$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft File: 46A7C8702C547FC42210027DD254571031AE05DC.mft (raw, json) Hash identifier: /10LJXKefUVLgKj8iY6bqjzsHRw1kp2/HdB7PsHynPc= Subject key identifier: F6:6E:EF:6E:3E:7C:43:53:91:14:C9:CD:80:A1:59:DC:2B:20:AD:74 Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC Certificate issuer: /CN=46A7C8702C547FC42210027DD254571031AE05DC Certificate serial: 1ADB0BB862B0B9FAE0DC4E4220F57285A9E5B13F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft Manifest number: 022E Signing time: Mon 03 Nov 2025 18:51:44 +0000 Manifest this update: Mon 03 Nov 2025 18:46:44 +0000 Manifest next update: Fri 07 Nov 2025 01:14:44 +0000 Files and hashes: 1: 46A7C8702C547FC42210027DD254571031AE05DC.crl (hash: b9+9uBjKjOhiy7Pe9raJUx3beBV6+OwwiWSclksfkiQ=) 2: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: kdMYWHxqdB4fcu/Vgc4AfVoBG1lh0SUu+dZG5J22ir0=) 3: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: DLyhX1mkxtUQRH14nsnVNFFV/Lnw+00NFrAkbDg4bb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:db:0b:b8:62:b0:b9:fa:e0:dc:4e:42:20:f5:72:85:a9:e5:b1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC Validity Not Before: Nov 3 18:46:44 2025 GMT Not After : Nov 7 01:14:44 2025 GMT Subject: CN=F66EEF6E3E7C43539114C9CD80A159DC2B20AD74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:72:5c:4c:db:95:a5:a5:5e:4a:64:3f:02: e2:0b:b8:32:17:b3:4c:b6:a3:cd:6c:5a:f3:ad:e5: 65:23:fd:01:b9:59:9c:b7:ba:6f:e2:71:8e:aa:67: be:f6:0d:f9:19:14:ce:fa:65:0b:18:08:b6:01:8b: cc:d3:6d:18:d2:c5:65:c6:46:57:06:eb:f2:5b:05: f8:fa:38:fa:4a:43:fb:61:71:00:09:92:81:da:8f: a5:dd:35:f0:0c:9e:28:1e:ac:8e:51:08:4c:b8:ee: 86:0b:88:cd:d4:71:70:68:e2:b3:f5:14:e4:71:59: 56:75:c4:61:c2:7a:06:80:be:ba:4f:03:e4:59:69: b1:25:76:de:eb:c3:94:8b:6a:da:9a:03:13:84:4d: 16:32:8f:01:3e:11:f7:ca:5c:03:aa:8e:e8:0e:f8: a9:7c:39:a6:9e:25:fe:1a:b1:da:f0:19:ac:7d:3e: ed:6f:e2:e3:19:f1:e2:13:ae:d2:13:bb:d0:36:dd: 63:b1:34:88:fb:e1:1d:5d:6f:26:44:57:9b:c5:f3: fb:b7:b4:a8:f0:c4:68:0d:1a:87:87:2a:88:ad:61: dc:88:d8:5f:dc:7b:ee:91:ea:42:07:4d:2c:90:07: 8d:38:29:88:fb:f6:4d:21:8c:d7:5b:79:b4:d8:1f: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6E:EF:6E:3E:7C:43:53:91:14:C9:CD:80:A1:59:DC:2B:20:AD:74 X509v3 Authority Key Identifier: keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:61:eb:5c:af:66:9b:37:53:f3:9a:1f:a7:13:f6:a1:f5:7e: 9b:0b:bd:25:b4:f0:1c:05:34:79:91:89:e0:4c:09:79:34:01: 6f:20:ba:d2:cf:33:49:b1:23:b8:fa:ce:24:07:fe:5e:f7:c5: d4:6a:51:ec:ec:f0:85:37:45:12:49:cd:d3:6d:63:29:06:ea: 94:e8:88:23:0e:ba:01:8b:73:5b:30:ef:c4:6e:79:a0:2b:27: 5c:39:e1:11:12:e4:45:db:36:b2:6f:8c:29:e7:7b:73:9b:1f: cd:c1:3c:8d:a0:dd:f6:83:97:c6:68:88:7a:6e:38:e1:db:c6: b3:cc:4f:0b:88:44:56:a5:71:0d:d4:f1:36:1b:0c:e4:2a:46: 02:18:18:32:ad:3e:2a:83:84:cf:dd:c6:f3:78:10:c2:5d:9e: 2d:30:f8:aa:86:fb:22:f6:60:82:a3:c4:36:9b:92:f2:6a:8a: 18:a8:d8:28:95:59:dc:eb:16:e3:99:1d:b1:23:51:a1:c9:38: 89:6c:49:f2:db:90:23:cf:1f:24:38:7b:40:8a:6c:bf:7e:53: 89:3c:45:bd:ea:eb:d6:da:0b:b0:68:25:9d:ce:19:15:cb:0d: 88:eb:36:f1:e6:5c:da:ee:53:c4:81:8d:e9:7c:0b:3c:4b:56: 76:02:be:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtsLuGKwufrg3E5CIPVyhanlsT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAz MUFFMDVEQzAeFw0yNTExMDMxODQ2NDRaFw0yNTExMDcwMTE0NDRaMDMxMTAvBgNV BAMTKEY2NkVFRjZFM0U3QzQzNTM5MTE0QzlDRDgwQTE1OURDMkIyMEFENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw73JcTNuVpaVeSmQ/AuILuDIX s0y2o81sWvOt5WUj/QG5WZy3um/icY6qZ772DfkZFM76ZQsYCLYBi8zTbRjSxWXG RlcG6/JbBfj6OPpKQ/thcQAJkoHaj6XdNfAMnigerI5RCEy47oYLiM3UcXBo4rP1 FORxWVZ1xGHCegaAvrpPA+RZabEldt7rw5SLatqaAxOETRYyjwE+EffKXAOqjugO +Kl8OaaeJf4asdrwGax9Pu1v4uMZ8eITrtITu9A23WOxNIj74R1dbyZEV5vF8/u3 tKjwxGgNGoeHKoitYdyI2F/ce+6R6kIHTSyQB404KYj79k0hjNdbebTYH3kHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9m7vbj58Q1ORFMnNgKFZ3CsgrXQwHwYDVR0j BBgwFoAURqfIcCxUf8QiEAJ90lRXEDGuBdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTYwMDQ4Ni05NzgwLTQzZWUtYmIyZC1iODExMDk0YTE0NDUvMC80NkE3Qzg3MDJD NTQ3RkM0MjIxMDAyN0REMjU0NTcxMDMxQUUwNURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAzMUFF MDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3 MTAzMUFFMDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlh61yvZps3U/OaH6cT9qH1fpsLvSW08BwF NHmRieBMCXk0AW8gutLPM0mxI7j6ziQH/l73xdRqUezs8IU3RRJJzdNtYykG6pTo iCMOugGLc1sw78RueaArJ1w54RES5EXbNrJvjCnne3ObH83BPI2g3faDl8ZoiHpu OOHbxrPMTwuIRFalcQ3U8TYbDOQqRgIYGDKtPiqDhM/dxvN4EMJdni0w+KqG+yL2 YIKjxDabkvJqihio2CiVWdzrFuOZHbEjUaHJOIlsSfLbkCPPHyQ4e0CKbL9+U4k8 Rb3q69baC7BoJZ3OGRXLDYjrNvHmXNruU8SBjel8CzxLVnYCvvk= -----END CERTIFICATE-----Generated at Tue Nov 4 08:13:56 2025 by rpki-client