$ rpki-client -vvf repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft File: 146D9338596ECF1F976FB37F330D8C0CD48414C9.mft (raw, json) Hash identifier: 6hZbPtbureDZv1p+RtrSlP7Le13u+rDhwXCGPV+NBII= Subject key identifier: 33:A3:6F:D7:57:BF:14:4C:CE:21:99:ED:AA:D5:F5:4B:49:28:A7:8A Authority key identifier: 14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 Certificate issuer: /CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Certificate serial: 4DBBEE1319239C6581716F93F58C7E9D57A70A6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft Manifest number: 0297 Signing time: Sun 19 Apr 2026 08:42:39 +0000 Manifest this update: Sun 19 Apr 2026 08:37:39 +0000 Manifest next update: Wed 22 Apr 2026 11:09:39 +0000 Files and hashes: 1: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: d+kI3rz6/1ncnjpxf/67wx7VsG4KrN+uZWF3vlmupvY=) 2: 146D9338596ECF1F976FB37F330D8C0CD48414C9.crl (hash: ylOOa7RSqqvp/t9biPAA4lepSihpgstV92KVJ9fZjTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 11:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bb:ee:13:19:23:9c:65:81:71:6f:93:f5:8c:7e:9d:57:a7:0a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Validity Not Before: Apr 19 08:37:39 2026 GMT Not After : Apr 22 11:09:39 2026 GMT Subject: CN=33A36FD757BF144CCE2199EDAAD5F54B4928A78A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:4b:0d:0d:98:2f:ec:c3:7c:9e:b0:d7:b6: 49:e5:81:ac:8e:52:2a:43:b7:c8:bb:95:f2:a2:36: ee:c2:de:05:db:1c:8b:b7:d0:9f:53:f2:d7:42:97: 77:6c:e9:b3:09:b1:36:8d:9e:3a:6d:15:4d:5b:75: 50:15:5b:43:24:e5:67:01:18:de:fd:2e:fa:db:19: 86:99:b9:6d:03:18:78:1d:83:4e:e8:72:c7:d4:93: f0:eb:32:24:61:e6:9d:77:5e:2b:e3:29:0b:bb:fa: bd:6e:bf:2e:0d:63:9a:50:78:1c:4b:c8:f1:94:bc: 09:18:6d:13:d2:bd:14:dc:91:95:72:1a:29:83:20: ac:cf:87:8f:4d:74:4b:b3:7a:ca:ae:7b:05:38:72: ad:92:24:53:67:0f:61:87:70:33:62:2e:c9:28:51: 6d:45:26:ca:71:be:21:a1:4d:4e:dd:66:49:e1:2d: a2:de:f1:1e:c6:1a:14:98:d7:d3:f1:a6:69:59:b4: 72:42:23:aa:6d:c5:67:68:0f:1b:57:98:5d:aa:91: 2d:53:30:27:41:01:8b:bd:3c:8b:24:1c:93:3f:62: 77:3d:97:61:89:53:97:fb:90:91:1e:cd:38:b0:86: 67:7a:e8:0b:0c:01:a5:05:05:3a:42:b3:34:98:bc: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A3:6F:D7:57:BF:14:4C:CE:21:99:ED:AA:D5:F5:4B:49:28:A7:8A X509v3 Authority Key Identifier: keyid:14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6b:ba:b2:4a:be:9e:e3:3f:a0:2b:be:40:4e:44:7d:11:ee: 91:9f:ae:f2:00:a8:e4:34:19:07:ee:6e:86:4e:f0:44:7f:3a: 18:04:a5:07:94:63:9e:89:12:3d:f0:fc:a9:b7:db:80:60:5a: a5:f3:36:d4:fe:23:af:70:22:a5:9b:f4:29:1d:ee:4a:9d:4e: 81:35:64:c1:fc:e2:99:c3:3d:a7:41:0a:e4:dc:76:42:c4:7d: 54:76:63:cb:c9:cc:c3:f6:c5:a6:78:7b:ad:5a:f3:ce:0d:37: ba:82:63:33:25:b9:c0:51:45:78:3a:65:8b:58:3d:15:d2:15: fb:d3:9e:6d:dd:ad:51:42:47:d8:76:37:4c:31:22:2d:0e:ee: 3b:0c:5b:f8:fb:97:57:54:83:c1:27:6e:40:c8:c3:78:9b:01: 1f:a4:d4:b9:bd:26:fc:c4:9f:2a:20:71:44:a6:f1:3f:44:0e: 77:05:07:a6:6f:8e:4b:ac:fc:d9:73:1a:fa:1f:51:0f:9c:5e: 7a:7b:04:d1:02:25:cb:20:ea:5c:8b:4c:b1:4d:1d:90:70:36: 22:57:5e:e3:35:80:a5:20:9d:1a:24:8c:41:88:49:91:04:39: 67:46:92:d3:9d:92:16:c3:15:a2:48:42:1d:45:44:a6:1f:b2: 1e:23:d4:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbvuExkjnGWBcW+T9Yx+nVenCm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENE NDg0MTRDOTAeFw0yNjA0MTkwODM3MzlaFw0yNjA0MjIxMTA5MzlaMDMxMTAvBgNV BAMTKDMzQTM2RkQ3NTdCRjE0NENDRTIxOTlFREFBRDVGNTRCNDkyOEE3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIUsNDZgv7MN8nrDXtknlgayO UipDt8i7lfKiNu7C3gXbHIu30J9T8tdCl3ds6bMJsTaNnjptFU1bdVAVW0Mk5WcB GN79LvrbGYaZuW0DGHgdg07ocsfUk/DrMiRh5p13XivjKQu7+r1uvy4NY5pQeBxL yPGUvAkYbRPSvRTckZVyGimDIKzPh49NdEuzesquewU4cq2SJFNnD2GHcDNiLsko UW1FJspxviGhTU7dZknhLaLe8R7GGhSY19PxpmlZtHJCI6ptxWdoDxtXmF2qkS1T MCdBAYu9PIskHJM/Ync9l2GJU5f7kJEezTiwhmd66AsMAaUFBTpCszSYvKNRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM6Nv11e/FEzOIZntqtX1S0kop4owHwYDVR0j BBgwFoAUFG2TOFluzx+Xb7N/Mw2MDNSEFMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDRjZmZlMC0xZjk0LTQzZDItODFlZS04MDAzMGI1YzM3NDYvMC8xNDZEOTMzODU5 NkVDRjFGOTc2RkIzN0YzMzBEOEMwQ0Q0ODQxNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENENDg0 MTRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQ0Y2ZmZTAtMWY5NC00M2QyLTgx ZWUtODAwMzBiNWMzNzQ2LzAvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhD MENENDg0MTRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtrurJKvp7jP6ArvkBORH0R7pGfrvIAqOQ0 GQfuboZO8ER/OhgEpQeUY56JEj3w/Km324BgWqXzNtT+I69wIqWb9Ckd7kqdToE1 ZMH84pnDPadBCuTcdkLEfVR2Y8vJzMP2xaZ4e61a884NN7qCYzMlucBRRXg6ZYtY PRXSFfvTnm3drVFCR9h2N0wxIi0O7jsMW/j7l1dUg8EnbkDIw3ibAR+k1Lm9JvzE nyogcUSm8T9EDncFB6Zvjkus/NlzGvofUQ+cXnp7BNECJcsg6lyLTLFNHZBwNiJX XuM1gKUgnRokjEGISZEEOWdGktOdkhbDFaJIQh1FRKYfsh4j1LM= -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:02 2026 by rpki-client