:96:8c:66:32:cd: 8d:71:30:79:f9:bc:bb:81:5c:b8:4a:40:39:60:0c:4f:59:b8: 14:05:de:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyzjS33hdS/GToz9pLWFiy0SOCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTA2MDIxMTQ2NTBaFw0yNTA2MDUxOTIzNTBaMDMxMTAvBgNV BAMTKDc1RkFFQjg2NzVDMTc4MDYyMzdGMTQ4NTg5MzAzNERDRTM4QTlENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23IR9OYHquW/mSYGgpcd3HWiB ElmjaqOthFtLSVC2zxbn6/aZz27Uxfu8Z9pEYzF7ZnYnh0a3Mvy2EgRPO18q2ILi uTR4KfH5YxzdSqeAVpvcUB3BXgms+6aXShWYk6W9u2PX3evdiVQWDH7bFUVncdt+ 3B+ykvYb+lBLzh6urk//LMZGTD5SyLWDU3LlBMIdO+vdEWE2wb6YAm0s2pjQokjI NW+iEtH6dqTwkZMM6fljBQ85cIKl1ipQta9c6sSUgatoKyWpOiozW2BUMzNqlvR9 gP0UXXgzzZRHg1TE+J/S8Fne2KxSzK4khHn3W6Agh7SDEDIODcHGOImBnPqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdfrrhnXBeAYjfxSFiTA03OOKnWkwHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9AvbSOTeJa5l5cIkAJyuQUUVCkbUF5nCs1 s1fmp7Rpsw2urbbcDaziE58jI7ExZENvfRVrck46Bvubx5LjjtKcSIDcpT5ocBVo wiGq3L7kyw6Vf9xWapceaZR79DYdfv9AuSxjiug/W55oP17xUsd543NwPrXcoaI4 eIvhEHLM3YQdxYiY5Fahv3Xk64Bzkl7FAG10uvnpSkalH496UCaTTzmcZymrNN18 3ma1kPUgTwSqPLpwQN8m7YjsQdXjY429WtxLbMowDu0rFNcxFxmgX+W7RV0D/Gn0 iurE0iZeMsV346eWjGYyzY1xMHn5vLuBXLhKQDlgDE9ZuBQF3ko= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:33 2025 by rpki-client