$ rpki-client -vvf repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft File: 1446915299D8F05DBFAD863E0D230435A96FB12A.mft (raw, json) Hash identifier: u+hRW5xO2Uhyddxz7Kkq1kAm5gf+GIthagH1NhzIFNc= Subject key identifier: 17:96:48:98:AF:99:FF:96:73:D6:F6:11:76:99:65:78:0A:8F:55:7F Authority key identifier: 14:46:91:52:99:D8:F0:5D:BF:AD:86:3E:0D:23:04:35:A9:6F:B1:2A Certificate issuer: /CN=1446915299D8F05DBFAD863E0D230435A96FB12A Certificate serial: 17186170F374E1173635B67915A31C8145F96DF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft Manifest number: 0241 Signing time: Mon 03 Nov 2025 20:10:47 +0000 Manifest this update: Mon 03 Nov 2025 20:05:47 +0000 Manifest next update: Fri 07 Nov 2025 01:14:47 +0000 Files and hashes: 1: 1446915299D8F05DBFAD863E0D230435A96FB12A.crl (hash: b/DNaAnsDETf612DstJksK+nuf0CSK+pbb84Ceiyt/8=) 2: 3130332e3231392e362e302f32342d3234203d3e203338313537.roa (hash: 5fCH5o/O9UDqH03CvG34hP7WiZzJPNv5TqkPcSqTxsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.crl rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:18:61:70:f3:74:e1:17:36:35:b6:79:15:a3:1c:81:45:f9:6d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1446915299D8F05DBFAD863E0D230435A96FB12A Validity Not Before: Nov 3 20:05:47 2025 GMT Not After : Nov 7 01:14:47 2025 GMT Subject: CN=17964898AF99FF9673D6F611769965780A8F557F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:20:d6:cd:11:d2:db:03:54:62:98:c8:bd: 24:ab:22:12:87:33:c8:9e:8e:7a:bd:e0:06:0a:ce: 86:79:9f:46:27:cb:14:05:f2:ea:06:d3:34:b5:85: 06:11:18:29:44:e5:3c:9f:b7:bc:a3:6b:90:24:d3: c9:88:93:68:0b:cf:d5:36:f7:ab:7e:ff:f9:25:4c: 9a:da:a0:e9:61:38:bd:b0:5f:09:fc:6c:e9:f8:f5: 6e:c0:99:c9:d6:2b:7a:84:77:3e:a3:bc:ee:3c:b4: 6b:19:3e:e6:a2:cd:c3:17:bf:3b:9b:e6:b4:dc:b5: 0d:3a:98:7e:76:23:0e:81:6f:19:2e:19:4e:de:1b: 58:e7:d9:1f:6e:78:7a:fc:fc:2e:5f:42:c0:a9:69: 7c:18:d6:53:4d:c0:fe:5b:01:eb:96:7b:bb:4a:b8: e0:58:ee:2d:2f:fc:32:ae:f6:fa:4a:21:7d:85:85: 62:4e:2c:08:69:d0:ee:ab:44:b3:e0:95:31:7c:64: 2b:f6:b8:31:bd:5b:29:ca:cc:99:8c:10:c7:b5:2b: 0f:35:d8:a9:da:8c:a8:e9:3c:10:66:ea:59:24:60: 41:b1:7e:c2:40:ae:d5:a0:c4:50:4b:a6:c5:7c:33: 6d:83:60:07:6e:f9:53:82:8e:7e:8f:56:6a:4e:37: b9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:96:48:98:AF:99:FF:96:73:D6:F6:11:76:99:65:78:0A:8F:55:7F X509v3 Authority Key Identifier: keyid:14:46:91:52:99:D8:F0:5D:BF:AD:86:3E:0D:23:04:35:A9:6F:B1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:0d:73:6d:d6:fa:c2:37:ba:a9:42:e9:14:5f:91:fc:2f:63: 