$ rpki-client -vvf repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft File: 145856688D58EEB673E59CC02D21114CF78E87E5.mft (raw, json) Hash identifier: UygCCV1v3t+BpnT2Of7vOye3HDHxTWnCHTi85MNJVqQ= Subject key identifier: 2E:75:E9:55:FB:F8:4B:23:79:A9:D6:B0:55:C6:2D:5F:2E:8A:D1:99 Authority key identifier: 14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 Certificate issuer: /CN=145856688D58EEB673E59CC02D21114CF78E87E5 Certificate serial: 0B3E4470C3F9D5F422752F2E609A6C53C2B6B98C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft Manifest number: BE Signing time: Mon 03 Nov 2025 04:10:52 +0000 Manifest this update: Mon 03 Nov 2025 04:05:52 +0000 Manifest next update: Thu 06 Nov 2025 11:37:52 +0000 Files and hashes: 1: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: NiBjkneS23NjWIZK7/S3rCptTDYB7bSoabsYG4VVavg=) 2: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: 9RQvrG19d/kbbr9j04wj/AolcfFkLEsHEjyLp9uYWCo=) 3: 145856688D58EEB673E59CC02D21114CF78E87E5.crl (hash: 1Yy1A9UVLaVaVyv2lDEqyGxEz/T1/ewh3qKTOY9kJ7Q=) 4: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: 9tXtFpTSK8/Gv6WVGpyrNnATNqrkJEwmK6WzmGqcUmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3e:44:70:c3:f9:d5:f4:22:75:2f:2e:60:9a:6c:53:c2:b6:b9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145856688D58EEB673E59CC02D21114CF78E87E5 Validity Not Before: Nov 3 04:05:52 2025 GMT Not After : Nov 6 11:37:52 2025 GMT Subject: CN=2E75E955FBF84B2379A9D6B055C62D5F2E8AD199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ac:77:ac:3c:8b:76:39:9b:cb:19:84:b0:d3: 34:5f:d8:44:c9:2e:90:eb:b9:d7:7a:ad:a5:91:c5: 7b:46:62:ac:23:77:a7:c0:58:f9:64:bb:eb:ce:ec: c4:0d:d9:22:03:4c:30:9a:77:ae:8a:35:93:b9:23: e6:52:88:d8:06:de:69:42:2e:e2:79:26:8c:d5:ff: e8:5f:2c:d4:a6:44:b5:7c:2e:b7:4a:19:a1:dc:0c: df:aa:d5:4a:5d:39:5c:b1:ae:09:0e:6c:71:f3:41: 14:98:44:e2:0d:0f:ce:60:9d:e5:00:b0:e6:c7:81: 93:8c:2c:dc:2f:8a:ff:7f:af:0d:ae:70:34:43:45: f1:1a:d4:51:55:89:33:03:57:6f:4c:c5:21:af:c6: 8d:da:45:36:1b:4d:8f:8b:38:53:4c:7e:44:fd:db: a5:31:a3:b9:cd:33:dd:37:b5:95:63:20:3b:d9:13: 10:9b:5a:d0:c9:99:ff:ea:c8:49:d0:25:7d:cb:93: c1:fc:7d:2a:20:53:7e:4e:85:65:ae:b2:b4:87:56: f4:71:73:f3:52:f5:b8:9b:7b:02:cb:b5:df:5a:27: c7:7d:a3:57:2d:52:61:5a:b3:ae:25:fd:71:64:35: 99:36:67:7b:6b:cb:46:43:a0:96:ea:c8:ae:17:73: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:75:E9:55:FB:F8:4B:23:79:A9:D6:B0:55:C6:2D:5F:2E:8A:D1:99 X509v3 Authority Key Identifier: