$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json) Hash identifier: hVy1gABuXbM1P2spb2muX2rBmcI/MX0fC9kdYLJxv6w= Subject key identifier: B0:46:D1:F3:3D:FE:92:E0:F4:2C:BE:05:49:E2:69:E1:12:25:B9:65 Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 1EF9705BE86F6F0B56E4A3EDD37DC194534A23D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft Manifest number: 01DA Signing time: Mon 30 Jun 2025 06:51:22 +0000 Manifest this update: Mon 30 Jun 2025 06:46:22 +0000 Manifest next update: Thu 03 Jul 2025 17:32:22 +0000 Files and hashes: 1: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: 4wYHM2NijpDx/cH2Zwr6svdKLqZU9HCf/SQoXmiJm1M=) 2: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=) 3: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 17:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f9:70:5b:e8:6f:6f:0b:56:e4:a3:ed:d3:7d:c1:94:53:4a:23:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: Jun 30 06:46:22 2025 GMT Not After : Jul 3 17:32:22 2025 GMT Subject: CN=B046D1F33DFE92E0F42CBE0549E269E11225B965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:31:76:01:59:a3:47:7e:ab:fd:c4:ab:5e: 64:a1:ad:98:b5:8f:1b:4f:5a:66:71:12:23:91:b6: 92:02:97:3a:38:d6:1e:8b:e8:4e:80:f5:eb:11:74: 32:01:08:03:a2:e0:6d:24:20:7c:ce:58:8a:de:50: 91:10:cb:7e:20:95:0f:a8:12:d8:4f:f7:61:bc:f2: 57:8d:22:e1:fc:58:69:5d:41:67:f3:55:45:93:ef: b9:f8:72:7d:59:8a:97:4e:e3:27:f2:c9:77:71:70: 32:68:04:b0:d3:06:cd:ab:5d:56:82:b9:c9:9f:8c: e4:c2:81:73:0e:04:4d:65:5d:06:8d:77:0e:7d:3e: 10:d5:b7:6a:23:6d:28:93:8c:2f:b7:d6:f1:ba:48: fe:36:14:f1:32:ed:d7:73:40:0f:fa:9d:9a:10:cf: 7a:8b:57:9f:22:4f:51:6c:f7:8e:8b:89:8e:db:91: 88:a1:af:b2:75:32:64:48:74:fc:d8:f1:0b:bd:9e: 05:c2:96:7b:18:d4:eb:9d:1a:73:36:f1:e7:c7:35: 06:e5:cc:89:38:e8:c2:f5:c4:08:43:e5:33:54:1e: c7:0f:46:d9:26:fc:3b:51:b9:99:d2:37:19:0b:41: 71:68:ea:77:1d:1f:dc:6b:de:af:55:b4:98:89:df: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:46:D1:F3:3D:FE:92:E0:F4:2C:BE:05:49:E2:69:E1:12:25:B9:65 X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:49:a4:e2:41:33:20:94:97:5d:d0:af:6a:95:5e:4e:7d:67: fb:90:3d:9d:c8:49:6e:df:22:96:fd:b4:f4:5d:26:ad:9a:a9: 6e:97:6b:7d:d5:30:99:ee:b0:74:57:c4:44:06:cc:1e:31:88: 65:a9:0b:7a:5b:b2:a6:14:58:c4:0d:94:fd:c6:ed:97:4b:7b: 6f:f3:b1:6c:f4:ec:63:a4:c1:d7:91:9d:f1:2e:2f:65:60:d6: 05:22:17:9a:35:34:11:8a:37:99:73:51:dc:ce:07:04:db:ca: 38:f8:50:cc:3d:1e:71:26:09:bb:86:a8:da:1e:fc:53:cd:ee: 01:ad:4f:62:46:6a:ee:e6:62:5d:79:ae:4b:a9:c8:33:b0:d5: e5:00:d5:e3:33:f1:d0:1b:af:f5:c3:65:4a:87:68:16:6a:1e: 81:d5:d6:39:a3:5a:64:71:66:b6:47:6a:1c:09:f0:1a:b4:73: 60:a1:93:24:36:7d:07:3b:1c:a7:da:2c:ad:f0:83:f4:cc:fd: 83:3d:55:04:e8:12:41:b8:24:d5:1a:b8:72:c7:bf:9d:49:c2: 58:89:88:bd:6e:dc:c6:79:43:ea:96:4f:e1:b8:7a:2b:d4:f2: 72:5f:13:e9:24:c7:89:39:4e:59:48:a4:d5:1e:a5:ad:73:b0: f1:e0:36:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvlwW+hvbwtW5KPt033BlFNKI9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNTA2MzAwNjQ2MjJaFw0yNTA3MDMxNzMyMjJaMDMxMTAvBgNV BAMTKEIwNDZEMUYzM0RGRTkyRTBGNDJDQkUwNTQ5RTI2OUUxMTIyNUI5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUDF2AVmjR36r/cSrXmShrZi1 jxtPWmZxEiORtpIClzo41h6L6E6A9esRdDIBCAOi4G0kIHzOWIreUJEQy34glQ+o EthP92G88leNIuH8WGldQWfzVUWT77n4cn1ZipdO4yfyyXdxcDJoBLDTBs2rXVaC ucmfjOTCgXMOBE1lXQaNdw59PhDVt2ojbSiTjC+31vG6SP42FPEy7ddzQA/6nZoQ z3qLV58iT1Fs946LiY7bkYihr7J1MmRIdPzY8Qu9ngXClnsY1OudGnM28efHNQbl zIk46ML1xAhD5TNUHscPRtkm/DtRuZnSNxkLQXFo6ncdH9xr3q9VtJiJ33lBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEbR8z3+kuD0LL4FSeJp4RIluWUwHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdJpOJBMyCUl13Qr2qVXk59Z/uQPZ3ISW7f Ipb9tPRdJq2aqW6Xa33VMJnusHRXxEQGzB4xiGWpC3pbsqYUWMQNlP3G7ZdLe2/z sWz07GOkwdeRnfEuL2Vg1gUiF5o1NBGKN5lzUdzOBwTbyjj4UMw9HnEmCbuGqNoe /FPN7gGtT2JGau7mYl15rkupyDOw1eUA1eMz8dAbr/XDZUqHaBZqHoHV1jmjWmRx ZrZHahwJ8Bq0c2ChkyQ2fQc7HKfaLK3wg/TM/YM9VQToEkG4JNUauHLHv51JwliJ iL1u3MZ5Q+qWT+G4eivU8nJfE+kkx4k5TllIpNUepa1zsPHgNok= -----END CERTIFICATE-----Generated at Mon Jun 30 19:36:01 2025 by rpki-client