$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft File: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft (raw, json) Hash identifier: od850glUZhLch6jqevV0iqiTgVOEJJ1bKYQ7IuXafpA= Subject key identifier: B5:45:59:45:58:9C:B9:21:A3:79:69:27:D4:82:F3:61:B4:2E:21:F4 Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Certificate serial: 743BA4507CB01B22DA36684C77BAC4C891CB75C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft Manifest number: EA Signing time: Sat 30 Aug 2025 08:01:56 +0000 Manifest this update: Sat 30 Aug 2025 07:56:56 +0000 Manifest next update: Tue 02 Sep 2025 13:45:56 +0000 Files and hashes: 1: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: xyltXPiPOHbvKePnlpJnsx741KzCQWK/N5bnmbeAlMM=) 2: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl (hash: 6tcHFvZLKGUnl7fsx7JLooCzJs6ZGYfw4iHCjXLHP0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3b:a4:50:7c:b0:1b:22:da:36:68:4c:77:ba:c4:c8:91:cb:75:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Validity Not Before: Aug 30 07:56:56 2025 GMT Not After : Sep 2 13:45:56 2025 GMT Subject: CN=B5455945589CB921A3796927D482F361B42E21F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:23:9b:6d:64:d4:54:32:2a:c1:64:b5:24:22: 87:58:a6:f9:56:26:47:b0:54:d6:20:a3:6b:25:07: 68:e9:85:ff:9c:29:13:75:91:b3:16:56:88:81:a4: 7a:87:af:27:c3:75:d0:73:fe:3a:fd:b0:f0:aa:87: de:6b:c4:df:99:10:86:52:a6:d1:1e:0e:3e:05:e0: 46:05:7d:d4:af:8c:12:36:30:ee:86:78:58:55:ab: 3f:aa:7d:0d:05:0d:87:dc:a3:50:5e:77:fd:6e:f1: 14:56:86:c8:a8:18:96:f9:2b:fa:17:c9:4a:6b:02: 90:3e:a4:2c:a7:72:3b:0e:0f:b1:ff:bf:9b:46:fc: 31:4c:3f:12:56:33:74:77:60:20:43:7f:b3:ad:d6: c1:f5:77:ce:af:46:45:7a:3c:51:48:8a:4d:46:0c: 0d:bd:fb:e5:7e:86:07:02:07:bf:b1:71:06:39:60: 4a:0c:5e:e0:27:73:9b:16:9b:d4:7f:56:21:6f:e1: 58:90:6a:95:09:1a:ad:56:b0:c4:b3:75:c1:12:77: 37:e4:a3:93:9d:0b:70:14:1c:03:a2:87:82:5b:52: b4:7f:42:c7:ec:ee:c7:62:0b:4e:1d:e4:b8:de:c8: be:11:d2:01:05:ef:0e:b6:b4:34:3b:5c:29:79:bb: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:45:59:45:58:9C:B9:21:A3:79:69:27:D4:82:F3:61:B4:2E:21:F4 X509v3 Authority Key Identifier: keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6d:e1:86:d9:70:4d:e8:a1:34:f7:21:b0:fc:f4:64:6d:6d: ed:d2:51:14:4f:f5:66:a9:c6:0a:29:06:3e:cd:22:f3:a6:1f: 88:63:71:a3:18:cf:6d:96:2a:08:c3:fc:fd:8f:41:27:fe:7f: 43:74:fb:2c:04:40:8b:e8:9b:1e:4a:ee:30:78:90:71:1c:19: ca:cf:5c:1c:3e:2b:a9:c8:5e:92:cc:08:65:0c:23:45:f3:fa: cb:60:fd:26:8e:2a:50:fb:5d:96:9f:75:ad:4c:6d:8a:ca:b1: 32:66:5a:b9:77:b4:56:b4:61:f9:c4:c5:99:1e:00:43:e2:61: 67:30:7b:55:b7:8e:35:09:5d:fd:59:02:bf:86:50:70:47:78: 7b:30:6c:c5:6a:75:ee:d6:5f:64:0f:53:6f:70:4f:22:4c:e5: a9:23:cc:9c:d1:36:e3:38:01:4a:67:4a:76:04:2b:23:35:2f: b5:e0:8a:95:62:b5:1d:9b:21:c1:e8:dc:fc:19:1e:db:05:0b: 46:06:65:af:66:04:ab:2f:ae:04:8f:c5:8c:9b:88:1a:44:f7: ed:b2:7d:23:93:a1:c5:25:d4:61:3f:9b:6c:9b:e8:e4:b7:92: d4:39:3f:50:35:f0:c5:0d:6a:6f:74:68:1b:1f:1e:13:b7:16: c2:81:77:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDukUHywGyLaNmhMd7rEyJHLdcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlB QUVCNUQwMzAeFw0yNTA4MzAwNzU2NTZaFw0yNTA5MDIxMzQ1NTZaMDMxMTAvBgNV BAMTKEI1NDU1OTQ1NTg5Q0I5MjFBMzc5NjkyN0Q0ODJGMzYxQjQyRTIxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvI5ttZNRUMirBZLUkIodYpvlW JkewVNYgo2slB2jphf+cKRN1kbMWVoiBpHqHryfDddBz/jr9sPCqh95rxN+ZEIZS ptEeDj4F4EYFfdSvjBI2MO6GeFhVqz+qfQ0FDYfco1Bed/1u8RRWhsioGJb5K/oX yUprApA+pCyncjsOD7H/v5tG/DFMPxJWM3R3YCBDf7Ot1sH1d86vRkV6PFFIik1G DA29++V+hgcCB7+xcQY5YEoMXuAnc5sWm9R/ViFv4ViQapUJGq1WsMSzdcESdzfk o5OdC3AUHAOih4JbUrR/Qsfs7sdiC04d5LjeyL4R0gEF7w62tDQ7XCl5u4NZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtUVZRVicuSGjeWkn1ILzYbQuIfQwHwYDVR0j BBgwFoAURqLmNP/0CuVF7H22eoiBiarrXQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjg4MGRkYi0zZDk0LTRlMzQtOTJkYy00ZDQ1MzhiOTA1YTIvMC80NkEyRTYzNEZG RjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFBRUI1RDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlBQUVC NUQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgx ODlBQUVCNUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVt4YbZcE3ooTT3IbD89GRtbe3SURRP9Wap xgopBj7NIvOmH4hjcaMYz22WKgjD/P2PQSf+f0N0+ywEQIvomx5K7jB4kHEcGcrP XBw+K6nIXpLMCGUMI0Xz+stg/SaOKlD7XZafda1MbYrKsTJmWrl3tFa0YfnExZke AEPiYWcwe1W3jjUJXf1ZAr+GUHBHeHswbMVqde7WX2QPU29wTyJM5akjzJzRNuM4 AUpnSnYEKyM1L7XgipVitR2bIcHo3PwZHtsFC0YGZa9mBKsvrgSPxYybiBpE9+2y fSOTocUl1GE/m2yb6OS3ktQ5P1A18MUNam90aBsfHhO3FsKBdwg= -----END CERTIFICATE-----Generated at Sun Aug 31 09:49:14 2025 by rpki-client