$ rpki-client -vvf repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft File: 1446915299D8F05DBFAD863E0D230435A96FB12A.mft (raw, json) Hash identifier: RqLQ5zuqb+K81isIdIwMt1iXSIEsf8TXBM462C+bd24= Subject key identifier: 95:A3:51:2C:BE:B6:E7:34:FD:E8:3B:8D:66:A7:68:23:AA:83:9F:B0 Authority key identifier: 14:46:91:52:99:D8:F0:5D:BF:AD:86:3E:0D:23:04:35:A9:6F:B1:2A Certificate issuer: /CN=1446915299D8F05DBFAD863E0D230435A96FB12A Certificate serial: 0586F3A7508883F1912E8B351C627D88CC191BC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft Manifest number: 021A Signing time: Thu 07 Aug 2025 02:50:47 +0000 Manifest this update: Thu 07 Aug 2025 02:45:47 +0000 Manifest next update: Sun 10 Aug 2025 14:21:47 +0000 Files and hashes: 1: 1446915299D8F05DBFAD863E0D230435A96FB12A.crl (hash: 6YPvNrmRxtk0Arv7W2TKl7RvUVYSVn8lNdHWsxiolxY=) 2: 3130332e3231392e362e302f32342d3234203d3e203338313537.roa (hash: 5fCH5o/O9UDqH03CvG34hP7WiZzJPNv5TqkPcSqTxsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.crl rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 14:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:86:f3:a7:50:88:83:f1:91:2e:8b:35:1c:62:7d:88:cc:19:1b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1446915299D8F05DBFAD863E0D230435A96FB12A Validity Not Before: Aug 7 02:45:47 2025 GMT Not After : Aug 10 14:21:47 2025 GMT Subject: CN=95A3512CBEB6E734FDE83B8D66A76823AA839FB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:29:64:16:23:67:70:42:09:51:8d:0a:7f: 32:6b:d5:5f:2f:c1:55:12:2e:4f:0c:73:f9:e2:41: 0b:f0:79:a4:1a:f8:1c:48:de:4e:b9:79:df:d3:35: f8:f2:45:85:79:3e:f8:55:28:11:8f:d2:aa:b2:49: 9c:d2:27:47:ff:05:0a:eb:ab:c1:41:ea:07:eb:7a: 99:96:4e:9e:03:2a:04:60:f6:2a:ee:2b:9c:70:3a: 65:d0:5e:6f:21:db:d2:a7:fc:a3:70:ff:eb:54:c0: f4:34:e3:46:86:0b:c6:ff:28:bf:af:0e:34:74:1a: 27:dd:05:0b:05:59:3c:41:05:ef:e9:ff:8b:69:5f: aa:85:f5:b2:ad:d3:70:16:10:4f:33:5d:12:63:4f: ef:2f:9e:fe:f8:58:ee:75:de:96:1f:08:fc:bd:6a: 07:3a:4d:d2:60:7f:05:c0:ef:3b:77:1e:da:29:35: 90:ef:5f:b6:5f:17:01:95:df:d3:6c:a5:1b:e4:49: de:c2:8b:26:38:e7:ef:df:90:b0:32:84:93:11:a0: 11:7d:f3:ae:b9:e3:dc:80:b6:73:0b:52:80:2a:50: 81:d4:c1:0d:7c:9a:77:8a:35:6f:83:0d:9c:61:65: 91:4a:0d:bc:1c:c9:82:8b:11:f5:0d:44:99:29:54: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A3:51:2C:BE:B6:E7:34:FD:E8:3B:8D:66:A7:68:23:AA:83:9F:B0 X509v3 Authority Key Identifier: