$ rpki-client -vvf repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft File: 146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft (raw, json) Hash identifier: raxbORck9NE9wAkBWefNMJj4yCdrsZE+HX5/B66Ec8E= Subject key identifier: F7:6C:D5:64:C5:FB:84:BE:E5:06:83:AB:67:3D:2C:D1:6A:2F:15:AB Authority key identifier: 14:6C:83:A9:CC:B5:7F:CF:AD:02:8C:ED:A7:9D:6D:05:76:8C:A8:7A Certificate issuer: /CN=146C83A9CCB57FCFAD028CEDA79D6D05768CA87A Certificate serial: 6B7C06331E83298589213B7E8C5C3D08664DAA27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft Manifest number: 0230 Signing time: Fri 17 Apr 2026 11:31:52 +0000 Manifest this update: Fri 17 Apr 2026 11:26:52 +0000 Manifest next update: Mon 20 Apr 2026 12:36:52 +0000 Files and hashes: 1: 146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl (hash: RRoWh2kcAoa88ZX9vujkuiBGqb17WJIZrBBFDoG2my8=) 2: 3130332e38332e302e302f32342d3234203d3e20313530323532.roa (hash: V86Ceez2ot8X9IsTE49PzBGgGBjL0MbKZZ/wjjN9T+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:7c:06:33:1e:83:29:85:89:21:3b:7e:8c:5c:3d:08:66:4d:aa:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146C83A9CCB57FCFAD028CEDA79D6D05768CA87A Validity Not Before: Apr 17 11:26:52 2026 GMT Not After : Apr 20 12:36:52 2026 GMT Subject: CN=F76CD564C5FB84BEE50683AB673D2CD16A2F15AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:86:18:43:c6:06:3b:5e:e7:a0:4a:61:6f:0d: f7:ed:cd:d1:cf:cd:61:be:d0:93:55:9a:15:b6:9b: 4d:8e:2b:56:2b:a8:ac:9f:38:af:fe:81:fc:7c:60: a0:50:3a:49:98:6c:0a:2b:48:10:e5:6f:91:e3:21: 34:6a:69:0a:ce:72:bb:f5:ad:ec:bb:c5:ca:ff:a9: ac:68:0e:10:07:29:ad:fa:7d:f8:ef:c1:77:26:90: 9e:24:b1:f5:df:22:fc:d7:9d:1a:f3:b3:fc:c3:50: 59:8c:84:bf:f4:f4:de:80:4f:e5:78:eb:5b:33:87: ad:f4:01:41:19:92:f7:f3:ca:cc:09:0d:e2:dc:63: 98:c7:0b:fe:ca:b7:e9:e4:bc:44:cb:c0:4a:f9:a4: 8f:13:7e:ba:49:36:3c:15:c6:3f:b2:b6:f1:52:39: ed:47:ea:77:f5:65:0a:ae:ac:14:2a:be:9e:61:40: c4:72:a2:ed:b0:d0:f5:67:9d:7f:12:8b:31:6b:da: 75:4e:e9:39:ca:4b:96:d0:a2:45:9d:9d:6c:32:25: d8:be:d1:55:50:4f:33:9b:57:01:a7:13:bf:d2:1b: 9f:c1:20:a0:a3:06:b9:db:89:15:31:ad:c5:6f:ee: 63:bb:bf:da:fa:6a:ae:28:0e:8e:b8:aa:9a:43:9c: fe:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6C:D5:64:C5:FB:84:BE:E5:06:83:AB:67:3D:2C:D1:6A:2F:15:AB X509v3 Authority Key Identifier: keyid:14:6C:83:A9:CC:B5:7F:CF:AD:02:8C:ED:A7:9D:6D:05:76:8C:A8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:27:d8:f5:5f:f2:98:1f:51:db:5e:2d:9e:da:34:8c:c2:a8: 