$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft File: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft (raw, json) Hash identifier: B6W/sWtaRAgoz1FvKmIktg3V4zD3j91zhN8LVdiYiY4= Subject key identifier: 10:36:68:F8:6C:7F:6A:71:72:AE:7D:5F:D0:33:E8:1B:8B:59:74:FC Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Certificate serial: 707651AFC60B621BC80EBE43A2FC52605C18B817 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft Manifest number: C8 Signing time: Sun 15 Jun 2025 22:11:50 +0000 Manifest this update: Sun 15 Jun 2025 22:06:50 +0000 Manifest next update: Thu 19 Jun 2025 01:29:50 +0000 Files and hashes: 1: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl (hash: QS5rcpD84i/2mc1wcf52pBxk3JG2sfgsE9hnne5uMtE=) 2: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: xyltXPiPOHbvKePnlpJnsx741KzCQWK/N5bnmbeAlMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:76:51:af:c6:0b:62:1b:c8:0e:be:43:a2:fc:52:60:5c:18:b8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Validity Not Before: Jun 15 22:06:50 2025 GMT Not After : Jun 19 01:29:50 2025 GMT Subject: CN=103668F86C7F6A7172AE7D5FD033E81B8B5974FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:ee:3e:44:6f:e8:9f:a8:e5:af:05:8e:f2: 96:16:52:7f:0a:1d:eb:5f:88:c9:7b:13:a2:15:a9: 9a:fa:5c:bd:22:86:d3:de:0a:73:62:94:7a:23:9a: d8:c0:ac:32:d8:84:0e:27:58:84:5d:8f:e4:7f:2f: cb:f4:72:fe:40:46:ac:a5:1d:71:6b:1b:ab:16:8e: 31:86:81:78:7d:c9:01:0d:40:82:5b:dd:f9:fe:75: 2e:7d:d4:8d:c5:66:bb:8b:b7:40:3c:d7:5d:d9:91: f3:70:d6:7b:db:50:ce:92:eb:bf:00:b3:8c:7d:30: 7e:59:9f:51:03:30:0d:29:b1:d2:17:60:b5:2d:04: 14:c5:04:31:58:49:59:25:be:7f:b6:ef:23:24:cb: 4a:6e:c5:db:c0:72:ed:c1:bb:94:88:40:91:99:9e: d3:dd:06:9b:82:2c:71:11:9d:6b:3c:29:cb:53:4d: cd:db:25:c9:95:ac:37:83:58:02:86:85:b9:cc:4f: 09:03:61:cd:9c:94:98:71:21:34:07:3e:88:2e:53: 80:f2:c4:91:54:ab:66:2c:33:bc:32:54:de:17:1b: 5e:b0:de:ec:33:b8:91:57:f1:37:35:be:02:06:3e: 58:af:e7:ba:76:7f:e8:87:76:e9:34:f8:d3:ec:64: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:36:68:F8:6C:7F:6A:71:72:AE:7D:5F:D0:33:E8:1B:8B:59:74:FC X509v3 Authority Key Identifier: keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8f:10:ea:82:e3:84:4b:b7:e8:a8:e5:fd:79:54:c9:c5:6e: 22:0a:c5:e8:ad:a4:01:78:a3:b2:bd:ab:65:16:15:b2:1a:31: 4a:c6:ae:f2:8b:76:d7:62:b0:22:85:d1:50:d6:ae:df:90:39: ee:00:09:ea:fe:68:16:2b:17:dd:af:0a:6d:ee:7a:4a:a1:74: 82:db:b5:2d:7c:94:69:fe:8e:a1:b0:fb:25:fa:b8:e0:88:6d: c2:ad:39:2c:57:41:b1:a5:c3:54:fe:11:bf:bd:f4:ac:bf:1a: 40:02:f9:11:58:62:ad:d5:b6:7c:71:e6:2f:b0:8f:5c:fb:76: e4:24:7a:14:fd:c5:53:f5:99:66:e7:63:6f:7f:c4:ef:c2:08: f7:9e:29:33:a1:2e:c3:84:22:e2:b9:30:34:65:3f:a1:64:d3: ac:fb:44:2a:80:a1:92:0e:44:09:b4:35:09:c4:35:d9:5f:ca: 32:31:27:15:86:2b:71:7d:86:dd:ac:b5:31:89:01:22:9a:d1: 71:1c:63:74:df:0c:6f:d8:22:7f:a7:09:15:f6:47:b7:34:5f: 9c:61:75:2d:b2:c5:a2:5a:28:8b:6e:8f:f5:3a:b4:85:83:c0: a2:66:98:9c:77:bd:4d:22:f2:77:52:77:25:00:e1:af:30:60: d4:83:bd:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHZRr8YLYhvIDr5DovxSYFwYuBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlB QUVCNUQwMzAeFw0yNTA2MTUyMjA2NTBaFw0yNTA2MTkwMTI5NTBaMDMxMTAvBgNV BAMTKDEwMzY2OEY4NkM3RjZBNzE3MkFFN0Q1RkQwMzNFODFCOEI1OTc0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDig+4+RG/on6jlrwWO8pYWUn8K HetfiMl7E6IVqZr6XL0ihtPeCnNilHojmtjArDLYhA4nWIRdj+R/L8v0cv5ARqyl HXFrG6sWjjGGgXh9yQENQIJb3fn+dS591I3FZruLt0A8113ZkfNw1nvbUM6S678A s4x9MH5Zn1EDMA0psdIXYLUtBBTFBDFYSVklvn+27yMky0puxdvAcu3Bu5SIQJGZ ntPdBpuCLHERnWs8KctTTc3bJcmVrDeDWAKGhbnMTwkDYc2clJhxITQHPoguU4Dy xJFUq2YsM7wyVN4XG16w3uwzuJFX8Tc1vgIGPliv57p2f+iHduk0+NPsZP7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEDZo+Gx/anFyrn1f0DPoG4tZdPwwHwYDVR0j BBgwFoAURqLmNP/0CuVF7H22eoiBiarrXQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjg4MGRkYi0zZDk0LTRlMzQtOTJkYy00ZDQ1MzhiOTA1YTIvMC80NkEyRTYzNEZG RjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFBRUI1RDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlBQUVC NUQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgx ODlBQUVCNUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2PEOqC44RLt+io5f15VMnFbiIKxeitpAF4 o7K9q2UWFbIaMUrGrvKLdtdisCKF0VDWrt+QOe4ACer+aBYrF92vCm3uekqhdILb tS18lGn+jqGw+yX6uOCIbcKtOSxXQbGlw1T+Eb+99Ky/GkAC+RFYYq3Vtnxx5i+w j1z7duQkehT9xVP1mWbnY29/xO/CCPeeKTOhLsOEIuK5MDRlP6Fk06z7RCqAoZIO RAm0NQnENdlfyjIxJxWGK3F9ht2stTGJASKa0XEcY3TfDG/YIn+nCRX2R7c0X5xh dS2yxaJaKItuj/U6tIWDwKJmmJx3vU0i8ndSdyUA4a8wYNSDvfQ= -----END CERTIFICATE-----Generated at Mon Jun 16 15:52:11 2025 by rpki-client