$ rpki-client -vvf repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft File: 146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft (raw, json) Hash identifier: uO635j9oE7G+OQeLxiXyxaQD+5RJiPZEVMr1+/GyK8M= Subject key identifier: 50:1C:B7:B8:F3:32:FC:78:C1:B3:D7:D3:28:FB:40:2C:9D:CD:D3:85 Authority key identifier: 14:6C:83:A9:CC:B5:7F:CF:AD:02:8C:ED:A7:9D:6D:05:76:8C:A8:7A Certificate issuer: /CN=146C83A9CCB57FCFAD028CEDA79D6D05768CA87A Certificate serial: 3040EDB2BA4023D478264FF1B331573FF2D17DB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft Manifest number: 0193 Signing time: Tue 29 Apr 2025 15:41:35 +0000 Manifest this update: Tue 29 Apr 2025 15:36:35 +0000 Manifest next update: Fri 02 May 2025 17:11:35 +0000 Files and hashes: 1: 3130332e38332e302e302f32342d3234203d3e20313530323532.roa (hash: UyBDJoX8SHdqpwQ7qkhvzDAQWD7w4beelhbVI/l7de8=) 2: 146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl (hash: DYlOPIWNYqUuVgNaaF0/qg1MP/vllvU8QkY0qUMP6qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 17:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:40:ed:b2:ba:40:23:d4:78:26:4f:f1:b3:31:57:3f:f2:d1:7d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146C83A9CCB57FCFAD028CEDA79D6D05768CA87A Validity Not Before: Apr 29 15:36:35 2025 GMT Not After : May 2 17:11:35 2025 GMT Subject: CN=501CB7B8F332FC78C1B3D7D328FB402C9DCDD385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:0e:8c:ce:69:c0:02:43:65:d6:31:76:41: 93:50:ad:46:9e:a0:2a:11:83:b3:d6:25:86:57:7c: ff:50:41:1d:51:18:0c:e5:84:98:1f:2b:2f:c0:ae: da:a2:ea:6c:2a:95:3a:31:5a:09:bf:c4:40:f2:6a: ba:22:66:2f:09:32:3d:cb:9d:8c:84:c5:26:e3:c9: b3:33:c8:fb:91:f3:5e:c2:7c:22:6e:03:07:d9:cf: 6b:cd:76:6a:21:6b:18:40:54:57:fd:0e:03:2f:4c: d6:28:2a:7f:1b:3a:c5:a0:a8:83:20:d2:76:30:3f: 13:4c:e3:42:03:f8:14:78:69:f7:7b:ce:e7:5d:fb: fd:95:cf:f4:92:9d:7b:8a:ac:23:9b:b4:96:5b:75: 14:02:72:91:4c:2f:b5:e5:0f:45:f0:1b:d2:ef:de: 19:11:cf:8f:e7:20:5e:72:20:55:01:36:56:47:7c: 45:8a:c5:a2:59:0b:f5:3a:22:5a:7f:ce:8a:04:8f: 3d:84:93:58:2a:2f:69:63:ae:87:6c:8f:58:d3:e0: 60:b2:3f:08:7f:36:01:5a:e5:7f:11:50:9d:38:d2: 1b:93:bd:89:ed:71:5e:48:32:a0:cd:27:14:ac:c5: 9e:1a:06:fe:78:f1:a7:d0:d9:57:7e:1d:f0:90:9f: 25:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1C:B7:B8:F3:32:FC:78:C1:B3:D7:D3:28:FB:40:2C:9D:CD:D3:85 X509v3 Authority Key Identifier: keyid:14:6C:83:A9:CC:B5:7F:CF:AD:02:8C:ED:A7:9D:6D:05:76:8C:A8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:79:3d:d3:03:e7:4c:3e:7b:13:01:d3:fa:5f:a2:85:94:18: 