$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json) Hash identifier: faQF0ecWWjaqSQu3lCl6ACBDk0psK+M5AKai0bwvjAE= Subject key identifier: 35:56:65:3E:90:72:64:F7:3F:B0:5E:51:7C:F9:87:76:FC:1B:69:D8 Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Certificate serial: 61FC17EFADBD8630B00E79771DF7BD2399788DDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft Manifest number: 01B7 Signing time: Fri 08 Aug 2025 19:21:47 +0000 Manifest this update: Fri 08 Aug 2025 19:16:47 +0000 Manifest next update: Tue 12 Aug 2025 06:53:47 +0000 Files and hashes: 1: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: h87GIrTJMQyGb0m1sPwlgli09SuNOJCczFxB7rjFa/w=) 2: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: qObP2/pJGarx5vmXeUhRSiGfJeUb4NhSrwlSMVkfIrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fc:17:ef:ad:bd:86:30:b0:0e:79:77:1d:f7:bd:23:99:78:8d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Validity Not Before: Aug 8 19:16:47 2025 GMT Not After : Aug 12 06:53:47 2025 GMT Subject: CN=3556653E907264F73FB05E517CF98776FC1B69D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:38:ca:12:f8:a1:69:5c:92:61:ab:79:93: 98:40:cc:9b:4e:44:f7:66:31:a2:3b:67:45:ea:d8: 0e:c3:9d:48:60:37:c9:73:54:35:3c:28:34:31:55: d3:1e:9b:91:b4:d4:55:37:44:77:ee:dd:c8:79:ad: 77:1b:10:7d:f4:8d:d5:30:20:da:bc:9d:69:1f:49: e4:16:bc:23:b3:21:28:93:8d:9e:01:b1:da:8a:3e: 11:2b:1d:70:93:b5:0f:b9:63:6f:64:75:ef:ed:13: 89:2e:ff:9a:d1:06:6d:43:0e:ae:ac:43:54:c9:4d: 85:7f:00:b7:2e:0d:88:97:d5:2d:19:bc:7d:97:e7: 49:ad:ec:05:d2:ee:65:ae:13:9c:d1:fa:4b:de:2a: b6:23:e0:22:14:29:69:4a:e9:9f:ef:a4:af:d9:ab: c5:b3:23:d4:75:cb:a9:8f:5e:4b:a3:94:db:91:b8: d3:50:61:79:7d:ac:b6:be:cd:fd:1f:a9:6e:ae:8f: a0:43:61:42:d5:e9:09:2d:02:e8:b1:d2:45:8a:82: 86:39:ee:0b:28:69:e2:0e:f7:b6:11:6b:a3:ba:32: 39:89:de:b7:1e:63:a8:8d:55:58:82:fd:39:06:f2: 44:70:90:77:e3:2c:d8:83:f8:1c:86:26:60:21:63: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:56:65:3E:90:72:64:F7:3F:B0:5E:51:7C:F9:87:76:FC:1B:69:D8 X509v3 Authority Key Identifier: keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:54:fa:16:98:49:a0:fa:c0:2f:ad:b3:c7:b2:18:85:de:a9: 83:bc:63:ff:2a:ef:77:4b:0f:da:d8:04:83:a2:59:e4:fe:94: b6:37:f1:10:ca:5a:ad:52:3e:31:42:e4:bd:e1:ba:52:4e:87: d2:93:9f:9d:ca:34:d0:ed:ba:e6:7d:c9:81:c4:a2:4e:d2:6f: a0:df:c6:66:2b:9a:30:37:a7:71:fb:68:03:73:0c:d2:83:e8: 83:ed:8b:fa:85:2d:9e:d6:33:fa:55:2b:f0:70:00:14:ea:58: af:fa:0a:6c:cb:a1:c7:df:eb:ac:74:1d:5b:d4:34:a1:fe:14: 70:73:46:03:00:80:de:0f:1d:01:a9:12:cb:1b:41:dd:04:58: f0:4e:6d:4f:3d:4a:d5:24:d8:10:32:ff:b7:2f:3a:29:25:c3: 7e:23:8c:54:8f:97:25:72:b0:b4:21:ca:dc:f4:4e:22:77:29: 09:5c:bf:35:d9:d5:a4:d5:f1:34:ab:58:44:ae:b7:6f:c4:df: ef:d1:40:fd:9a:ed:b2:4a:44:bb:d0:a7:ea:17:6a:86:58:f0: 34:4f:5b:ab:fe:62:d4:31:05:6b:30:ac:20:c2:30:15:d7:c5: 6d:2c:f2:3c:2c:db:9c:ac:71:ef:76:3a:7b:f9:63:51:a9:2a: 60:f3:1b:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfwX7629hjCwDnl3Hfe9I5l4jdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1 RDI2MTU4NTAeFw0yNTA4MDgxOTE2NDdaFw0yNTA4MTIwNjUzNDdaMDMxMTAvBgNV BAMTKDM1NTY2NTNFOTA3MjY0RjczRkIwNUU1MTdDRjk4Nzc2RkMxQjY5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEzjKEvihaVySYat5k5hAzJtO RPdmMaI7Z0Xq2A7DnUhgN8lzVDU8KDQxVdMem5G01FU3RHfu3ch5rXcbEH30jdUw INq8nWkfSeQWvCOzISiTjZ4BsdqKPhErHXCTtQ+5Y29kde/tE4ku/5rRBm1DDq6s Q1TJTYV/ALcuDYiX1S0ZvH2X50mt7AXS7mWuE5zR+kveKrYj4CIUKWlK6Z/vpK/Z q8WzI9R1y6mPXkujlNuRuNNQYXl9rLa+zf0fqW6uj6BDYULV6QktAuix0kWKgoY5 7gsoaeIO97YRa6O6MjmJ3rceY6iNVViC/TkG8kRwkHfjLNiD+ByGJmAhYwNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNVZlPpByZPc/sF5RfPmHdvwbadgwHwYDVR0j BBgwFoAUSEa5sNax3treSpwbtvkTaV0mFYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTMxZmFlOS02MjdhLTRhMDgtYmU1Yy00NGEwYzE1NzE0ODcvMC80ODQ2QjlCMEQ2 QjFERURBREU0QTlDMUJCNkY5MTM2OTVEMjYxNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1RDI2 MTU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkzMWZhZTktNjI3YS00YTA4LWJl NWMtNDRhMGMxNTcxNDg3LzAvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEz Njk1RDI2MTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhU+haYSaD6wC+ts8eyGIXeqYO8Y/8q73dL D9rYBIOiWeT+lLY38RDKWq1SPjFC5L3hulJOh9KTn53KNNDtuuZ9yYHEok7Sb6Df xmYrmjA3p3H7aANzDNKD6IPti/qFLZ7WM/pVK/BwABTqWK/6CmzLocff66x0HVvU NKH+FHBzRgMAgN4PHQGpEssbQd0EWPBObU89StUk2BAy/7cvOiklw34jjFSPlyVy sLQhytz0TiJ3KQlcvzXZ1aTV8TSrWESut2/E3+/RQP2a7bJKRLvQp+oXaoZY8DRP W6v+YtQxBWswrCDCMBXXxW0s8jws25ysce92Onv5Y1GpKmDzGzk= -----END CERTIFICATE-----Generated at Sun Aug 10 05:33:51 2025 by rpki-client