9b:79:c0:3c:2e:67:f1:63:4b:f2:64:47:04:b3:a2:df:b6:89: 61:a3:7d:10:b2:7b:03:73:74:30:9a:7e:15:fb:74:3a:af:a2: 7b:e5:62:8a:75:d0:91:65:fa:7a:36:80:9a:ce:c4:35:be:95: f5:73:61:2c:54:f2:c9:fe:0e:06:2e:cd:23:a1:cc:06:a0:78: 09:d3:00:a3:7e:0d:b4:8a:9c:16:a7:ab:13:e4:37:cb:29:2e: 78:43:3f:9d:6e:be:2a:3a:02:d1:da:03:80:90:ef:84:2d:8b: 30:7b:3f:57:00:22:0e:7a:fb:aa:88:f0:3a:fb:db:20:54:c7: 11:37:d6:49:f4:3c:b4:45:40:00:8b:64:85:48:63:dc:6e:b2: 2e:65:6c:00:ed:9f:33:0b:b8:af:37:96:7d:86:81:4e:e7:b4: 44:ce:20:ad:3a:8d:43:19:29:61:a6:d6:67:93:2d:f2:9f:1d: 63:ed:ce:1e:c2:e0:7b:c9:46:ff:92:6c:21:94:f7:51:5c:ff: 58:f5:56:3c:6d:cc:18:25:6b:df:d4:b7:04:68:b4:48:4f:a1: 92:0f:06:ef:0d:a6:a6:ac:9c:c6:96:8b:47:bf:de:6a:69:21: 2c:b8:a9:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa3wGMx6DKYWJITt+jFw9CGZNqicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZEMDU3 NjhDQTg3QTAeFw0yNjA0MTcxMTI2NTJaFw0yNjA0MjAxMjM2NTJaMDMxMTAvBgNV BAMTKEY3NkNENTY0QzVGQjg0QkVFNTA2ODNBQjY3M0QyQ0QxNkEyRjE1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhhhDxgY7XuegSmFvDfftzdHP zWG+0JNVmhW2m02OK1YrqKyfOK/+gfx8YKBQOkmYbAorSBDlb5HjITRqaQrOcrv1 rey7xcr/qaxoDhAHKa36ffjvwXcmkJ4ksfXfIvzXnRrzs/zDUFmMhL/09N6AT+V4 61szh630AUEZkvfzyswJDeLcY5jHC/7Kt+nkvETLwEr5pI8TfrpJNjwVxj+ytvFS Oe1H6nf1ZQqurBQqvp5hQMRyou2w0PVnnX8SizFr2nVO6TnKS5bQokWdnWwyJdi+ 0VVQTzObVwGnE7/SG5/BIKCjBrnbiRUxrcVv7mO7v9r6aq4oDo64qppDnP7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU92zVZMX7hL7lBoOrZz0s0WovFaswHwYDVR0j BBgwFoAUFGyDqcy1f8+tAoztp51tBXaMqHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjJjMjM2Ni1mOWVjLTQ0NTUtYTlmZi1mZjY5NmExMDdlNjIvMC8xNDZDODNBOUND QjU3RkNGQUQwMjhDRURBNzlENkQwNTc2OENBODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZEMDU3NjhD QTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYyYzIzNjYtZjllYy00NDU1LWE5 ZmYtZmY2OTZhMTA3ZTYyLzAvMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZE MDU3NjhDQTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMn2PVf8pgfUdteLZ7aNIzCqJt5wDwuZ/Fj S/JkRwSzot+2iWGjfRCyewNzdDCafhX7dDqvonvlYop10JFl+no2gJrOxDW+lfVz YSxU8sn+DgYuzSOhzAageAnTAKN+DbSKnBanqxPkN8spLnhDP51uvio6AtHaA4CQ 74QtizB7P1cAIg56+6qI8Dr72yBUxxE31kn0PLRFQACLZIVIY9xusi5lbADtnzML uK83ln2GgU7ntETOIK06jUMZKWGm1meTLfKfHWPtzh7C4HvJRv+SbCGU91Fc/1j1 VjxtzBgla9/UtwRotEhPoZIPBu8NpqasnMaWi0e/3mppISy4qQ4= -----END CERTIFICATE-----Generated at Sun Apr 19 11:40:09 2026 by rpki-client