$ rpki-client -vvf repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft File: 1446915299D8F05DBFAD863E0D230435A96FB12A.mft (raw, json) Hash identifier: nBKtwF7LM6u7TpNITq6iDane+F62sZSD4g78I0v34Sk= Subject key identifier: 41:F4:3F:4C:F9:36:B3:28:5F:B3:BB:78:A2:BC:30:3D:8D:A6:9A:28 Authority key identifier: 14:46:91:52:99:D8:F0:5D:BF:AD:86:3E:0D:23:04:35:A9:6F:B1:2A Certificate issuer: /CN=1446915299D8F05DBFAD863E0D230435A96FB12A Certificate serial: 463873D8767B98F775E6096AA4FA1DC3E6B96F04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft Manifest number: 0209 Signing time: Sun 29 Jun 2025 11:30:44 +0000 Manifest this update: Sun 29 Jun 2025 11:25:44 +0000 Manifest next update: Wed 02 Jul 2025 22:20:44 +0000 Files and hashes: 1: 1446915299D8F05DBFAD863E0D230435A96FB12A.crl (hash: r8oeDOxzU1gqmyW8r1rR3oQT+dtBITtTEaGB2VJD4dc=) 2: 3130332e3231392e362e302f32342d3234203d3e203338313537.roa (hash: 5fCH5o/O9UDqH03CvG34hP7WiZzJPNv5TqkPcSqTxsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.crl rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 22:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:38:73:d8:76:7b:98:f7:75:e6:09:6a:a4:fa:1d:c3:e6:b9:6f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1446915299D8F05DBFAD863E0D230435A96FB12A Validity Not Before: Jun 29 11:25:44 2025 GMT Not After : Jul 2 22:20:44 2025 GMT Subject: CN=41F43F4CF936B3285FB3BB78A2BC303D8DA69A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:44:88:a6:91:49:33:7c:df:49:d8:2f:2c: e1:21:0a:27:87:88:37:a7:08:20:36:0e:4c:7d:4e: b8:c4:c0:ba:2d:ef:20:53:fa:c2:f2:fa:3b:8d:df: 3d:48:c5:a1:73:70:a8:25:9b:be:70:ba:68:b1:68: 2e:ec:e2:b2:34:db:b7:be:54:17:88:c8:36:ac:6e: a1:83:c8:9a:46:43:3a:3b:fb:8b:a7:d0:98:af:ba: 9e:62:11:c7:ef:d4:4a:5d:8c:de:66:f2:d3:ed:0a: f3:f4:dc:f4:be:52:6b:12:77:94:36:e2:aa:75:a9: 64:2c:e3:56:d0:63:22:1e:3a:68:53:d3:81:35:55: 64:bd:7f:74:a7:6b:6b:2c:18:1d:39:09:96:df:59: b0:02:9f:ab:5f:b6:86:43:05:03:47:33:d0:89:41: b5:70:f6:89:90:d4:e3:5e:77:ef:01:28:f1:e2:ef: ec:0d:01:5f:c6:e1:42:58:d1:51:eb:18:dc:fa:20: b3:f9:d9:47:d2:bd:76:c4:5c:3b:54:9c:55:b9:d2: 05:88:7c:57:38:ee:a9:1b:7c:b2:c0:a1:87:42:af: ea:44:ef:06:44:c2:0e:68:86:70:30:47:45:1a:f5: a8:13:e0:52:0a:59:cf:d3:d0:2b:17:dd:15:1d:ed: c2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F4:3F:4C:F9:36:B3:28:5F:B3:BB:78:A2:BC:30:3D:8D:A6:9A:28 X509v3 Authority Key Identifier: