$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: HZZO2563XpRsOmWgF7b61LCjXD4TuYUbRQ3aguU/CL4= Subject key identifier: D0:81:02:4C:83:46:A3:D4:0B:00:B8:61:AD:67:FD:FE:E9:61:05:BA Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 15125AD5CE23F417197EBE4DBA21969066072AC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 0331 Signing time: Sat 07 Jun 2025 02:41:01 +0000 Manifest this update: Sat 07 Jun 2025 02:36:01 +0000 Manifest next update: Tue 10 Jun 2025 06:05:01 +0000 Files and hashes: 1: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 2: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) 3: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: Qw/sYTs2p7kGcdCSVXL2Sqj7reCj7fpnqn1k++FwS0Q=) 4: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) 5: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: IG6t7nYlULhsMgBABVk9BSJ2moXKjUg9u7BBivZ69qI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:12:5a:d5:ce:23:f4:17:19:7e:be:4d:ba:21:96:90:66:07:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Jun 7 02:36:01 2025 GMT Not After : Jun 10 06:05:01 2025 GMT Subject: CN=D081024C8346A3D40B00B861AD67FDFEE96105BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c5:09:c9:b3:51:15:23:c1:2a:8c:0f:ea:87: ef:25:e7:c8:77:cf:c2:8d:eb:42:6d:51:39:f6:72: 36:05:7c:4f:45:30:2b:66:e3:ac:5f:ee:ee:33:81: 21:41:c6:2b:ee:25:c6:7d:46:3f:e5:10:ee:2b:d9: 26:37:7b:11:8b:13:9a:69:c6:02:c7:47:08:ee:7f: 65:90:33:04:7a:56:eb:77:58:c6:d8:f3:f8:20:b2: a4:ed:45:ee:53:c9:3d:f2:ea:82:5a:58:15:bd:5b: 07:70:ae:c9:75:14:c8:c8:8f:55:dc:b2:9b:0a:4b: 7f:0c:d8:08:2d:e4:bb:98:c8:ae:55:af:da:3f:65: d7:cf:e4:0d:fa:ea:4b:ff:bd:2f:e7:18:a7:ae:08: c8:7e:80:b8:6d:1a:79:fe:4f:8b:dc:6a:34:3f:3b: b8:9f:6d:b8:a2:45:00:8a:10:3a:4d:21:14:15:a2: b3:fa:ba:2c:75:30:2c:1b:7b:40:33:5a:b2:54:2f: 91:5d:23:43:5f:88:f6:52:ee:48:74:fb:f9:bd:37: a0:62:b1:05:3b:0d:0a:12:7b:71:cf:23:b6:41:92: b2:be:c5:98:33:fb:f7:32:3e:d0:db:4e:d5:dd:5c: 47:3e:fc:24:1e:9e:f7:17:83:b3:98:cd:33:40:25: 30:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:81:02:4C:83:46:A3:D4:0B:00:B8:61:AD:67:FD:FE:E9:61:05:BA X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:cd:d0:70:0f:18:b9:81:5d:af:46:18:67:91:4d:51:6d:4b: fa:ef:6b:63:90:64:9f:6e:20:1d:8a:b7:1c:f4:c8:ff:95:be: 42:7b:db:81:99:15:8b:50:6f:5d:d1:34:56:8a:e5:f4:03:9b: 91:67:b6:be:f7:af:4a:89:01:27:68:50:9e:1e:5b:cd:7e:04: d8:7e:83:68:2e:8a:34:1b:fa:bc:d0:f8:39:5e:2f:f5:da:42: e5:89:db:b0:80:4a:ec:2e:f9:a6:42:4b:67:81:bb:9c:53:82: c1:5f:e3:f4:e8:9c:1f:ba:e4:44:e5:8b:12:49:39:6c:47:fa: ba:2f:14:aa:25:e0:34:a7:a0:fa:67:e2:71:dc:0f:cd:41:e5: f7:04:80:ce:99:79:c7:ec:b2:18:05:de:bc:07:4b:c4:bc:a7: 8e:ad:77:a8:29:19:26:63:59:a5:1b:ec:81:db:1b:91:e3:64: 3b:9f:85:ff:f6:a4:4d:07:36:e5:3c:34:af:17:50:7b:f7:8c: 58:9a:67:26:b0:c2:50:27:cb:6b:42:38:a5:4c:49:9c:2e:3a: c0:6a:91:ec:4b:ca:37:9a:86:9c:4d:c5:87:df:b9:aa:81:49: 75:77:27:d9:b3:f3:78:9e:61:4f:90:33:ca:b6:24:b4:83:39: 90:3a:f4:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFRJa1c4j9BcZfr5NuiGWkGYHKsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTA2MDcwMjM2MDFaFw0yNTA2MTAwNjA1MDFaMDMxMTAvBgNV BAMTKEQwODEwMjRDODM0NkEzRDQwQjAwQjg2MUFENjdGREZFRTk2MTA1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgxQnJs1EVI8EqjA/qh+8l58h3 z8KN60JtUTn2cjYFfE9FMCtm46xf7u4zgSFBxivuJcZ9Rj/lEO4r2SY3exGLE5pp xgLHRwjuf2WQMwR6Vut3WMbY8/ggsqTtRe5TyT3y6oJaWBW9Wwdwrsl1FMjIj1Xc spsKS38M2Agt5LuYyK5Vr9o/ZdfP5A366kv/vS/nGKeuCMh+gLhtGnn+T4vcajQ/ O7ifbbiiRQCKEDpNIRQVorP6uix1MCwbe0AzWrJUL5FdI0NfiPZS7kh0+/m9N6Bi sQU7DQoSe3HPI7ZBkrK+xZgz+/cyPtDbTtXdXEc+/CQenvcXg7OYzTNAJTBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IECTINGo9QLALhhrWf9/ulhBbowHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDN0HAPGLmBXa9GGGeRTVFtS/rva2OQZJ9u IB2Ktxz0yP+VvkJ724GZFYtQb13RNFaK5fQDm5Fntr73r0qJASdoUJ4eW81+BNh+ g2guijQb+rzQ+DleL/XaQuWJ27CASuwu+aZCS2eBu5xTgsFf4/TonB+65ETlixJJ OWxH+rovFKol4DSnoPpn4nHcD81B5fcEgM6ZecfsshgF3rwHS8S8p46td6gpGSZj WaUb7IHbG5HjZDufhf/2pE0HNuU8NK8XUHv3jFiaZyawwlAny2tCOKVMSZwuOsBq kexLyjeahpxNxYffuaqBSXV3J9mz83ieYU+QM8q2JLSDOZA69Nc= -----END CERTIFICATE-----Generated at Sat Jun 7 12:29:59 2025 by rpki-client