$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: NXvC7zJwhOh1VfcKUQQN5F8ux41TJvQBEn7o3MwoJYk= Subject key identifier: 3D:D4:FF:96:48:37:8D:AA:53:34:11:7D:16:A2:C1:1D:DA:7C:15:6D Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 338205E0ADF11A4A487060841BE591912D4C3834 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: EB Signing time: Fri 18 Apr 2025 19:32:49 +0000 Manifest this update: Fri 18 Apr 2025 19:27:49 +0000 Manifest next update: Tue 22 Apr 2025 01:41:49 +0000 Files and hashes: 1: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: eSDeohW1AIrtqkyx+N42CigZjVYBQYQN7zrX2JowEv8=) 2: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: JLabqGnM8+YvvH11bFEaYilBFvdmjlNw60f4ngZNgvw=) 3: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: NJg2UykGJ+KLkXzkuISoF9JbywwpWgRIBJeIgGNHfJQ=) 4: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: HFThGBdFjmidhJmHMDXCoS6ycnhZcQfS2zGjsOicK3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:82:05:e0:ad:f1:1a:4a:48:70:60:84:1b:e5:91:91:2d:4c:38:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Apr 18 19:27:49 2025 GMT Not After : Apr 22 01:41:49 2025 GMT Subject: CN=3DD4FF9648378DAA5334117D16A2C11DDA7C156D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fa:ac:70:8c:0f:59:3e:43:72:a6:96:09:ec: c5:2b:cd:52:e4:90:3c:95:5a:0c:9f:8e:31:62:49: d8:a3:b4:56:58:a6:8e:03:08:40:e9:f4:1e:90:b9: 79:67:36:d7:fd:af:5a:94:0f:42:5b:ff:af:f8:0f: cf:4b:69:9c:8d:9f:93:42:19:0f:45:0d:7c:43:63: 4d:c4:87:72:d5:51:0a:71:cd:c9:64:6a:a5:62:a8: 40:78:f2:a2:c7:b9:35:c2:a0:cd:df:af:94:a2:c4: 37:44:6f:e3:0c:74:bd:3c:6c:23:f4:77:ac:cc:e5: 30:80:55:c3:8f:a0:e8:ee:d4:8c:a0:eb:31:69:d5: cb:d6:de:c9:f9:81:1a:0c:4b:8a:c4:49:a3:c6:fe: c3:8c:35:b4:9f:07:6f:49:a0:8a:0e:2b:09:d9:46: 00:9f:fd:d5:ad:a3:3e:bc:af:ec:8d:ac:21:e7:82: 36:44:4e:78:dc:a2:e0:aa:d1:58:79:74:ae:c4:a1: c2:4d:26:69:e6:77:3f:bd:91:5a:b1:bc:52:11:b2: 91:ba:d9:ea:45:c4:58:14:3e:4d:35:95:37:5c:97: 63:5c:b9:e6:6c:a3:49:58:52:e6:56:d7:bf:c1:01: 22:f4:80:46:98:ec:d5:32:f3:f8:15:7a:e1:b6:08: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D4:FF:96:48:37:8D:AA:53:34:11:7D:16:A2:C1:1D:DA:7C:15:6D X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:69:65:3a:3b:56:3f:f9:7e:c8:01:e8:c2:6a:df:83:09:d2: 5c:30:f1:05:e9:12:f5:eb:cd:fd:5b:07:54:7e:d7:a2:32:93: dd:d3:d2:e0:54:a9:a1:07:9e:73:d3:95:c7:3c:b4:fe:4e:21: 06:73:01:10:fe:5b:38:71:8a:37:6a:b6:65:ab:57:90:a7:df: 0d:a6:f8:93:b3:7d:c5:5f:14:b2:aa:10:4a:05:e7:34:c5:62: bc:94:8f:cc:d6:b7:fd:09:75:9c:a1:92:e1:f8:d6:a0:73:45: 48:91:8d:e4:01:cc:02:51:1e:33:a3:ac:08:80:7f:62:06:ea: 6a:c4:7f:dd:82:ff:07:12:07:1c:25:08:12:ee:84:9b:a8:4d: 29:4e:4d:b6:25:bf:7d:11:71:c8:ea:32:39:13:b1:16:ed:ff: 6e:68:2c:79:34:87:d2:6e:51:c5:ef:a9:7b:07:a8:7b:1b:d7: df:24:df:83:ea:27:be:3e:c3:b6:3c:ef:4e:42:5b:d8:99:50: 33:4f:86:de:8b:64:6a:fb:d6:11:47:02:8e:cc:c1:71:8e:83: 1a:6e:f6:02:f9:e8:5e:77:d5:4d:9f:79:4f:a1:15:49:55:4d: 6b:02:5d:3d:37:0b:0b:1d:1f:ee:74:12:ad:90:32:2c:b6:07: a9:72:60:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4IF4K3xGkpIcGCEG+WRkS1MODQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTA0MTgxOTI3NDlaFw0yNTA0MjIwMTQxNDlaMDMxMTAvBgNV BAMTKDNERDRGRjk2NDgzNzhEQUE1MzM0MTE3RDE2QTJDMTFEREE3QzE1NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy+qxwjA9ZPkNyppYJ7MUrzVLk kDyVWgyfjjFiSdijtFZYpo4DCEDp9B6QuXlnNtf9r1qUD0Jb/6/4D89LaZyNn5NC GQ9FDXxDY03Eh3LVUQpxzclkaqViqEB48qLHuTXCoM3fr5SixDdEb+MMdL08bCP0 d6zM5TCAVcOPoOju1Iyg6zFp1cvW3sn5gRoMS4rESaPG/sOMNbSfB29JoIoOKwnZ RgCf/dWtoz68r+yNrCHngjZETnjcouCq0Vh5dK7EocJNJmnmdz+9kVqxvFIRspG6 2epFxFgUPk01lTdcl2NcueZso0lYUuZW17/BASL0gEaY7NUy8/gVeuG2CDTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPdT/lkg3japTNBF9FqLBHdp8FW0wHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdpZTo7Vj/5fsgB6MJq34MJ0lww8QXpEvXr zf1bB1R+16Iyk93T0uBUqaEHnnPTlcc8tP5OIQZzARD+WzhxijdqtmWrV5Cn3w2m +JOzfcVfFLKqEEoF5zTFYryUj8zWt/0JdZyhkuH41qBzRUiRjeQBzAJRHjOjrAiA f2IG6mrEf92C/wcSBxwlCBLuhJuoTSlOTbYlv30RccjqMjkTsRbt/25oLHk0h9Ju UcXvqXsHqHsb198k34PqJ74+w7Y8705CW9iZUDNPht6LZGr71hFHAo7MwXGOgxpu 9gL56F531U2feU+hFUlVTWsCXT03CwsdH+50Eq2QMiy2B6lyYNY= -----END CERTIFICATE-----Generated at Sat Apr 19 15:21:20 2025 by rpki-client