$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json) Hash identifier: B71k1Xt1rCj/NtEizjfd4JNhqvpHV8wW6OZuw0lRys8= Subject key identifier: CA:F3:11:DC:4A:B3:15:54:A2:53:23:D0:04:C8:EE:46:6C:31:B2:B1 Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Certificate serial: 13E9B64CBC5551F1EB83784CD0985321C1F32A4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft Manifest number: 01C3 Signing time: Wed 03 Sep 2025 11:41:35 +0000 Manifest this update: Wed 03 Sep 2025 11:36:35 +0000 Manifest next update: Sat 06 Sep 2025 15:47:35 +0000 Files and hashes: 1: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: n1vxqT01MHNJQCue1F/8LHi9S+iotjvGE4Enfb7Gpo0=) 2: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: onT7QaM25Qll74/YD4vXV9CEbaRePSZP7cAlWSL7WJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 15:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e9:b6:4c:bc:55:51:f1:eb:83:78:4c:d0:98:53:21:c1:f3:2a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Validity Not Before: Sep 3 11:36:35 2025 GMT Not After : Sep 6 15:47:35 2025 GMT Subject: CN=CAF311DC4AB31554A25323D004C8EE466C31B2B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:30:a6:ad:53:2e:b2:f7:48:e9:bf:70:22: 0f:f0:36:0b:32:e6:a2:c5:4b:17:a8:b2:6b:ba:65: 14:be:5a:6a:0d:89:dc:70:b6:8b:0c:25:13:7f:6a: 37:ca:f8:2a:7d:4b:5d:e6:50:16:55:c3:3b:e8:33: 45:e8:e2:72:f5:f2:ee:63:94:5f:6c:99:90:4f:ef: a2:97:3c:cd:90:86:c7:3c:46:6f:e6:b3:af:e3:ac: fc:7c:e7:bd:c0:3e:21:0f:7e:8a:4f:b4:9e:cf:62: 49:01:54:70:97:2e:d7:fa:e8:7d:c2:c9:de:00:93: 36:fc:0a:70:49:30:d9:cf:a5:e9:28:ef:e4:2a:66: cb:e9:00:d2:90:b1:9c:d5:82:86:b0:ce:ca:7a:2c: 3b:bc:66:e7:f0:5e:d8:76:5e:07:53:29:76:d0:20: 5e:f4:f8:f5:35:4c:25:05:a0:13:e4:40:f2:8d:0d: bc:59:26:e2:f3:9a:b7:25:fc:8f:d2:29:95:c7:7f: 5f:54:5c:b0:b8:a1:7f:a5:5f:8c:f1:6f:90:cc:64: 05:e3:f7:46:1c:27:0f:ad:6a:ad:85:46:e0:8b:86: 7c:a5:64:03:91:e1:7c:22:3c:1f:77:66:4b:e3:40: c2:49:7d:2d:21:c2:fe:89:08:97:87:5c:4e:73:4c: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F3:11:DC:4A:B3:15:54:A2:53:23:D0:04:C8:EE:46:6C:31:B2:B1 X509v3 Authority Key Identifier: keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:66:98:50:43:78:02:39:eb:86:ab:de:0f:54:12:e5:65:f8: 97:c7:67:db:17:73:7e:ba:3d:ef:c7:d3:22:e1:1d:a0:55:a9: 23:b0:05:43:55:49:23:e6:dd:27:ae:73:0c:ba:82:ef:7f:7f: 4b:0d:e0:e5:97:58:0c:01:ae:84:3b:dd:31:26:e1:9b:39:63: cd:1f:69:29:6b:ed:6d:81:55:2d:32:21:7d:3a:69:d1:cb:22: 7c:76:36:56:6e:c2:33:f2:08:7a:30:2a:36:b2:60:af:a2:76: d7:95:b2:b5:0e:69:6a:1e:9a:40:aa:c7:8c:6c:34:3f:e6:7c: d4:23:28:da:ea:86:d5:86:a3:c1:e0:7d:75:8a:34:2f:3a:4e: 3e:a9:8a:94:63:00:b1:e8:27:6a:ea:6b:9e:86:c1:2c:a2:bf: 9d:01:91:b4:68:e3:c7:e7:e5:9d:0f:31:bd:9e:61:93:81:15: 6d:d6:90:e9:c9:b3:0c:b0:f3:9e:14:9d:35:79:59:3f:50:b4: 5d:e9:3a:a1:99:35:a5:af:67:a2:f0:99:25:49:1d:52:43:1f: 6a:6d:60:4f:f2:af:86:70:4e:da:ae:2e:6e:8d:37:13:40:f3: 92:49:b5:22:69:8a:f0:38:54:3e:a1:0d:63:7a:c5:f3:0f:ab: 41:c7:80:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+m2TLxVUfHrg3hM0JhTIcHzKkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1 RDI2MTU4NTAeFw0yNTA5MDMxMTM2MzVaFw0yNTA5MDYxNTQ3MzVaMDMxMTAvBgNV BAMTKENBRjMxMURDNEFCMzE1NTRBMjUzMjNEMDA0QzhFRTQ2NkMzMUIyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9DCmrVMusvdI6b9wIg/wNgsy 5qLFSxeosmu6ZRS+WmoNidxwtosMJRN/ajfK+Cp9S13mUBZVwzvoM0Xo4nL18u5j lF9smZBP76KXPM2Qhsc8Rm/ms6/jrPx8573APiEPfopPtJ7PYkkBVHCXLtf66H3C yd4Akzb8CnBJMNnPpeko7+QqZsvpANKQsZzVgoawzsp6LDu8ZufwXth2XgdTKXbQ IF70+PU1TCUFoBPkQPKNDbxZJuLzmrcl/I/SKZXHf19UXLC4oX+lX4zxb5DMZAXj 90YcJw+taq2FRuCLhnylZAOR4XwiPB93ZkvjQMJJfS0hwv6JCJeHXE5zTBflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyvMR3EqzFVSiUyPQBMjuRmwxsrEwHwYDVR0j BBgwFoAUSEa5sNax3treSpwbtvkTaV0mFYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTMxZmFlOS02MjdhLTRhMDgtYmU1Yy00NGEwYzE1NzE0ODcvMC80ODQ2QjlCMEQ2 QjFERURBREU0QTlDMUJCNkY5MTM2OTVEMjYxNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1RDI2 MTU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkzMWZhZTktNjI3YS00YTA4LWJl NWMtNDRhMGMxNTcxNDg3LzAvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEz Njk1RDI2MTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNmmFBDeAI564ar3g9UEuVl+JfHZ9sXc366 Pe/H0yLhHaBVqSOwBUNVSSPm3Seucwy6gu9/f0sN4OWXWAwBroQ73TEm4Zs5Y80f aSlr7W2BVS0yIX06adHLInx2NlZuwjPyCHowKjayYK+idteVsrUOaWoemkCqx4xs ND/mfNQjKNrqhtWGo8HgfXWKNC86Tj6pipRjALHoJ2rqa56GwSyiv50BkbRo48fn 5Z0PMb2eYZOBFW3WkOnJswyw854UnTV5WT9QtF3pOqGZNaWvZ6LwmSVJHVJDH2pt YE/yr4ZwTtquLm6NNxNA85JJtSJpivA4VD6hDWN6xfMPq0HHgKY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:20 2025 by rpki-client