$ rpki-client -vvf repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft File: 145856688D58EEB673E59CC02D21114CF78E87E5.mft (raw, json) Hash identifier: psZOMjYBnnTqSe28GmhWBT7njHUImIbKZwtxFC4xzwQ= Subject key identifier: C7:0F:3D:76:4B:B2:71:9A:A0:2C:29:01:0F:16:5E:FF:C7:DE:DD:47 Authority key identifier: 14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 Certificate issuer: /CN=145856688D58EEB673E59CC02D21114CF78E87E5 Certificate serial: 3118755DDEB1E007700BA5F3CCFD8BE166398F3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft Manifest number: 0109 Signing time: Tue 21 Apr 2026 21:01:02 +0000 Manifest this update: Tue 21 Apr 2026 20:56:02 +0000 Manifest next update: Sat 25 Apr 2026 08:44:02 +0000 Files and hashes: 1: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: NiBjkneS23NjWIZK7/S3rCptTDYB7bSoabsYG4VVavg=) 2: 145856688D58EEB673E59CC02D21114CF78E87E5.crl (hash: rHQy6HIjcT5icaiRsSvEv7iArl0Fm7VVaeaOX+K7Tmg=) 3: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: 9tXtFpTSK8/Gv6WVGpyrNnATNqrkJEwmK6WzmGqcUmQ=) 4: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: 9RQvrG19d/kbbr9j04wj/AolcfFkLEsHEjyLp9uYWCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:18:75:5d:de:b1:e0:07:70:0b:a5:f3:cc:fd:8b:e1:66:39:8f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145856688D58EEB673E59CC02D21114CF78E87E5 Validity Not Before: Apr 21 20:56:02 2026 GMT Not After : Apr 25 08:44:02 2026 GMT Subject: CN=C70F3D764BB2719AA02C29010F165EFFC7DEDD47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:63:f9:7e:66:94:96:90:d0:d6:70:f5:a3: 3f:06:b3:1b:f6:a8:85:6a:67:b1:e8:dc:a9:9f:78: 39:0b:d5:18:3d:5e:77:ae:1a:29:ef:87:79:a4:27: 1d:a1:3d:54:37:62:73:bf:10:c5:c4:ff:15:b4:11: a5:4e:2e:09:02:71:de:76:e4:41:0b:c7:d7:7c:49: 92:93:62:72:8d:38:2e:f3:bc:c7:a4:5b:66:2f:61: 1c:f4:3b:0d:09:37:e4:90:6a:df:ab:cd:ea:c1:ac: 93:42:ab:59:9c:20:19:29:3f:cd:d8:7d:b0:37:36: 27:fa:2a:a6:19:22:73:29:ee:b7:a3:f0:84:8e:0d: 98:63:8e:21:d5:f5:19:85:8e:0d:cb:49:2e:7e:34: b9:84:00:59:0a:c8:f7:1c:53:c7:ad:d8:50:5c:15: b9:07:fa:31:44:c2:ce:8a:cc:f6:e8:b9:40:bc:a3: ad:94:22:ac:f8:fc:5b:70:a7:c5:a4:1b:e6:73:a3: 09:0e:54:3c:72:4f:c7:ba:1d:13:c0:c7:42:f7:bd: 0c:f0:96:53:38:71:88:68:6b:57:7b:bf:ff:49:02: 7d:df:21:39:56:ff:fa:63:e8:33:b1:5a:39:44:01: 3a:a5:92:1c:4d:15:a5:64:aa:fe:83:74:9d:d6:0b: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0F:3D:76:4B:B2:71:9A:A0:2C:29:01:0F:16:5E:FF:C7:DE:DD:47 X509v3 Authority Key Identifier: