$ rpki-client -vvf repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft File: 146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft (raw, json) Hash identifier: nqP832QW+QK9rmET912aSeInkq13tZ+92r/sVNRJ0Qo= Subject key identifier: A8:F8:DC:66:1F:49:C0:51:A1:B9:2D:84:06:99:0A:69:72:B6:00:3D Authority key identifier: 14:6C:83:A9:CC:B5:7F:CF:AD:02:8C:ED:A7:9D:6D:05:76:8C:A8:7A Certificate issuer: /CN=146C83A9CCB57FCFAD028CEDA79D6D05768CA87A Certificate serial: 1092D1EEAD331AFC4F74D382C43CB79A20765807 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft Manifest number: 01A9 Signing time: Tue 17 Jun 2025 05:11:34 +0000 Manifest this update: Tue 17 Jun 2025 05:06:34 +0000 Manifest next update: Fri 20 Jun 2025 13:26:34 +0000 Files and hashes: 1: 146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl (hash: Gtv/j5vF7RbjQEABKZE+8oaWfgTvbGgQyBdqIDuAp6E=) 2: 3130332e38332e302e302f32342d3234203d3e20313530323532.roa (hash: UyBDJoX8SHdqpwQ7qkhvzDAQWD7w4beelhbVI/l7de8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:92:d1:ee:ad:33:1a:fc:4f:74:d3:82:c4:3c:b7:9a:20:76:58:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146C83A9CCB57FCFAD028CEDA79D6D05768CA87A Validity Not Before: Jun 17 05:06:34 2025 GMT Not After : Jun 20 13:26:34 2025 GMT Subject: CN=A8F8DC661F49C051A1B92D8406990A6972B6003D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:e1:89:30:f2:9b:bb:ad:f6:fe:14:1f:46: dc:4c:a4:6f:44:e6:c0:52:40:d5:c8:f8:27:f2:ee: 2e:b1:79:9c:dd:1d:29:a6:6f:19:c8:13:a5:96:1a: 78:63:a1:32:61:5d:eb:ee:df:b2:73:9d:ff:85:55: 6c:4b:3f:6f:f2:9d:aa:32:9c:71:09:4a:17:ae:a5: 02:a7:a2:6d:99:52:61:dd:5f:06:65:c8:b0:82:bf: cf:02:20:1c:8f:ed:b8:21:cd:fd:14:68:6d:7d:90: ea:92:e7:0a:e1:09:6b:4b:e4:93:07:61:b8:af:51: 5d:0a:d6:00:9c:9d:ba:4b:50:18:ee:5e:cd:bf:18: 39:6e:52:eb:ae:c6:42:7c:40:85:c2:53:4c:b2:bf: 51:cf:10:79:2f:d2:b8:24:1b:1e:71:fa:4c:d9:32: 07:60:3f:e3:58:1c:3a:72:f4:b8:d8:78:6e:b8:65: 5c:bd:6e:a6:07:58:00:07:2c:4b:ff:62:b6:7b:73: 96:fa:9a:76:f1:2e:08:c6:35:24:68:84:95:6f:de: 8e:3f:72:f4:7b:45:50:b2:bd:a9:c5:d9:7d:fe:bd: bb:2b:6e:13:31:c6:d3:4c:d0:73:f7:3f:94:63:d6: 5b:e3:c0:1c:93:73:b4:8f:6d:da:75:d2:1d:d1:17: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F8:DC:66:1F:49:C0:51:A1:B9:2D:84:06:99:0A:69:72:B6:00:3D X509v3 Authority Key Identifier: keyid:14:6C:83:A9:CC:B5:7F:CF:AD:02:8C:ED:A7:9D:6D:05:76:8C:A8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:1d:d6:9a:73:ab:a3:9b:8b:99:d3:8b:44:22:96:e8:74:72: