$ rpki-client -vvf repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft File: 1446915299D8F05DBFAD863E0D230435A96FB12A.mft (raw, json) Hash identifier: X0wOWLmkyW2qlpfMitx3EE7k27k2r0nVFmBFkF3TEQk= Subject key identifier: BB:AE:BE:75:F2:BF:FF:EC:32:AC:26:BD:03:04:48:EE:CA:D5:6A:F4 Authority key identifier: 14:46:91:52:99:D8:F0:5D:BF:AD:86:3E:0D:23:04:35:A9:6F:B1:2A Certificate issuer: /CN=1446915299D8F05DBFAD863E0D230435A96FB12A Certificate serial: 750D2904594D1A3259E8D6B86C7C1F934F5EEF02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft Manifest number: 0213 Signing time: Mon 21 Jul 2025 19:20:45 +0000 Manifest this update: Mon 21 Jul 2025 19:15:45 +0000 Manifest next update: Fri 25 Jul 2025 06:13:45 +0000 Files and hashes: 1: 1446915299D8F05DBFAD863E0D230435A96FB12A.crl (hash: lu2227tdIMfX518Pa8UT3rhUXf0hK3dYjOJo5IqwqIc=) 2: 3130332e3231392e362e302f32342d3234203d3e203338313537.roa (hash: 5fCH5o/O9UDqH03CvG34hP7WiZzJPNv5TqkPcSqTxsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.crl rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 06:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0d:29:04:59:4d:1a:32:59:e8:d6:b8:6c:7c:1f:93:4f:5e:ef:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1446915299D8F05DBFAD863E0D230435A96FB12A Validity Not Before: Jul 21 19:15:45 2025 GMT Not After : Jul 25 06:13:45 2025 GMT Subject: CN=BBAEBE75F2BFFFEC32AC26BD030448EECAD56AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4a:81:3b:e6:c3:cc:39:3d:39:28:46:c2:92: 78:9d:62:a6:04:5f:29:59:56:d4:ee:58:95:bf:7f: c2:e9:9f:07:03:5f:28:ff:71:89:05:e8:97:06:f7: 83:30:46:a9:21:d7:0b:30:1f:86:1c:38:ca:40:23: 8f:9f:41:e1:b4:3c:64:53:62:25:36:17:3f:62:d5: 34:13:2f:a5:0d:aa:2c:0f:f1:9e:62:b9:8e:f3:5b: 50:7a:be:06:62:31:aa:69:67:7c:49:28:47:50:46: 4e:e3:dc:41:58:6f:63:7d:2c:94:c7:47:73:2e:9d: 05:e5:f3:a5:34:bb:8f:c7:0b:a7:91:6f:73:1f:3b: 7e:6c:90:85:d7:8d:ef:6d:49:b0:75:21:64:60:ad: 18:4e:65:3b:34:eb:8f:b0:12:13:d5:ee:0d:d8:22: b6:26:da:46:f1:16:5a:93:67:9a:b2:95:b4:61:06: 59:7f:19:d3:ae:c2:bb:bf:c2:d0:95:6a:11:a0:bd: 46:d8:b6:07:d1:2f:39:67:89:b1:33:96:0a:05:b4: 2f:a6:55:bc:68:fe:69:f8:54:c6:cc:4d:73:22:03: 67:46:c8:a4:b2:06:3f:71:a5:aa:1e:25:1f:1b:0f: 0d:e6:b9:bf:38:09:66:38:05:de:ce:a5:3b:c2:de: 48:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AE:BE:75:F2:BF:FF:EC:32:AC:26:BD:03:04:48:EE:CA:D5:6A:F4 X509v3 Authority Key Identifier: