$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: 9jjDH+2US1fVvpr1P4wn6l/qsQJaWTbkLOAcU9Il7CI= Subject key identifier: 3B:FE:32:A3:7F:5E:AC:3F:A4:0B:CB:9E:4E:17:44:B8:58:D3:93:B4 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 50615C650350997B28A2D9F4C839C8DA113FDC03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 0335 Signing time: Mon 16 Jun 2025 07:51:02 +0000 Manifest this update: Mon 16 Jun 2025 07:46:02 +0000 Manifest next update: Thu 19 Jun 2025 16:47:02 +0000 Files and hashes: 1: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 2: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) 3: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: YuAU3xR+Lq+AxU4z5M4WosIvTweZQGwmWjLikcgGDI8=) 4: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: IG6t7nYlULhsMgBABVk9BSJ2moXKjUg9u7BBivZ69qI=) 5: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:61:5c:65:03:50:99:7b:28:a2:d9:f4:c8:39:c8:da:11:3f:dc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Jun 16 07:46:02 2025 GMT Not After : Jun 19 16:47:02 2025 GMT Subject: CN=3BFE32A37F5EAC3FA40BCB9E4E1744B858D393B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d9:02:8a:d5:01:1f:98:f0:81:be:1e:d4:3e: f8:f3:e6:1a:ca:be:aa:e7:2c:d7:08:72:6c:a5:a1: 3d:00:69:5d:33:ba:b8:4a:3a:81:b0:90:8e:37:17: aa:bf:f8:71:cc:d9:a9:b6:d3:4f:b0:bc:06:56:f7: 4e:d6:1e:bb:a0:7e:c0:e8:86:42:62:e3:9a:7c:2e: 94:a3:f8:db:bd:2c:ec:8a:06:5e:0b:e3:7e:2a:7a: ce:5c:97:ec:93:c9:09:29:6c:8f:8e:80:cf:9c:0d: bf:80:64:b6:c1:f2:c9:c5:7a:47:27:ad:81:ff:70: 07:b6:ee:b6:65:51:1c:06:95:46:6f:82:7f:53:e2: 10:22:4c:0a:eb:13:c2:28:cb:fc:f8:55:c2:fd:a6: 49:15:33:78:a6:f8:1f:5c:45:b6:76:64:a9:c7:4c: c8:03:95:1b:18:70:11:c9:54:80:c0:ba:e3:97:78: a2:4c:71:75:25:ec:2e:d5:51:92:75:30:f9:e2:e7: 30:a0:0c:ce:f5:89:99:15:4d:ae:5d:8a:a4:a9:5b: e8:ae:91:4a:71:a0:12:ab:7d:f6:11:bc:9d:d3:7b: bc:04:bb:a6:e6:5a:61:a4:ba:d5:d2:3a:0c:aa:ff: f3:e1:4d:2d:d0:81:95:2f:91:ad:a9:8e:71:3a:15: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FE:32:A3:7F:5E:AC:3F:A4:0B:CB:9E:4E:17:44:B8:58:D3:93:B4 X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:dc:9c:19:e1:c3:a0:54:40:79:c6:9a:13:df:e1:27:cf:5a: d5:48:71:c6:1a:dc:7d:16:e3:3d:cd:39:3f:0d:fc:fa:8c:5d: c9:c9:24:35:ce:34:6a:60:4f:e3:8a:40:f1:33:53:0b:9d:a4: 98:e8:ca:ce:4b:26:0b:15:dc:d9:bc:24:e4:28:60:bd:45:41: 1a:92:d6:91:bc:48:7b:e5:d2:1e:40:aa:05:80:e0:dd:9a:8e: 37:bb:8a:06:36:b7:0d:71:34:36:78:5a:67:5f:df:75:23:33: 76:1b:dd:8e:9f:ad:f4:e5:89:87:0d:da:2a:86:cc:0e:f0:2a: df:a4:02:d6:e6:88:3c:5f:db:b6:30:6c:e5:51:c2:72:fb:a9: 68:ee:d8:7e:14:05:b0:7a:83:8a:f7:f9:ee:24:b5:ef:80:52: 0a:c6:17:73:cd:fb:69:1a:c8:25:7d:af:cf:1a:ae:65:cc:22: d6:53:ee:19:ed:15:3f:7a:5e:94:c5:63:b0:1c:77:b9:0d:82: 45:f8:44:0e:fb:85:7e:14:f0:f7:ee:75:1f:5a:82:f0:35:d7: a4:e9:11:5b:05:7c:c0:06:36:e6:c9:aa:b0:80:8d:18:cd:48: df:11:c3:49:af:71:bc:54:89:e7:be:d6:8c:12:d0:e1:76:6f: 56:06:ea:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUGFcZQNQmXsootn0yDnI2hE/3AMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTA2MTYwNzQ2MDJaFw0yNTA2MTkxNjQ3MDJaMDMxMTAvBgNV BAMTKDNCRkUzMkEzN0Y1RUFDM0ZBNDBCQ0I5RTRFMTc0NEI4NThEMzkzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX2QKK1QEfmPCBvh7UPvjz5hrK vqrnLNcIcmyloT0AaV0zurhKOoGwkI43F6q/+HHM2am200+wvAZW907WHrugfsDo hkJi45p8LpSj+Nu9LOyKBl4L434qes5cl+yTyQkpbI+OgM+cDb+AZLbB8snFekcn rYH/cAe27rZlURwGlUZvgn9T4hAiTArrE8Ioy/z4VcL9pkkVM3im+B9cRbZ2ZKnH TMgDlRsYcBHJVIDAuuOXeKJMcXUl7C7VUZJ1MPni5zCgDM71iZkVTa5diqSpW+iu kUpxoBKrffYRvJ3Te7wEu6bmWmGkutXSOgyq//PhTS3QgZUvka2pjnE6FQjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/4yo39erD+kC8ueThdEuFjTk7QwHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfcnBnhw6BUQHnGmhPf4SfPWtVIccYa3H0W 4z3NOT8N/PqMXcnJJDXONGpgT+OKQPEzUwudpJjoys5LJgsV3Nm8JOQoYL1FQRqS 1pG8SHvl0h5AqgWA4N2ajje7igY2tw1xNDZ4Wmdf33UjM3Yb3Y6frfTliYcN2iqG zA7wKt+kAtbmiDxf27YwbOVRwnL7qWju2H4UBbB6g4r3+e4kte+AUgrGF3PN+2ka yCV9r88armXMItZT7hntFT96XpTFY7Acd7kNgkX4RA77hX4U8PfudR9agvA116Tp EVsFfMAGNubJqrCAjRjNSN8Rw0mvcbxUiee+1owS0OF2b1YG6n0= -----END CERTIFICATE-----Generated at Mon Jun 16 22:03:57 2025 by rpki-client