$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json) Hash identifier: aEFepTaKBcGBtVurRywjkInMM04qMd1V52TxrL9tExY= Subject key identifier: FA:4A:7D:6E:EC:A5:85:E6:88:9A:00:97:75:F4:E0:65:38:CA:A9:43 Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 3ADED7ABF5B66B78248923AA86D2D9789D070EF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft Manifest number: 01C2 Signing time: Thu 08 May 2025 17:51:21 +0000 Manifest this update: Thu 08 May 2025 17:46:21 +0000 Manifest next update: Mon 12 May 2025 03:50:21 +0000 Files and hashes: 1: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: SMXbb98P9iS5eoXzHrTP7W5BZD1tTUwfIOrugGAxr2g=) 2: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: 42y3l7yp2lQIcyswjsolGN8lKdsqqlwrtR0fdv/FhBo=) 3: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: xk/oq0Im59/1PSqJezgmhIR9KNhuRTqxicwm+ExglFA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:de:d7:ab:f5:b6:6b:78:24:89:23:aa:86:d2:d9:78:9d:07:0e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: May 8 17:46:21 2025 GMT Not After : May 12 03:50:21 2025 GMT Subject: CN=FA4A7D6EECA585E6889A009775F4E06538CAA943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:7b:02:0b:58:97:7b:dc:8c:54:7e:08:98: 35:c1:55:7a:39:0c:6d:0c:22:3d:54:9f:30:27:a9: 47:db:6d:6c:af:23:28:63:9c:ac:fb:87:d9:7a:2d: df:93:de:f0:de:19:35:e3:5a:39:2c:d4:12:b6:bf: 77:bc:f5:50:f9:4a:f4:c1:6d:9a:49:ad:ef:1a:e2: b3:0b:e7:5c:43:69:c0:1a:a0:27:82:86:74:50:3d: 1d:0a:37:a3:82:ea:92:cb:c2:5d:d7:ee:01:53:97: 0c:e9:40:50:8d:8f:fb:79:51:27:0f:27:d5:27:5a: 6b:0a:f2:01:d6:32:be:37:53:f4:5a:a3:88:5a:4b: 1e:2a:2a:86:7d:2f:27:6c:59:b9:21:95:3e:e1:f3: 60:05:28:2d:aa:9f:a9:a7:78:cb:18:7f:d2:bb:9b: d0:c9:cb:6d:73:9d:8b:b0:37:87:dc:a3:f7:02:19: 5f:f4:0b:a3:8f:10:6c:91:de:1f:bf:00:aa:ea:40: 9a:bb:a8:a2:aa:47:75:13:6c:2f:1e:df:10:d0:b0: d1:90:25:24:4b:0e:25:57:23:71:63:25:a5:a0:d9: df:b0:04:8a:12:43:e1:49:68:ec:b9:e8:4d:e9:f0: 35:b0:db:a0:b7:e4:e1:f5:80:f5:25:ca:b0:f1:96: 72:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4A:7D:6E:EC:A5:85:E6:88:9A:00:97:75:F4:E0:65:38:CA:A9:43 X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:65:cd:83:b8:4a:7d:21:b2:a8:3d:64:29:d1:f4:a0:43:a5: d0:9c:5b:f6:74:d6:e6:49:fd:c9:c6:15:4a:9c:9a:b4:d4:6e: 69:13:4e:14:66:5d:8d:78:3f:48:3a:95:c5:88:7f:2d:af:10: a3:9e:18:f1:a3:35:0c:19:d3:63:ca:2a:ee:24:62:5c:d8:fc: 09:64:db:26:eb:24:a9:9d:85:4b:36:53:7b:c5:37:63:23:8a: 1b:2b:3f:8b:0b:24:59:65:89:f5:a8:51:d9:85:38:2f:73:88: 60:56:6c:27:a3:cc:d8:83:e3:c2:89:11:98:d1:41:f6:7f:19: 61:99:c5:21:e7:30:73:97:10:3d:16:e4:a9:e4:af:9c:b7:59: e9:b5:d9:47:59:ce:f2:c4:61:d2:fd:2d:2e:24:a5:a1:e4:74: a0:10:d4:b0:f2:99:ed:79:17:b7:8a:56:32:87:62:46:06:86: b0:96:70:7d:5f:ac:45:fa:01:7a:7a:77:05:99:5d:fd:24:e4: 3d:e9:42:39:cc:d0:b8:c7:b5:c9:a1:83:c3:c1:a5:f9:ba:75: 06:05:ba:9e:d4:68:1d:11:49:69:a5:ae:b6:34:4e:50:70:b7: 79:ca:62:cc:72:ec:6e:db:8a:ef:90:49:f7:c9:31:45:c8:fe: 43:bb:f9:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOt7Xq/W2a3gkiSOqhtLZeJ0HDvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNTA1MDgxNzQ2MjFaFw0yNTA1MTIwMzUwMjFaMDMxMTAvBgNV BAMTKEZBNEE3RDZFRUNBNTg1RTY4ODlBMDA5Nzc1RjRFMDY1MzhDQUE5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZHsCC1iXe9yMVH4ImDXBVXo5 DG0MIj1UnzAnqUfbbWyvIyhjnKz7h9l6Ld+T3vDeGTXjWjks1BK2v3e89VD5SvTB bZpJre8a4rML51xDacAaoCeChnRQPR0KN6OC6pLLwl3X7gFTlwzpQFCNj/t5UScP J9UnWmsK8gHWMr43U/Rao4haSx4qKoZ9LydsWbkhlT7h82AFKC2qn6mneMsYf9K7 m9DJy21znYuwN4fco/cCGV/0C6OPEGyR3h+/AKrqQJq7qKKqR3UTbC8e3xDQsNGQ JSRLDiVXI3FjJaWg2d+wBIoSQ+FJaOy56E3p8DWw26C35OH1gPUlyrDxlnJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+kp9buylheaImgCXdfTgZTjKqUMwHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJlzYO4Sn0hsqg9ZCnR9KBDpdCcW/Z01uZJ /cnGFUqcmrTUbmkTThRmXY14P0g6lcWIfy2vEKOeGPGjNQwZ02PKKu4kYlzY/Alk 2ybrJKmdhUs2U3vFN2MjihsrP4sLJFllifWoUdmFOC9ziGBWbCejzNiD48KJEZjR QfZ/GWGZxSHnMHOXED0W5Knkr5y3Wem12UdZzvLEYdL9LS4kpaHkdKAQ1LDyme15 F7eKVjKHYkYGhrCWcH1frEX6AXp6dwWZXf0k5D3pQjnM0LjHtcmhg8PBpfm6dQYF up7UaB0RSWmlrrY0TlBwt3nKYsxy7G7biu+QSffJMUXI/kO7+Qc= -----END CERTIFICATE-----Generated at Sat May 10 10:23:08 2025 by rpki-client