$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: LifnihJlB9PfZaQxJzTDrxfnLEm/lIFLbSBVhop4Hx4= Subject key identifier: 4D:26:A2:77:4A:A5:D2:4D:FC:8E:B8:28:4F:BE:27:90:89:78:C6:43 Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 58E840B7DD6C1F3DBF973C2557C57A0D45F6BE7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 0162 Signing time: Wed 04 Jun 2025 02:30:58 +0000 Manifest this update: Wed 04 Jun 2025 02:25:58 +0000 Manifest next update: Sat 07 Jun 2025 08:52:58 +0000 Files and hashes: 1: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: LUENHSfYR5C538riKgFxxCJJa9R6co0dIc/0+kSm79M=) 2: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: xAh6iVTptzdWaiN0lzQItEzdBxkBB7Jmc75/4/WIUXc=) 3: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: 17ChIozSdmJ+qCeyTnh6PolCU0A1lGl43AAQ9utL0Ec=) 4: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: 36JNQoWoEcG0XddMVhG6Y5xuDi4KHB52Q2RH2cUrQzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 08:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e8:40:b7:dd:6c:1f:3d:bf:97:3c:25:57:c5:7a:0d:45:f6:be:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Jun 4 02:25:58 2025 GMT Not After : Jun 7 08:52:58 2025 GMT Subject: CN=4D26A2774AA5D24DFC8EB8284FBE27908978C643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:12:82:b1:3e:b2:1c:27:a3:bc:9c:8c:b1: 0a:5a:90:b0:5d:99:48:96:aa:96:39:5a:a0:e4:3c: 51:13:8e:25:8c:fb:5e:74:48:c0:7f:13:af:e8:6b: ef:8c:1c:8c:26:87:54:cc:43:11:10:af:8a:54:52: 03:72:1e:8a:ec:d7:40:ad:8b:8f:f1:a4:5a:76:24: 9f:9a:32:68:fa:57:b1:e1:d9:83:70:be:25:48:93: 92:8a:aa:e5:e0:1f:eb:fc:ce:1f:5b:e0:28:49:ad: 44:52:35:36:1d:60:17:29:c3:e7:6f:6e:6a:ae:5a: fd:6b:ff:7a:b5:25:ba:63:70:e2:d6:a5:87:80:04: 0c:d9:81:4e:ab:ad:39:14:a7:de:85:84:e5:0e:e6: a6:30:70:c6:4d:5e:3b:d5:0d:77:b4:10:1e:18:f9: 7d:8a:a7:c9:f3:a6:25:da:a4:44:61:5e:13:0c:cd: 67:6d:c2:81:e5:0d:84:5d:d7:58:09:80:1a:fb:ff: cf:64:7a:0f:fb:c9:d3:f4:24:f2:0c:a8:7d:f2:78: 74:b1:a9:52:0a:2e:e4:52:92:99:10:95:e8:3b:8e: ee:2d:ef:e8:c8:ad:80:1a:85:23:6d:17:ad:f2:47: 37:a4:b7:e1:c2:df:32:57:5b:c2:41:e9:25:86:c8: 1b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:26:A2:77:4A:A5:D2:4D:FC:8E:B8:28:4F:BE:27:90:89:78:C6:43 X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:69:3f:4b:08:27:0b:77:c9:80:36:a3:e1:4f:67:8b:2e:f3: 17:8a:1e:a8:e5:73:68:26:1a:b4:e3:30:9e:a3:c8:7e:ad:5c: da:b1:db:0a:d5:48:b0:32:64:e2:1e:e7:5f:b9:ca:84:6f:d5: 0a:61:07:10:89:df:78:52:99:60:fd:2e:a2:71:1b:d2:e6:12: c8:6c:5c:4c:57:49:30:78:69:cf:fc:7d:96:c5:21:71:93:5a: 49:17:f4:d0:ad:75:3d:b8:81:ca:6c:94:16:ac:40:1c:82:79: ec:76:0e:05:5f:b4:22:e4:18:80:51:1f:37:03:38:6a:07:c5: 15:e1:51:3b:29:5a:c9:58:dc:fa:8f:6b:fd:a2:61:d2:6c:fb: d5:6c:f6:cb:52:c6:a6:33:cc:2d:a4:0b:07:6e:c3:9f:fe:c2: 53:d5:84:a1:67:cd:30:bc:0c:dd:91:43:dc:3d:28:dc:ab:f2: e7:44:16:a6:9c:34:df:4a:cc:af:73:ce:32:8d:57:72:80:97: 7a:8e:b1:27:65:cc:c9:62:ba:bc:85:6e:66:07:f9:1f:27:06: 66:94:45:94:3a:88:91:f2:37:af:8f:93:89:9e:f7:04:52:d6: a9:3a:11:42:8b:58:45:08:7f:8c:40:24:6b:ed:90:4f:7d:2a: 96:41:f4:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWOhAt91sHz2/lzwlV8V6DUX2vnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNTA2MDQwMjI1NThaFw0yNTA2MDcwODUyNThaMDMxMTAvBgNV BAMTKDREMjZBMjc3NEFBNUQyNERGQzhFQjgyODRGQkUyNzkwODk3OEM2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHRKCsT6yHCejvJyMsQpakLBd mUiWqpY5WqDkPFETjiWM+150SMB/E6/oa++MHIwmh1TMQxEQr4pUUgNyHors10Ct i4/xpFp2JJ+aMmj6V7Hh2YNwviVIk5KKquXgH+v8zh9b4ChJrURSNTYdYBcpw+dv bmquWv1r/3q1JbpjcOLWpYeABAzZgU6rrTkUp96FhOUO5qYwcMZNXjvVDXe0EB4Y +X2Kp8nzpiXapERhXhMMzWdtwoHlDYRd11gJgBr7/89keg/7ydP0JPIMqH3yeHSx qVIKLuRSkpkQleg7ju4t7+jIrYAahSNtF63yRzekt+HC3zJXW8JB6SWGyBuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTSaid0ql0k38jrgoT74nkIl4xkMwHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhpP0sIJwt3yYA2o+FPZ4su8xeKHqjlc2gm GrTjMJ6jyH6tXNqx2wrVSLAyZOIe51+5yoRv1QphBxCJ33hSmWD9LqJxG9LmEshs XExXSTB4ac/8fZbFIXGTWkkX9NCtdT24gcpslBasQByCeex2DgVftCLkGIBRHzcD OGoHxRXhUTspWslY3PqPa/2iYdJs+9Vs9stSxqYzzC2kCwduw5/+wlPVhKFnzTC8 DN2RQ9w9KNyr8udEFqacNN9KzK9zzjKNV3KAl3qOsSdlzMliuryFbmYH+R8nBmaU RZQ6iJHyN6+Pk4me9wRS1qk6EUKLWEUIf4xAJGvtkE99KpZB9DQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:25 2025 by rpki-client