be:26:1b:e4:55:fb:74:f0:35:78:f4:eb:6f:fc:02:56:7a:d6: 73:71:df:dc:17:12:03:81:a5:14:bc:ba:e4:d0:f0:71:ad:6d: e5:51:b8:21:82:8d:b2:10:c4:e1:cb:61:a8:c0:c7:a5:35:32: a4:74:db:f2:58:14:90:89:60:e1:20:94:93:c3:61:08:9b:b2: 0f:22:69:71:aa:0e:62:08:7d:38:7a:41:a7:b3:e7:d2:86:43: c5:6c:c9:e4:7f:bf:b7:3e:e5:cc:73:54:66:27:ef:3c:e5:59: 9b:5a:aa:c6:22:9d:2b:ec:30:22:45:77:7b:b4:ff:dc:c0:d4: 1c:c7:13:86:92:70:cd:d1:b7:a6:22:8d:41:ca:1a:cb:e0:12: 75:1b:41:35:f3:e8:15:13:06:67:9e:2e:5f:1a:e6:8a:cb:7a: 42:d8:27:34:49:e1:98:96:8d:66:99:ad:1d:5c:88:f2:e9:91: 72:e7:41:0c:f3:34:f9:5e:18:fb:7a:1c:28:56:97:1f:61:f2: 52:cd:c2:6d:43:93:7b:22:83:2d:b5:b1:85:76:56:e7:3f:47: df:09:3b:5f:88:02:d6:ac:90:77:09:eb:b2:9b:30:40:9d:2d: 0b:2d:d3:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJLR7q0zGvxPdNOCxDy3miB2WAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZEMDU3 NjhDQTg3QTAeFw0yNTA2MTcwNTA2MzRaFw0yNTA2MjAxMzI2MzRaMDMxMTAvBgNV BAMTKEE4RjhEQzY2MUY0OUMwNTFBMUI5MkQ4NDA2OTkwQTY5NzJCNjAwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCps+GJMPKbu632/hQfRtxMpG9E 5sBSQNXI+Cfy7i6xeZzdHSmmbxnIE6WWGnhjoTJhXevu37Jznf+FVWxLP2/ynaoy nHEJSheupQKnom2ZUmHdXwZlyLCCv88CIByP7bghzf0UaG19kOqS5wrhCWtL5JMH YbivUV0K1gCcnbpLUBjuXs2/GDluUuuuxkJ8QIXCU0yyv1HPEHkv0rgkGx5x+kzZ MgdgP+NYHDpy9LjYeG64ZVy9bqYHWAAHLEv/YrZ7c5b6mnbxLgjGNSRohJVv3o4/ cvR7RVCyvanF2X3+vbsrbhMxxtNM0HP3P5Rj1lvjwByTc7SPbdp10h3RFwEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqPjcZh9JwFGhuS2EBpkKaXK2AD0wHwYDVR0j BBgwFoAUFGyDqcy1f8+tAoztp51tBXaMqHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjJjMjM2Ni1mOWVjLTQ0NTUtYTlmZi1mZjY5NmExMDdlNjIvMC8xNDZDODNBOUND QjU3RkNGQUQwMjhDRURBNzlENkQwNTc2OENBODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZEMDU3NjhD QTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYyYzIzNjYtZjllYy00NDU1LWE5 ZmYtZmY2OTZhMTA3ZTYyLzAvMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZE MDU3NjhDQTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQd1ppzq6Obi5nTi0Qiluh0cr4mG+RV+3Tw NXj062/8AlZ61nNx39wXEgOBpRS8uuTQ8HGtbeVRuCGCjbIQxOHLYajAx6U1MqR0 2/JYFJCJYOEglJPDYQibsg8iaXGqDmIIfTh6Qaez59KGQ8VsyeR/v7c+5cxzVGYn 7zzlWZtaqsYinSvsMCJFd3u0/9zA1BzHE4aScM3Rt6YijUHKGsvgEnUbQTXz6BUT BmeeLl8a5orLekLYJzRJ4ZiWjWaZrR1ciPLpkXLnQQzzNPleGPt6HChWlx9h8lLN wm1Dk3sigy21sYV2Vuc/R98JO1+IAtaskHcJ67KbMECdLQst03w= -----END CERTIFICATE-----Generated at Tue Jun 17 11:07:10 2025 by rpki-client