$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft File: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft (raw, json) Hash identifier: x2GAxu7PPW/37zsoU/VBgSK/Y2e0xB2Uxpe+v3wbxnk= Subject key identifier: E4:5B:4B:C6:45:B4:BB:DF:41:4B:1A:D0:73:0E:AA:64:13:CD:CF:56 Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Certificate serial: 39979E68FF3DBC1FBF4B300F283454A1659039A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft Manifest number: AD Signing time: Wed 16 Apr 2025 02:41:50 +0000 Manifest this update: Wed 16 Apr 2025 02:36:50 +0000 Manifest next update: Sat 19 Apr 2025 04:49:50 +0000 Files and hashes: 1: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl (hash: erKnbyyq+l8C1hw3XSxxF4kwwHoeO5rTKuAv4C7aLYg=) 2: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: xyltXPiPOHbvKePnlpJnsx741KzCQWK/N5bnmbeAlMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 04:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:97:9e:68:ff:3d:bc:1f:bf:4b:30:0f:28:34:54:a1:65:90:39:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Validity Not Before: Apr 16 02:36:50 2025 GMT Not After : Apr 19 04:49:50 2025 GMT Subject: CN=E45B4BC645B4BBDF414B1AD0730EAA6413CDCF56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:e5:c7:34:b5:d8:21:65:e8:d1:5a:b7:08: 10:50:a9:fb:c3:72:e2:9f:1a:b4:57:92:76:ac:77: 59:18:c4:9a:8d:ca:62:49:ff:6e:6d:db:a8:3c:68: ee:38:c0:b4:98:0f:c3:4b:e7:b1:f6:47:b8:98:16: 45:5c:22:cc:74:fd:d5:e3:f0:d0:ea:6b:80:d2:ad: 91:a4:d2:71:17:34:25:0d:0b:20:83:5a:b7:a1:0f: bc:fd:cc:43:6d:1e:1c:51:12:91:4f:cc:dc:ff:12: 48:51:8e:a4:08:bb:ec:3a:ff:74:3c:d9:68:46:65: cc:3a:f2:df:4c:85:5d:15:24:78:c4:f0:d6:13:30: db:0c:54:89:fc:82:61:29:0f:a3:8e:c1:70:81:fa: dd:ec:d2:0b:45:5f:f8:fd:12:cc:a4:5c:0c:b9:9e: 9b:07:af:3a:df:20:81:10:62:16:76:e5:22:a8:ea: 7e:be:0c:9c:45:cf:db:0e:9a:35:89:9b:3f:52:6c: 42:85:b1:7b:3c:5f:8b:fc:0a:08:ba:8a:ed:4c:0e: 72:c1:2d:e5:00:0a:a2:37:8c:52:9c:b0:50:43:83: b3:52:46:a3:ae:a5:b3:b0:23:6f:78:6b:44:f9:11: 83:80:c2:00:24:4d:00:85:9b:a4:1d:e7:48:fe:6d: f8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5B:4B:C6:45:B4:BB:DF:41:4B:1A:D0:73:0E:AA:64:13:CD:CF:56 X509v3 Authority Key Identifier: keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bd:67:aa:47:25:9c:62:22:af:d1:be:f1:48:c7:3a:d3:eb: fb:87:23:f5:57:57:05:2d:27:f5:f2:69:55:ab:a9:2b:b2:cc: 87:2b:ec:b4:fa:bd:e5:da:b8:d1:99:f9:c4:13:51:32:6c:3b: da:3a:0e:f3:b2:86:68:af:4d:99:4e:62:21:bd:31:4e:db:25: 84:74:98:b5:e3:b8:b5:e1:b3:b4:05:bf:02:ea:e8:36:71:e6: 9f:a2:e5:e8:0c:b9:4d:2b:10:9e:be:a8:0f:d8:b0:50:93:7c: 12:97:15:38:08:8a:96:3e:e0:81:34:78:f3:64:3a:d2:af:69: 7b:2e:3d:d1:39:2b:e0:32:95:aa:c8:26:94:2e:e2:07:de:03: 41:89:84:e7:a7:8f:63:14:ce:0b:5b:9c:aa:f0:52:2a:9f:d4: 8a:bf:b9:af:f0:92:0d:34:52:d0:4d:22:92:52:01:cc:a9:f2: 07:07:1d:6c:b6:43:f7:04:a6:1b:c8:d5:07:b6:29:d8:18:4c: 2b:71:e3:0a:e6:f4:5a:62:12:48:db:fe:30:10:1b:cb:00:bb: df:d2:97:5b:4f:34:e0:a1:df:22:05:94:54:45:30:9a:99:02: 9b:32:8f:23:fc:9d:bb:20:cb:7f:f2:05:5c:86:8e:42:d0:f2: 92:60:c7:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZeeaP89vB+/SzAPKDRUoWWQOaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlB QUVCNUQwMzAeFw0yNTA0MTYwMjM2NTBaFw0yNTA0MTkwNDQ5NTBaMDMxMTAvBgNV BAMTKEU0NUI0QkM2NDVCNEJCREY0MTRCMUFEMDczMEVBQTY0MTNDRENGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeSeXHNLXYIWXo0Vq3CBBQqfvD cuKfGrRXknasd1kYxJqNymJJ/25t26g8aO44wLSYD8NL57H2R7iYFkVcIsx0/dXj 8NDqa4DSrZGk0nEXNCUNCyCDWrehD7z9zENtHhxREpFPzNz/EkhRjqQIu+w6/3Q8 2WhGZcw68t9MhV0VJHjE8NYTMNsMVIn8gmEpD6OOwXCB+t3s0gtFX/j9EsykXAy5 npsHrzrfIIEQYhZ25SKo6n6+DJxFz9sOmjWJmz9SbEKFsXs8X4v8Cgi6iu1MDnLB LeUACqI3jFKcsFBDg7NSRqOupbOwI294a0T5EYOAwgAkTQCFm6Qd50j+bfg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5FtLxkW0u99BSxrQcw6qZBPNz1YwHwYDVR0j BBgwFoAURqLmNP/0CuVF7H22eoiBiarrXQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjg4MGRkYi0zZDk0LTRlMzQtOTJkYy00ZDQ1MzhiOTA1YTIvMC80NkEyRTYzNEZG RjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFBRUI1RDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlBQUVC NUQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgx ODlBQUVCNUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa9Z6pHJZxiIq/RvvFIxzrT6/uHI/VXVwUt J/XyaVWrqSuyzIcr7LT6veXauNGZ+cQTUTJsO9o6DvOyhmivTZlOYiG9MU7bJYR0 mLXjuLXhs7QFvwLq6DZx5p+i5egMuU0rEJ6+qA/YsFCTfBKXFTgIipY+4IE0ePNk OtKvaXsuPdE5K+AylarIJpQu4gfeA0GJhOenj2MUzgtbnKrwUiqf1Iq/ua/wkg00 UtBNIpJSAcyp8gcHHWy2Q/cEphvI1Qe2KdgYTCtx4wrm9FpiEkjb/jAQG8sAu9/S l1tPNOCh3yIFlFRFMJqZApsyjyP8nbsgy3/yBVyGjkLQ8pJgx+A= -----END CERTIFICATE-----Generated at Thu Apr 17 23:35:14 2025 by rpki-client