$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: qvL0VSNt0ZFOM/1NGY/ExeND2ezzyiRJN0bTvfaSr8c= Subject key identifier: CB:B3:78:CA:24:9A:A6:69:C6:FC:DD:C0:4F:72:99:3A:0D:0B:70:0A Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 6D40B96722BBD7D5BFE864AB1C61EE28B69AB77A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 0353 Signing time: Fri 22 Aug 2025 10:21:05 +0000 Manifest this update: Fri 22 Aug 2025 10:16:05 +0000 Manifest next update: Mon 25 Aug 2025 17:22:05 +0000 Files and hashes: 1: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: nUAAehnooD609/ATaS9DmWmD800RrQpToLCMyKaUhCg=) 2: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: WnEoSKGZIFsfEoy7vBg6GUxPJ2sdlBMhPa8SmUKwOwQ=) 3: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 4: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) 5: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:40:b9:67:22:bb:d7:d5:bf:e8:64:ab:1c:61:ee:28:b6:9a:b7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Aug 22 10:16:05 2025 GMT Not After : Aug 25 17:22:05 2025 GMT Subject: CN=CBB378CA249AA669C6FCDDC04F72993A0D0B700A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e7:82:50:36:9c:74:fd:57:bb:a8:66:81:b5: a6:61:2e:d6:0a:0f:14:12:6f:2c:4a:ae:ff:80:3c: e0:bc:38:f3:92:3a:61:7d:a9:95:70:b7:74:4a:84: ba:29:77:04:07:ec:50:54:14:87:43:4f:5d:1d:f5: 5a:3e:fe:e2:15:0c:82:22:27:11:2b:63:2f:52:9a: 3a:9d:5c:90:2d:4b:12:de:80:ed:10:62:17:bc:02: 37:08:52:27:3b:95:22:28:2b:40:47:78:a0:cd:c9: a7:33:8b:da:81:a4:1a:18:b5:bd:15:d7:ab:27:a3: 20:9e:e7:c2:aa:8c:22:96:25:3f:0a:1e:33:48:57: 54:90:0f:ee:00:d1:c4:e6:65:e0:cc:3a:fe:91:b8: 50:c8:25:b8:de:8f:48:ff:b8:05:33:ec:c0:62:9d: 7a:81:d6:96:55:69:2b:65:8c:b9:f5:26:20:1d:a0: 03:ae:12:ed:d1:ad:62:dd:bf:58:63:94:ff:8c:33: d3:e4:86:28:10:2b:74:ed:7a:5e:ce:5d:65:4d:7b: 25:4d:f4:d1:63:03:1e:58:90:0e:51:33:1f:d7:df: ab:92:0f:ac:66:e2:c9:7c:73:61:bd:e6:00:ee:d8: cb:5f:e9:b7:99:17:f1:46:f6:5d:b7:92:ce:51:d1: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B3:78:CA:24:9A:A6:69:C6:FC:DD:C0:4F:72:99:3A:0D:0B:70:0A X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e2:fb:f3:14:be:96:d9:a4:8b:c5:73:c4:a6:a2:b8:8e:f7: 2a:e8:fb:12:3a:1a:52:41:ee:f4:cd:9d:a2:53:5e:2c:5f:e4: 7a:b7:df:4a:31:9f:e6:b0:47:83:02:e8:7f:9e:97:d3:e3:7f: d1:b6:02:41:eb:35:b9:be:26:9c:c8:43:36:3b:ae:92:ee:20: 0a:e9:95:c1:e3:6a:c0:eb:01:21:09:59:67:0d:83:08:5a:8b: da:60:50:cb:07:db:20:5a:85:da:a3:6c:0c:8e:57:30:2b:6f: 15:95:7b:17:e3:e8:f5:c2:21:e0:63:0a:cf:19:f4:a4:41:f1: 61:79:85:98:b3:c3:6a:e3:d8:a1:63:ea:a0:1e:b1:6d:fe:f9: 12:ab:6b:8f:d6:51:4d:9d:43:2d:4c:a9:5b:d1:87:3c:30:46: db:77:34:2e:92:6f:f6:a3:d9:c0:d5:1b:5d:40:c4:15:96:57: 08:8d:52:37:7d:1e:c8:b3:51:0b:b0:ff:4e:61:06:86:2b:a8: ae:97:98:fa:27:3c:a4:68:38:ee:d8:a7:bc:07:df:16:a9:8f: c3:d6:0b:d2:bf:33:92:f1:cf:a6:93:8f:fc:7a:81:71:be:82: 18:7c:11:4e:f9:b3:4d:e4:ae:24:b8:bd:d5:53:2c:8e:5d:68: 78:55:78:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUC5ZyK719W/6GSrHGHuKLaat3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTA4MjIxMDE2MDVaFw0yNTA4MjUxNzIyMDVaMDMxMTAvBgNV BAMTKENCQjM3OENBMjQ5QUE2NjlDNkZDRERDMDRGNzI5OTNBMEQwQjcwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD154JQNpx0/Ve7qGaBtaZhLtYK DxQSbyxKrv+APOC8OPOSOmF9qZVwt3RKhLopdwQH7FBUFIdDT10d9Vo+/uIVDIIi JxErYy9SmjqdXJAtSxLegO0QYhe8AjcIUic7lSIoK0BHeKDNyaczi9qBpBoYtb0V 16snoyCe58KqjCKWJT8KHjNIV1SQD+4A0cTmZeDMOv6RuFDIJbjej0j/uAUz7MBi nXqB1pZVaStljLn1JiAdoAOuEu3RrWLdv1hjlP+MM9PkhigQK3Ttel7OXWVNeyVN 9NFjAx5YkA5RMx/X36uSD6xm4sl8c2G95gDu2Mtf6beZF/FG9l23ks5R0Z31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy7N4yiSapmnG/N3AT3KZOg0LcAowHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALni+/MUvpbZpIvFc8SmoriO9yro+xI6GlJB 7vTNnaJTXixf5Hq330oxn+awR4MC6H+el9Pjf9G2AkHrNbm+JpzIQzY7rpLuIArp lcHjasDrASEJWWcNgwhai9pgUMsH2yBahdqjbAyOVzArbxWVexfj6PXCIeBjCs8Z 9KRB8WF5hZizw2rj2KFj6qAesW3++RKra4/WUU2dQy1MqVvRhzwwRtt3NC6Sb/aj 2cDVG11AxBWWVwiNUjd9HsizUQuw/05hBoYrqK6XmPonPKRoOO7Yp7wH3xapj8PW C9K/M5Lxz6aTj/x6gXG+ghh8EU75s03kriS4vdVTLI5daHhVeOQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:35 2025 by rpki-client