91:c5:4a:87:76:4c:ee:fe:f0:2b:38:20:61:2d:45:8a:29:46: 5f:3f:3f:be:14:40:7e:6b:86:6c:95:45:93:87:b2:a6:ac:ff: ff:a3:17:ed:63:35:d4:e5:5c:62:34:7f:9d:e0:01:bc:a9:8f: e1:04:69:9a:b8:6e:0b:47:26:e9:c4:f6:74:57:da:ec:c2:e2: 24:26:e6:bc:58:c7:cc:54:3b:d5:3b:58:5a:4b:77:03:c4:df: 4d:8c:fc:e9:07:e1:63:62:31:0a:10:1e:76:47:4c:4e:e8:f1: 5a:cb:08:4f:e8:9c:d0:64:f0:57:8d:c2:65:ed:09:9a:18:07: d6:e8:2b:15:62:60:35:f9:e7:e0:ab:1e:ea:26:de:a3:48:de: 92:ac:03:4b:88:5b:a8:47:57:4c:17:07:65:93:5d:5f:21:ff: f5:1c:8d:c9:82:eb:84:1e:c7:07:db:e4:ae:16:23:0e:aa:db: 82:3c:55:d1:c9:46:91:38:7d:7c:80:6b:da:14:2c:37:2c:f0: 98:c9:8d:73:52:c3:1c:b4:fa:6c:41:9b:9d:e1:fc:f8:22:22: 1b:52:77:72:e5:32:b3:e5:cd:39:6a:ca:92:c0:46:af:fe:b4: d7:e3:23:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMEDtsrpAI9R4Jk/xszFXP/LRfbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZEMDU3 NjhDQTg3QTAeFw0yNTA0MjkxNTM2MzVaFw0yNTA1MDIxNzExMzVaMDMxMTAvBgNV BAMTKDUwMUNCN0I4RjMzMkZDNzhDMUIzRDdEMzI4RkI0MDJDOURDREQzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoOQ6MzmnAAkNl1jF2QZNQrUae oCoRg7PWJYZXfP9QQR1RGAzlhJgfKy/Artqi6mwqlToxWgm/xEDyaroiZi8JMj3L nYyExSbjybMzyPuR817CfCJuAwfZz2vNdmohaxhAVFf9DgMvTNYoKn8bOsWgqIMg 0nYwPxNM40ID+BR4afd7zudd+/2Vz/SSnXuKrCObtJZbdRQCcpFML7XlD0XwG9Lv 3hkRz4/nIF5yIFUBNlZHfEWKxaJZC/U6Ilp/zooEjz2Ek1gqL2ljrodsj1jT4GCy Pwh/NgFa5X8RUJ040huTvYntcV5IMqDNJxSsxZ4aBv548afQ2Vd+HfCQnyV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUBy3uPMy/HjBs9fTKPtALJ3N04UwHwYDVR0j BBgwFoAUFGyDqcy1f8+tAoztp51tBXaMqHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjJjMjM2Ni1mOWVjLTQ0NTUtYTlmZi1mZjY5NmExMDdlNjIvMC8xNDZDODNBOUND QjU3RkNGQUQwMjhDRURBNzlENkQwNTc2OENBODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZEMDU3NjhD QTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYyYzIzNjYtZjllYy00NDU1LWE5 ZmYtZmY2OTZhMTA3ZTYyLzAvMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZE MDU3NjhDQTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJ5PdMD50w+exMB0/pfooWUGJHFSod2TO7+ 8Cs4IGEtRYopRl8/P74UQH5rhmyVRZOHsqas//+jF+1jNdTlXGI0f53gAbypj+EE aZq4bgtHJunE9nRX2uzC4iQm5rxYx8xUO9U7WFpLdwPE302M/OkH4WNiMQoQHnZH TE7o8VrLCE/onNBk8FeNwmXtCZoYB9boKxViYDX55+CrHuom3qNI3pKsA0uIW6hH V0wXB2WTXV8h//UcjcmC64Qexwfb5K4WIw6q24I8VdHJRpE4fXyAa9oULDcs8JjJ jXNSwxy0+mxBm53h/PgiIhtSd3LlMrPlzTlqypLARq/+tNfjI5c= -----END CERTIFICATE-----Generated at Wed Apr 30 08:32:09 2025 by rpki-client