$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: +Gi3BzYDXCWLR9eNXLUNaOcYpg9wFXTLBMIci+p6vjg= Subject key identifier: EE:31:3E:A6:C2:BF:87:D6:EC:20:91:DA:37:57:E8:26:C7:E0:5C:CD Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 641EDF99C71E96D3E363C26ABB0118DF78A0BA92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: 0147 Signing time: Thu 13 Nov 2025 05:22:25 +0000 Manifest this update: Thu 13 Nov 2025 05:17:25 +0000 Manifest next update: Sun 16 Nov 2025 17:07:25 +0000 Files and hashes: 1: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: l/6nAOjqjGZrtcrrhw7ZuCSQaMYlD7Yflxw07XBPvJ0=) 2: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: veTZsRvM1tQPZT/BfON0VJRneiBr6fgc60m5/I3a2Zc=) 3: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: a6oEhE171yyD1Su41aqpkU16OgQaPcLUSnj8Mz4c9RQ=) 4: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: VGNvRMTdXm3gJaSYZh5jyTa+JqewLa+S1Pa1sFR/Vfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Nov 2025 11:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1e:df:99:c7:1e:96:d3:e3:63:c2:6a:bb:01:18:df:78:a0:ba:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Nov 13 05:17:25 2025 GMT Not After : Nov 16 17:07:25 2025 GMT Subject: CN=EE313EA6C2BF87D6EC2091DA3757E826C7E05CCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a8:73:08:8d:02:bf:0f:42:43:15:dc:fc:7c: d8:cd:9b:8e:1a:7e:d7:a2:3d:3c:ec:cc:b9:8f:6f: 08:0a:25:83:5a:9c:29:43:ef:af:65:52:92:82:f3: e0:95:a4:5b:0e:81:3f:61:40:59:1d:6a:e0:67:c8: 4a:7d:47:0c:eb:59:f9:eb:0a:67:43:d2:a5:87:48: 56:a3:8d:fc:f7:d3:65:8d:0c:6f:ce:e7:c0:fa:c5: 50:37:a3:8d:75:57:18:a1:67:0b:95:c7:df:52:b4: c2:2a:d8:28:14:79:c0:2b:5e:13:11:4c:7c:96:12: 9a:17:01:4d:8f:cd:03:65:31:c9:fa:92:02:55:76: f8:bf:89:9b:12:f0:83:64:b8:18:73:0b:75:eb:24: 1c:bc:9c:41:41:10:f4:b5:24:91:ed:7a:a2:a5:f9: f7:9c:32:7e:16:1b:56:0c:3f:2a:ca:f3:a6:c3:63: 70:84:36:4c:bd:2b:7a:4d:d8:55:8a:c0:37:a6:56: 16:fd:e3:f1:26:fb:92:54:a1:20:8d:3e:6c:4b:11: c8:af:f9:aa:0c:8d:b6:8e:c4:88:08:f5:75:10:41: e3:6c:f6:f5:54:2b:fb:89:82:86:4d:53:56:52:f8: 31:ef:fc:11:d3:d0:7f:4c:05:03:d2:00:94:22:24: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:31:3E:A6:C2:BF:87:D6:EC:20:91:DA:37:57:E8:26:C7:E0:5C:CD X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:1b:b8:7d:59:8b:6a:22:98:3f:19:a9:14:e3:43:60:49:cd: 42:f8:f5:c7:32:c9:dd:52:f6:3b:61:62:fb:97:c6:79:29:e9: 9c:56:cb:f1:eb:7f:f4:7f:70:e1:40:27:20:b0:a7:9d:c2:0d: 0a:a3:39:10:43:6a:68:e9:54:78:f4:f8:13:fe:91:2a:78:f7: 3b:82:b1:81:10:fa:d2:ba:78:f7:19:0c:ea:66:87:a9:2f:8b: 60:87:7c:49:77:55:59:7a:51:d7:a4:41:ba:36:1c:61:0f:97: 48:17:77:30:76:55:31:30:3e:d5:d9:62:c3:fd:a7:93:d8:64: aa:bd:ac:9a:31:d4:22:f2:75:8d:5f:79:90:5c:15:20:be:59: 58:52:69:37:35:65:e2:8c:c0:9e:a4:6f:e5:df:e5:61:9c:e5: c9:74:9b:18:80:83:0e:dc:15:8a:69:f4:d1:a6:e0:cf:be:78: b2:55:01:8d:ed:e1:dd:fc:12:46:d7:c3:ed:e6:01:88:a7:4c: 7c:2c:e6:48:74:40:d6:5c:12:50:b6:a4:8c:d2:77:22:44:93: 49:d2:8b:4a:e8:e3:5e:e7:68:47:4b:46:7c:98:a3:d7:42:cc: 20:fa:4e:72:12:61:8e:77:6b:7a:e2:6d:75:f6:69:a9:84:27: f1:f2:23:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZB7fmcceltPjY8JquwEY33igupIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTExMTMwNTE3MjVaFw0yNTExMTYxNzA3MjVaMDMxMTAvBgNV BAMTKEVFMzEzRUE2QzJCRjg3RDZFQzIwOTFEQTM3NTdFODI2QzdFMDVDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhqHMIjQK/D0JDFdz8fNjNm44a fteiPTzszLmPbwgKJYNanClD769lUpKC8+CVpFsOgT9hQFkdauBnyEp9RwzrWfnr CmdD0qWHSFajjfz302WNDG/O58D6xVA3o411VxihZwuVx99StMIq2CgUecArXhMR THyWEpoXAU2PzQNlMcn6kgJVdvi/iZsS8INkuBhzC3XrJBy8nEFBEPS1JJHteqKl +fecMn4WG1YMPyrK86bDY3CENky9K3pN2FWKwDemVhb94/Em+5JUoSCNPmxLEciv +aoMjbaOxIgI9XUQQeNs9vVUK/uJgoZNU1ZS+DHv/BHT0H9MBQPSAJQiJOntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7jE+psK/h9bsIJHaN1foJsfgXM0wHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAbuH1Zi2oimD8ZqRTjQ2BJzUL49ccyyd1S 9jthYvuXxnkp6ZxWy/Hrf/R/cOFAJyCwp53CDQqjORBDamjpVHj0+BP+kSp49zuC sYEQ+tK6ePcZDOpmh6kvi2CHfEl3VVl6UdekQbo2HGEPl0gXdzB2VTEwPtXZYsP9 p5PYZKq9rJox1CLydY1feZBcFSC+WVhSaTc1ZeKMwJ6kb+Xf5WGc5cl0mxiAgw7c FYpp9NGm4M++eLJVAY3t4d38EkbXw+3mAYinTHws5kh0QNZcElC2pIzSdyJEk0nS i0ro417naEdLRnyYo9dCzCD6TnISYY53a3ribXX2aamEJ/HyI38= -----END CERTIFICATE-----Generated at Thu Nov 13 09:28:35 2025 by rpki-client