$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json) Hash identifier: qT3inRr7iNpLFYGL6VNpEv5/Z2v4T+ZIGxcxF7wXyLw= Subject key identifier: 2D:85:11:B3:0D:FF:9B:9B:D0:E5:91:73:C9:E3:62:B1:59:54:16:BB Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 65D8DD7D678BF7E4A28A51BA8CC2618539366E78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft Manifest number: 020C Signing time: Mon 20 Oct 2025 08:11:26 +0000 Manifest this update: Mon 20 Oct 2025 08:06:26 +0000 Manifest next update: Thu 23 Oct 2025 14:25:26 +0000 Files and hashes: 1: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=) 2: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: 2KAYhMBgdTmYOxY+5K00IgbMaMZh0zvYQ3/ATlDfMWw=) 3: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d8:dd:7d:67:8b:f7:e4:a2:8a:51:ba:8c:c2:61:85:39:36:6e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: Oct 20 08:06:26 2025 GMT Not After : Oct 23 14:25:26 2025 GMT Subject: CN=2D8511B30DFF9B9BD0E59173C9E362B1595416BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:cf:df:be:c6:93:a8:37:7f:37:73:ef:9a: 60:b9:67:7e:2c:d8:33:83:17:91:f8:4a:5f:3f:d5: cc:72:45:cc:4c:a1:98:36:41:d3:ac:f3:25:a5:64: 36:0d:b0:b2:dc:d9:d2:6b:6f:d0:67:a2:99:0a:b2: b4:b9:ff:92:f3:b4:6b:b3:a6:ba:f2:4e:d0:50:49: 22:8c:cc:75:db:09:2a:ef:50:5c:a6:d5:aa:9c:17: b7:43:df:cd:ed:a1:32:e2:56:8d:71:ee:58:c9:69: ca:f7:36:31:1b:77:3d:50:1b:14:72:14:41:9c:32: f2:59:5f:c8:b8:53:02:cf:a5:9d:c9:10:d3:28:c2: 16:29:c7:ae:c4:b7:5a:79:e4:c5:0c:ab:39:26:8b: 01:d7:b2:3f:e2:bd:58:48:fc:44:a1:84:cf:86:75: 85:aa:ae:fb:4a:ea:a1:db:d0:91:ae:18:43:71:19: ec:77:73:34:57:df:e9:31:dc:b6:69:70:f0:17:bb: 82:b8:ff:4b:2a:ea:0c:99:13:2b:a2:fc:af:12:31: 17:5d:2d:d2:1d:cd:f6:bf:a0:e2:46:11:67:93:ab: 28:08:bf:e4:af:e6:06:39:15:a8:c5:40:4a:41:42: 1d:23:91:bd:7c:ed:00:8b:d9:9a:c0:6f:e3:b2:53: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:85:11:B3:0D:FF:9B:9B:D0:E5:91:73:C9:E3:62:B1:59:54:16:BB X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ae:52:1b:4b:87:f5:49:85:26:b9:a3:bc:cb:ed:0b:ab:b7: 43:f7:e4:b7:b0:d7:c0:f1:55:09:35:32:2c:64:34:a7:c7:9e: 97:28:5a:5b:49:af:63:36:49:03:e9:42:5e:b4:33:49:cd:05: 53:66:07:ee:62:dd:88:d9:25:64:b3:cf:5d:94:db:2d:36:f6: 98:ce:b5:b6:46:51:b8:e5:59:93:19:4a:a1:9c:95:b7:8e:a5: 4d:2e:a1:a1:60:87:07:58:0e:c0:f6:f3:6c:01:dd:10:0a:65: 60:2a:2e:ff:52:b5:89:8c:1f:96:a9:d9:6f:64:3f:dd:74:e6: 9c:5d:b8:a7:50:7c:28:b1:40:f3:10:4b:1d:eb:d6:1e:44:81: 77:17:34:16:37:96:81:62:f1:c2:e3:1c:6b:7e:bc:99:b6:84: bc:75:71:2b:c9:bb:17:cf:0a:94:24:7c:f2:f5:60:e5:f9:9a: 9e:6e:e1:d0:e4:9b:2c:7a:c2:12:2e:30:2d:85:88:4d:11:76: 7e:11:ac:cf:ff:e5:e7:0e:e0:50:df:41:dc:91:62:2f:3a:fd: af:bf:77:0f:3c:af:4d:0d:76:8c:45:9c:c7:76:53:17:fa:21: ed:4c:6e:74:f9:ac:a7:12:49:06:d3:04:ca:11:fc:d9:c3:78: e9:d9:42:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdjdfWeL9+SiilG6jMJhhTk2bngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNTEwMjAwODA2MjZaFw0yNTEwMjMxNDI1MjZaMDMxMTAvBgNV BAMTKDJEODUxMUIzMERGRjlCOUJEMEU1OTE3M0M5RTM2MkIxNTk1NDE2QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJM/fvsaTqDd/N3PvmmC5Z34s 2DODF5H4Sl8/1cxyRcxMoZg2QdOs8yWlZDYNsLLc2dJrb9BnopkKsrS5/5LztGuz prryTtBQSSKMzHXbCSrvUFym1aqcF7dD383toTLiVo1x7ljJacr3NjEbdz1QGxRy FEGcMvJZX8i4UwLPpZ3JENMowhYpx67Et1p55MUMqzkmiwHXsj/ivVhI/EShhM+G dYWqrvtK6qHb0JGuGENxGex3czRX3+kx3LZpcPAXu4K4/0sq6gyZEyui/K8SMRdd LdIdzfa/oOJGEWeTqygIv+Sv5gY5FajFQEpBQh0jkb187QCL2ZrAb+OyU50DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYURsw3/m5vQ5ZFzyeNisVlUFrswHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuuUhtLh/VJhSa5o7zL7Qurt0P35Lew18Dx VQk1MixkNKfHnpcoWltJr2M2SQPpQl60M0nNBVNmB+5i3YjZJWSzz12U2y029pjO tbZGUbjlWZMZSqGclbeOpU0uoaFghwdYDsD282wB3RAKZWAqLv9StYmMH5ap2W9k P9105pxduKdQfCixQPMQSx3r1h5EgXcXNBY3loFi8cLjHGt+vJm2hLx1cSvJuxfP CpQkfPL1YOX5mp5u4dDkmyx6whIuMC2FiE0Rdn4RrM//5ecO4FDfQdyRYi86/a+/ dw88r00NdoxFnMd2Uxf6Ie1MbnT5rKcSSQbTBMoR/NnDeOnZQlU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:07:21 2025 by rpki-client