$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.mft (raw, json) Hash identifier: i4SmF4T3tZKQF/uH3qLkcHGiryIQ9l18i8WvYJSQc0Q= Subject key identifier: 5F:86:F8:48:78:FF:71:64:8A:73:5C:B4:07:B4:69:D6:C9:01:A2:8B Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 Certificate issuer: /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Certificate serial: 1252501678BE948A67A1AC7E49A1A6139A352F23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft Manifest number: 0178 Signing time: Sun 02 Nov 2025 19:52:10 +0000 Manifest this update: Sun 02 Nov 2025 19:47:10 +0000 Manifest next update: Thu 06 Nov 2025 02:50:10 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: n+/j+X0EHKdzJwOO4f/AMp89n5rbo9zZecMjnTepVSI=) 2: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: 6h0PS6sD0cpo/dFFiqhzCPsiuizhkV5A6x6l4CJlcqA=) 3: 46E596CAE0AEADA8B4135425216E8783D92E6C76.crl (hash: 7d9Kmc2b7EUuBBlMiYzZvwVbDpNCWvM1QZwwYm55kZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:52:50:16:78:be:94:8a:67:a1:ac:7e:49:a1:a6:13:9a:35:2f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Validity Not Before: Nov 2 19:47:10 2025 GMT Not After : Nov 6 02:50:10 2025 GMT Subject: CN=5F86F84878FF71648A735CB407B469D6C901A28B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:32:2d:91:f1:23:a8:08:2a:37:ce:8f:a6: d0:47:b6:77:47:9d:9b:80:c4:ad:7b:ac:cd:9e:7b: 10:48:83:d4:16:64:63:5f:df:0a:45:50:fc:bd:3c: a1:61:82:81:90:ca:b6:45:81:67:54:bb:f7:74:d6: 28:97:78:e1:ef:b4:37:4d:1a:e9:dd:07:5c:50:94: 8e:cf:4e:55:f5:f1:46:79:c8:18:c5:7c:79:ac:95: 8d:72:09:54:cb:41:4b:b2:fa:05:78:9d:73:c7:c4: ba:90:4c:65:c7:3f:72:9f:ee:b6:18:07:ba:97:1c: 6b:3b:86:63:38:80:bf:a1:1a:77:04:fb:6d:9e:76: 31:cb:4a:c9:80:9f:55:b2:0b:5f:be:70:6c:28:c0: b8:32:26:ee:01:ce:08:c6:38:1f:6d:02:0a:5c:66: f4:c2:e5:46:23:2c:b6:ea:c1:f3:80:99:0e:5a:1c: 5c:de:7f:1c:33:9b:8a:34:93:d9:7b:06:14:51:50: b7:69:9a:54:c2:59:be:3e:4f:aa:9d:15:f0:14:98: 5f:d9:ce:a4:2f:43:90:56:13:10:35:19:c6:af:11: 9a:c4:b8:fd:cd:13:e0:28:84:8f:47:8c:28:9a:b1: 6e:87:45:6c:3d:3f:78:d5:c1:8f:d9:f8:47:a4:f3: 8a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:86:F8:48:78:FF:71:64:8A:73:5C:B4:07:B4:69:D6:C9:01:A2:8B X509v3 Authority Key Identifier: keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:41:3f:bc:a5:bf:16:0e:c5:01:87:9b:9e:40:6f:f8:72:58: 1c:93:c3:2f:04:37:0d:19:e3:f5:86:71:38:de:aa:f4:e8:82: ed:d5:b3:2c:6e:5b:a7:e1:a2:53:5b:eb:f8:55:d2:5d:00:78: ea:01:3f:05:1d:d2:32:89:10:c7:ec:53:81:ba:9a:b1:69:2d: a4:01:6a:85:43:7a:44:b6:3f:45:b6:42:f7:69:de:46:87:51: 34:49:98:f0:d7:50:52:26:e3:0b:54:ee:d3:6c:8e:e9:2b:37: 47:5d:57:21:6f:c9:7e:5c:1e:29:37:81:c8:2b:84:c2:a2:43: da:07:8a:1e:df:0f:2a:5c:54:1a:e0:31:ef:3c:7f:5d:b8:53: 60:6a:ac:25:e0:be:5c:28:97:eb:ca:f3:74:d0:2f:a3:d0:17: 74:a9:3d:e6:81:a6:80:77:82:29:e7:ee:c8:84:72:f6:a3:ec: 13:0b:db:f4:45:2c:b1:17:a5:0f:2d:b9:6d:c8:0c:ba:8d:52: d7:30:3a:8d:2d:13:49:2c:5d:7d:ab:63:7c:2d:f7:c1:31:58: ae:f1:a8:62:2f:f8:87:53:2c:e6:0b:53:43:1d:6b:24:d6:06: f4:3c:3d:56:6b:c5:35:a9:4f:4e:db:b5:a2:c9:17:64:85:2f: 39:28:ce:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElJQFni+lIpnoax+SaGmE5o1LyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNE OTJFNkM3NjAeFw0yNTExMDIxOTQ3MTBaFw0yNTExMDYwMjUwMTBaMDMxMTAvBgNV BAMTKDVGODZGODQ4NzhGRjcxNjQ4QTczNUNCNDA3QjQ2OUQ2QzkwMUEyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnjItkfEjqAgqN86PptBHtndH nZuAxK17rM2eexBIg9QWZGNf3wpFUPy9PKFhgoGQyrZFgWdUu/d01iiXeOHvtDdN GundB1xQlI7PTlX18UZ5yBjFfHmslY1yCVTLQUuy+gV4nXPHxLqQTGXHP3Kf7rYY B7qXHGs7hmM4gL+hGncE+22edjHLSsmAn1WyC1++cGwowLgyJu4BzgjGOB9tAgpc ZvTC5UYjLLbqwfOAmQ5aHFzefxwzm4o0k9l7BhRRULdpmlTCWb4+T6qdFfAUmF/Z zqQvQ5BWExA1GcavEZrEuP3NE+AohI9HjCiasW6HRWw9P3jVwY/Z+Eek84oxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX4b4SHj/cWSKc1y0B7Rp1skBooswHwYDVR0j BBgwFoAURuWWyuCurai0E1QlIW6Hg9kubHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMC80NkU1OTZDQUUw QUVBREE4QjQxMzU0MjUyMTZFODc4M0Q5MkU2Qzc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNEOTJF NkM3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3 ODNEOTJFNkM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABBP7ylvxYOxQGHm55Ab/hyWByTwy8ENw0Z 4/WGcTjeqvTogu3VsyxuW6fholNb6/hV0l0AeOoBPwUd0jKJEMfsU4G6mrFpLaQB aoVDekS2P0W2Qvdp3kaHUTRJmPDXUFIm4wtU7tNsjukrN0ddVyFvyX5cHik3gcgr hMKiQ9oHih7fDypcVBrgMe88f124U2BqrCXgvlwol+vK83TQL6PQF3SpPeaBpoB3 ginn7siEcvaj7BML2/RFLLEXpQ8tuW3IDLqNUtcwOo0tE0ksXX2rY3wt98ExWK7x qGIv+IdTLOYLU0MdayTWBvQ8PVZrxTWpT07btaLJF2SFLzkozv8= -----END CERTIFICATE-----Generated at Tue Nov 4 16:35:59 2025 by rpki-client