keyid:14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:7a:19:ce:b6:8b:bc:b4:93:45:5d:d1:66:4d:4d:a0:42:b0: d8:34:83:d4:65:06:db:1e:0e:fb:42:4f:52:37:0d:1f:0c:fb: 1a:e8:76:45:ca:81:65:eb:5d:5d:dd:7d:37:f0:bb:18:7c:79: af:03:62:34:38:30:2e:d1:29:a1:84:0e:26:4a:93:e9:a5:5d: 66:45:3e:92:e7:29:bf:3c:3b:72:f9:b9:15:40:00:0c:7d:08: df:79:c6:70:4b:8d:6f:7d:4c:88:05:c3:5b:27:c4:9d:fd:ce: e4:dd:8b:f9:3c:e3:4d:ec:a7:ab:60:ae:96:40:6f:41:38:42: 16:8e:58:5f:3c:32:d0:8b:87:ec:d9:eb:b1:4a:32:28:11:d7: 93:75:42:f6:f3:2c:73:5a:c0:25:b9:8f:f7:1d:52:cb:eb:31: c9:b0:9a:1e:da:5b:19:80:a1:6f:64:2b:95:70:05:71:d3:16: 69:9f:56:d6:a9:80:6e:85:66:67:bf:35:00:e4:bb:a5:73:4d: d4:64:f4:31:f0:8f:d6:b6:f3:c5:b4:6f:31:59:58:d4:10:68: e2:13:c8:76:93:23:b2:6d:ef:20:9d:a2:69:3f:2b:03:13:fd: df:a0:48:94:17:9c:a7:4a:19:3b:14:03:f7:e1:cd:d5:35:5b: b0:29:75:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCz5EcMP51fQidS8uYJpsU8K2uYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENG NzhFODdFNTAeFw0yNTExMDMwNDA1NTJaFw0yNTExMDYxMTM3NTJaMDMxMTAvBgNV BAMTKDJFNzVFOTU1RkJGODRCMjM3OUE5RDZCMDU1QzYyRDVGMkU4QUQxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdrHesPIt2OZvLGYSw0zRf2ETJ LpDrudd6raWRxXtGYqwjd6fAWPlku+vO7MQN2SIDTDCad66KNZO5I+ZSiNgG3mlC LuJ5JozV/+hfLNSmRLV8LrdKGaHcDN+q1UpdOVyxrgkObHHzQRSYROIND85gneUA sObHgZOMLNwviv9/rw2ucDRDRfEa1FFViTMDV29MxSGvxo3aRTYbTY+LOFNMfkT9 26Uxo7nNM903tZVjIDvZExCbWtDJmf/qyEnQJX3Lk8H8fSogU35OhWWusrSHVvRx c/NS9bibewLLtd9aJ8d9o1ctUmFas64l/XFkNZk2Z3try0ZDoJbqyK4Xc8cFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULnXpVfv4SyN5qdawVcYtXy6K0ZkwHwYDVR0j BBgwFoAUFFhWaI1Y7rZz5ZzALSERTPeOh+UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmIwNWYzNi1lMTc0LTRkYWQtYmMyYS0wODkyNmM1ZGQwNDYvMC8xNDU4NTY2ODhE NThFRUI2NzNFNTlDQzAyRDIxMTE0Q0Y3OEU4N0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENGNzhF ODdFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj MmEtMDg5MjZjNWRkMDQ2LzAvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTEx NENGNzhFODdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKt6Gc62i7y0k0Vd0WZNTaBCsNg0g9RlBtse DvtCT1I3DR8M+xrodkXKgWXrXV3dfTfwuxh8ea8DYjQ4MC7RKaGEDiZKk+mlXWZF PpLnKb88O3L5uRVAAAx9CN95xnBLjW99TIgFw1snxJ39zuTdi/k8403sp6tgrpZA b0E4QhaOWF88MtCLh+zZ67FKMigR15N1QvbzLHNawCW5j/cdUsvrMcmwmh7aWxmA oW9kK5VwBXHTFmmfVtapgG6FZme/NQDku6VzTdRk9DHwj9a288W0bzFZWNQQaOIT yHaTI7Jt7yCdomk/KwMT/d+gSJQXnKdKGTsUA/fhzdU1W7Apdek= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:09 2025 by rpki-client