$ rpki-client -vvf repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft File: 146D9338596ECF1F976FB37F330D8C0CD48414C9.mft (raw, json) Hash identifier: kHMP3z5kIm64NljEui2nsM+gPc+zJdaIE/QPuvgMVGk= Subject key identifier: 5B:49:AD:09:F9:15:05:46:0D:C9:3E:95:4F:D7:AD:0A:E5:6A:4A:7C Authority key identifier: 14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 Certificate issuer: /CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Certificate serial: 124334A4FF542413D8944D8C0877A78D53CC1DB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft Manifest number: 024D Signing time: Tue 04 Nov 2025 10:32:20 +0000 Manifest this update: Tue 04 Nov 2025 10:27:20 +0000 Manifest next update: Fri 07 Nov 2025 21:14:20 +0000 Files and hashes: 1: 146D9338596ECF1F976FB37F330D8C0CD48414C9.crl (hash: pmQbfy0k/LgaW1Hfjyg/EKT0QPd/ftUBcdLUTaSVTKM=) 2: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: P6MybQx69Dhx8eJMG1s/9FzqCCNhgPl3kk8plpJbd7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:43:34:a4:ff:54:24:13:d8:94:4d:8c:08:77:a7:8d:53:cc:1d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Validity Not Before: Nov 4 10:27:20 2025 GMT Not After : Nov 7 21:14:20 2025 GMT Subject: CN=5B49AD09F91505460DC93E954FD7AD0AE56A4A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:02:d3:b1:25:bf:4e:af:c9:18:0e:b0:9c: b2:19:bb:e4:9c:66:c8:f8:91:7c:b8:7e:1f:cd:e7: 33:52:fa:d6:9f:68:c7:39:1f:03:c7:0c:bb:39:5a: d9:05:3a:bb:26:37:e4:36:5d:62:2e:f6:ef:18:52: d7:f9:59:ea:ee:61:56:78:23:c0:14:08:2f:66:04: 51:0c:8e:0d:1b:0a:94:4a:80:4b:6a:9e:3e:a9:75: 5e:21:ff:27:fe:46:17:94:c3:8f:05:cb:1f:a3:3a: 39:d2:7f:9e:76:43:08:53:78:d8:c4:5e:0b:60:5d: 57:80:a6:e6:0b:14:00:ba:17:c7:a1:2e:9c:1d:3c: 0a:89:a8:d6:b4:35:12:93:74:95:30:be:1b:69:19: eb:cf:71:d7:8d:23:fd:5a:b1:b7:0f:0e:a1:3f:af: 55:d6:26:d2:e1:93:52:e4:cb:af:32:27:ab:9f:d9: 6b:2d:26:de:3a:37:8c:28:a5:34:b4:12:dc:fb:2c: 3b:47:cf:c4:cf:ab:94:b6:04:a3:1d:29:76:b0:80: 94:7f:cf:6f:8e:d0:59:02:16:73:05:c3:8c:ec:74: cc:5c:5a:97:7a:4a:6a:a3:cf:a4:e6:5e:a2:90:52: d5:b3:8b:45:a7:75:38:9f:2c:5f:ba:ba:4e:93:7c: 19:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:49:AD:09:F9:15:05:46:0D:C9:3E:95:4F:D7:AD:0A:E5:6A:4A:7C X509v3 Authority Key Identifier: keyid:14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f8:92:fb:99:25:eb:66:8b:c0:73:50:a1:73:0d:06:49:7f: 1d:63:54:80:11:be:db:97:14:50:5b:3b:35:b0:af:43:47:f7: 50:ad:bc:b4:a4:2e:4c:76:ab:69:85:16:7a:d3:61:a7:61:6e: 52:af:d1:40:d6:dc:fd:c4:13:b4:e0:ae:8e:1d:dd:da:b4:d0: d4:36:eb:42:83:5a:e8:6a:ac:1e:c0:77:e2:1e:c1:15:d7:70: 8b:52:b0:f5:80:d0:fc:ff:6b:00:7c:96:7f:f2:a1:95:59:09: 82:3e:10:42:01:76:a6:96:14:b6:85:86:9b:2c:c3:8c:45:22: 2c:60:bc:ca:c4:e0:0a:fb:3f:be:44:78:ff:55:d8:78:02:a1: ef:89:20:ce:cf:18:3e:45:ae:70:e8:ff:17:fa:dd:4c:a9:b2: 72:af:fb:16:1d:9d:35:74:76:aa:a5:e2:da:d1:80:85:71:de: 48:84:0d:ae:30:e8:8b:1e:4c:4c:b4:d1:9c:22:77:fe:25:92: e0:a5:59:5b:2f:4b:c5:2f:70:3d:24:b3:d5:53:76:27:d6:8b: 11:ca:48:54:cc:14:82:92:54:9b:0b:9c:44:98:c1:c7:8a:00: e3:25:af:4e:f5:db:a4:d0:e0:f4:44:d3:18:7e:b0:80:06:a6: 2d:50:28:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkM0pP9UJBPYlE2MCHenjVPMHbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENE NDg0MTRDOTAeFw0yNTExMDQxMDI3MjBaFw0yNTExMDcyMTE0MjBaMDMxMTAvBgNV BAMTKDVCNDlBRDA5RjkxNTA1NDYwREM5M0U5NTRGRDdBRDBBRTU2QTRBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRALTsSW/Tq/JGA6wnLIZu+Sc Zsj4kXy4fh/N5zNS+tafaMc5HwPHDLs5WtkFOrsmN+Q2XWIu9u8YUtf5WeruYVZ4 I8AUCC9mBFEMjg0bCpRKgEtqnj6pdV4h/yf+RheUw48Fyx+jOjnSf552QwhTeNjE XgtgXVeApuYLFAC6F8ehLpwdPAqJqNa0NRKTdJUwvhtpGevPcdeNI/1asbcPDqE/ r1XWJtLhk1Lky68yJ6uf2WstJt46N4wopTS0Etz7LDtHz8TPq5S2BKMdKXawgJR/ z2+O0FkCFnMFw4zsdMxcWpd6Smqjz6TmXqKQUtWzi0WndTifLF+6uk6TfBmHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW0mtCfkVBUYNyT6VT9etCuVqSnwwHwYDVR0j BBgwFoAUFG2TOFluzx+Xb7N/Mw2MDNSEFMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDRjZmZlMC0xZjk0LTQzZDItODFlZS04MDAzMGI1YzM3NDYvMC8xNDZEOTMzODU5 NkVDRjFGOTc2RkIzN0YzMzBEOEMwQ0Q0ODQxNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENENDg0 MTRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQ0Y2ZmZTAtMWY5NC00M2QyLTgx ZWUtODAwMzBiNWMzNzQ2LzAvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhD MENENDg0MTRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALb4kvuZJetmi8BzUKFzDQZJfx1jVIARvtuX FFBbOzWwr0NH91CtvLSkLkx2q2mFFnrTYadhblKv0UDW3P3EE7Tgro4d3dq00NQ2 60KDWuhqrB7Ad+IewRXXcItSsPWA0Pz/awB8ln/yoZVZCYI+EEIBdqaWFLaFhpss w4xFIixgvMrE4Ar7P75EeP9V2HgCoe+JIM7PGD5FrnDo/xf63UypsnKv+xYdnTV0 dqql4trRgIVx3kiEDa4w6IseTEy00Zwid/4lkuClWVsvS8UvcD0ks9VTdifWixHK SFTMFIKSVJsLnESYwceKAOMlr07126TQ4PRE0xh+sIAGpi1QKO4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:42:52 2025 by rpki-client