$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json) Hash identifier: KeGYHjGUPlz8aFAAGffdHEu9rxWixihes09H/OQk5JM= Subject key identifier: F4:92:A0:1A:52:0E:DF:BF:D1:46:D4:86:35:8D:86:4F:AF:21:36:0E Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 3C80D38B2BFEAF0167C38AE3E81A227055E79E9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft Manifest number: 01D4 Signing time: Tue 17 Jun 2025 03:21:55 +0000 Manifest this update: Tue 17 Jun 2025 03:16:55 +0000 Manifest next update: Fri 20 Jun 2025 05:04:55 +0000 Files and hashes: 1: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=) 2: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: ceGbmmQ6unu1j2UfnbXfrqPzekWy7hZ4NM0oR9/wAw4=) 3: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:80:d3:8b:2b:fe:af:01:67:c3:8a:e3:e8:1a:22:70:55:e7:9e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: Jun 17 03:16:55 2025 GMT Not After : Jun 20 05:04:55 2025 GMT Subject: CN=F492A01A520EDFBFD146D486358D864FAF21360E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:d2:e7:36:13:e8:76:50:92:66:61:9d:df: 3b:23:ee:18:81:dd:36:86:32:5e:cf:34:58:b3:54: 4a:f7:34:63:68:6a:48:9c:c0:4f:85:3d:f7:79:86: 9a:87:5f:68:92:e6:a6:f6:fe:6d:41:3d:54:86:b0: 20:73:ad:da:c1:28:3c:8d:b9:17:e0:c5:df:9c:df: 4b:2f:61:76:3e:c4:06:8f:d0:e8:a9:31:a0:5a:06: 10:22:5a:e4:f7:c1:36:7a:cd:fa:1f:48:f1:82:3b: 1d:de:44:7b:3b:42:17:ea:e0:ce:37:bf:6f:f1:50: 28:8e:eb:2a:b6:9f:60:74:a0:bc:fc:39:ec:f3:82: 7f:1d:54:74:97:ab:f7:bd:91:43:eb:9e:01:17:31: c3:60:04:31:2e:14:5d:5d:f6:27:55:e2:ab:c1:01: 74:c5:3f:d3:40:0e:2a:90:1c:12:a3:f6:cd:4b:1a: 9b:0f:a2:56:90:81:b1:88:01:fb:08:4a:82:ca:d7: 42:05:da:a9:25:55:6f:14:59:15:81:62:e0:aa:86: 68:ee:2f:ca:94:4d:eb:25:c6:86:4e:b3:52:60:08: 5f:a6:f2:cb:b2:a2:37:9b:d0:39:a1:e0:95:54:40: dd:80:48:cb:c1:5f:f4:24:7b:1f:93:bb:3c:b6:90: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:92:A0:1A:52:0E:DF:BF:D1:46:D4:86:35:8D:86:4F:AF:21:36:0E X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d1:77:a2:94:67:0f:17:3e:13:36:f9:b0:fb:64:14:01:d8: 10:67:fd:1b:75:fb:68:f6:17:73:a2:99:b8:d7:96:62:db:48: 9e:16:17:9d:57:70:cd:82:55:79:d9:7b:a3:1b:43:aa:9e:a1: b2:46:09:15:85:63:05:1d:46:5c:4f:0c:0f:30:66:c2:01:d3: c4:9b:8d:88:96:0b:17:20:a8:68:fb:ec:52:cb:f6:6a:89:cc: 33:84:5f:5d:ca:39:1d:06:f5:f8:38:f1:c1:2c:77:3f:25:5d: ce:8f:18:ef:1a:b4:73:0e:ac:0d:c8:cd:d2:58:28:c8:48:56: c9:fe:1d:1c:9e:2d:7f:54:dd:a8:0f:83:44:5d:0e:4e:f4:29: 95:46:84:4a:a0:e6:52:bd:08:ac:c8:55:84:ec:25:25:20:91: 22:36:f9:c8:e5:d9:6f:97:40:ed:39:35:a2:76:b5:fd:f0:9e: 6f:7f:a3:71:bd:ac:22:39:98:94:35:47:0a:95:f2:91:ff:6f: 53:72:bd:4c:01:d5:3d:55:02:0d:65:8b:ac:f4:46:e2:7a:0a: 16:4e:e4:e0:11:44:2e:0b:39:f2:04:ed:e7:7e:6e:de:07:e0: 2a:e6:69:8d:6e:c9:3c:23:18:2d:e9:16:9c:6a:e4:ab:4c:a4: d2:c4:02:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIDTiyv+rwFnw4rj6BoicFXnnp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNTA2MTcwMzE2NTVaFw0yNTA2MjAwNTA0NTVaMDMxMTAvBgNV BAMTKEY0OTJBMDFBNTIwRURGQkZEMTQ2RDQ4NjM1OEQ4NjRGQUYyMTM2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBu9LnNhPodlCSZmGd3zsj7hiB 3TaGMl7PNFizVEr3NGNoakicwE+FPfd5hpqHX2iS5qb2/m1BPVSGsCBzrdrBKDyN uRfgxd+c30svYXY+xAaP0OipMaBaBhAiWuT3wTZ6zfofSPGCOx3eRHs7Qhfq4M43 v2/xUCiO6yq2n2B0oLz8Oezzgn8dVHSXq/e9kUPrngEXMcNgBDEuFF1d9idV4qvB AXTFP9NADiqQHBKj9s1LGpsPolaQgbGIAfsISoLK10IF2qklVW8UWRWBYuCqhmju L8qUTeslxoZOs1JgCF+m8suyojeb0Dmh4JVUQN2ASMvBX/Qkex+Tuzy2kJ9rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9JKgGlIO37/RRtSGNY2GT68hNg4wHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXRd6KUZw8XPhM2+bD7ZBQB2BBn/Rt1+2j2 F3OimbjXlmLbSJ4WF51XcM2CVXnZe6MbQ6qeobJGCRWFYwUdRlxPDA8wZsIB08Sb jYiWCxcgqGj77FLL9mqJzDOEX13KOR0G9fg48cEsdz8lXc6PGO8atHMOrA3IzdJY KMhIVsn+HRyeLX9U3agPg0RdDk70KZVGhEqg5lK9CKzIVYTsJSUgkSI2+cjl2W+X QO05NaJ2tf3wnm9/o3G9rCI5mJQ1RwqV8pH/b1NyvUwB1T1VAg1li6z0RuJ6ChZO 5OARRC4LOfIE7ed+bt4H4CrmaY1uyTwjGC3pFpxq5KtMpNLEAlU= -----END CERTIFICATE-----Generated at Tue Jun 17 14:20:55 2025 by rpki-client