$ rpki-client -vvf repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft File: 146D9338596ECF1F976FB37F330D8C0CD48414C9.mft (raw, json) Hash identifier: hJEzw2RvYRh0tQ4BPqlktTGreAfedCRFWX3kD/OGwYU= Subject key identifier: 7D:0F:E9:40:85:E1:E9:E9:49:E4:83:FA:A5:37:4D:A1:BD:16:44:9B Authority key identifier: 14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 Certificate issuer: /CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Certificate serial: 4342FDF0401651D337542A61AE96C2903FB3633C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft Manifest number: 020E Signing time: Sat 14 Jun 2025 07:32:17 +0000 Manifest this update: Sat 14 Jun 2025 07:27:17 +0000 Manifest next update: Tue 17 Jun 2025 17:22:17 +0000 Files and hashes: 1: 146D9338596ECF1F976FB37F330D8C0CD48414C9.crl (hash: +kajBDUgr56MPcm2T+U88kEDeNhpui0RHMMODPCwdfk=) 2: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: P6MybQx69Dhx8eJMG1s/9FzqCCNhgPl3kk8plpJbd7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 17:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:42:fd:f0:40:16:51:d3:37:54:2a:61:ae:96:c2:90:3f:b3:63:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Validity Not Before: Jun 14 07:27:17 2025 GMT Not After : Jun 17 17:22:17 2025 GMT Subject: CN=7D0FE94085E1E9E949E483FAA5374DA1BD16449B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:db:00:d2:f5:af:70:71:e3:15:c5:12:f2: 58:78:6f:f8:b1:84:bd:c0:2c:0b:e0:82:08:1f:a0: f2:9a:b7:40:5a:c8:66:b3:80:08:c9:12:f9:1b:0f: 6d:66:3e:a5:f9:f1:1f:7a:35:a0:19:68:44:a2:13: a8:ca:8c:c4:0c:32:b9:ad:65:68:f6:4d:e0:cc:8b: e6:96:2c:8d:da:0b:56:76:27:7b:21:38:d9:5e:a7: 78:20:8e:d6:12:dc:34:40:e2:83:7f:68:20:9d:9e: 41:5d:41:b3:93:b9:52:95:09:18:7b:c8:3a:63:a3: 36:0e:38:68:c8:c8:97:e6:a7:0a:c5:0a:15:d6:24: 1e:55:89:1c:58:eb:4e:25:1a:b2:4a:e8:bf:26:95: 3b:ac:75:37:ba:48:77:cf:cf:31:71:ad:5d:57:e4: ce:84:81:ef:9f:37:fe:bb:52:16:f0:22:c0:79:b4: b2:f7:bc:39:ad:60:cf:6a:58:91:4a:2b:35:71:69: 1c:31:e3:03:76:c7:8e:f6:7b:d5:88:d2:5a:88:39: f5:f2:33:8c:0e:cb:89:49:ad:b5:f6:16:f6:06:4b: 8b:a9:d1:ec:d2:88:80:ce:98:35:be:cc:9a:59:00: 54:f4:95:fb:d0:f1:f6:f2:a3:f1:1b:87:75:a7:1a: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0F:E9:40:85:E1:E9:E9:49:E4:83:FA:A5:37:4D:A1:BD:16:44:9B X509v3 Authority Key Identifier: keyid:14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:97:e9:ce:f0:9d:9e:09:e2:42:44:08:0e:15:4f:f8:2a:72: 56:2d:b1:d7:1c:b5:d8:20:79:19:e7:f6:73:1c:e7:d9:d7:ef: 50:d8:c0:58:9d:8b:d5:6d:4f:d4:6e:de:97:0e:69:28:cd:f1: 84:35:c8:42:e5:b0:65:78:c4:83:c2:dd:58:27:09:c6:52:1e: ce:56:a5:89:8d:d1:27:06:29:38:4e:57:89:f3:3c:04:d7:6e: 55:2e:6d:da:8c:02:59:68:38:5a:16:44:29:dd:d2:aa:99:96: 32:6d:e8:88:cc:a4:a2:72:1a:6b:f7:23:dd:be:41:97:41:61: fc:43:aa:cd:8c:0f:3c:23:94:c5:b0:5d:d5:37:ec:28:be:43: c1:6e:84:26:c3:28:c9:ae:cf:7e:ee:42:70:34:15:c4:d0:1e: 43:aa:8f:f1:cc:55:e0:42:1c:fd:ee:a0:db:3b:99:b9:90:c6: f0:ba:08:99:3e:65:d1:16:a7:5d:27:21:7a:59:23:97:ac:23: 97:87:3f:c9:7d:55:e1:4c:d3:80:2b:03:b1:49:36:c4:f9:ae: e8:9e:4f:3b:96:51:2a:e5:f6:8c:83:aa:7c:98:96:03:3c:d2: 8f:b9:97:a7:86:1a:f7:47:b9:32:65:36:a1:c4:27:62:b9:a9: 5a:f7:30:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0L98EAWUdM3VCphrpbCkD+zYzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENE NDg0MTRDOTAeFw0yNTA2MTQwNzI3MTdaFw0yNTA2MTcxNzIyMTdaMDMxMTAvBgNV BAMTKDdEMEZFOTQwODVFMUU5RTk0OUU0ODNGQUE1Mzc0REExQkQxNjQ0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbPtsA0vWvcHHjFcUS8lh4b/ix hL3ALAvggggfoPKat0BayGazgAjJEvkbD21mPqX58R96NaAZaESiE6jKjMQMMrmt ZWj2TeDMi+aWLI3aC1Z2J3shONlep3ggjtYS3DRA4oN/aCCdnkFdQbOTuVKVCRh7 yDpjozYOOGjIyJfmpwrFChXWJB5ViRxY604lGrJK6L8mlTusdTe6SHfPzzFxrV1X 5M6Ege+fN/67UhbwIsB5tLL3vDmtYM9qWJFKKzVxaRwx4wN2x472e9WI0lqIOfXy M4wOy4lJrbX2FvYGS4up0ezSiIDOmDW+zJpZAFT0lfvQ8fbyo/Ebh3WnGr5HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfQ/pQIXh6elJ5IP6pTdNob0WRJswHwYDVR0j BBgwFoAUFG2TOFluzx+Xb7N/Mw2MDNSEFMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDRjZmZlMC0xZjk0LTQzZDItODFlZS04MDAzMGI1YzM3NDYvMC8xNDZEOTMzODU5 NkVDRjFGOTc2RkIzN0YzMzBEOEMwQ0Q0ODQxNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENENDg0 MTRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQ0Y2ZmZTAtMWY5NC00M2QyLTgx ZWUtODAwMzBiNWMzNzQ2LzAvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhD MENENDg0MTRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKX6c7wnZ4J4kJECA4VT/gqclYtsdcctdgg eRnn9nMc59nX71DYwFidi9VtT9Ru3pcOaSjN8YQ1yELlsGV4xIPC3VgnCcZSHs5W pYmN0ScGKThOV4nzPATXblUubdqMAlloOFoWRCnd0qqZljJt6IjMpKJyGmv3I92+ QZdBYfxDqs2MDzwjlMWwXdU37Ci+Q8FuhCbDKMmuz37uQnA0FcTQHkOqj/HMVeBC HP3uoNs7mbmQxvC6CJk+ZdEWp10nIXpZI5esI5eHP8l9VeFM04ArA7FJNsT5ruie TzuWUSrl9oyDqnyYlgM80o+5l6eGGvdHuTJlNqHEJ2K5qVr3MEE= -----END CERTIFICATE-----Generated at Mon Jun 16 15:37:25 2025 by rpki-client