$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: kFFcbn0MIeJ1zk6nYNEZSXVilcym3T2aX1N5Lu29N7k= Subject key identifier: C8:01:8C:C7:79:79:D6:5A:37:FE:39:EE:1F:D6:D7:72:A7:9E:6D:56 Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 49C1FC2B5E75F10818BCFEFE39104223DF3DD249 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: E0 Signing time: Mon 20 Oct 2025 18:42:16 +0000 Manifest this update: Mon 20 Oct 2025 18:37:16 +0000 Manifest next update: Fri 24 Oct 2025 01:32:16 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=) 2: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: bE2KurGFWINDo0vpW5K/d7+wB8LMRdU4xPl/p6M4QTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c1:fc:2b:5e:75:f1:08:18:bc:fe:fe:39:10:42:23:df:3d:d2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Oct 20 18:37:16 2025 GMT Not After : Oct 24 01:32:16 2025 GMT Subject: CN=C8018CC77979D65A37FE39EE1FD6D772A79E6D56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:06:b0:6f:dd:47:54:70:fc:13:0f:37:7b: cd:13:d1:0b:f9:71:1b:38:d2:93:4f:84:a5:92:0d: 85:60:97:21:1f:80:c0:a6:c0:50:ab:64:9a:46:e6: 68:12:2a:0f:9d:74:7b:2a:92:d5:00:72:46:e6:49: 92:56:0e:35:a9:73:32:3a:d0:45:39:78:6b:4d:e7: 31:82:d2:66:17:d6:51:84:d7:1a:a3:17:9d:fc:21: 1c:00:e2:a5:96:bb:e0:ae:8a:08:d8:3c:f8:82:27: ea:a0:68:73:e0:9b:b3:76:41:b5:b0:c1:14:5b:c8: a6:fc:63:e4:dd:c9:8d:98:d9:03:d0:d1:dd:03:5a: c4:03:8d:72:da:60:a6:2c:1d:50:ac:1e:9e:27:97: 9e:b0:d3:f9:6b:a0:66:3e:c4:18:b7:af:55:d9:4b: fb:a5:f7:05:50:0c:2b:0d:78:ae:9b:74:d3:63:65: 76:26:ec:e4:5d:ca:60:97:ad:de:5a:b7:db:cd:aa: 77:b1:b7:4b:fb:45:0f:ad:4b:f9:27:3a:59:5a:63: 9b:36:e5:ef:8d:02:c0:14:88:e2:74:7d:bd:b3:5e: ba:6c:c8:1e:73:90:dd:53:97:d9:3c:cc:75:e3:ab: fb:11:80:25:b7:75:0b:24:aa:3c:a5:bf:a7:75:b7: 51:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:01:8C:C7:79:79:D6:5A:37:FE:39:EE:1F:D6:D7:72:A7:9E:6D:56 X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a6:94:af:5f:c8:dd:ff:4f:a1:6c:56:64:cf:ed:15:e4:62: 41:90:07:02:82:43:f6:8c:62:e6:01:79:9b:00:4b:d3:81:ca: e4:40:44:33:e3:a0:53:0f:4e:fd:59:be:35:25:70:45:bc:1d: 60:64:e4:1e:52:d5:1e:1c:fa:5e:3f:e9:58:37:f1:0c:a2:c6: 5d:aa:ff:e5:07:86:86:d4:a7:d1:65:52:39:eb:dc:a7:2c:53: c5:46:42:52:53:7b:0c:7d:0d:1f:10:9c:15:90:41:f2:96:92: 8f:8c:e6:c1:c1:0f:b0:11:4e:ac:b3:67:25:df:10:e5:fa:b1: 39:72:c3:3c:8a:2d:09:7c:c0:4c:54:a1:59:69:19:ef:9c:ce: 0b:be:a9:83:a1:de:17:0d:9c:b2:28:cc:5b:4e:30:bc:9e:c3: 43:b4:98:19:0e:fb:45:e0:ed:2e:22:81:d3:e2:46:79:75:8b: 9e:f4:89:9a:d3:60:58:4d:21:1d:6b:3d:e6:69:18:7b:55:ce: 43:62:60:7b:2a:11:9f:85:ab:4c:70:4f:6b:76:e9:73:f6:4d: f5:46:0c:79:b8:5a:d7:e5:4f:ec:ea:8b:9f:d2:f4:88:58:e5: 3a:f3:eb:0f:11:14:f7:fa:c7:a8:03:f2:ef:70:f8:06:73:c1: 79:b7:bd:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScH8K1518QgYvP7+ORBCI9890kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNTEwMjAxODM3MTZaFw0yNTEwMjQwMTMyMTZaMDMxMTAvBgNV BAMTKEM4MDE4Q0M3Nzk3OUQ2NUEzN0ZFMzlFRTFGRDZENzcyQTc5RTZENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYNAawb91HVHD8Ew83e80T0Qv5 cRs40pNPhKWSDYVglyEfgMCmwFCrZJpG5mgSKg+ddHsqktUAckbmSZJWDjWpczI6 0EU5eGtN5zGC0mYX1lGE1xqjF538IRwA4qWWu+CuigjYPPiCJ+qgaHPgm7N2QbWw wRRbyKb8Y+TdyY2Y2QPQ0d0DWsQDjXLaYKYsHVCsHp4nl56w0/lroGY+xBi3r1XZ S/ul9wVQDCsNeK6bdNNjZXYm7ORdymCXrd5at9vNqnext0v7RQ+tS/knOllaY5s2 5e+NAsAUiOJ0fb2zXrpsyB5zkN1Tl9k8zHXjq/sRgCW3dQskqjylv6d1t1GLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyAGMx3l51lo3/jnuH9bXcqeebVYwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGmlK9fyN3/T6FsVmTP7RXkYkGQBwKCQ/aM YuYBeZsAS9OByuRARDPjoFMPTv1ZvjUlcEW8HWBk5B5S1R4c+l4/6Vg38Qyixl2q /+UHhobUp9FlUjnr3KcsU8VGQlJTewx9DR8QnBWQQfKWko+M5sHBD7ARTqyzZyXf EOX6sTlywzyKLQl8wExUoVlpGe+czgu+qYOh3hcNnLIozFtOMLyew0O0mBkO+0Xg 7S4igdPiRnl1i570iZrTYFhNIR1rPeZpGHtVzkNiYHsqEZ+Fq0xwT2t26XP2TfVG DHm4WtflT+zqi5/S9IhY5Trz6w8RFPf6x6gD8u9w+AZzwXm3vYo= -----END CERTIFICATE-----Generated at Mon Oct 20 22:30:27 2025 by rpki-client