$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json) Hash identifier: Mn0yT3ci6LSZUUvD2GAGdPeugInGJJLZtDhsarHvOUE= Subject key identifier: 36:F1:32:4F:81:A7:5D:FD:CD:A3:AD:CC:E1:CC:83:BE:78:C7:55:FE Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 2D91F903209F9CF859DDF4B50F699CE7238F88FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft Manifest number: 01EB Signing time: Fri 08 Aug 2025 13:01:24 +0000 Manifest this update: Fri 08 Aug 2025 12:56:24 +0000 Manifest next update: Mon 11 Aug 2025 18:38:24 +0000 Files and hashes: 1: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: XiPgBDVMzv1aX/HzOLN1zUlVrkexyJfVSMV3BWkFp+4=) 2: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=) 3: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:91:f9:03:20:9f:9c:f8:59:dd:f4:b5:0f:69:9c:e7:23:8f:88:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: Aug 8 12:56:24 2025 GMT Not After : Aug 11 18:38:24 2025 GMT Subject: CN=36F1324F81A75DFDCDA3ADCCE1CC83BE78C755FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:33:2d:20:a3:ae:cc:fc:6b:bc:15:40:2f: 0f:9b:15:45:35:65:50:74:33:70:7b:75:31:47:c0: 10:66:2f:11:fb:da:f7:66:aa:5c:a9:37:25:c2:3f: af:d5:4f:da:46:44:6f:2f:3c:33:56:6d:18:c5:fc: 2b:57:1b:20:0a:7e:12:a5:3a:55:b9:2f:28:d7:fa: 64:92:67:98:59:9e:54:7d:fd:bc:60:f5:14:9a:74: 39:0b:4d:3b:a1:4e:f9:55:03:a6:26:ee:16:f8:1e: bd:1f:dd:35:a7:c4:18:4e:87:aa:03:f1:17:30:34: 56:7a:41:db:bc:82:d1:81:20:25:9c:46:5b:15:75: b1:ed:f1:3c:a5:55:c4:24:c2:8c:9a:01:1e:0d:65: da:8a:b3:79:96:20:8b:2a:b2:fe:42:03:ac:15:f3: 68:c8:80:3f:d4:60:82:97:cd:4c:59:79:0e:66:10: e0:ad:51:46:d7:12:a8:2a:4c:9e:b8:14:3d:d9:43: 5b:6d:64:0e:a4:28:35:46:8c:94:be:f2:f2:cb:d5: 59:c3:d1:13:d7:88:0b:4a:05:6d:8f:bf:9e:2c:b6: 15:c5:69:1c:b4:1d:72:c2:11:7e:27:4d:01:65:a7: c6:89:92:63:a7:ba:77:52:06:7f:31:eb:17:9f:c4: 2d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F1:32:4F:81:A7:5D:FD:CD:A3:AD:CC:E1:CC:83:BE:78:C7:55:FE X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:89:66:89:fc:9f:cd:82:af:3b:f7:76:ef:67:e8:55:81:23: b0:68:5d:77:f9:e3:19:8d:f0:d7:99:d0:b7:51:50:7f:6d:8a: 61:70:1e:fc:83:af:b5:d0:94:4e:e2:ad:8c:ba:a3:4c:d7:37: 32:0d:06:5e:33:33:85:e1:46:c1:c8:d7:27:6c:18:af:54:a7: 9b:01:b4:51:5c:be:e6:cc:58:e9:31:a6:d7:84:82:b7:65:d1: 15:66:58:1c:0f:b3:2e:03:ba:87:c8:f2:81:49:bb:ff:46:39: 11:43:a3:6e:38:30:78:c6:8a:12:44:00:1a:bf:04:63:d5:bb: 06:64:15:d9:e7:57:51:61:f9:10:38:2f:8a:b2:9a:99:e0:35: 06:7f:3d:ea:6c:a2:6b:95:54:25:1d:64:fb:7f:45:d3:07:9c: ab:80:90:f7:0a:bb:60:e6:1f:a8:b3:35:56:89:7e:79:6b:0d: b2:cc:72:01:83:69:cc:7a:b2:41:55:be:20:e4:cd:f9:3d:6e: fb:b6:39:ff:dc:36:4e:86:8d:dd:87:f6:d1:a6:74:2a:62:ee: 84:66:94:10:b2:fb:65:7f:ae:17:74:f9:a9:b2:9f:66:8e:3c: c8:ba:7a:62:28:f1:16:ea:4a:21:55:dd:7a:9e:ac:20:1a:41: ac:19:8f:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZH5AyCfnPhZ3fS1D2mc5yOPiPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNTA4MDgxMjU2MjRaFw0yNTA4MTExODM4MjRaMDMxMTAvBgNV BAMTKDM2RjEzMjRGODFBNzVERkRDREEzQURDQ0UxQ0M4M0JFNzhDNzU1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoTMtIKOuzPxrvBVALw+bFUU1 ZVB0M3B7dTFHwBBmLxH72vdmqlypNyXCP6/VT9pGRG8vPDNWbRjF/CtXGyAKfhKl OlW5LyjX+mSSZ5hZnlR9/bxg9RSadDkLTTuhTvlVA6Ym7hb4Hr0f3TWnxBhOh6oD 8RcwNFZ6Qdu8gtGBICWcRlsVdbHt8TylVcQkwoyaAR4NZdqKs3mWIIsqsv5CA6wV 82jIgD/UYIKXzUxZeQ5mEOCtUUbXEqgqTJ64FD3ZQ1ttZA6kKDVGjJS+8vLL1VnD 0RPXiAtKBW2Pv54sthXFaRy0HXLCEX4nTQFlp8aJkmOnundSBn8x6xefxC3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNvEyT4GnXf3No63M4cyDvnjHVf4wHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuJZon8n82Crzv3du9n6FWBI7BoXXf54xmN 8NeZ0LdRUH9timFwHvyDr7XQlE7irYy6o0zXNzINBl4zM4XhRsHI1ydsGK9Up5sB tFFcvubMWOkxpteEgrdl0RVmWBwPsy4DuofI8oFJu/9GORFDo244MHjGihJEABq/ BGPVuwZkFdnnV1Fh+RA4L4qympngNQZ/PepsomuVVCUdZPt/RdMHnKuAkPcKu2Dm H6izNVaJfnlrDbLMcgGDacx6skFVviDkzfk9bvu2Of/cNk6Gjd2H9tGmdCpi7oRm lBCy+2V/rhd0+amyn2aOPMi6emIo8RbqSiFV3XqerCAaQawZj50= -----END CERTIFICATE-----Generated at Sat Aug 9 22:41:25 2025 by rpki-client