$ rpki-client -vvf repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft File: 145856688D58EEB673E59CC02D21114CF78E87E5.mft (raw, json) Hash identifier: Pnw3mQI1LTempsC5BzAV1OjfdwcMyWCaOqeeVwSU9zs= Subject key identifier: 1D:4D:E4:4E:99:60:E8:AC:03:FE:BE:33:28:3D:5C:2B:1D:50:1E:79 Authority key identifier: 14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 Certificate issuer: /CN=145856688D58EEB673E59CC02D21114CF78E87E5 Certificate serial: 19CBA3F3C139603C22AC81CABF0157D4BB105D07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft Manifest number: 8F Signing time: Sat 19 Jul 2025 13:20:51 +0000 Manifest this update: Sat 19 Jul 2025 13:15:51 +0000 Manifest next update: Tue 22 Jul 2025 23:44:51 +0000 Files and hashes: 1: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: NiBjkneS23NjWIZK7/S3rCptTDYB7bSoabsYG4VVavg=) 2: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: 9tXtFpTSK8/Gv6WVGpyrNnATNqrkJEwmK6WzmGqcUmQ=) 3: 145856688D58EEB673E59CC02D21114CF78E87E5.crl (hash: y/Z/AcZp+R47uIg+/1g1LcdSO9UiJkX6AEWd1JURymI=) 4: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: 9RQvrG19d/kbbr9j04wj/AolcfFkLEsHEjyLp9uYWCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cb:a3:f3:c1:39:60:3c:22:ac:81:ca:bf:01:57:d4:bb:10:5d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145856688D58EEB673E59CC02D21114CF78E87E5 Validity Not Before: Jul 19 13:15:51 2025 GMT Not After : Jul 22 23:44:51 2025 GMT Subject: CN=1D4DE44E9960E8AC03FEBE33283D5C2B1D501E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5b:4d:f8:a2:66:5a:1f:9a:be:49:af:15:87: 07:f4:1d:d8:c7:b0:ee:1c:28:eb:2c:d5:06:eb:38: fe:f3:48:53:c2:46:1c:52:f3:f1:44:ab:64:05:b1: 18:b8:3f:ce:75:29:fa:cb:be:29:b1:33:8f:e3:7b: f3:a4:33:3e:57:f6:d6:98:50:9e:78:50:9c:1f:9e: 14:a2:b9:7a:4a:b9:d9:fc:87:34:4f:4a:34:31:14: a3:c2:69:b2:5c:f2:62:0f:05:6e:9a:04:cb:91:05: f4:ae:68:31:06:5f:49:d6:21:0a:97:56:a9:3e:d1: 1f:87:bc:9b:a2:ee:4e:82:fe:2e:5a:c7:49:9e:42: a9:7d:b8:6a:ae:53:0f:1f:a1:08:6e:78:5d:20:9a: 1d:9b:d4:10:2e:60:a2:f9:a0:e7:65:d6:3f:7f:4a: fb:4e:19:57:9e:86:32:0b:f6:33:53:8f:5d:71:c2: 84:7a:e9:03:3c:2f:8c:ae:a7:96:c3:a1:06:5e:89: f2:99:d4:0e:0f:39:22:8a:10:b5:05:6d:87:db:2f: f0:dd:f1:7b:88:9e:ce:ce:03:e8:1c:9a:a3:f8:6d: 0a:f6:6b:0a:3c:23:54:24:75:5f:40:72:df:7c:49: c1:b8:16:3c:f2:8c:9f:dc:c8:87:1b:c6:94:07:09: cb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4D:E4:4E:99:60:E8:AC:03:FE:BE:33:28:3D:5C:2B:1D:50:1E:79 X509v3 Authority Key Identifier: