$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft File: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft (raw, json) Hash identifier: ufkwGF7zMNbN+8SVYxWm9wPZg5WD7LrBBoiuL6Xjaxw= Subject key identifier: 60:75:03:6C:27:6F:C3:E4:5D:6F:F0:88:52:20:B7:02:7F:56:BC:6F Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Certificate serial: 0DF8B933E3B5ABDF264F097ABF65E201B25149EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft Manifest number: 9E Signing time: Thu 13 Mar 2025 00:01:49 +0000 Manifest this update: Wed 12 Mar 2025 23:56:49 +0000 Manifest next update: Sun 16 Mar 2025 11:40:49 +0000 Files and hashes: 1: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: xyltXPiPOHbvKePnlpJnsx741KzCQWK/N5bnmbeAlMM=) 2: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl (hash: 7M+M7YigsAdZ/pg7LafL0wHsJxeiwGYAy5l2Xn4UZeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f8:b9:33:e3:b5:ab:df:26:4f:09:7a:bf:65:e2:01:b2:51:49:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Validity Not Before: Mar 12 23:56:49 2025 GMT Not After : Mar 16 11:40:49 2025 GMT Subject: CN=6075036C276FC3E45D6FF0885220B7027F56BC6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:28:cc:b3:3e:bb:49:61:4d:24:ce:d4:3c: 0f:5e:6f:c5:97:d2:a5:04:13:3f:d5:c0:e0:96:fa: d4:fb:a3:45:b2:ab:4c:da:07:43:49:99:ec:a2:bb: 5f:ea:23:c1:7f:5e:a5:ba:18:30:04:ed:b9:2f:d4: 76:0f:39:85:34:8a:0d:8b:fa:32:21:72:72:d8:75: ca:83:52:fa:2e:3d:f6:be:bb:f9:9e:02:cd:f5:cc: 1c:5c:fd:01:53:97:01:c4:6a:68:42:4f:a6:87:9a: 37:5e:13:ab:fc:42:d9:40:66:a5:bb:a2:64:11:30: 88:80:ee:df:20:7e:6a:db:a3:28:af:e4:d3:e2:a4: eb:98:6b:63:3b:21:29:6a:2c:6c:cb:42:8b:5d:0b: 64:60:74:e8:ee:f8:c3:5d:9c:16:54:ee:06:8e:bd: e1:8e:38:1d:45:81:3d:da:b7:a2:ba:3f:c6:73:97: 8a:9a:13:0b:ef:30:dd:49:3c:27:b8:e4:a7:7f:c0: c8:62:98:dd:00:5f:34:a3:f5:ea:4f:4c:37:b0:8a: bf:8f:12:6b:ef:b2:0f:25:96:c5:73:9d:82:f8:2d: 0a:b7:d2:12:ed:6a:dd:0e:3e:81:73:e2:d4:7b:17: 65:ad:08:fa:fb:0b:94:51:1c:46:57:1f:39:ea:b1: 56:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:75:03:6C:27:6F:C3:E4:5D:6F:F0:88:52:20:B7:02:7F:56:BC:6F X509v3 Authority Key Identifier: keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c4:bb:18:43:b9:58:c1:3d:b3:d3:ec:0e:9d:58:e7:75:2e: e8:ab:c9:a3:7b:54:25:ba:a0:ab:de:cf:60:84:79:16:61:6e: 4e:a7:54:31:d2:01:11:24:d0:b3:4f:7d:ff:5c:ef:3f:44:2d: 68:35:5a:f9:bd:15:5e:98:54:54:89:4f:57:e0:12:5e:a5:84: 7e:70:98:e5:4f:af:82:c4:67:72:ff:70:79:6d:23:65:db:de: 55:37:eb:ab:17:bb:68:6b:f7:54:a0:ec:76:32:f8:86:04:12: bd:8b:23:c5:de:a3:f9:ff:8e:c2:1f:32:49:c2:6b:09:cb:6c: 2c:18:cf:6e:2e:75:a0:b0:ad:ab:1a:4b:20:1d:6b:5a:46:18: ac:28:2d:b6:5d:f8:05:85:c7:25:53:91:09:e0:d3:fa:ed:7f: bb:1c:95:06:d6:f9:74:0d:f4:ee:87:fa:1e:25:5d:5e:93:6c: 99:26:b2:bc:76:23:b9:fb:a7:0a:be:94:7a:d2:5f:00:15:57: 20:8c:3f:79:a2:cd:7f:98:d1:03:00:46:29:ad:b1:a7:48:ee: 8a:3f:09:b4:15:92:d3:af:b6:6b:c5:58:ab:bc:25:67:58:7b: 90:72:99:b0:3b:54:0e:67:16:00:97:c0:78:92:3e:71:d9:76: 5a:d0:5a:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfi5M+O1q98mTwl6v2XiAbJRSeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlB QUVCNUQwMzAeFw0yNTAzMTIyMzU2NDlaFw0yNTAzMTYxMTQwNDlaMDMxMTAvBgNV BAMTKDYwNzUwMzZDMjc2RkMzRTQ1RDZGRjA4ODUyMjBCNzAyN0Y1NkJDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWCjMsz67SWFNJM7UPA9eb8WX 0qUEEz/VwOCW+tT7o0Wyq0zaB0NJmeyiu1/qI8F/XqW6GDAE7bkv1HYPOYU0ig2L +jIhcnLYdcqDUvouPfa+u/meAs31zBxc/QFTlwHEamhCT6aHmjdeE6v8QtlAZqW7 omQRMIiA7t8gfmrboyiv5NPipOuYa2M7ISlqLGzLQotdC2RgdOju+MNdnBZU7gaO veGOOB1FgT3at6K6P8Zzl4qaEwvvMN1JPCe45Kd/wMhimN0AXzSj9epPTDewir+P Emvvsg8llsVznYL4LQq30hLtat0OPoFz4tR7F2WtCPr7C5RRHEZXHznqsVbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYHUDbCdvw+Rdb/CIUiC3An9WvG8wHwYDVR0j BBgwFoAURqLmNP/0CuVF7H22eoiBiarrXQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjg4MGRkYi0zZDk0LTRlMzQtOTJkYy00ZDQ1MzhiOTA1YTIvMC80NkEyRTYzNEZG RjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFBRUI1RDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlBQUVC NUQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgx ODlBQUVCNUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnEuxhDuVjBPbPT7A6dWOd1LuiryaN7VCW6 oKvez2CEeRZhbk6nVDHSAREk0LNPff9c7z9ELWg1Wvm9FV6YVFSJT1fgEl6lhH5w mOVPr4LEZ3L/cHltI2Xb3lU366sXu2hr91Sg7HYy+IYEEr2LI8Xeo/n/jsIfMknC awnLbCwYz24udaCwrasaSyAda1pGGKwoLbZd+AWFxyVTkQng0/rtf7sclQbW+XQN 9O6H+h4lXV6TbJkmsrx2I7n7pwq+lHrSXwAVVyCMP3mizX+Y0QMARimtsadI7oo/ CbQVktOvtmvFWKu8JWdYe5BymbA7VA5nFgCXwHiSPnHZdlrQWsQ= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:42 2025 by rpki-client