$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json) Hash identifier: p5U8D4dmn8WITHwtxj1Vqmn2GyrxniGFzdGIptuYEgg= Subject key identifier: 13:C8:2B:C1:12:76:D2:84:A4:4E:1B:EF:F3:FA:EF:5F:C2:1A:A3:61 Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 54A340EAB127C435D0FCB5FCC530B578482F3F07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft Manifest number: 0251 Signing time: Tue 24 Mar 2026 07:01:36 +0000 Manifest this update: Tue 24 Mar 2026 06:56:36 +0000 Manifest next update: Fri 27 Mar 2026 10:24:36 +0000 Files and hashes: 1: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=) 2: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=) 3: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: BOoJS/bCe9bxAWQqu3xfg6tMLnqz5VB7RklvaH8woyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a3:40:ea:b1:27:c4:35:d0:fc:b5:fc:c5:30:b5:78:48:2f:3f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: Mar 24 06:56:36 2026 GMT Not After : Mar 27 10:24:36 2026 GMT Subject: CN=13C82BC11276D284A44E1BEFF3FAEF5FC21AA361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:75:bb:86:ba:31:ac:1a:87:de:fb:1b:0d:f0: 65:27:ad:4a:cb:a8:51:f7:30:0a:2d:ea:22:5f:31: 33:a6:ed:b3:ca:60:3f:e2:d5:b7:48:5d:e6:b5:6f: 43:fc:db:9c:16:ec:76:6d:40:7c:9b:e8:c5:e1:c7: 25:df:97:a3:0a:2e:8a:b9:d9:4b:cc:b7:63:b6:98: 56:25:a3:a5:04:7a:84:54:3a:54:c8:88:04:ba:fd: ff:70:df:ee:f1:9f:59:ec:5c:5d:6a:ad:64:35:c8: 17:e6:48:94:ce:21:63:29:c1:1d:45:d7:91:b2:83: 01:77:e3:ac:0b:ec:b2:fb:d5:c8:3b:ac:60:11:c3: 1b:d9:cc:84:0e:aa:77:ac:15:61:ea:6a:d9:28:83: 37:08:da:42:d2:2d:97:a4:da:27:d1:96:f3:c7:3b: d2:e6:48:62:44:90:28:2b:f7:34:63:5f:c5:85:c8: 8b:8e:37:cc:7a:61:42:97:71:3b:f3:ce:b4:f7:c6: 36:49:bb:83:28:a7:48:7b:82:38:47:82:1d:e7:86: f9:1e:1c:4c:bc:38:84:d7:f7:cd:fa:e7:3a:96:f8: e3:17:7e:f2:bc:69:e1:9d:aa:a8:7a:b5:8c:42:46: 90:4f:3c:e1:3b:af:56:2c:08:56:5d:b4:62:c9:b9: 41:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C8:2B:C1:12:76:D2:84:A4:4E:1B:EF:F3:FA:EF:5F:C2:1A:A3:61 X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1f:fb:24:ce:44:16:b9:de:a7:20:05:92:12:d4:70:f9:55: 76:fe:5d:ee:f0:69:0e:b4:e9:53:b6:8f:43:54:89:84:84:06: 74:71:ba:3a:30:bb:1d:9e:cf:be:2f:4e:31:d0:ce:4a:d9:95: 01:0d:d7:76:db:44:3e:93:d9:c9:a4:0f:2c:77:25:1a:cc:ed: 05:16:1f:36:e2:5a:f8:01:4e:11:14:93:59:3f:a6:9d:5a:f6: ae:dc:6f:55:ec:7a:45:68:31:b9:83:38:18:8f:4a:70:31:98: 64:1d:ea:4b:76:95:64:06:32:38:3d:4d:a8:95:d4:07:13:2c: 7b:5a:6c:06:91:82:b1:be:f5:40:75:df:89:12:67:48:2e:06: b9:51:fc:b9:37:eb:30:64:cf:02:64:5b:bb:6f:ef:a1:2a:80: ba:d0:3d:ff:5b:9a:ce:92:77:15:a7:c4:8a:97:19:3b:d8:20: d2:24:55:c6:1b:6b:3e:c8:48:7b:b0:8b:73:a8:56:1b:a0:24: 99:c0:e1:fd:da:cc:22:04:fb:23:86:ba:29:91:5e:06:c7:31: 0e:7b:da:73:51:e2:38:5c:28:26:df:60:9f:03:b6:f5:0f:e7: 0a:81:a6:ea:98:f7:e7:23:c7:17:29:03:9b:9c:de:cc:9f:9f: 44:aa:91:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKNA6rEnxDXQ/LX8xTC1eEgvPwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNjAzMjQwNjU2MzZaFw0yNjAzMjcxMDI0MzZaMDMxMTAvBgNV BAMTKDEzQzgyQkMxMTI3NkQyODRBNDRFMUJFRkYzRkFFRjVGQzIxQUEzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDedbuGujGsGofe+xsN8GUnrUrL qFH3MAot6iJfMTOm7bPKYD/i1bdIXea1b0P825wW7HZtQHyb6MXhxyXfl6MKLoq5 2UvMt2O2mFYlo6UEeoRUOlTIiAS6/f9w3+7xn1nsXF1qrWQ1yBfmSJTOIWMpwR1F 15GygwF346wL7LL71cg7rGARwxvZzIQOqnesFWHqatkogzcI2kLSLZek2ifRlvPH O9LmSGJEkCgr9zRjX8WFyIuON8x6YUKXcTvzzrT3xjZJu4Mop0h7gjhHgh3nhvke HEy8OITX98365zqW+OMXfvK8aeGdqqh6tYxCRpBPPOE7r1YsCFZdtGLJuUFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8grwRJ20oSkThvv8/rvX8Iao2EwHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYf+yTORBa53qcgBZIS1HD5VXb+Xe7waQ60 6VO2j0NUiYSEBnRxujowux2ez74vTjHQzkrZlQEN13bbRD6T2cmkDyx3JRrM7QUW HzbiWvgBThEUk1k/pp1a9q7cb1XsekVoMbmDOBiPSnAxmGQd6kt2lWQGMjg9TaiV 1AcTLHtabAaRgrG+9UB134kSZ0guBrlR/Lk36zBkzwJkW7tv76EqgLrQPf9bms6S dxWnxIqXGTvYINIkVcYbaz7ISHuwi3OoVhugJJnA4f3azCIE+yOGuimRXgbHMQ57 2nNR4jhcKCbfYJ8DtvUP5wqBpuqY9+cjxxcpA5uc3syfn0SqkWI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:50:06 2026 by rpki-client