$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: PMf74EpL47rgtFpiI8qDLU1VPoASq9pihsL+lTWjIlQ= Subject key identifier: F7:DF:19:84:72:F4:19:D6:99:81:26:6F:E7:BB:43:AC:B2:BB:28:F6 Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 3209F2D87C99E2EF280A96EC6EC7BB19C42101FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: EF Signing time: Mon 28 Apr 2025 02:52:16 +0000 Manifest this update: Mon 28 Apr 2025 02:47:16 +0000 Manifest next update: Thu 01 May 2025 03:54:16 +0000 Files and hashes: 1: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: fcFY1L0uZnkBLhYn5ZOUGZDagR5Ga8ICvQ9sNS6JUXk=) 2: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: eSDeohW1AIrtqkyx+N42CigZjVYBQYQN7zrX2JowEv8=) 3: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: HFThGBdFjmidhJmHMDXCoS6ycnhZcQfS2zGjsOicK3g=) 4: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: JLabqGnM8+YvvH11bFEaYilBFvdmjlNw60f4ngZNgvw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 03:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:09:f2:d8:7c:99:e2:ef:28:0a:96:ec:6e:c7:bb:19:c4:21:01:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Apr 28 02:47:16 2025 GMT Not After : May 1 03:54:16 2025 GMT Subject: CN=F7DF198472F419D69981266FE7BB43ACB2BB28F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:2b:00:ab:19:74:4e:c0:cd:ab:fd:0f:1a: 6f:20:80:bc:86:39:b2:60:14:72:c9:ec:08:ac:20: 90:27:0d:4d:fa:7f:1f:a8:2c:6a:2c:79:ae:ca:70: 17:89:44:16:84:49:d9:bb:09:33:cc:2e:37:db:84: fb:5f:30:3b:bb:6a:5f:7a:97:a4:3d:2f:a3:af:0e: 02:2a:54:bf:28:49:ab:05:cf:d8:33:12:82:05:bd: 98:4e:99:d3:29:98:a3:58:0b:6f:98:e7:c2:26:1f: b5:46:33:db:5f:8f:f7:e3:13:c8:d9:70:1e:0d:eb: dd:59:b8:2e:dd:3c:27:dc:73:15:36:ea:07:fc:64: e6:af:90:d2:3b:f7:d8:31:69:31:03:3e:a3:3b:60: 36:09:73:a3:15:35:9c:f1:72:67:1c:0d:8c:aa:f5: b2:e9:5e:34:72:f5:cd:f9:ed:24:92:b1:ed:d9:d6: c6:e1:64:2b:f9:7b:90:ca:f5:1e:bb:71:42:7a:3b: bf:d8:05:bf:3f:85:7a:b3:5c:eb:90:eb:60:7d:51: f1:8a:a8:d5:2b:17:63:29:b9:19:5d:a0:38:5c:62: 04:76:47:13:ff:ba:de:a6:19:8a:9e:8b:fb:a1:e1: 3c:26:99:ab:73:5e:58:6d:26:02:77:b4:c0:f4:75: 0b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DF:19:84:72:F4:19:D6:99:81:26:6F:E7:BB:43:AC:B2:BB:28:F6 X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:54:7d:c8:ab:3c:c2:9a:2a:53:92:88:78:31:56:ba:16:fe: fc:7f:78:0a:20:2c:3e:ff:bd:54:24:84:ca:7c:a6:2c:a0:7e: 57:20:8a:bf:03:29:70:66:4d:14:e5:b5:c4:aa:3a:3e:94:0a: 24:0c:d0:1e:1a:4f:fe:c5:a2:a0:95:c5:70:83:7e:ab:87:04: 7a:a3:28:2d:1b:ee:9d:4d:a0:a8:7a:63:1c:3a:d9:d5:dd:e8: 67:64:20:c2:ad:0a:da:38:98:43:1b:18:ba:da:18:c1:87:70: 81:3a:b5:91:ff:51:54:48:8e:fc:de:bb:83:b2:f3:c5:5f:9f: 47:fb:87:0a:fb:2e:7d:8f:1c:85:e5:7b:06:e0:15:8c:87:bb: 70:64:31:36:26:e7:f8:2b:58:d6:d7:8d:af:aa:47:93:d5:6c: ca:9e:9b:e7:14:1a:87:8d:89:f0:9c:6f:e2:50:9a:4e:69:69: 86:a2:9f:2e:da:2b:74:c4:7d:c8:52:42:36:73:db:b7:8e:1a: 78:87:48:43:fc:9d:d6:b5:a4:84:09:42:28:b3:4c:0e:8f:83: 0e:c8:23:9d:1a:af:ca:62:cd:06:01:fe:8a:69:0b:98:29:0d: a7:9d:00:b0:65:aa:2b:b9:86:8e:67:dd:05:f7:59:3c:fe:f3: e0:41:14:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgny2HyZ4u8oCpbsbse7GcQhAf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTA0MjgwMjQ3MTZaFw0yNTA1MDEwMzU0MTZaMDMxMTAvBgNV BAMTKEY3REYxOTg0NzJGNDE5RDY5OTgxMjY2RkU3QkI0M0FDQjJCQjI4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWHCsAqxl0TsDNq/0PGm8ggLyG ObJgFHLJ7AisIJAnDU36fx+oLGosea7KcBeJRBaESdm7CTPMLjfbhPtfMDu7al96 l6Q9L6OvDgIqVL8oSasFz9gzEoIFvZhOmdMpmKNYC2+Y58ImH7VGM9tfj/fjE8jZ cB4N691ZuC7dPCfccxU26gf8ZOavkNI799gxaTEDPqM7YDYJc6MVNZzxcmccDYyq 9bLpXjRy9c357SSSse3Z1sbhZCv5e5DK9R67cUJ6O7/YBb8/hXqzXOuQ62B9UfGK qNUrF2MpuRldoDhcYgR2RxP/ut6mGYqei/uh4TwmmatzXlhtJgJ3tMD0dQvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU998ZhHL0GdaZgSZv57tDrLK7KPYwHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1UfcirPMKaKlOSiHgxVroW/vx/eAogLD7/ vVQkhMp8piygflcgir8DKXBmTRTltcSqOj6UCiQM0B4aT/7FoqCVxXCDfquHBHqj KC0b7p1NoKh6Yxw62dXd6GdkIMKtCto4mEMbGLraGMGHcIE6tZH/UVRIjvzeu4Oy 88Vfn0f7hwr7Ln2PHIXlewbgFYyHu3BkMTYm5/grWNbXja+qR5PVbMqem+cUGoeN ifCcb+JQmk5paYainy7aK3TEfchSQjZz27eOGniHSEP8nda1pIQJQiizTA6Pgw7I I50ar8pizQYB/oppC5gpDaedALBlqiu5ho5n3QX3WTz+8+BBFCE= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:01 2025 by rpki-client