$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: llk958N31qS2wUcKXPgupT7EkPCNqtrZL3sRgiR42RQ= Subject key identifier: 6E:57:FE:DA:65:DC:5D:37:54:DA:51:0D:B1:11:61:4A:D8:7A:A5:E9 Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 6093B73439F7B2182E24B26BB85DD74B163DA96E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 018C Signing time: Sat 06 Sep 2025 21:20:59 +0000 Manifest this update: Sat 06 Sep 2025 21:15:59 +0000 Manifest next update: Wed 10 Sep 2025 05:41:59 +0000 Files and hashes: 1: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: 17ChIozSdmJ+qCeyTnh6PolCU0A1lGl43AAQ9utL0Ec=) 2: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: XgNU2zDGk8NhkHEpBH0HIJaFAUr8jMoISEYuuKFe/Xw=) 3: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: 36JNQoWoEcG0XddMVhG6Y5xuDi4KHB52Q2RH2cUrQzc=) 4: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: xAh6iVTptzdWaiN0lzQItEzdBxkBB7Jmc75/4/WIUXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:93:b7:34:39:f7:b2:18:2e:24:b2:6b:b8:5d:d7:4b:16:3d:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Sep 6 21:15:59 2025 GMT Not After : Sep 10 05:41:59 2025 GMT Subject: CN=6E57FEDA65DC5D3754DA510DB111614AD87AA5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5a:8c:90:2d:c2:b6:a7:27:3b:85:65:8f:ad: 40:6f:bd:33:6f:73:6a:db:cc:9b:93:91:a9:e9:7a: 01:b4:6a:87:89:03:f3:3f:0f:9d:41:51:91:64:71: 9d:c2:ed:60:b3:5c:65:1b:54:b3:fc:c3:2b:3a:e6: 71:0e:16:a4:35:a8:5c:b1:9c:0e:20:1c:eb:a4:d3: 8f:ce:42:fb:ab:35:c8:38:fc:2a:f1:bf:ea:79:d4: 55:b1:a2:30:8e:ad:5a:24:ba:5c:db:f1:71:76:22: 17:e0:95:23:dc:2e:96:04:52:43:fb:d1:9a:cc:d1: 90:fe:48:b9:60:9d:d8:17:b9:f0:6b:94:53:74:b0: 1f:63:7e:01:f6:37:61:f0:dc:3e:fa:e0:f1:cc:fc: 55:56:b2:f7:b7:c1:5f:b7:b9:46:8d:09:46:cc:a2: 16:1d:cb:e4:e3:32:2a:a1:46:56:6b:fc:6b:f1:bb: d3:82:c2:d7:b3:b0:f7:6b:ef:98:cb:79:cb:ce:8c: e0:67:b0:e3:c2:1d:e3:70:0b:54:63:3a:b4:03:d1: 75:56:35:b9:10:af:6c:86:1b:19:f9:3c:a8:00:6e: ca:fd:45:ab:b6:f2:cd:0e:8e:7d:13:33:12:f4:e9: d0:a9:d6:50:bd:9a:e9:44:31:96:c2:f5:32:52:18: 8b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:57:FE:DA:65:DC:5D:37:54:DA:51:0D:B1:11:61:4A:D8:7A:A5:E9 X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:4d:32:b6:1e:a5:37:bf:ab:3d:9d:a3:b1:22:a2:8e:3e:21: 2c:73:10:83:ae:18:d1:24:41:80:d0:a7:93:ad:e9:b0:26:b7: d0:3e:d7:e3:76:7c:f8:d8:fc:82:b4:e4:03:55:1e:89:6a:93: 01:4c:db:99:03:cb:94:da:75:8b:57:c6:f3:61:2a:d1:27:dd: f8:cc:b9:af:2c:a8:2a:a2:2f:b1:a6:f9:54:7d:68:63:ee:c5: 4b:cc:39:cb:ac:eb:bc:32:2a:bc:6c:fa:f7:83:00:62:6d:99: 0c:b6:0d:41:e2:35:f0:47:32:21:76:17:82:bf:df:a2:1f:2e: 71:f4:20:1f:09:b9:87:ff:bb:c1:5b:49:b4:6e:23:1f:ce:60: 6a:58:d4:88:22:7f:87:16:84:93:e5:cc:79:c6:72:98:b3:9a: cc:dd:d8:f0:be:58:e7:2d:74:99:84:9c:36:cc:6c:b9:bf:ba: d0:a2:df:85:c1:77:7f:12:20:fc:e8:8d:93:c1:94:a1:89:be: c4:d5:94:65:9e:74:03:8c:5f:71:fc:0d:8f:db:e6:8f:86:f0: 85:03:f5:e6:2e:35:40:63:09:01:8b:c9:ff:6f:ce:12:77:74: e9:ec:49:2e:0a:4b:67:bc:59:64:5e:b7:93:22:51:a4:64:57: 60:b0:c0:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJO3NDn3shguJLJruF3XSxY9qW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNTA5MDYyMTE1NTlaFw0yNTA5MTAwNTQxNTlaMDMxMTAvBgNV BAMTKDZFNTdGRURBNjVEQzVEMzc1NERBNTEwREIxMTE2MTRBRDg3QUE1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWoyQLcK2pyc7hWWPrUBvvTNv c2rbzJuTkanpegG0aoeJA/M/D51BUZFkcZ3C7WCzXGUbVLP8wys65nEOFqQ1qFyx nA4gHOuk04/OQvurNcg4/Crxv+p51FWxojCOrVokulzb8XF2IhfglSPcLpYEUkP7 0ZrM0ZD+SLlgndgXufBrlFN0sB9jfgH2N2Hw3D764PHM/FVWsve3wV+3uUaNCUbM ohYdy+TjMiqhRlZr/Gvxu9OCwtezsPdr75jLecvOjOBnsOPCHeNwC1RjOrQD0XVW NbkQr2yGGxn5PKgAbsr9Rau28s0Ojn0TMxL06dCp1lC9mulEMZbC9TJSGIu1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUblf+2mXcXTdU2lENsRFhSth6pekwHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJNMrYepTe/qz2do7Eioo4+ISxzEIOuGNEk QYDQp5Ot6bAmt9A+1+N2fPjY/IK05ANVHolqkwFM25kDy5TadYtXxvNhKtEn3fjM ua8sqCqiL7Gm+VR9aGPuxUvMOcus67wyKrxs+veDAGJtmQy2DUHiNfBHMiF2F4K/ 36IfLnH0IB8JuYf/u8FbSbRuIx/OYGpY1Igif4cWhJPlzHnGcpizmszd2PC+WOct dJmEnDbMbLm/utCi34XBd38SIPzojZPBlKGJvsTVlGWedAOMX3H8DY/b5o+G8IUD 9eYuNUBjCQGLyf9vzhJ3dOnsSS4KS2e8WWRet5MiUaRkV2CwwFM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:48 2025 by rpki-client