$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: 410uxB6v8an1RuWe9F7Fy94795WTjJp+GdpAbdTwiBo= Subject key identifier: FF:04:0C:86:08:25:26:96:0B:FB:FE:C2:D1:27:C3:63:0F:2B:0E:45 Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 7720785F4B49F7073507011427AEB3F9117BE8FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: F3 Signing time: Sun 01 Jun 2025 17:30:46 +0000 Manifest this update: Sun 01 Jun 2025 17:25:46 +0000 Manifest next update: Thu 05 Jun 2025 03:21:46 +0000 Files and hashes: 1: 3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (hash: 98fawBN8lcuV1BpV1P5Bi+MmBkZ4ZywKpxF8wCR2MbU=) 2: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: zyKctDjODAskCGJTeHF52rmWVBfEs/bBj4mfBPmIpIc=) 3: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: CWusehBvGZNNsn+dCS0FYwQ7Kf8Tf3bC6vxVNPY/Fm8=) 4: 3130332e3231332e3233342e302f32332d3233203d3e20313531303033.roa (hash: 3HptcgwF9kr6TssFN64cDAiN6icULJSRQhu/pYKZbEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 03:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:20:78:5f:4b:49:f7:07:35:07:01:14:27:ae:b3:f9:11:7b:e8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Jun 1 17:25:46 2025 GMT Not After : Jun 5 03:21:46 2025 GMT Subject: CN=FF040C86082526960BFBFEC2D127C3630F2B0E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:2e:03:21:5e:93:4c:1a:92:2b:99:32:97: 89:3e:12:3c:ba:5d:06:b7:3a:19:42:52:46:9f:38: 29:b9:ef:a9:9f:2b:f4:93:eb:d2:d7:d3:ce:46:cb: 44:9d:34:33:fb:5c:01:22:e0:e9:c2:9c:ce:59:50: 14:41:4a:c0:ae:53:50:a4:7c:af:79:9e:a2:43:19: 2e:b6:c4:0b:ff:61:28:1f:08:c4:9a:06:7e:5d:4e: 13:1a:be:7d:ab:96:58:44:67:b5:5f:52:29:a9:29: 38:a8:08:c9:ba:fd:2a:09:af:cf:cd:29:ef:10:09: bf:0b:9f:de:b4:91:56:e3:a7:8a:10:be:0e:38:ac: 12:29:af:9c:13:69:6d:3e:c9:55:70:1f:22:61:b8: 5d:6c:c6:b0:62:d2:f7:04:94:15:7f:27:10:62:1f: 08:76:33:77:30:c2:cc:ef:76:10:c7:e7:dd:c1:4f: 2f:7d:8b:1c:b0:64:03:9b:59:95:e2:f1:a8:a8:bb: dd:00:fb:8a:79:17:f0:33:af:a1:7e:05:e8:f9:f2: 41:10:a2:81:07:e4:94:a0:04:bc:80:35:f6:59:85: ec:25:eb:73:8c:db:a8:c0:43:3f:43:81:63:be:3f: 6a:89:be:a0:f2:a3:55:56:f8:1c:d9:5b:57:2b:ab: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:04:0C:86:08:25:26:96:0B:FB:FE:C2:D1:27:C3:63:0F:2B:0E:45 X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:77:de:a2:16:9f:f2:88:ce:08:b0:79:7f:4c:33:29:57:5c: 0a:a4:16:5f:2d:a1:25:e3:72:7e:49:20:41:ed:da:24:2b:9a: 54:97:b7:24:89:29:a0:fb:02:50:88:8c:a6:31:2a:4f:36:5d: 96:cb:c6:29:8d:c3:ca:8d:70:e8:d6:f8:3a:0e:47:2a:75:a4: 46:94:34:84:b9:f7:43:e8:c1:0d:52:fa:a8:aa:b3:1c:ee:9c: 55:da:01:a4:27:73:3c:bb:0a:74:bf:fc:38:4c:e8:2a:65:de: 59:bc:44:23:20:83:85:f4:da:b1:f3:44:86:9b:9c:8d:ab:a4: 93:3d:af:3d:91:1f:64:b0:3a:08:ae:b8:57:90:7f:5b:45:96: 6e:95:1d:56:b6:c3:7f:b6:04:17:4d:2e:7b:d2:00:1d:21:f1: 5f:95:e0:03:ef:6f:77:07:63:d0:aa:10:1e:92:85:3e:71:dd: f2:33:ad:6b:6b:19:9d:32:dd:dc:e8:7c:bd:fe:07:62:09:d4: d4:49:b0:01:1b:83:fc:6e:90:b7:ec:22:df:18:6f:7e:0f:f2: f1:6e:07:a0:af:36:fb:19:90:c5:d5:4f:16:d4:f6:0c:59:9d: 4c:69:f4:28:8d:cf:0c:1e:00:b6:27:29:14:68:1c:2f:a8:ef: 02:44:a5:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyB4X0tJ9wc1BwEUJ66z+RF76PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNTA2MDExNzI1NDZaFw0yNTA2MDUwMzIxNDZaMDMxMTAvBgNV BAMTKEZGMDQwQzg2MDgyNTI2OTYwQkZCRkVDMkQxMjdDMzYzMEYyQjBFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG4C4DIV6TTBqSK5kyl4k+Ejy6 XQa3OhlCUkafOCm576mfK/ST69LX085Gy0SdNDP7XAEi4OnCnM5ZUBRBSsCuU1Ck fK95nqJDGS62xAv/YSgfCMSaBn5dThMavn2rllhEZ7VfUimpKTioCMm6/SoJr8/N Ke8QCb8Ln960kVbjp4oQvg44rBIpr5wTaW0+yVVwHyJhuF1sxrBi0vcElBV/JxBi Hwh2M3cwwszvdhDH593BTy99ixywZAObWZXi8aiou90A+4p5F/Azr6F+Bej58kEQ ooEH5JSgBLyANfZZhewl63OM26jAQz9DgWO+P2qJvqDyo1VW+BzZW1crq1hXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/wQMhgglJpYL+/7C0SfDYw8rDkUwHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADd33qIWn/KIzgiweX9MMylXXAqkFl8toSXj cn5JIEHt2iQrmlSXtySJKaD7AlCIjKYxKk82XZbLximNw8qNcOjW+DoORyp1pEaU NIS590PowQ1S+qiqsxzunFXaAaQnczy7CnS//DhM6Cpl3lm8RCMgg4X02rHzRIab nI2rpJM9rz2RH2SwOgiuuFeQf1tFlm6VHVa2w3+2BBdNLnvSAB0h8V+V4APvb3cH Y9CqEB6ShT5x3fIzrWtrGZ0y3dzofL3+B2IJ1NRJsAEbg/xukLfsIt8Yb34P8vFu B6CvNvsZkMXVTxbU9gxZnUxp9CiNzwweALYnKRRoHC+o7wJEpcE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:50 2025 by rpki-client