$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: 2F5p59hizwE9v4cQDcEv75g3IbQZO6K/EO21pz/WzzU= Subject key identifier: 67:E3:31:1D:D5:FF:C7:14:61:0F:86:D3:78:C9:6B:8A:B6:26:D8:12 Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 1A496D187D840A4CD4BEE36830EFF5018EE57327 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 0345 Signing time: Mon 16 Jun 2025 02:21:51 +0000 Manifest this update: Mon 16 Jun 2025 02:16:51 +0000 Manifest next update: Thu 19 Jun 2025 02:34:51 +0000 Files and hashes: 1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: 811pQwf4GMpY+ZCGViq50fxKXOdhPAz8ZtGdzABSDiE=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 02:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:49:6d:18:7d:84:0a:4c:d4:be:e3:68:30:ef:f5:01:8e:e5:73:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Jun 16 02:16:51 2025 GMT Not After : Jun 19 02:34:51 2025 GMT Subject: CN=67E3311DD5FFC714610F86D378C96B8AB626D812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:50:1c:32:49:94:c0:fa:20:b1:68:ef:85: f1:58:ce:60:7c:93:ad:b5:71:df:a0:36:94:09:f4: d9:f4:a4:eb:75:38:65:30:b8:f5:5a:ef:c0:ce:a3: 0c:6b:ef:88:8c:58:fc:3d:a5:b4:cd:eb:53:0b:59: bc:a7:8c:8f:6e:4d:27:37:ef:14:94:2b:df:bc:5f: 49:e5:61:f0:c5:1e:71:75:4e:65:a1:bd:94:41:ed: 3c:76:c2:c3:11:f3:7e:6a:49:8e:7c:db:51:1a:d4: a3:8c:e8:58:ac:77:91:df:34:11:c8:15:c2:c3:36: 32:5a:f4:28:0b:83:24:7a:43:36:d0:11:09:0a:d7: 80:22:9d:61:13:7e:24:94:19:c1:7c:6e:1c:a4:98: 4a:e5:0e:93:08:70:da:45:e3:39:85:aa:9e:7b:b5: 40:8b:00:c5:e7:9e:07:f0:db:1d:4a:b0:db:15:39: 79:4f:3e:e6:82:1f:36:eb:96:a9:af:cf:0d:ad:5e: 87:51:f9:3f:ea:1c:7e:c5:d9:15:ce:7c:ac:17:8f: 06:47:94:28:c9:5b:0a:05:9a:83:0d:8e:c2:1a:bf: e6:4c:32:f4:7a:bd:c0:72:6d:24:e8:e2:4d:55:95: f4:7c:c2:71:3e:62:d2:ce:a1:86:98:eb:76:19:d2: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E3:31:1D:D5:FF:C7:14:61:0F:86:D3:78:C9:6B:8A:B6:26:D8:12 X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:30:7d:e2:b4:5e:41:a9:d1:42:a3:72:07:50:26:f3:56:5b: 37:fc:67:a8:97:ac:04:c8:52:21:46:4c:cc:64:5d:53:97:6c: 45:a9:c1:b0:b4:bd:5c:af:50:9e:99:36:b3:a6:45:39:e9:b0: 3b:8c:d5:22:85:3e:81:df:5f:65:77:ef:d3:99:1f:45:5a:49: 10:2e:18:77:40:12:51:42:24:82:35:00:af:d5:bd:76:11:05: 1a:8b:ad:4e:19:da:76:2c:32:b7:64:81:75:aa:99:89:34:33: cb:83:3c:fc:92:ee:75:2b:49:84:cf:98:e0:ca:cb:80:68:ed: 12:2b:25:d9:35:9b:27:52:82:a3:1d:cb:dd:37:f9:f4:f4:90: 28:a8:3e:df:aa:1b:f1:c0:ba:6e:56:5a:17:59:8f:c2:3d:55: d5:1c:05:1b:cb:bf:1b:85:e7:32:c9:f3:36:e0:4a:6f:66:bc: 43:e1:49:e9:a4:87:7e:01:01:63:8e:42:72:1c:dc:e5:a5:3a: 74:97:74:c8:ff:db:0d:e6:16:43:64:4f:bd:26:1d:41:3c:4e: c0:f3:d9:2d:84:14:83:8a:5e:d3:50:fb:d6:dd:5a:ec:86:1f: 38:90:2b:f2:23:17:56:01:1e:81:e5:fb:8c:41:bc:02:06:91: 1a:b2:59:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGkltGH2ECkzUvuNoMO/1AY7lcycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTA2MTYwMjE2NTFaFw0yNTA2MTkwMjM0NTFaMDMxMTAvBgNV BAMTKDY3RTMzMTFERDVGRkM3MTQ2MTBGODZEMzc4Qzk2QjhBQjYyNkQ4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvFAcMkmUwPogsWjvhfFYzmB8 k621cd+gNpQJ9Nn0pOt1OGUwuPVa78DOowxr74iMWPw9pbTN61MLWbynjI9uTSc3 7xSUK9+8X0nlYfDFHnF1TmWhvZRB7Tx2wsMR835qSY5821Ea1KOM6Fisd5HfNBHI FcLDNjJa9CgLgyR6QzbQEQkK14AinWETfiSUGcF8bhykmErlDpMIcNpF4zmFqp57 tUCLAMXnngfw2x1KsNsVOXlPPuaCHzbrlqmvzw2tXodR+T/qHH7F2RXOfKwXjwZH lCjJWwoFmoMNjsIav+ZMMvR6vcBybSTo4k1VlfR8wnE+YtLOoYaY63YZ0pv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ+MxHdX/xxRhD4bTeMlrirYm2BIwHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkwfeK0XkGp0UKjcgdQJvNWWzf8Z6iXrATI UiFGTMxkXVOXbEWpwbC0vVyvUJ6ZNrOmRTnpsDuM1SKFPoHfX2V379OZH0VaSRAu GHdAElFCJII1AK/VvXYRBRqLrU4Z2nYsMrdkgXWqmYk0M8uDPPyS7nUrSYTPmODK y4Bo7RIrJdk1mydSgqMdy903+fT0kCioPt+qG/HAum5WWhdZj8I9VdUcBRvLvxuF 5zLJ8zbgSm9mvEPhSemkh34BAWOOQnIc3OWlOnSXdMj/2w3mFkNkT70mHUE8TsDz 2S2EFIOKXtNQ+9bdWuyGHziQK/IjF1YBHoHl+4xBvAIGkRqyWRw= -----END CERTIFICATE-----Generated at Tue Jun 17 00:56:14 2025 by rpki-client