keyid:14:46:91:52:99:D8:F0:5D:BF:AD:86:3E:0D:23:04:35:A9:6F:B1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:94:63:2a:c3:6b:ba:a6:5a:85:4e:3e:c8:e1:18:9a:44:33: 5c:bf:f9:0c:05:1c:62:cb:26:53:ba:5b:13:7f:e4:06:25:2e: 6d:1b:b8:3e:15:bc:a2:11:2f:31:c9:a7:3f:98:10:53:c7:7e: 33:07:9f:71:2a:77:d9:91:0b:32:be:fd:bc:d4:77:cc:a3:b3: f5:e6:ee:88:57:10:a2:12:a1:83:28:5e:2f:83:71:28:2a:1b: b9:32:be:3b:a5:60:01:df:3a:bb:97:e1:dd:19:60:8b:54:6f: 35:06:92:c1:82:13:ff:c0:6c:e2:d6:69:c5:24:78:8b:d8:7b: d8:81:d3:4a:d7:9a:46:3f:31:e3:5d:8e:39:4f:92:16:46:83: fd:f7:09:be:a4:8e:17:0c:6f:e9:95:23:c2:bf:35:d4:3b:7e: 22:33:42:4f:e3:f7:94:94:61:09:ff:36:02:98:a0:d2:dd:17: 11:75:1a:19:a5:b0:52:dd:c6:3c:1a:39:a9:20:82:e1:c6:62: f7:35:95:7a:1a:9b:82:4a:ae:5e:8a:96:60:ed:35:92:e6:41: c4:c3:9d:7e:18:96:1f:08:72:6e:d8:6a:33:6d:1b:bf:31:c7: 4d:db:18:90:a1:0f:57:47:4e:a9:10:7d:60:84:ab:f6:1c:9b: 40:5b:eb:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjhz2HZ7mPd15glqpPodw+a5bwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0MzVB OTZGQjEyQTAeFw0yNTA2MjkxMTI1NDRaFw0yNTA3MDIyMjIwNDRaMDMxMTAvBgNV BAMTKDQxRjQzRjRDRjkzNkIzMjg1RkIzQkI3OEEyQkMzMDNEOERBNjlBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKkSIppFJM3zfSdgvLOEhCieH iDenCCA2Dkx9TrjEwLot7yBT+sLy+juN3z1IxaFzcKglm75wumixaC7s4rI027e+ VBeIyDasbqGDyJpGQzo7+4un0Jivup5iEcfv1EpdjN5m8tPtCvP03PS+UmsSd5Q2 4qp1qWQs41bQYyIeOmhT04E1VWS9f3Sna2ssGB05CZbfWbACn6tftoZDBQNHM9CJ QbVw9omQ1ONed+8BKPHi7+wNAV/G4UJY0VHrGNz6ILP52UfSvXbEXDtUnFW50gWI fFc47qkbfLLAoYdCr+pE7wZEwg5ohnAwR0Ua9agT4FIKWc/T0CsX3RUd7cIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQfQ/TPk2syhfs7t4orwwPY2mmigwHwYDVR0j BBgwFoAUFEaRUpnY8F2/rYY+DSMENalvsSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDIxZWU3Ni1hOWZmLTRiZmEtODIyMy05NDZlZWNjY2YwMzYvMC8xNDQ2OTE1Mjk5 RDhGMDVEQkZBRDg2M0UwRDIzMDQzNUE5NkZCMTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0MzVBOTZG QjEyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAyMWVlNzYtYTlmZi00YmZhLTgy MjMtOTQ2ZWVjY2NmMDM2LzAvMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0 MzVBOTZGQjEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKUYyrDa7qmWoVOPsjhGJpEM1y/+QwFHGLL JlO6WxN/5AYlLm0buD4VvKIRLzHJpz+YEFPHfjMHn3Eqd9mRCzK+/bzUd8yjs/Xm 7ohXEKISoYMoXi+DcSgqG7kyvjulYAHfOruX4d0ZYItUbzUGksGCE//AbOLWacUk eIvYe9iB00rXmkY/MeNdjjlPkhZGg/33Cb6kjhcMb+mVI8K/NdQ7fiIzQk/j95SU YQn/NgKYoNLdFxF1GhmlsFLdxjwaOakgguHGYvc1lXoam4JKrl6KlmDtNZLmQcTD nX4Ylh8Icm7YajNtG78xx03bGJChD1dHTqkQfWCEq/Ycm0Bb6zY= -----END CERTIFICATE-----Generated at Mon Jun 30 13:59:41 2025 by rpki-client