$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft File: 46F8E3AC44B2F2208037674979268378CA60B901.mft (raw, json) Hash identifier: VNTOTuzL/NyhuL6qgy4RiA8U55igrI/D6VPbcRyxuNw= Subject key identifier: 3C:A1:0C:B9:38:E1:D6:45:5C:DD:D0:64:4E:42:C4:C2:9F:96:57:A9 Authority key identifier: 46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 Certificate issuer: /CN=46F8E3AC44B2F2208037674979268378CA60B901 Certificate serial: 090E2FC7450CAE6CD163CB8C829BB7762598270C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft Manifest number: D9 Signing time: Sat 19 Jul 2025 21:11:01 +0000 Manifest this update: Sat 19 Jul 2025 21:06:01 +0000 Manifest next update: Tue 22 Jul 2025 23:44:01 +0000 Files and hashes: 1: 46F8E3AC44B2F2208037674979268378CA60B901.crl (hash: OhiFkvGcZczdkra3MPNFbEyXFPhFodwxlCH6VgdlPXQ=) 2: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: w6SUeBV7r7eMx4zjejoHugvjH0LAjK8+Ny4oivQOtS8=) 3: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: 0XtLIEJG3py88w82k3Uk1bJyRF5CgN3WezTFPdzYJTo=) 4: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: lEKQqCDUmBCxPybh1zwAuhAJa6FoeEwr4Hftj79+ZXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.crl rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0e:2f:c7:45:0c:ae:6c:d1:63:cb:8c:82:9b:b7:76:25:98:27:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46F8E3AC44B2F2208037674979268378CA60B901 Validity Not Before: Jul 19 21:06:01 2025 GMT Not After : Jul 22 23:44:01 2025 GMT Subject: CN=3CA10CB938E1D6455CDDD0644E42C4C29F9657A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:55:4e:0e:c6:fa:a1:0e:d8:a6:88:91:f1:1f: 08:fd:a5:ec:17:a0:74:f9:dc:40:16:90:f0:fa:96: a8:6a:fa:db:92:9c:30:60:8f:e8:79:a2:91:9b:eb: 4b:59:de:ff:98:b3:2d:d9:c0:24:9d:a3:7f:88:26: c1:14:49:0d:37:e3:89:19:f4:d0:85:d4:e5:b3:a8: 69:db:36:af:bd:8c:51:4d:4c:98:6c:98:1b:7c:d3: 79:5a:f3:b4:25:84:bc:fa:39:18:95:a4:f5:a7:ea: 57:06:24:f2:2a:8c:7b:6b:a1:e6:2b:47:a5:57:8a: b7:ad:d9:c9:53:e0:a5:ce:a7:17:fa:c6:bf:14:a6: 35:98:17:17:0d:cf:92:83:e1:cb:40:f4:56:06:71: eb:12:40:83:f5:61:fe:d9:c9:90:33:f1:f6:95:58: 27:66:40:04:f0:53:35:7d:38:2f:35:a9:c7:0d:b4: a7:13:dc:6e:bd:9e:35:69:ac:d8:97:63:5b:6f:ef: b6:27:c4:7a:f3:59:ce:13:fc:2e:bf:f2:15:40:9f: d1:d4:45:2c:2b:2e:eb:0f:a7:69:fb:5f:c4:45:50: ca:a1:43:d1:0f:6b:17:25:9c:36:32:f3:69:33:64: 06:d3:60:cd:a0:ab:a4:c2:dd:da:a3:8a:7e:a3:58: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A1:0C:B9:38:E1:D6:45:5C:DD:D0:64:4E:42:C4:C2:9F:96:57:A9 