$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: LRAJfnd+Vue0Q336MCfHwwKkf8czYAst8ES0lhf5Eus= Subject key identifier: 48:C4:DC:52:2A:CE:9E:54:27:4F:2E:86:0F:04:61:6A:0E:CF:72:1F Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 5E5790F0A1D25F240155610102DE5F0CFD490F13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 035E Signing time: Sat 09 Aug 2025 19:02:01 +0000 Manifest this update: Sat 09 Aug 2025 18:57:01 +0000 Manifest next update: Tue 12 Aug 2025 19:21:01 +0000 Files and hashes: 1: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) 2: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: 8KTylBG+2s02yPVX+13FMo3gSp8lEacNrvRV6K2X0pI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:57:90:f0:a1:d2:5f:24:01:55:61:01:02:de:5f:0c:fd:49:0f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Aug 9 18:57:01 2025 GMT Not After : Aug 12 19:21:01 2025 GMT Subject: CN=48C4DC522ACE9E54274F2E860F04616A0ECF721F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:74:29:a0:7e:a8:cf:9f:73:35:3c:be:8f: 2e:6e:d2:12:89:d7:06:37:d6:9e:d2:ad:4a:60:88: 80:c7:0b:f7:15:a5:3f:6e:ad:2f:ac:b2:c3:f6:27: 8a:ca:fe:98:e4:3e:f1:80:c5:ad:72:46:c4:f1:c9: ee:47:d1:e7:85:6f:65:5d:c8:2a:fd:f7:19:02:30: 3a:6b:f7:13:9a:82:e3:9f:c0:60:6e:4a:96:a2:85: bf:67:a4:e7:b2:a9:3f:80:d6:f4:1d:7f:9a:ef:d2: 5b:89:47:c8:62:9f:3f:1c:f0:50:8c:88:4b:24:f2: d9:c4:4a:44:dc:1f:4e:be:90:2d:aa:c7:34:9d:e1: 32:5b:62:ad:47:7f:dc:57:f8:92:25:98:d2:a6:48: c4:cd:f2:fa:ad:a2:fd:a9:18:a7:a3:92:27:7f:06: 44:da:4f:7a:74:14:59:24:04:01:27:d2:a4:cc:e9: 0d:e1:7d:0a:83:56:a8:cb:bf:1b:b7:d8:ba:66:35: af:e7:1c:39:70:96:98:97:d7:73:23:6d:a7:34:0f: 75:fa:92:c1:0b:2b:97:01:28:0d:29:36:9f:58:1c: eb:45:22:54:8f:f4:f3:ce:c4:a0:d9:9b:90:bd:4c: c3:d6:12:6e:e2:c7:56:a7:74:5c:96:c0:0a:d8:98: 33:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C4:DC:52:2A:CE:9E:54:27:4F:2E:86:0F:04:61:6A:0E:CF:72:1F X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:32:3d:d1:63:11:b5:c7:8f:ac:1a:58:e9:ab:df:50:3d:3c: de:aa:59:e1:91:5d:72:f8:d6:73:ae:01:41:4d:b4:c3:54:c5: 37:5b:ca:c2:f4:91:1a:f1:d0:e5:b3:d8:fb:65:ff:91:07:3d: 60:36:87:73:36:d7:9a:f5:e4:bd:79:50:fc:1e:d6:97:29:84: ba:5c:f6:47:94:64:f3:30:06:f9:c7:17:3c:70:06:c8:28:d5: fd:c9:fc:db:bb:ca:37:ea:7b:b5:b7:5a:69:c3:cc:d3:24:a3: 10:ac:31:9a:a6:22:ff:bc:f2:0f:c5:bd:d2:bd:d1:5f:d0:76: 70:07:4f:25:b2:59:70:f8:6c:02:02:16:c1:d2:f3:c8:f5:9c: 8e:29:be:69:ee:9d:1b:2e:bd:ee:90:79:ce:1c:12:97:b8:05: b1:63:f8:03:64:3e:2f:a8:e0:be:fc:f7:33:7f:e1:d1:f1:88: 91:07:b9:c4:47:ec:6a:4c:74:7c:24:b9:6b:36:f6:5a:47:af: 40:67:b3:18:6c:89:47:eb:d4:9b:cd:c6:4d:10:3d:3d:bf:89: 60:6c:ef:55:5b:95:12:4f:ba:fa:58:ae:63:f0:27:ff:9a:fa: 14:c2:6c:8b:f9:31:84:a0:18:32:c3:38:c1:1e:ae:3f:c4:aa: b0:a7:27:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXleQ8KHSXyQBVWEBAt5fDP1JDxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTA4MDkxODU3MDFaFw0yNTA4MTIxOTIxMDFaMDMxMTAvBgNV BAMTKDQ4QzREQzUyMkFDRTlFNTQyNzRGMkU4NjBGMDQ2MTZBMEVDRjcyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkV3QpoH6oz59zNTy+jy5u0hKJ 1wY31p7SrUpgiIDHC/cVpT9urS+sssP2J4rK/pjkPvGAxa1yRsTxye5H0eeFb2Vd yCr99xkCMDpr9xOaguOfwGBuSpaihb9npOeyqT+A1vQdf5rv0luJR8hinz8c8FCM iEsk8tnESkTcH06+kC2qxzSd4TJbYq1Hf9xX+JIlmNKmSMTN8vqtov2pGKejkid/ BkTaT3p0FFkkBAEn0qTM6Q3hfQqDVqjLvxu32LpmNa/nHDlwlpiX13Mjbac0D3X6 ksELK5cBKA0pNp9YHOtFIlSP9PPOxKDZm5C9TMPWEm7ix1andFyWwArYmDPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSMTcUirOnlQnTy6GDwRhag7Pch8wHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwyPdFjEbXHj6waWOmr31A9PN6qWeGRXXL4 1nOuAUFNtMNUxTdbysL0kRrx0OWz2Ptl/5EHPWA2h3M215r15L15UPwe1pcphLpc 9keUZPMwBvnHFzxwBsgo1f3J/Nu7yjfqe7W3WmnDzNMkoxCsMZqmIv+88g/FvdK9 0V/QdnAHTyWyWXD4bAICFsHS88j1nI4pvmnunRsuve6Qec4cEpe4BbFj+ANkPi+o 4L789zN/4dHxiJEHucRH7GpMdHwkuWs29lpHr0BnsxhsiUfr1JvNxk0QPT2/iWBs 71VblRJPuvpYrmPwJ/+a+hTCbIv5MYSgGDLDOMEerj/EqrCnJ1Q= -----END CERTIFICATE-----Generated at Mon Aug 11 05:52:18 2025 by rpki-client