0b:59:bc:69:0e:f6:4f:9b:58:cd:30:c5:06:4a:dd:d1:df:9d: 68:d1:fc:79:f9:0d:71:51:89:a5:e7:ab:ee:bd:21:08:c9:d0: 0e:4b:ba:3a:38:b0:6a:41:b7:32:f4:40:35:ab:8d:e7:45:3a: a5:e7:b8:8d:35:a5:f7:a6:50:b6:a7:25:5e:38:2a:1b:fb:fb: de:00:65:a0:84:3d:c7:f9:51:df:6e:c3:92:e9:04:89:ae:f1: 09:8f:c1:a8:3b:83:b9:6f:49:62:3d:6a:7b:5f:16:76:3d:7a: 89:56:9d:6d:10:14:e2:fb:cb:15:2d:3a:92:79:f6:42:06:ed: 8b:76:d5:4c:d7:a9:7e:f6:19:6b:93:ab:3a:10:9f:e8:28:70: cb:dc:0a:c3:7d:59:b0:cb:ac:04:1b:39:0e:8c:97:18:47:f4: 7a:0c:f3:93:0d:66:57:1a:f6:44:6c:fb:73:fa:bc:20:1d:e2: 81:a6:1b:6d:bb:ca:ba:4a:91:db:a1:80:94:e7:36:1f:70:f9: 8b:31:78:ed:85:55:ea:c3:f6:02:ca:62:0d:09:aa:6a:d1:f3: 8a:eb:73:ed:df:e5:ed:c0:4d:c3:e7:ce:cd:79:d7:7e:fb:7b: 8d:f6:68:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFxhhcPN04Rc2NbZ5FaMcgUX5bfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0MzVB OTZGQjEyQTAeFw0yNTExMDMyMDA1NDdaFw0yNTExMDcwMTE0NDdaMDMxMTAvBgNV BAMTKDE3OTY0ODk4QUY5OUZGOTY3M0Q2RjYxMTc2OTk2NTc4MEE4RjU1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRXiDWzRHS2wNUYpjIvSSrIhKH M8iejnq94AYKzoZ5n0YnyxQF8uoG0zS1hQYRGClE5Tyft7yja5Ak08mIk2gLz9U2 96t+//klTJraoOlhOL2wXwn8bOn49W7AmcnWK3qEdz6jvO48tGsZPuaizcMXvzub 5rTctQ06mH52Iw6BbxkuGU7eG1jn2R9ueHr8/C5fQsCpaXwY1lNNwP5bAeuWe7tK uOBY7i0v/DKu9vpKIX2FhWJOLAhp0O6rRLPglTF8ZCv2uDG9WynKzJmMEMe1Kw81 2KnajKjpPBBm6lkkYEGxfsJArtWgxFBLpsV8M22DYAdu+VOCjn6PVmpON7lDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF5ZImK+Z/5Zz1vYRdplleAqPVX8wHwYDVR0j BBgwFoAUFEaRUpnY8F2/rYY+DSMENalvsSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDIxZWU3Ni1hOWZmLTRiZmEtODIyMy05NDZlZWNjY2YwMzYvMC8xNDQ2OTE1Mjk5 RDhGMDVEQkZBRDg2M0UwRDIzMDQzNUE5NkZCMTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0MzVBOTZG QjEyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAyMWVlNzYtYTlmZi00YmZhLTgy MjMtOTQ2ZWVjY2NmMDM2LzAvMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0 MzVBOTZGQjEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM0Nc23W+sI3uqlC6RRfkfwvYwtZvGkO9k+b WM0wxQZK3dHfnWjR/Hn5DXFRiaXnq+69IQjJ0A5Lujo4sGpBtzL0QDWrjedFOqXn uI01pfemULanJV44Khv7+94AZaCEPcf5Ud9uw5LpBImu8QmPwag7g7lvSWI9antf FnY9eolWnW0QFOL7yxUtOpJ59kIG7Yt21UzXqX72GWuTqzoQn+gocMvcCsN9WbDL rAQbOQ6MlxhH9HoM85MNZlca9kRs+3P6vCAd4oGmG227yrpKkduhgJTnNh9w+Ysx eO2FVerD9gLKYg0JqmrR84rrc+3f5e3ATcPnzs151377e432aJE= -----END CERTIFICATE-----Generated at Tue Nov 4 18:51:13 2025 by rpki-client