$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: wDIp9HndQYstp4fAxXR4LYCAKWhLZsel7uEgiVOQpRI= Subject key identifier: 41:54:33:A7:00:10:35:4E:AD:05:93:2B:0C:B1:5E:7F:69:00:97:90 Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 33FD484E854E5B779990DD73CF057F3681D3C18F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: DB Signing time: Thu 13 Mar 2025 12:32:16 +0000 Manifest this update: Thu 13 Mar 2025 12:27:16 +0000 Manifest next update: Sun 16 Mar 2025 13:58:16 +0000 Files and hashes: 1: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: JLabqGnM8+YvvH11bFEaYilBFvdmjlNw60f4ngZNgvw=) 2: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: jrKXVDYWjJO3MN88gstoyvb/NNCnduUd9h2gF1mRxbg=) 3: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: HFThGBdFjmidhJmHMDXCoS6ycnhZcQfS2zGjsOicK3g=) 4: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: eSDeohW1AIrtqkyx+N42CigZjVYBQYQN7zrX2JowEv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 13:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fd:48:4e:85:4e:5b:77:99:90:dd:73:cf:05:7f:36:81:d3:c1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Mar 13 12:27:16 2025 GMT Not After : Mar 16 13:58:16 2025 GMT Subject: CN=415433A70010354EAD05932B0CB15E7F69009790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:93:c7:b3:1a:be:4e:44:2c:ff:87:60:e8: 39:eb:36:b4:73:25:dc:b6:6e:a2:29:50:cc:1a:ec: 0e:de:5c:7f:39:be:2f:27:81:94:20:4c:ec:35:0b: 03:6c:50:0e:0d:94:a2:7e:da:f0:be:c3:a0:69:e9: 0c:5a:21:3c:b5:b0:18:d4:e4:53:ec:0a:7c:53:0d: 84:86:76:8e:c6:d1:4d:4d:99:0e:e8:f3:5e:33:c3: 10:fd:8b:34:50:ff:c5:21:85:03:24:f6:c4:a1:1d: d8:36:ce:bf:74:79:d9:0e:f1:61:3e:13:2b:d7:86: 8c:17:f9:b5:45:46:9b:0a:c9:9b:79:82:73:71:ac: f7:26:5b:83:1e:69:9a:10:fd:9e:ab:6b:38:6a:65: 26:aa:02:5c:f2:5b:dc:21:46:71:01:47:b6:76:27: b2:59:2c:b8:cd:bd:30:54:49:c7:b4:af:a1:ed:70: 23:41:be:72:50:84:24:e8:ab:f7:e1:8b:99:68:c2: ae:0e:02:d0:50:5a:63:99:f2:2d:b1:4f:c2:da:d2: d7:d6:59:ae:64:35:c0:d0:8c:32:db:31:8d:c1:9c: 7f:14:96:cd:42:9f:e6:db:94:fb:55:8a:62:ec:2a: 5a:8b:43:e4:d3:ff:f1:fd:c3:4a:12:01:da:45:27: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:54:33:A7:00:10:35:4E:AD:05:93:2B:0C:B1:5E:7F:69:00:97:90 X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f8:48:62:24:98:20:8c:4d:c7:39:55:6d:ac:5f:03:42:f5: 43:a2:c6:56:06:20:99:4d:ca:0d:0a:0a:2d:23:1d:4e:ba:b1: 67:f5:f0:15:dd:75:95:49:a5:e1:a3:fb:a5:e0:ab:6c:2c:76: d0:93:70:8d:68:be:a2:af:2f:80:bc:8a:f8:b5:d6:2e:2c:97: 7a:94:87:9c:ca:81:e7:0a:57:87:53:0b:48:bd:f1:6c:39:85: 7e:e4:9e:88:a7:21:63:74:e1:26:a6:64:80:21:d3:84:8f:cf: ab:3f:8d:97:75:6c:b7:e3:e1:5b:40:79:a7:be:60:50:6e:b5: 97:57:f8:c2:e9:9c:f8:d4:10:4a:24:77:cd:3a:1b:55:ca:b3: cb:10:2f:12:11:69:91:0c:73:cb:b0:7d:90:cd:57:4c:43:c6: 2f:ba:64:bc:a5:7a:85:a9:79:63:db:ed:b9:8d:7f:15:75:ef: db:60:90:d7:3c:8c:a8:3f:ed:34:ae:77:85:bc:81:3b:c2:49: 32:30:a3:1c:77:3e:cf:79:88:f8:a6:61:61:90:52:20:b2:fb: 5e:37:24:1f:60:0a:dc:42:73:2a:b8:20:8f:03:33:19:da:73: 57:27:e5:61:80:f0:4f:dd:57:bc:1e:7b:7f:08:7c:a9:4a:81: 9a:ca:ae:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/1IToVOW3eZkN1zzwV/NoHTwY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTAzMTMxMjI3MTZaFw0yNTAzMTYxMzU4MTZaMDMxMTAvBgNV BAMTKDQxNTQzM0E3MDAxMDM1NEVBRDA1OTMyQjBDQjE1RTdGNjkwMDk3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cZPHsxq+TkQs/4dg6DnrNrRz Jdy2bqIpUMwa7A7eXH85vi8ngZQgTOw1CwNsUA4NlKJ+2vC+w6Bp6QxaITy1sBjU 5FPsCnxTDYSGdo7G0U1NmQ7o814zwxD9izRQ/8UhhQMk9sShHdg2zr90edkO8WE+ EyvXhowX+bVFRpsKyZt5gnNxrPcmW4MeaZoQ/Z6razhqZSaqAlzyW9whRnEBR7Z2 J7JZLLjNvTBUSce0r6HtcCNBvnJQhCToq/fhi5lowq4OAtBQWmOZ8i2xT8La0tfW Wa5kNcDQjDLbMY3BnH8Uls1Cn+bblPtVimLsKlqLQ+TT//H9w0oSAdpFJ5QrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQVQzpwAQNU6tBZMrDLFef2kAl5AwHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHn4SGIkmCCMTcc5VW2sXwNC9UOixlYGIJlN yg0KCi0jHU66sWf18BXddZVJpeGj+6Xgq2wsdtCTcI1ovqKvL4C8ivi11i4sl3qU h5zKgecKV4dTC0i98Ww5hX7knoinIWN04SamZIAh04SPz6s/jZd1bLfj4VtAeae+ YFButZdX+MLpnPjUEEokd806G1XKs8sQLxIRaZEMc8uwfZDNV0xDxi+6ZLyleoWp eWPb7bmNfxV179tgkNc8jKg/7TSud4W8gTvCSTIwoxx3Ps95iPimYWGQUiCy+143 JB9gCtxCcyq4II8DMxnac1cn5WGA8E/dV7wee38IfKlKgZrKriQ= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:37 2025 by rpki-client