keyid:14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b0:85:fa:7e:68:d8:23:ab:cc:26:05:15:a7:05:ea:40:3d: a6:9e:d3:80:11:91:19:2c:fd:06:9c:d6:5d:6f:b1:26:25:c6: 54:cf:c7:ec:58:c5:a9:a6:8e:a0:b7:bb:8e:6d:65:24:72:46: 02:64:f5:3e:14:69:79:de:35:4e:41:82:3a:4e:11:40:77:14: 2b:3d:c9:f4:83:db:fd:e9:1b:26:7e:e9:33:87:1a:f0:46:98: 91:63:db:da:b7:32:ab:ed:46:d2:cb:86:9b:d6:2f:c4:49:0c: 32:7c:c6:3d:d1:bb:a6:3d:5b:4f:4d:2b:a6:2e:9d:e6:9b:33: fa:01:59:f4:8b:e9:73:d5:b5:d3:a2:6b:ed:44:81:89:aa:7e: 18:4d:11:97:66:d7:cb:42:c5:a9:b8:b4:6c:1e:59:cf:53:04: 8c:97:02:eb:cf:04:83:fa:32:72:d0:6f:aa:9e:08:1e:2e:61: 30:e5:01:fe:fa:e5:9a:d7:9d:82:87:8f:cc:46:80:be:c9:8e: 34:7a:cf:64:41:2a:ae:1b:8f:9e:c3:3c:46:e9:02:d6:31:9c: e2:05:af:ab:6c:65:e2:17:b7:d9:f8:25:7b:44:ec:dd:e3:59: d9:38:fe:92:0f:77:3c:be:92:42:b3:4c:48:a8:bc:ec:ec:a1: ad:73:28:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRh1Xd6x4AdwC6XzzP2L4WY5jz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENG NzhFODdFNTAeFw0yNjA0MjEyMDU2MDJaFw0yNjA0MjUwODQ0MDJaMDMxMTAvBgNV BAMTKEM3MEYzRDc2NEJCMjcxOUFBMDJDMjkwMTBGMTY1RUZGQzdERURENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bGP5fmaUlpDQ1nD1oz8Gsxv2 qIVqZ7Ho3KmfeDkL1Rg9XneuGinvh3mkJx2hPVQ3YnO/EMXE/xW0EaVOLgkCcd52 5EELx9d8SZKTYnKNOC7zvMekW2YvYRz0Ow0JN+SQat+rzerBrJNCq1mcIBkpP83Y fbA3Nif6KqYZInMp7rej8ISODZhjjiHV9RmFjg3LSS5+NLmEAFkKyPccU8et2FBc FbkH+jFEws6KzPbouUC8o62UIqz4/Ftwp8WkG+ZzowkOVDxyT8e6HRPAx0L3vQzw llM4cYhoa1d7v/9JAn3fITlW//pj6DOxWjlEATqlkhxNFaVkqv6DdJ3WC/SpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxw89dkuycZqgLCkBDxZe/8fe3UcwHwYDVR0j BBgwFoAUFFhWaI1Y7rZz5ZzALSERTPeOh+UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmIwNWYzNi1lMTc0LTRkYWQtYmMyYS0wODkyNmM1ZGQwNDYvMC8xNDU4NTY2ODhE NThFRUI2NzNFNTlDQzAyRDIxMTE0Q0Y3OEU4N0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENGNzhF ODdFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj MmEtMDg5MjZjNWRkMDQ2LzAvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTEx NENGNzhFODdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKewhfp+aNgjq8wmBRWnBepAPaae04ARkRks /Qac1l1vsSYlxlTPx+xYxammjqC3u45tZSRyRgJk9T4UaXneNU5BgjpOEUB3FCs9 yfSD2/3pGyZ+6TOHGvBGmJFj29q3MqvtRtLLhpvWL8RJDDJ8xj3Ru6Y9W09NK6Yu neabM/oBWfSL6XPVtdOia+1EgYmqfhhNEZdm18tCxam4tGweWc9TBIyXAuvPBIP6 MnLQb6qeCB4uYTDlAf765ZrXnYKHj8xGgL7JjjR6z2RBKq4bj57DPEbpAtYxnOIF r6tsZeIXt9n4JXtE7N3jWdk4/pIPdzy+kkKzTEiovOzsoa1zKAM= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:55 2026 by rpki-client