$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json) Hash identifier: f55LAF29aZtjyDOTj3JOArcdS6GyBA2nWT2eW9kNxhs= Subject key identifier: 78:90:12:A6:FC:F9:A8:6D:AF:97:70:67:85:93:9F:2F:1D:A9:B7:4C Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Certificate serial: 047067E49F3360BEAE04BAC7F341385FFF99969E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft Manifest number: 01DE Signing time: Mon 03 Nov 2025 02:11:36 +0000 Manifest this update: Mon 03 Nov 2025 02:06:36 +0000 Manifest next update: Thu 06 Nov 2025 10:32:36 +0000 Files and hashes: 1: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: suHwutFdO+Ir9RVKRrfY155mjm/zINDicVORsLPxQ0c=) 2: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: n1vxqT01MHNJQCue1F/8LHi9S+iotjvGE4Enfb7Gpo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:70:67:e4:9f:33:60:be:ae:04:ba:c7:f3:41:38:5f:ff:99:96:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Validity Not Before: Nov 3 02:06:36 2025 GMT Not After : Nov 6 10:32:36 2025 GMT Subject: CN=789012A6FCF9A86DAF97706785939F2F1DA9B74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:13:92:80:23:30:61:76:b9:2c:fe:60:ff: 1e:17:31:69:8e:b7:a5:c4:83:8c:15:8f:43:53:f5: db:42:a2:c2:bc:39:5d:80:de:c6:53:54:fc:8a:2f: 35:95:bb:bb:ee:06:ba:5a:57:2c:75:32:1c:33:10: 1d:72:4e:72:e8:02:93:0e:33:22:c1:92:ad:3e:fb: 3e:13:7a:01:bd:e6:b8:d7:01:c1:d0:c6:95:1e:42: 5b:f9:cd:21:da:f6:39:d7:ab:ac:33:74:13:84:d1: 6b:d2:d7:a0:83:55:a6:9d:71:25:a5:35:e8:be:ee: 4c:bc:fe:94:f4:17:c8:2f:98:98:fb:4c:1a:94:d8: 09:57:74:45:d9:02:ed:f0:d1:de:b7:0f:d3:f2:b6: d4:a4:38:1c:8d:af:6c:76:cf:de:8f:42:0d:32:99: c5:12:33:1e:ac:53:7e:c5:a9:9f:41:e6:84:00:f9: f2:fc:08:fa:12:d4:59:d0:6d:6e:75:3c:7d:bb:e6: cf:db:a0:67:85:ce:39:cf:72:ff:2e:62:4c:cc:8a: 3b:8a:6c:80:12:06:10:f4:37:f2:5b:a9:42:ed:55: 49:f3:f9:0d:a1:f4:30:01:ea:e6:18:a5:91:9c:46: 98:38:d7:a2:5d:0a:9f:a1:96:63:b0:66:6f:d5:4a: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:90:12:A6:FC:F9:A8:6D:AF:97:70:67:85:93:9F:2F:1D:A9:B7:4C X509v3 Authority Key Identifier: keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:80:14:0a:0d:54:94:56:28:7d:30:b6:16:e8:83:a4:35:8a: 5f:db:6e:2e:1c:96:80:80:48:57:0b:26:b8:b7:64:32:c1:53: bc:39:9b:52:e9:3e:33:fb:24:ad:1c:21:fb:be:77:a1:1e:b2: b7:1f:31:44:30:84:9c:33:5b:90:ca:da:0b:b4:2a:9b:8a:c7: 0b:92:ef:1f:17:58:a1:b3:ce:7e:61:0d:12:4f:24:c3:b7:03: 08:5e:6e:78:8c:63:fd:16:57:e8:43:c1:54:75:3c:2b:9e:dd: c5:ef:60:f8:15:90:4b:ba:19:7c:72:34:4c:d3:49:22:e2:64: 36:1f:b4:fe:2d:7b:f9:c3:8a:20:ed:c4:78:3e:e0:c0:5e:1d: 49:ef:12:cd:14:5a:5c:76:74:8a:67:cf:cf:62:a4:b3:37:1f: 4f:c8:e9:f6:4e:d8:9e:f7:fb:51:bc:f3:fe:2a:e1:86:05:ea: 06:bd:b0:b6:d0:26:6d:2a:22:2e:5e:1a:2c:59:9c:95:d9:51: de:fd:63:dc:8c:fc:dd:a4:aa:fb:37:21:de:db:6e:c5:e2:60: 8f:1c:e3:eb:57:0e:a1:bf:76:1a:fb:74:c9:21:3d:cb:b7:17: 00:38:84:0d:d1:51:9c:cd:66:48:24:06:ae:4a:c5:44:00:af: 7b:25:9e:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHBn5J8zYL6uBLrH80E4X/+Zlp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1 RDI2MTU4NTAeFw0yNTExMDMwMjA2MzZaFw0yNTExMDYxMDMyMzZaMDMxMTAvBgNV BAMTKDc4OTAxMkE2RkNGOUE4NkRBRjk3NzA2Nzg1OTM5RjJGMURBOUI3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSBOSgCMwYXa5LP5g/x4XMWmO t6XEg4wVj0NT9dtCosK8OV2A3sZTVPyKLzWVu7vuBrpaVyx1MhwzEB1yTnLoApMO MyLBkq0++z4TegG95rjXAcHQxpUeQlv5zSHa9jnXq6wzdBOE0WvS16CDVaadcSWl Nei+7ky8/pT0F8gvmJj7TBqU2AlXdEXZAu3w0d63D9PyttSkOByNr2x2z96PQg0y mcUSMx6sU37FqZ9B5oQA+fL8CPoS1FnQbW51PH275s/boGeFzjnPcv8uYkzMijuK bIASBhD0N/JbqULtVUnz+Q2h9DAB6uYYpZGcRpg416JdCp+hlmOwZm/VSkApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeJASpvz5qG2vl3BnhZOfLx2pt0wwHwYDVR0j BBgwFoAUSEa5sNax3treSpwbtvkTaV0mFYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTMxZmFlOS02MjdhLTRhMDgtYmU1Yy00NGEwYzE1NzE0ODcvMC80ODQ2QjlCMEQ2 QjFERURBREU0QTlDMUJCNkY5MTM2OTVEMjYxNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1RDI2 MTU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkzMWZhZTktNjI3YS00YTA4LWJl NWMtNDRhMGMxNTcxNDg3LzAvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEz Njk1RDI2MTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+AFAoNVJRWKH0wthbog6Q1il/bbi4cloCA SFcLJri3ZDLBU7w5m1LpPjP7JK0cIfu+d6EesrcfMUQwhJwzW5DK2gu0KpuKxwuS 7x8XWKGzzn5hDRJPJMO3AwhebniMY/0WV+hDwVR1PCue3cXvYPgVkEu6GXxyNEzT SSLiZDYftP4te/nDiiDtxHg+4MBeHUnvEs0UWlx2dIpnz89ipLM3H0/I6fZO2J73 +1G88/4q4YYF6ga9sLbQJm0qIi5eGixZnJXZUd79Y9yM/N2kqvs3Id7bbsXiYI8c 4+tXDqG/dhr7dMkhPcu3FwA4hA3RUZzNZkgkBq5KxUQAr3slnoM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:45:08 2025 by rpki-client