$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: M9h1SEdEiaFvrASjzSREUHDSds81KM15aaUpZARD3aI= Subject key identifier: F3:94:8A:D2:91:E1:72:EA:EC:B4:0B:48:22:25:E4:2E:F1:C1:40:2B Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 6DAF42E421D38AB45CC6D9747CCEDC895D21EC0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: F9 Signing time: Sun 15 Jun 2025 22:20:48 +0000 Manifest this update: Sun 15 Jun 2025 22:15:48 +0000 Manifest next update: Thu 19 Jun 2025 00:01:48 +0000 Files and hashes: 1: 3130332e3231332e3233342e302f32332d3233203d3e20313531303033.roa (hash: 3HptcgwF9kr6TssFN64cDAiN6icULJSRQhu/pYKZbEU=) 2: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: CWusehBvGZNNsn+dCS0FYwQ7Kf8Tf3bC6vxVNPY/Fm8=) 3: 3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (hash: 98fawBN8lcuV1BpV1P5Bi+MmBkZ4ZywKpxF8wCR2MbU=) 4: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: 8xQ+FegCC6V7DZTpdQ6HGxy2dTPz/hz3abBSulABYG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:af:42:e4:21:d3:8a:b4:5c:c6:d9:74:7c:ce:dc:89:5d:21:ec:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Jun 15 22:15:48 2025 GMT Not After : Jun 19 00:01:48 2025 GMT Subject: CN=F3948AD291E172EAECB40B482225E42EF1C1402B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:38:fc:3e:00:24:86:ea:2a:ad:8a:ff:46: f8:43:bc:20:b3:c3:a1:b7:e0:aa:11:9f:33:ac:5d: 6f:71:bb:cb:cc:1f:6a:88:ba:05:52:3b:86:5b:ec: 65:68:16:ae:89:22:84:81:cd:c0:53:1f:6f:c7:02: cd:05:b0:c5:fe:56:91:d7:b1:37:6b:1b:a5:e0:d5: 4a:6f:fe:fe:85:77:a4:33:7b:31:1b:e3:58:5c:ec: 5f:83:13:9a:92:46:a1:e6:56:c7:04:1a:6e:2b:67: bc:3c:5b:1a:6f:c0:4c:58:92:24:22:c5:a5:af:30: 3d:ef:47:0c:ff:2f:7b:43:af:59:2f:a6:73:52:52: 19:ad:35:c9:3e:5f:50:a2:63:64:45:3a:31:7e:d5: b8:ab:21:37:44:a8:c3:1b:78:05:14:ed:47:79:bd: 8e:41:e1:7d:83:0b:38:57:95:87:36:ba:26:31:0c: e3:e5:e8:ef:25:10:e3:d7:30:ca:ef:44:c6:b6:1c: 31:da:c5:54:84:cc:50:64:4c:67:ba:e9:b7:c8:42: 91:f1:77:19:d7:f3:41:1e:85:9f:dc:3d:ee:dc:a7: 4e:2f:50:30:b3:db:19:90:27:8a:bc:8c:51:0c:11: 43:9b:41:0d:c7:f7:ee:fb:5b:5f:05:ab:32:0d:c9: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:94:8A:D2:91:E1:72:EA:EC:B4:0B:48:22:25:E4:2E:F1:C1:40:2B X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b7:4f:44:b0:b3:6e:e6:38:2c:8b:8a:37:15:cb:f4:c9:09: 96:78:89:6e:cd:8e:88:39:2e:2a:33:27:b8:29:48:f2:65:57: cc:d6:66:83:45:ba:39:0b:fc:1e:e7:27:5a:01:91:33:28:56: 34:44:bf:b9:46:83:cd:86:b3:4e:ca:86:e7:ba:7c:d0:5f:56: cf:69:ea:85:00:8b:96:a2:4c:1b:e5:f1:e0:f7:3c:dc:60:3b: 94:72:ce:6d:f0:6f:19:f5:7d:c9:60:a4:7d:8a:8a:05:4d:4c: db:63:f7:b9:e2:c3:cd:c8:d6:f9:9f:ce:7c:90:d5:5e:57:01: 1d:bf:a3:89:b9:e0:f2:e8:22:50:63:f0:b8:11:4b:f5:55:b0: ee:06:19:93:92:c7:4b:72:39:6a:14:f9:e9:fb:8c:99:fe:aa: 62:c0:f0:38:85:f6:38:23:bc:45:1e:93:b8:db:5f:4d:e5:b4: e0:12:8b:02:68:6f:12:23:db:a5:ae:45:ef:2c:28:f4:48:68: c0:d5:6a:6d:0b:1b:a6:04:72:bf:eb:aa:41:52:61:42:c1:0d: 6b:e6:eb:d8:55:f9:48:fc:cd:3a:61:cb:71:cc:8f:f3:6d:8d: 5a:6b:7b:f8:59:00:08:7a:b5:b4:a9:d7:e1:04:a9:94:e0:af: 37:9f:75:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUba9C5CHTirRcxtl0fM7ciV0h7A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNTA2MTUyMjE1NDhaFw0yNTA2MTkwMDAxNDhaMDMxMTAvBgNV BAMTKEYzOTQ4QUQyOTFFMTcyRUFFQ0I0MEI0ODIyMjVFNDJFRjFDMTQwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyDj8PgAkhuoqrYr/RvhDvCCz w6G34KoRnzOsXW9xu8vMH2qIugVSO4Zb7GVoFq6JIoSBzcBTH2/HAs0FsMX+VpHX sTdrG6Xg1Upv/v6Fd6QzezEb41hc7F+DE5qSRqHmVscEGm4rZ7w8WxpvwExYkiQi xaWvMD3vRwz/L3tDr1kvpnNSUhmtNck+X1CiY2RFOjF+1birITdEqMMbeAUU7Ud5 vY5B4X2DCzhXlYc2uiYxDOPl6O8lEOPXMMrvRMa2HDHaxVSEzFBkTGe66bfIQpHx dxnX80EehZ/cPe7cp04vUDCz2xmQJ4q8jFEMEUObQQ3H9+77W18FqzINyY6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU85SK0pHhcurstAtIIiXkLvHBQCswHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK63T0Sws27mOCyLijcVy/TJCZZ4iW7Njog5 LiozJ7gpSPJlV8zWZoNFujkL/B7nJ1oBkTMoVjREv7lGg82Gs07Khue6fNBfVs9p 6oUAi5aiTBvl8eD3PNxgO5Ryzm3wbxn1fclgpH2KigVNTNtj97niw83I1vmfznyQ 1V5XAR2/o4m54PLoIlBj8LgRS/VVsO4GGZOSx0tyOWoU+en7jJn+qmLA8DiF9jgj vEUek7jbX03ltOASiwJobxIj26WuRe8sKPRIaMDVam0LG6YEcr/rqkFSYULBDWvm 69hV+Uj8zTphy3HMj/NtjVpre/hZAAh6tbSp1+EEqZTgrzefdWI= -----END CERTIFICATE-----Generated at Tue Jun 17 21:09:26 2025 by rpki-client