keyid:14:46:91:52:99:D8:F0:5D:BF:AD:86:3E:0D:23:04:35:A9:6F:B1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:cb:e0:38:2f:0d:07:cb:ef:25:ec:59:8f:8f:4e:05:eb:6a: 04:87:d2:b8:79:b0:a9:c0:a2:84:2f:9e:c9:c0:be:a0:23:1c: b3:2c:28:93:37:b5:9c:89:b9:c5:05:20:b4:75:ed:df:e3:e7: 34:f3:41:4e:cf:72:65:6d:e5:98:60:94:15:30:73:ea:50:5c: 01:d1:f0:32:6b:06:17:c6:71:1d:db:ee:51:67:3d:58:07:f8: 4d:cb:5c:0d:c6:2b:ae:9e:b0:9c:b5:e8:48:28:8d:45:a5:29: 60:2b:6a:d4:f9:44:18:ed:51:04:cd:05:6c:d6:eb:6a:4c:d1: b4:dc:a1:c0:92:6d:d3:cd:b1:f2:ee:c2:6c:83:29:a0:d5:9a: 74:78:ef:f2:d8:bf:02:07:a3:28:47:1b:96:2d:ef:a2:b6:bb: 13:20:e8:22:ef:7d:51:dd:4f:bd:05:40:94:23:7f:22:31:7b: 7d:a0:3e:c3:21:d3:dd:5d:6f:52:fd:01:2f:7c:14:58:8b:7e: 4b:04:c3:c6:61:a4:70:46:5f:ff:4f:91:a1:9f:d0:13:f4:01: a9:e6:b9:dd:f0:45:0f:c0:8f:54:e8:62:e9:6e:f1:1e:d5:d1: 57:dc:b6:5d:b8:7b:40:65:35:dc:3c:fb:a9:4e:30:26:d7:bd: dc:c9:90:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYbzp1CIg/GRLos1HGJ9iMwZG8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0MzVB OTZGQjEyQTAeFw0yNTA4MDcwMjQ1NDdaFw0yNTA4MTAxNDIxNDdaMDMxMTAvBgNV BAMTKDk1QTM1MTJDQkVCNkU3MzRGREU4M0I4RDY2QTc2ODIzQUE4MzlGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVSlkFiNncEIJUY0KfzJr1V8v wVUSLk8Mc/niQQvweaQa+BxI3k65ed/TNfjyRYV5PvhVKBGP0qqySZzSJ0f/BQrr q8FB6gfrepmWTp4DKgRg9iruK5xwOmXQXm8h29Kn/KNw/+tUwPQ040aGC8b/KL+v DjR0GifdBQsFWTxBBe/p/4tpX6qF9bKt03AWEE8zXRJjT+8vnv74WO513pYfCPy9 agc6TdJgfwXA7zt3HtopNZDvX7ZfFwGV39NspRvkSd7CiyY45+/fkLAyhJMRoBF9 866549yAtnMLUoAqUIHUwQ18mneKNW+DDZxhZZFKDbwcyYKLEfUNRJkpVPbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlaNRLL625zT96DuNZqdoI6qDn7AwHwYDVR0j BBgwFoAUFEaRUpnY8F2/rYY+DSMENalvsSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDIxZWU3Ni1hOWZmLTRiZmEtODIyMy05NDZlZWNjY2YwMzYvMC8xNDQ2OTE1Mjk5 RDhGMDVEQkZBRDg2M0UwRDIzMDQzNUE5NkZCMTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0MzVBOTZG QjEyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAyMWVlNzYtYTlmZi00YmZhLTgy MjMtOTQ2ZWVjY2NmMDM2LzAvMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0 MzVBOTZGQjEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLL4DgvDQfL7yXsWY+PTgXragSH0rh5sKnA ooQvnsnAvqAjHLMsKJM3tZyJucUFILR17d/j5zTzQU7PcmVt5ZhglBUwc+pQXAHR 8DJrBhfGcR3b7lFnPVgH+E3LXA3GK66esJy16EgojUWlKWAratT5RBjtUQTNBWzW 62pM0bTcocCSbdPNsfLuwmyDKaDVmnR47/LYvwIHoyhHG5Yt76K2uxMg6CLvfVHd T70FQJQjfyIxe32gPsMh091db1L9AS98FFiLfksEw8ZhpHBGX/9PkaGf0BP0Aanm ud3wRQ/Aj1ToYulu8R7V0Vfctl24e0BlNdw8+6lOMCbXvdzJkJ4= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:30 2025 by rpki-client