$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: pm6u500asVA9Qslw++0XRzI+Sjhl0orv2t/JmDipjBM= Subject key identifier: 21:4C:5D:99:8E:5B:10:14:D9:90:EC:D3:F5:B6:A8:98:86:FB:01:73 Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 5DA26B836E79F7B0C5DFA03143C174F0D5B7940D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: 0137 Signing time: Sun 02 Nov 2025 17:40:48 +0000 Manifest this update: Sun 02 Nov 2025 17:35:48 +0000 Manifest next update: Wed 05 Nov 2025 19:46:48 +0000 Files and hashes: 1: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: CWusehBvGZNNsn+dCS0FYwQ7Kf8Tf3bC6vxVNPY/Fm8=) 2: 3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (hash: 98fawBN8lcuV1BpV1P5Bi+MmBkZ4ZywKpxF8wCR2MbU=) 3: 3130332e3231332e3233342e302f32332d3233203d3e20313531303033.roa (hash: 3HptcgwF9kr6TssFN64cDAiN6icULJSRQhu/pYKZbEU=) 4: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: OihjXqtPBZ0KaK44uXtIgniYZFt7Zyg11BkFyS/+x0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a2:6b:83:6e:79:f7:b0:c5:df:a0:31:43:c1:74:f0:d5:b7:94:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Nov 2 17:35:48 2025 GMT Not After : Nov 5 19:46:48 2025 GMT Subject: CN=214C5D998E5B1014D990ECD3F5B6A89886FB0173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:02:5b:78:9e:fe:11:34:f1:fa:bf:a3:bf: 87:e6:97:e8:27:a8:b1:be:98:3d:34:94:0f:3e:ab: 5a:26:3e:dd:84:dc:96:92:29:e1:ae:69:0f:f9:a2: c8:e5:1f:10:07:31:f6:67:e2:4d:be:60:b8:0f:af: 5f:6f:20:44:53:0f:be:11:8c:99:67:f4:4a:60:65: 36:d0:2d:83:17:bb:e5:91:23:4d:57:8a:38:69:53: 06:5a:12:79:dd:04:4b:f8:b2:af:37:3f:b5:02:b5: 87:58:22:aa:da:a9:0a:11:5b:0e:9a:8f:2a:c5:6d: 84:b7:96:36:39:09:69:d1:0b:50:a3:2e:98:86:c4: 82:48:b5:76:67:91:d6:35:5a:fc:b5:07:48:c7:18: 49:5d:c3:4d:a8:ec:f3:a9:e8:0d:e9:05:89:10:88: 4a:77:fa:25:d3:43:3b:e2:1c:1c:b5:d9:13:a2:a3: c4:a7:b5:e5:bd:1c:90:28:1c:93:24:f5:a6:c3:f3: fd:3c:b5:09:02:9a:fc:e3:7d:6f:9a:1e:fd:80:9a: 82:96:d1:89:85:d2:7a:2a:c7:84:cb:d8:2b:30:f5: d4:10:e3:b1:a2:79:e0:e5:79:96:11:b0:3e:cc:a2: 64:7e:69:ef:ea:94:92:b8:e3:58:29:1a:94:ef:6e: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4C:5D:99:8E:5B:10:14:D9:90:EC:D3:F5:B6:A8:98:86:FB:01:73 X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f4:b7:d1:ba:db:7a:04:46:22:ea:b8:49:89:df:b7:f6:ef: eb:bb:75:89:ee:0a:f2:61:2a:29:79:db:45:cd:20:7c:25:2c: 47:d6:7e:18:0b:db:ad:93:20:21:22:9d:91:ea:5b:ea:31:08: ca:b9:b0:e0:15:dd:7f:c4:85:5a:96:36:7a:0b:d8:27:f8:d5: be:49:ec:a6:22:7c:c2:87:27:97:76:13:03:29:0c:5e:46:4c: c2:12:1d:90:5a:94:27:fd:36:91:2c:46:82:3f:cc:0f:43:28: 68:53:a9:71:46:e9:00:cb:65:19:4a:cd:6f:e8:d1:23:db:10: a0:23:85:c0:10:9c:81:5f:b4:92:21:81:da:c0:65:f2:ab:fa: 89:d4:e1:d9:b1:96:31:1a:da:9f:2f:b9:b5:0e:aa:4e:c1:12: 60:9d:23:55:1f:c7:51:6f:b0:11:9b:5a:b2:19:1c:d4:c9:bc: c5:8a:bc:f1:ad:d9:ff:c7:16:bf:00:cd:44:4e:36:7b:d4:1c: 89:ad:f3:96:42:52:2d:ad:b9:d0:79:8a:11:76:76:e2:90:40: f8:d1:3c:bf:67:d1:e4:21:10:67:35:3c:6b:7c:2a:63:a2:16: 04:7c:a5:3d:ae:7d:f5:b6:ea:fe:e0:4a:0f:4c:79:75:f1:ca: 4a:50:dd:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXaJrg25597DF36AxQ8F08NW3lA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNTExMDIxNzM1NDhaFw0yNTExMDUxOTQ2NDhaMDMxMTAvBgNV BAMTKDIxNEM1RDk5OEU1QjEwMTREOTkwRUNEM0Y1QjZBODk4ODZGQjAxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsQJbeJ7+ETTx+r+jv4fml+gn qLG+mD00lA8+q1omPt2E3JaSKeGuaQ/5osjlHxAHMfZn4k2+YLgPr19vIERTD74R jJln9EpgZTbQLYMXu+WRI01XijhpUwZaEnndBEv4sq83P7UCtYdYIqraqQoRWw6a jyrFbYS3ljY5CWnRC1CjLpiGxIJItXZnkdY1Wvy1B0jHGEldw02o7POp6A3pBYkQ iEp3+iXTQzviHBy12ROio8SnteW9HJAoHJMk9abD8/08tQkCmvzjfW+aHv2AmoKW 0YmF0noqx4TL2Csw9dQQ47GieeDleZYRsD7MomR+ae/qlJK441gpGpTvbq/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIUxdmY5bEBTZkOzT9baomIb7AXMwHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE70t9G623oERiLquEmJ37f27+u7dYnuCvJh Kil520XNIHwlLEfWfhgL262TICEinZHqW+oxCMq5sOAV3X/EhVqWNnoL2Cf41b5J 7KYifMKHJ5d2EwMpDF5GTMISHZBalCf9NpEsRoI/zA9DKGhTqXFG6QDLZRlKzW/o 0SPbEKAjhcAQnIFftJIhgdrAZfKr+onU4dmxljEa2p8vubUOqk7BEmCdI1Ufx1Fv sBGbWrIZHNTJvMWKvPGt2f/HFr8AzURONnvUHImt85ZCUi2tudB5ihF2duKQQPjR PL9n0eQhEGc1PGt8KmOiFgR8pT2uffW26v7gSg9MeXXxykpQ3UQ= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:29 2025 by rpki-client