$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: bWAM7Xx2RnAk8XUcfnSg4Z08CE7YvQVdT/M/w0lHJfc= Subject key identifier: AE:26:D2:76:59:44:53:8A:65:F1:5D:38:9D:87:56:C7:2C:D7:19:1A Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 613F954050FA554B22EA6F046A8A6342D9FA4A56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 036D Signing time: Sun 19 Oct 2025 13:41:04 +0000 Manifest this update: Sun 19 Oct 2025 13:36:04 +0000 Manifest next update: Wed 22 Oct 2025 21:49:04 +0000 Files and hashes: 1: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: WnEoSKGZIFsfEoy7vBg6GUxPJ2sdlBMhPa8SmUKwOwQ=) 2: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) 3: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) 4: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: 03pWzoh03onbbtit5zGm3Jeo7cFn0V+NdchfZsDhDRg=) 5: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:3f:95:40:50:fa:55:4b:22:ea:6f:04:6a:8a:63:42:d9:fa:4a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Oct 19 13:36:04 2025 GMT Not After : Oct 22 21:49:04 2025 GMT Subject: CN=AE26D2765944538A65F15D389D8756C72CD7191A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:94:c0:c0:b4:20:22:e3:ba:66:d3:c3:ba: 24:41:a9:5f:d1:87:3c:72:37:bc:33:ca:34:fa:2c: f4:d6:47:e6:8a:cf:8d:12:5c:a4:9c:49:95:f5:4c: cb:40:9e:e5:5d:b0:e4:64:c7:2e:de:c5:28:4e:6c: 39:ef:6f:98:38:ed:e0:d5:be:be:4c:5a:46:c6:05: 28:2b:1b:e5:c7:25:82:7a:cd:8c:ef:57:7a:7e:c6: 1e:50:d4:a0:a2:c0:54:19:5a:11:85:4e:ed:7e:17: 0b:c8:87:1a:56:9b:09:70:12:7d:85:18:93:d8:76: 2f:8f:c0:a6:58:05:4d:44:90:18:46:07:f4:50:cf: 3e:12:35:31:d7:c2:fe:42:96:33:80:ad:55:84:9b: e6:6f:73:e1:c7:57:ee:8d:b1:18:f9:19:d2:ca:2d: 05:6b:67:ce:79:f3:f1:62:9f:6c:cf:ea:a1:e6:4c: 98:5b:ab:05:ec:57:19:fa:36:38:c7:e6:a0:94:d8: 33:3c:11:2b:a8:ec:f5:d8:29:3f:a1:25:7f:17:98: c0:e4:12:a3:4b:bc:4b:c7:38:12:7a:81:55:c6:cb: 91:ad:c8:20:44:04:2d:43:f5:12:d5:33:69:99:12: fc:5c:b1:98:7a:ca:a4:3d:42:10:c2:88:7f:24:24: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:26:D2:76:59:44:53:8A:65:F1:5D:38:9D:87:56:C7:2C:D7:19:1A X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:99:4e:c5:c0:a3:6f:d2:63:e4:6b:0c:a8:88:2c:2c:4d:41: 9e:c6:19:70:a4:1d:ba:44:29:b0:3a:41:47:b8:a9:1a:70:20: 65:44:aa:d5:d8:ba:9d:57:ab:df:d2:d9:8b:3f:04:37:46:11: 38:af:8d:ca:40:ca:13:05:81:1b:4e:81:cc:66:89:53:0c:d2: 55:44:7c:4a:10:8e:38:1a:80:b8:38:bb:83:cc:69:93:74:25: 49:f1:59:2f:1e:43:5b:8f:84:9a:50:ac:59:1f:c1:7e:f2:34: d1:c0:7e:0d:26:da:48:74:4c:2f:5a:a4:3c:3d:67:52:e6:93: e5:86:de:b9:86:54:da:a5:57:cc:fe:aa:cc:8d:03:93:67:92: 64:0b:d2:b8:dd:29:8a:94:a1:84:ae:9b:53:c4:bf:b5:fe:ff: ca:5f:3d:c0:bb:4a:c5:35:94:77:7b:59:2a:5c:c9:81:e8:16: 93:35:c8:a7:4c:8c:1e:18:b5:81:d4:96:96:9a:42:0d:b2:19: 55:f2:2b:07:6e:55:60:d5:b5:4d:3b:d0:78:5d:2d:08:ed:bf: 97:cc:8d:2b:b6:e5:69:b1:7e:d3:85:16:cc:80:37:bb:f9:a9: dd:14:7b:73:68:f7:14:0a:75:23:0d:b3:c4:4e:ce:79:1a:43: e7:c9:53:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYT+VQFD6VUsi6m8EaopjQtn6SlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTEwMTkxMzM2MDRaFw0yNTEwMjIyMTQ5MDRaMDMxMTAvBgNV BAMTKEFFMjZEMjc2NTk0NDUzOEE2NUYxNUQzODlEODc1NkM3MkNENzE5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDw5TAwLQgIuO6ZtPDuiRBqV/R hzxyN7wzyjT6LPTWR+aKz40SXKScSZX1TMtAnuVdsORkxy7exShObDnvb5g47eDV vr5MWkbGBSgrG+XHJYJ6zYzvV3p+xh5Q1KCiwFQZWhGFTu1+FwvIhxpWmwlwEn2F GJPYdi+PwKZYBU1EkBhGB/RQzz4SNTHXwv5CljOArVWEm+Zvc+HHV+6NsRj5GdLK LQVrZ8558/Fin2zP6qHmTJhbqwXsVxn6NjjH5qCU2DM8ESuo7PXYKT+hJX8XmMDk EqNLvEvHOBJ6gVXGy5GtyCBEBC1D9RLVM2mZEvxcsZh6yqQ9QhDCiH8kJCYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUribSdllEU4pl8V04nYdWxyzXGRowHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmZTsXAo2/SY+RrDKiILCxNQZ7GGXCkHbpE KbA6QUe4qRpwIGVEqtXYup1Xq9/S2Ys/BDdGETivjcpAyhMFgRtOgcxmiVMM0lVE fEoQjjgagLg4u4PMaZN0JUnxWS8eQ1uPhJpQrFkfwX7yNNHAfg0m2kh0TC9apDw9 Z1Lmk+WG3rmGVNqlV8z+qsyNA5NnkmQL0rjdKYqUoYSum1PEv7X+/8pfPcC7SsU1 lHd7WSpcyYHoFpM1yKdMjB4YtYHUlpaaQg2yGVXyKwduVWDVtU070HhdLQjtv5fM jSu25WmxftOFFsyAN7v5qd0Ue3No9xQKdSMNs8ROznkaQ+fJUyw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:33:36 2025 by rpki-client