keyid:14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:70:3a:7c:57:19:fd:00:90:dc:5c:cb:e9:94:eb:1d:22:bd: 61:05:68:8b:b0:3f:d0:9d:79:95:85:4f:2d:df:ea:3e:34:c6: 75:67:3f:e1:9b:6a:7c:cd:7e:32:e2:c1:66:9b:57:1d:5c:84: 6b:f1:ef:05:d1:e2:93:36:79:c8:1c:7b:ac:9a:01:e0:32:21: 2c:5c:5e:f8:40:68:83:8c:49:96:5b:87:51:1e:dd:81:f5:3f: 06:e6:61:05:8a:84:9c:be:07:0c:3f:5e:af:f7:5b:f4:bc:ad: e3:2e:c2:c9:80:87:42:58:ba:c9:15:ef:0b:f9:e9:9c:4a:52: 6e:96:47:2d:d7:f1:da:87:e2:0c:24:14:94:81:2f:a4:0c:49: 85:2e:17:1c:e3:32:12:fd:33:c2:76:aa:84:66:17:71:fc:1f: 53:e0:c3:4a:c5:67:a4:d3:8b:95:d7:65:e8:44:f9:5e:da:ae: 5a:c6:f6:ba:1b:32:9f:ce:aa:c9:20:33:bc:65:a5:88:ae:ad: 2a:25:2a:0a:51:e9:67:21:85:ac:ed:10:eb:10:7e:52:68:f1: 73:a0:89:f0:28:5d:c2:04:ee:58:87:6a:cd:b6:2a:5a:a9:89: 19:f8:a6:0d:58:c5:f5:ee:f5:da:1e:8e:fe:59:4d:5e:2d:cc: 06:65:31:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcuj88E5YDwirIHKvwFX1LsQXQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENG NzhFODdFNTAeFw0yNTA3MTkxMzE1NTFaFw0yNTA3MjIyMzQ0NTFaMDMxMTAvBgNV BAMTKDFENERFNDRFOTk2MEU4QUMwM0ZFQkUzMzI4M0Q1QzJCMUQ1MDFFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaW034omZaH5q+Sa8Vhwf0HdjH sO4cKOss1QbrOP7zSFPCRhxS8/FEq2QFsRi4P851KfrLvimxM4/je/OkMz5X9taY UJ54UJwfnhSiuXpKudn8hzRPSjQxFKPCabJc8mIPBW6aBMuRBfSuaDEGX0nWIQqX Vqk+0R+HvJui7k6C/i5ax0meQql9uGquUw8foQhueF0gmh2b1BAuYKL5oOdl1j9/ SvtOGVeehjIL9jNTj11xwoR66QM8L4yup5bDoQZeifKZ1A4POSKKELUFbYfbL/Dd 8XuIns7OA+gcmqP4bQr2awo8I1QkdV9Act98ScG4FjzyjJ/cyIcbxpQHCcufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHU3kTplg6KwD/r4zKD1cKx1QHnkwHwYDVR0j BBgwFoAUFFhWaI1Y7rZz5ZzALSERTPeOh+UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmIwNWYzNi1lMTc0LTRkYWQtYmMyYS0wODkyNmM1ZGQwNDYvMC8xNDU4NTY2ODhE NThFRUI2NzNFNTlDQzAyRDIxMTE0Q0Y3OEU4N0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENGNzhF ODdFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj MmEtMDg5MjZjNWRkMDQ2LzAvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTEx NENGNzhFODdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVwOnxXGf0AkNxcy+mU6x0ivWEFaIuwP9Cd eZWFTy3f6j40xnVnP+GbanzNfjLiwWabVx1chGvx7wXR4pM2ecgce6yaAeAyISxc XvhAaIOMSZZbh1Ee3YH1PwbmYQWKhJy+Bww/Xq/3W/S8reMuwsmAh0JYuskV7wv5 6ZxKUm6WRy3X8dqH4gwkFJSBL6QMSYUuFxzjMhL9M8J2qoRmF3H8H1Pgw0rFZ6TT i5XXZehE+V7arlrG9robMp/OqskgM7xlpYiurSolKgpR6WchhaztEOsQflJo8XOg ifAoXcIE7liHas22KlqpiRn4pg1YxfXu9doejv5ZTV4tzAZlMYw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:37:18 2025 by rpki-client