keyid:14:46:91:52:99:D8:F0:5D:BF:AD:86:3E:0D:23:04:35:A9:6F:B1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ed:e0:1d:2c:70:31:bc:be:be:f6:8d:f3:37:0c:7a:a7:84: cc:b1:29:9d:90:42:ab:19:70:a8:e8:21:9e:4b:92:92:17:46: 4a:16:56:98:05:3d:df:4d:2f:f7:b4:87:78:07:64:83:08:aa: 67:6c:d8:3d:f9:d6:6e:bb:ae:d9:e0:a6:75:39:fc:68:e2:fa: 1d:cc:7e:e9:57:02:ed:7f:53:57:97:e0:6b:6e:0d:18:81:db: d4:77:9b:f5:20:76:e4:8d:58:4a:a6:1d:58:10:69:bc:60:5e: 38:d4:a7:39:ac:b4:5c:b3:d6:74:ba:e2:80:2f:8e:eb:fb:a0: 85:ed:ff:6b:27:19:60:15:04:6c:9b:12:61:98:96:09:32:dd: 49:7d:3f:12:fb:3a:bb:71:dc:95:96:c6:e2:2b:4b:f6:56:14: 1c:2d:62:a8:6a:4b:22:2e:2b:c2:46:8c:7f:b0:df:f0:7a:cb: 83:74:36:65:bb:b2:b6:f5:fd:8e:88:fe:37:0a:1c:88:5c:d4: 41:74:4a:ce:62:71:40:d7:f2:45:f0:e9:28:88:22:fb:cd:92: b1:3d:a0:e1:11:1e:4d:18:35:35:6f:8c:9f:b2:22:b3:2c:7b: 69:47:c1:cc:e0:54:3d:19:69:f4:df:04:be:e8:03:d6:9e:dd: 00:1c:ad:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQ0pBFlNGjJZ6Na4bHwfk09e7wIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0MzVB OTZGQjEyQTAeFw0yNTA3MjExOTE1NDVaFw0yNTA3MjUwNjEzNDVaMDMxMTAvBgNV BAMTKEJCQUVCRTc1RjJCRkZGRUMzMkFDMjZCRDAzMDQ0OEVFQ0FENTZBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSoE75sPMOT05KEbCknidYqYE XylZVtTuWJW/f8LpnwcDXyj/cYkF6JcG94MwRqkh1wswH4YcOMpAI4+fQeG0PGRT YiU2Fz9i1TQTL6UNqiwP8Z5iuY7zW1B6vgZiMappZ3xJKEdQRk7j3EFYb2N9LJTH R3MunQXl86U0u4/HC6eRb3MfO35skIXXje9tSbB1IWRgrRhOZTs064+wEhPV7g3Y IrYm2kbxFlqTZ5qylbRhBll/GdOuwru/wtCVahGgvUbYtgfRLzlnibEzlgoFtC+m Vbxo/mn4VMbMTXMiA2dGyKSyBj9xpaoeJR8bDw3mub84CWY4Bd7OpTvC3kjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu66+dfK//+wyrCa9AwRI7srVavQwHwYDVR0j BBgwFoAUFEaRUpnY8F2/rYY+DSMENalvsSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDIxZWU3Ni1hOWZmLTRiZmEtODIyMy05NDZlZWNjY2YwMzYvMC8xNDQ2OTE1Mjk5 RDhGMDVEQkZBRDg2M0UwRDIzMDQzNUE5NkZCMTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0MzVBOTZG QjEyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAyMWVlNzYtYTlmZi00YmZhLTgy MjMtOTQ2ZWVjY2NmMDM2LzAvMTQ0NjkxNTI5OUQ4RjA1REJGQUQ4NjNFMEQyMzA0 MzVBOTZGQjEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALt4B0scDG8vr72jfM3DHqnhMyxKZ2QQqsZ cKjoIZ5LkpIXRkoWVpgFPd9NL/e0h3gHZIMIqmds2D351m67rtngpnU5/Gji+h3M fulXAu1/U1eX4GtuDRiB29R3m/UgduSNWEqmHVgQabxgXjjUpzmstFyz1nS64oAv juv7oIXt/2snGWAVBGybEmGYlgky3Ul9PxL7Ortx3JWWxuIrS/ZWFBwtYqhqSyIu K8JGjH+w3/B6y4N0NmW7srb1/Y6I/jcKHIhc1EF0Ss5icUDX8kXw6SiIIvvNkrE9 oOERHk0YNTVvjJ+yIrMse2lHwczgVD0ZafTfBL7oA9ae3QAcrRo= -----END CERTIFICATE-----Generated at Wed Jul 23 12:23:44 2025 by rpki-client