$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: lwe2UN/k+9UlVWJHNQPbpgsEaKU6CYdCijW5USP0Jjc= Subject key identifier: 21:50:24:47:92:24:D3:56:F2:4B:AD:5F:32:A1:A2:01:A1:20:99:DF Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 5EA45927A74CCDAC232C83EEF6406BBFC51B92D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 03B2 Signing time: Tue 24 Mar 2026 12:31:12 +0000 Manifest this update: Tue 24 Mar 2026 12:26:12 +0000 Manifest next update: Fri 27 Mar 2026 14:35:12 +0000 Files and hashes: 1: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) 2: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: WnEoSKGZIFsfEoy7vBg6GUxPJ2sdlBMhPa8SmUKwOwQ=) 3: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: QXt2Tl5so/pA01q/PKbPpuDflvojqEBWN0EQ0OHrrxM=) 4: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) 5: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a4:59:27:a7:4c:cd:ac:23:2c:83:ee:f6:40:6b:bf:c5:1b:92:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Mar 24 12:26:12 2026 GMT Not After : Mar 27 14:35:12 2026 GMT Subject: CN=215024479224D356F24BAD5F32A1A201A12099DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:de:7c:21:30:be:f3:61:a0:ee:73:b3:f1: 82:62:4f:dd:b7:41:b1:7e:8c:98:04:1f:07:9c:fd: 2e:0a:c0:3e:bf:79:b7:2c:73:2d:f7:24:e3:78:58: 5e:f5:59:bb:c3:27:6a:99:fc:51:19:fb:f1:c1:fe: c9:d5:bd:89:6e:1e:35:f2:27:51:4f:98:a5:d3:96: 8d:4f:80:e2:dc:89:0a:44:83:67:6d:8f:5a:b9:8e: 38:92:04:6d:b1:20:db:ad:66:da:f9:ef:39:fe:c4: f0:1d:95:b4:3e:0d:90:2a:03:61:89:0f:4a:83:b6: 92:2b:52:fd:d7:05:62:97:b7:03:37:02:d3:b3:b1: e0:5e:22:07:95:af:de:f0:1b:2a:80:7c:77:f5:e5: 10:12:4a:cd:ff:56:72:c4:9a:6c:28:94:51:26:ae: 73:ab:c2:1e:c5:6d:e6:34:ec:3b:ee:88:27:d2:42: ee:39:14:f0:c6:56:63:b6:03:b2:ae:65:d6:b9:1a: 46:16:6f:73:68:9d:b7:8a:17:ec:9b:82:bb:d1:f7: f0:61:0c:77:26:32:0d:13:a8:38:a2:83:b2:80:97: 66:44:75:d2:65:6b:fa:a7:09:34:bd:79:b4:88:e9: 9d:de:47:18:49:8c:80:23:8a:d2:68:7d:41:86:b2: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:50:24:47:92:24:D3:56:F2:4B:AD:5F:32:A1:A2:01:A1:20:99:DF X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:97:2c:37:32:e3:b8:d1:db:8e:74:ed:8e:c5:0b:3c:35:77: 2c:28:57:66:27:55:2a:39:51:e2:15:cc:9d:64:a7:d6:c7:29: 41:c7:08:42:c1:0d:b0:72:6d:b3:e2:dc:8e:a4:1a:0a:22:65: bb:9b:f0:f7:c7:c5:08:65:43:b3:2f:d1:79:ec:38:fa:3c:d3: ed:5a:40:35:a8:ef:ca:08:49:8c:5b:fd:60:92:7f:00:d2:b8: fb:5a:ab:52:bf:a6:44:f1:ca:56:5c:8e:7f:40:44:a6:a3:ab: 9b:08:ef:07:5f:75:de:6a:5e:18:4f:d1:f0:3b:0a:ee:eb:05: 35:6c:08:9b:f5:3e:dd:96:d2:e5:49:17:17:8a:51:67:f8:3a: 8f:4c:23:24:0b:d8:14:8e:8b:ea:95:34:4e:f9:d3:96:cb:04: ff:c8:22:a1:f6:e4:1e:7e:06:e0:33:83:6b:1e:3e:1d:1d:58: b3:4c:38:8e:76:e3:e5:df:f0:78:3d:bd:d3:ee:51:62:02:dd: c1:90:bf:96:8e:7d:af:9d:47:1c:e7:16:1b:31:d0:5c:fb:a1: 5e:e1:c8:cf:a8:80:7a:3f:ea:0f:16:74:54:4f:54:70:86:80: 33:80:e4:cb:12:a7:a0:fe:6a:e0:91:17:3e:d0:1e:52:0f:95: c9:42:01:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqRZJ6dMzawjLIPu9kBrv8UbktkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNjAzMjQxMjI2MTJaFw0yNjAzMjcxNDM1MTJaMDMxMTAvBgNV BAMTKDIxNTAyNDQ3OTIyNEQzNTZGMjRCQUQ1RjMyQTFBMjAxQTEyMDk5REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTd58ITC+82Gg7nOz8YJiT923 QbF+jJgEHwec/S4KwD6/ebcscy33JON4WF71WbvDJ2qZ/FEZ+/HB/snVvYluHjXy J1FPmKXTlo1PgOLciQpEg2dtj1q5jjiSBG2xINutZtr57zn+xPAdlbQ+DZAqA2GJ D0qDtpIrUv3XBWKXtwM3AtOzseBeIgeVr97wGyqAfHf15RASSs3/VnLEmmwolFEm rnOrwh7FbeY07DvuiCfSQu45FPDGVmO2A7KuZda5GkYWb3NonbeKF+ybgrvR9/Bh DHcmMg0TqDiig7KAl2ZEddJla/qnCTS9ebSI6Z3eRxhJjIAjitJofUGGsgFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIVAkR5Ik01byS61fMqGiAaEgmd8wHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOXLDcy47jR24507Y7FCzw1dywoV2YnVSo5 UeIVzJ1kp9bHKUHHCELBDbBybbPi3I6kGgoiZbub8PfHxQhlQ7Mv0XnsOPo80+1a QDWo78oISYxb/WCSfwDSuPtaq1K/pkTxylZcjn9ARKajq5sI7wdfdd5qXhhP0fA7 Cu7rBTVsCJv1Pt2W0uVJFxeKUWf4Oo9MIyQL2BSOi+qVNE7505bLBP/IIqH25B5+ BuAzg2sePh0dWLNMOI524+Xf8Hg9vdPuUWIC3cGQv5aOfa+dRxznFhsx0Fz7oV7h yM+ogHo/6g8WdFRPVHCGgDOA5MsSp6D+auCRFz7QHlIPlclCAYs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:51 2026 by rpki-client