$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: hlAdhm4WM442QYrXzHIuKsrSc5w+GuHYKwYvh2ZTuNQ= Subject key identifier: 49:EE:4F:A0:B7:0C:21:D8:38:31:29:04:92:A0:62:E9:2E:B1:00:91 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 6368FF304CBD1D7BE23BC8B238222F7331FF8F7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 033B Signing time: Sun 29 Jun 2025 12:01:03 +0000 Manifest this update: Sun 29 Jun 2025 11:56:03 +0000 Manifest next update: Wed 02 Jul 2025 19:54:03 +0000 Files and hashes: 1: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) 2: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: IG6t7nYlULhsMgBABVk9BSJ2moXKjUg9u7BBivZ69qI=) 3: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 4: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: sYRwl1jDSaQpKlnm+90rNvXF9LqZ6qKrb9ndUqy4ZXw=) 5: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:68:ff:30:4c:bd:1d:7b:e2:3b:c8:b2:38:22:2f:73:31:ff:8f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Jun 29 11:56:03 2025 GMT Not After : Jul 2 19:54:03 2025 GMT Subject: CN=49EE4FA0B70C21D83831290492A062E92EB10091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:fb:53:a0:8e:cf:69:a0:1f:ed:a6:cf:3a: 34:44:74:a7:9d:0c:e9:d6:8e:a5:46:f1:b2:a6:0d: 62:77:c7:e4:b1:cc:45:6a:78:45:ee:79:d8:0b:1d: b9:13:c6:aa:85:33:da:5d:c4:ab:c5:1f:4a:3e:5b: 1d:0a:2f:11:85:c3:9d:1f:bf:7b:54:0f:87:62:36: 1a:47:1d:0b:e5:3e:65:ea:5a:c9:43:74:d8:29:ac: bc:e2:02:ee:ba:69:82:ee:a0:ee:a9:1c:9d:9e:e8: e3:5b:93:0d:2a:e6:6b:d6:93:cc:77:2b:95:83:a3: 18:68:9b:d8:60:1c:8e:c0:3c:45:b2:38:a1:96:fe: b8:f9:76:4a:87:58:95:37:a3:8d:d4:6d:21:38:f3: 05:50:bd:bb:2c:0a:88:99:ca:2b:d1:0c:83:94:c9: a5:a9:4e:40:d0:38:d2:5f:d3:40:a3:6d:7a:3c:9a: b5:5b:5a:cb:ac:da:85:60:81:bc:c2:4d:72:5b:5d: 1e:84:95:6e:d0:f7:c4:fc:a3:3b:32:00:78:80:c4: 99:86:ee:ee:f9:d1:41:01:8f:f5:72:91:45:1d:43: 5a:e2:49:13:a7:88:93:f4:8d:3e:0d:03:a9:01:52: b2:8f:0d:44:fc:27:b0:93:0a:17:fd:44:da:14:23: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EE:4F:A0:B7:0C:21:D8:38:31:29:04:92:A0:62:E9:2E:B1:00:91 X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d6:a6:4b:3c:47:13:bb:93:e6:b9:e6:22:cb:7d:66:bf:79: 6f:45:82:c9:e7:33:a7:78:15:e7:7a:16:a4:95:2d:0a:3e:7d: 6c:3d:da:0b:c3:d2:23:03:6c:ca:b0:e3:53:c0:e9:69:a7:82: a6:06:ec:4a:9a:2b:a3:44:03:36:35:e3:10:45:67:20:31:68: 3b:e0:f2:9d:5a:e0:a5:dc:ac:01:62:6c:30:0f:5d:95:35:20: 04:39:1a:f1:5e:da:95:84:00:c8:ca:e0:ad:c5:71:b1:3b:b5: 43:b8:3b:b1:9c:05:43:87:4a:20:e7:3f:2a:1f:19:cb:26:2d: 6c:7e:aa:03:8f:d8:2d:2b:5f:10:cd:ab:b4:36:b6:fe:61:a5: d7:82:f6:46:7f:53:eb:f4:8b:04:41:b9:4c:b3:44:55:3d:c1: c7:19:2d:0c:10:54:3a:ac:19:60:95:75:6b:ab:9b:7a:36:4b: 94:75:af:ea:df:88:3f:0d:dd:2c:88:3c:ab:b4:6a:bb:77:f8: 7e:ec:ed:0a:a1:55:1f:b3:46:90:79:33:4b:f9:22:5e:c6:26: ab:ca:b8:f7:1e:9d:31:58:b5:17:45:be:bd:31:62:6f:b1:d7: 12:ba:3d:cb:89:87:27:2e:ef:f5:2a:9d:ba:e4:25:31:f7:e2: 3a:0d:ad:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2j/MEy9HXviO8iyOCIvczH/j30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTA2MjkxMTU2MDNaFw0yNTA3MDIxOTU0MDNaMDMxMTAvBgNV BAMTKDQ5RUU0RkEwQjcwQzIxRDgzODMxMjkwNDkyQTA2MkU5MkVCMTAwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nvtToI7PaaAf7abPOjREdKed DOnWjqVG8bKmDWJ3x+SxzEVqeEXuedgLHbkTxqqFM9pdxKvFH0o+Wx0KLxGFw50f v3tUD4diNhpHHQvlPmXqWslDdNgprLziAu66aYLuoO6pHJ2e6ONbkw0q5mvWk8x3 K5WDoxhom9hgHI7APEWyOKGW/rj5dkqHWJU3o43UbSE48wVQvbssCoiZyivRDIOU yaWpTkDQONJf00CjbXo8mrVbWsus2oVggbzCTXJbXR6ElW7Q98T8ozsyAHiAxJmG 7u750UEBj/VykUUdQ1riSROniJP0jT4NA6kBUrKPDUT8J7CTChf9RNoUI0pxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSe5PoLcMIdg4MSkEkqBi6S6xAJEwHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3Wpks8RxO7k+a55iLLfWa/eW9FgsnnM6d4 Fed6FqSVLQo+fWw92gvD0iMDbMqw41PA6WmngqYG7EqaK6NEAzY14xBFZyAxaDvg 8p1a4KXcrAFibDAPXZU1IAQ5GvFe2pWEAMjK4K3FcbE7tUO4O7GcBUOHSiDnPyof GcsmLWx+qgOP2C0rXxDNq7Q2tv5hpdeC9kZ/U+v0iwRBuUyzRFU9wccZLQwQVDqs GWCVdWurm3o2S5R1r+rfiD8N3SyIPKu0art3+H7s7QqhVR+zRpB5M0v5Il7GJqvK uPcenTFYtRdFvr0xYm+x1xK6PcuJhycu7/UqnbrkJTH34joNrY0= -----END CERTIFICATE-----Generated at Tue Jul 1 07:06:26 2025 by rpki-client