X509v3 Authority Key Identifier: keyid:46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a8:c8:5d:ac:e2:18:fa:63:71:ee:93:09:2c:1a:b5:79:71: 8c:68:0a:e3:9c:20:7d:6c:f2:a3:d9:82:29:a9:27:22:47:df: 80:cd:99:38:bb:7c:f7:6a:fa:d5:f8:c9:b0:64:89:27:43:b3: 5d:1c:3c:2a:f9:e8:3e:df:2d:9b:84:84:49:da:9b:11:50:39: 49:90:5e:67:5c:3f:29:75:4f:17:b5:8b:90:a2:e5:14:51:2a: 63:1a:f2:92:3a:4f:fb:62:dd:f1:73:35:4d:a3:1f:ad:aa:c1: 49:b0:3d:7d:66:41:b8:6f:ed:61:c4:2a:c3:99:14:28:89:ad: c6:a2:3a:df:9e:c6:28:7f:42:f0:a3:78:43:43:d8:3f:f3:e4: 7c:0c:4c:ba:a0:0c:eb:3f:14:f5:7d:16:15:17:46:e0:bf:64: 14:fc:45:b5:99:72:33:e2:67:2f:98:14:65:d8:2b:d1:36:c9: 8a:b1:ae:5c:8e:de:95:14:36:d5:e0:6b:2b:65:71:c5:8e:08: 9e:25:d6:6f:f8:55:6f:ff:05:b8:50:93:33:f4:72:e8:24:ee: fa:a7:2f:b7:a1:62:0f:02:32:42:62:67:0e:87:52:8c:62:79: c2:d5:a5:95:5c:dc:85:0a:47:5e:a2:23:57:f4:c6:ff:2c:a2: 5a:d8:3b:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQ4vx0UMrmzRY8uMgpu3diWYJwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgzNzhD QTYwQjkwMTAeFw0yNTA3MTkyMTA2MDFaFw0yNTA3MjIyMzQ0MDFaMDMxMTAvBgNV BAMTKDNDQTEwQ0I5MzhFMUQ2NDU1Q0RERDA2NDRFNDJDNEMyOUY5NjU3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2VU4OxvqhDtimiJHxHwj9pewX oHT53EAWkPD6lqhq+tuSnDBgj+h5opGb60tZ3v+Ysy3ZwCSdo3+IJsEUSQ0344kZ 9NCF1OWzqGnbNq+9jFFNTJhsmBt803la87QlhLz6ORiVpPWn6lcGJPIqjHtroeYr R6VXiret2clT4KXOpxf6xr8UpjWYFxcNz5KD4ctA9FYGcesSQIP1Yf7ZyZAz8faV WCdmQATwUzV9OC81qccNtKcT3G69njVprNiXY1tv77YnxHrzWc4T/C6/8hVAn9HU RSwrLusPp2n7X8RFUMqhQ9EPaxclnDYy82kzZAbTYM2gq6TC3dqjin6jWB0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPKEMuTjh1kVc3dBkTkLEwp+WV6kwHwYDVR0j BBgwFoAURvjjrESy8iCAN2dJeSaDeMpguQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU4M2FmZS0zYmRjLTQ0YjItYTcwMi1iNDU1NWRhYTY1ZWEvMC80NkY4RTNBQzQ0 QjJGMjIwODAzNzY3NDk3OTI2ODM3OENBNjBCOTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgzNzhDQTYw QjkwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgz NzhDQTYwQjkwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABioyF2s4hj6Y3HukwksGrV5cYxoCuOcIH1s 8qPZgimpJyJH34DNmTi7fPdq+tX4ybBkiSdDs10cPCr56D7fLZuEhEnamxFQOUmQ XmdcPyl1Txe1i5Ci5RRRKmMa8pI6T/ti3fFzNU2jH62qwUmwPX1mQbhv7WHEKsOZ FCiJrcaiOt+exih/QvCjeEND2D/z5HwMTLqgDOs/FPV9FhUXRuC/ZBT8RbWZcjPi Zy+YFGXYK9E2yYqxrlyO3pUUNtXgaytlccWOCJ4l1m/4VW//BbhQkzP0cugk7vqn L7ehYg8CMkJiZw6HUoxiecLVpZVc3IUKR16iI1f0xv8solrYO+o= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:33 2025 by rpki-client