$ rpki-client -vvf repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft File: 146D9338596ECF1F976FB37F330D8C0CD48414C9.mft (raw, json) Hash identifier: +UHGXaogMew44ihirMm5NnowwMYKMbtUjc//01gV23s= Subject key identifier: BF:93:A5:D2:49:C2:B8:33:FD:8F:68:24:F7:0D:53:61:1C:47:41:42 Authority key identifier: 14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 Certificate issuer: /CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Certificate serial: 7EEBE7134D6FAB43D3B680682F8DA7C0B934E526 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft Manifest number: 0233 Signing time: Sun 07 Sep 2025 04:02:19 +0000 Manifest this update: Sun 07 Sep 2025 03:57:19 +0000 Manifest next update: Wed 10 Sep 2025 11:54:19 +0000 Files and hashes: 1: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: P6MybQx69Dhx8eJMG1s/9FzqCCNhgPl3kk8plpJbd7k=) 2: 146D9338596ECF1F976FB37F330D8C0CD48414C9.crl (hash: STh8elN6ZJrKGOYlq3q9HptNa8Og/ALF6OXiCvUuqKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:eb:e7:13:4d:6f:ab:43:d3:b6:80:68:2f:8d:a7:c0:b9:34:e5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Validity Not Before: Sep 7 03:57:19 2025 GMT Not After : Sep 10 11:54:19 2025 GMT Subject: CN=BF93A5D249C2B833FD8F6824F70D53611C474142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:5a:e9:e6:d7:e0:bd:83:c5:b9:9b:a1:af: 6b:3b:dc:df:26:4f:9c:7b:3b:da:d0:8e:dc:23:32: 2c:92:77:4e:a1:b0:42:27:aa:f5:26:04:1a:80:3a: 94:fa:13:27:7f:c9:02:a5:f3:58:18:51:96:a8:bc: bc:1d:77:83:d0:d9:09:07:87:25:56:c3:1a:ae:bd: 05:bc:d1:28:dc:ca:62:c6:bd:32:4d:89:5d:1a:4a: b7:91:93:32:2c:cd:68:49:7a:da:70:fa:b4:6c:b9: 04:70:3d:78:d8:64:7f:c3:ff:18:24:b6:03:43:a9: bc:e1:60:fb:d9:1b:1f:43:c5:86:f7:28:52:14:c1: df:81:70:7e:d4:cd:56:9f:fd:ac:be:50:57:0c:b6: 52:f8:bd:a3:c8:a0:45:a7:05:6d:ec:9e:14:61:f2: b8:8c:19:04:3a:b4:28:35:1d:ff:f8:49:b3:b3:68: d7:97:ef:68:01:b5:62:98:f9:9a:ee:e5:16:f0:b9: b0:3c:18:c0:22:9b:c3:bb:68:39:8d:ae:4f:58:ce: ed:38:52:56:61:fd:36:11:28:91:66:cd:67:6d:09: 30:07:75:f2:e8:13:2d:d8:42:28:9a:70:97:38:97: 08:b9:c1:e2:93:5c:43:ad:39:14:8c:7d:8b:40:9a: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:93:A5:D2:49:C2:B8:33:FD:8F:68:24:F7:0D:53:61:1C:47:41:42 X509v3 Authority Key Identifier: keyid:14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8f:57:6e:e8:ec:bf:3b:68:93:dc:6b:58:56:9e:02:8d:c4: a5:69:5b:ab:a4:44:b0:53:c1:b5:f9:eb:97:d9:b0:58:63:76: ff:09:3d:a7:04:f2:aa:58:2f:4d:be:37:c6:e6:a7:11:af:17: 97:65:f3:39:fb:e9:1a:d0:78:66:25:79:25:e9:62:40:fc:ba: 36:01:1f:6c:77:6b:0b:ae:1c:e5:6b:ab:7f:9e:ae:c5:d8:d8: bf:fc:f2:b6:e7:f5:05:78:9b:3d:a2:34:a4:ad:4d:d9:57:a4: 07:10:b2:48:bb:da:45:39:8c:7c:1f:71:28:2f:fc:6d:c1:c4: 74:db:f3:c6:27:3a:42:22:bc:a9:e2:67:a6:a3:87:01:88:dc: 0a:16:7f:c5:fd:11:f6:38:ae:b7:dc:f5:2a:b1:a0:25:bd:94: 22:cc:4f:85:3f:b1:6a:ae:72:3d:65:fb:da:80:16:b3:63:65: 04:58:81:5b:fb:bc:fa:c1:32:25:54:c9:42:7c:8c:a9:de:a8: 2c:1b:a6:d1:9e:ef:d0:e0:a1:71:e6:f0:33:b9:82:95:da:7f: 02:4b:d3:27:52:05:e1:49:51:20:54:12:63:03:b0:60:66:90: 16:92:c9:7b:c5:cd:92:77:9b:bb:75:c5:1c:ee:5d:6c:42:58: 7f:65:ff:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuvnE01vq0PTtoBoL42nwLk05SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENE NDg0MTRDOTAeFw0yNTA5MDcwMzU3MTlaFw0yNTA5MTAxMTU0MTlaMDMxMTAvBgNV BAMTKEJGOTNBNUQyNDlDMkI4MzNGRDhGNjgyNEY3MEQ1MzYxMUM0NzQxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdVrp5tfgvYPFuZuhr2s73N8m T5x7O9rQjtwjMiySd06hsEInqvUmBBqAOpT6Eyd/yQKl81gYUZaovLwdd4PQ2QkH hyVWwxquvQW80SjcymLGvTJNiV0aSreRkzIszWhJetpw+rRsuQRwPXjYZH/D/xgk tgNDqbzhYPvZGx9DxYb3KFIUwd+BcH7UzVaf/ay+UFcMtlL4vaPIoEWnBW3snhRh 8riMGQQ6tCg1Hf/4SbOzaNeX72gBtWKY+Zru5RbwubA8GMAim8O7aDmNrk9Yzu04 UlZh/TYRKJFmzWdtCTAHdfLoEy3YQiiacJc4lwi5weKTXEOtORSMfYtAmpWzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv5Ol0knCuDP9j2gk9w1TYRxHQUIwHwYDVR0j BBgwFoAUFG2TOFluzx+Xb7N/Mw2MDNSEFMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDRjZmZlMC0xZjk0LTQzZDItODFlZS04MDAzMGI1YzM3NDYvMC8xNDZEOTMzODU5 NkVDRjFGOTc2RkIzN0YzMzBEOEMwQ0Q0ODQxNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENENDg0 MTRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQ0Y2ZmZTAtMWY5NC00M2QyLTgx ZWUtODAwMzBiNWMzNzQ2LzAvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhD MENENDg0MTRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2PV27o7L87aJPca1hWngKNxKVpW6ukRLBT wbX565fZsFhjdv8JPacE8qpYL02+N8bmpxGvF5dl8zn76RrQeGYleSXpYkD8ujYB H2x3awuuHOVrq3+ersXY2L/88rbn9QV4mz2iNKStTdlXpAcQski72kU5jHwfcSgv /G3BxHTb88YnOkIivKniZ6ajhwGI3AoWf8X9EfY4rrfc9SqxoCW9lCLMT4U/sWqu cj1l+9qAFrNjZQRYgVv7vPrBMiVUyUJ8jKneqCwbptGe79DgoXHm8DO5gpXafwJL 0ydSBeFJUSBUEmMDsGBmkBaSyXvFzZJ3m7t1xRzuXWxCWH9l/9k= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:27 2025 by rpki-client