$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: Ts2PmxGW4gwWB5PddmXyndtvBV5Uf1Nx3o6YrGdEQ6o= Subject key identifier: E7:9A:9C:1A:FE:70:D2:2B:1B:4E:14:FC:EA:2E:FA:4D:63:A7:42:40 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 40DAE00BBA31EE3564931144A87AA91A80A1A593 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 035A Signing time: Sun 07 Sep 2025 03:01:03 +0000 Manifest this update: Sun 07 Sep 2025 02:56:03 +0000 Manifest next update: Wed 10 Sep 2025 14:59:03 +0000 Files and hashes: 1: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) 2: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 3: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: WnEoSKGZIFsfEoy7vBg6GUxPJ2sdlBMhPa8SmUKwOwQ=) 4: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: BDEq/fEgVR42SQZw03RpGU3C5Mga4cL+uY8xo72vCd4=) 5: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:da:e0:0b:ba:31:ee:35:64:93:11:44:a8:7a:a9:1a:80:a1:a5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Sep 7 02:56:03 2025 GMT Not After : Sep 10 14:59:03 2025 GMT Subject: CN=E79A9C1AFE70D22B1B4E14FCEA2EFA4D63A74240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:59:6b:9a:a2:d1:c8:59:b2:a5:3f:c1:08: 3a:3c:34:91:df:63:c6:54:e5:86:fa:b6:95:9a:16: c0:6b:10:6a:2c:eb:c9:b9:49:93:95:5c:8b:25:24: 5a:d7:ed:f4:a0:93:ca:1d:d1:63:61:e6:87:c0:03: da:c7:26:d9:6a:33:86:31:ec:ab:dd:83:7c:c6:47: d7:ea:a2:bf:51:b6:29:8b:3c:f8:fa:56:91:c2:41: 19:09:6e:ee:c4:4d:63:10:32:4a:bc:93:6b:86:db: 1a:25:66:7c:4e:ba:a1:c7:80:46:1f:ad:36:03:07: 97:01:57:05:30:6e:d0:91:36:e0:f7:9c:94:3b:3d: be:89:97:f7:0d:4a:33:16:87:e5:00:67:27:e8:77: 48:fb:d6:1d:f5:19:10:03:0e:51:1f:fc:b5:43:1a: 31:ff:cd:ab:e5:48:e7:93:de:a3:00:ae:b2:be:ed: 8e:1c:23:74:3f:6b:bd:bf:4d:9b:9c:ab:d2:25:e0: 2b:b9:97:d2:ea:c3:63:38:69:38:56:9c:ef:3b:30: 16:f9:34:22:8b:8d:76:78:80:3c:87:54:2d:d4:f0: 63:1b:df:42:09:5b:53:73:eb:c4:4a:ce:20:1a:6a: 93:cd:55:1f:f8:92:ad:73:70:d9:1d:0d:0d:56:dc: c0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9A:9C:1A:FE:70:D2:2B:1B:4E:14:FC:EA:2E:FA:4D:63:A7:42:40 X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:97:4a:e9:83:9a:59:27:37:5f:1c:8b:61:e3:37:69:8a:34: 1c:bd:77:c0:ab:d4:dc:80:82:42:69:ab:46:15:52:be:da:64: 67:87:a3:fb:2f:6b:b3:9c:8f:e1:50:8c:4f:2d:eb:ae:fc:35: 6b:77:d0:70:6e:29:5a:02:6f:f5:5d:18:2c:20:f3:30:b9:e9: d8:1d:08:7e:48:6e:40:a9:44:38:d8:08:c2:f8:30:a0:c1:7f: 68:16:18:cf:28:68:7b:a1:a4:9a:25:23:81:14:b5:e1:0e:07: 55:81:28:7a:ba:db:25:86:47:0f:95:ed:eb:19:c2:d8:e5:5c: fe:28:79:5b:72:5c:a3:5c:59:98:17:f5:ae:cd:0b:02:ed:b7: 3e:ae:85:5b:f6:86:24:c7:37:de:f0:93:0b:6b:5e:d2:51:18: 30:3b:ea:8e:c6:fa:81:f6:e8:d6:38:25:35:e0:11:a0:37:bc: 5f:7a:ea:86:3a:4b:6a:37:a2:ec:86:86:9b:e2:1a:57:cd:4d: f4:1b:ce:a8:06:c2:d8:27:0d:97:dd:f8:a2:a5:74:6e:ea:bb: f7:a3:e2:8c:b2:f7:40:a9:e8:d8:5b:20:76:cf:3c:b6:11:78: 7b:20:4c:d3:db:53:53:8c:c5:32:3e:e7:c1:09:ae:51:f6:fe: 87:1c:79:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNrgC7ox7jVkkxFEqHqpGoChpZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTA5MDcwMjU2MDNaFw0yNTA5MTAxNDU5MDNaMDMxMTAvBgNV BAMTKEU3OUE5QzFBRkU3MEQyMkIxQjRFMTRGQ0VBMkVGQTRENjNBNzQyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6w1lrmqLRyFmypT/BCDo8NJHf Y8ZU5Yb6tpWaFsBrEGos68m5SZOVXIslJFrX7fSgk8od0WNh5ofAA9rHJtlqM4Yx 7Kvdg3zGR9fqor9RtimLPPj6VpHCQRkJbu7ETWMQMkq8k2uG2xolZnxOuqHHgEYf rTYDB5cBVwUwbtCRNuD3nJQ7Pb6Jl/cNSjMWh+UAZyfod0j71h31GRADDlEf/LVD GjH/zavlSOeT3qMArrK+7Y4cI3Q/a72/TZucq9Il4Cu5l9Lqw2M4aThWnO87MBb5 NCKLjXZ4gDyHVC3U8GMb30IJW1Nz68RKziAaapPNVR/4kq1zcNkdDQ1W3MAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU55qcGv5w0isbThT86i76TWOnQkAwHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKXSumDmlknN18ci2HjN2mKNBy9d8Cr1NyA gkJpq0YVUr7aZGeHo/sva7Ocj+FQjE8t6678NWt30HBuKVoCb/VdGCwg8zC56dgd CH5IbkCpRDjYCML4MKDBf2gWGM8oaHuhpJolI4EUteEOB1WBKHq62yWGRw+V7esZ wtjlXP4oeVtyXKNcWZgX9a7NCwLttz6uhVv2hiTHN97wkwtrXtJRGDA76o7G+oH2 6NY4JTXgEaA3vF966oY6S2o3ouyGhpviGlfNTfQbzqgGwtgnDZfd+KKldG7qu/ej 4oyy90Cp6NhbIHbPPLYReHsgTNPbU1OMxTI+58EJrlH2/occeU8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:28 2025 by rpki-client