$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: ApXrDpQ6odI9CV7sRHMZ6FmZJx/jvDJthnbNGhE/lAY= Subject key identifier: C7:8E:A4:85:E7:03:3A:9A:D1:84:0C:F0:2A:AF:00:AB:1E:2C:97:C6 Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 351B2804988A4A4E1492E1CEDE5B52544AF0EA68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: 98 Signing time: Sun 11 May 2025 12:00:05 +0000 Manifest this update: Sun 11 May 2025 11:55:05 +0000 Manifest next update: Wed 14 May 2025 22:41:05 +0000 Files and hashes: 1: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: hpOe6T2HmJmY504kJyyOf7mR1nsyVP0giYWE5t6nSyk=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 22:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1b:28:04:98:8a:4a:4e:14:92:e1:ce:de:5b:52:54:4a:f0:ea:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: May 11 11:55:05 2025 GMT Not After : May 14 22:41:05 2025 GMT Subject: CN=C78EA485E7033A9AD1840CF02AAF00AB1E2C97C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:ae:df:b8:1b:e8:0e:8f:26:a6:9c:be:71: 42:53:b7:2f:fd:c2:7b:70:31:bc:0f:5a:0a:4f:c5: 26:a6:fc:ff:6c:14:9e:3e:9f:54:21:5f:b6:ba:81: 7d:0c:d5:f5:3f:e1:70:ba:6e:dd:90:c3:9f:fe:9b: 32:a5:bf:8a:16:8e:e2:71:18:dc:7e:8f:c5:f6:ba: 11:da:6d:c5:16:54:a4:d6:7e:f8:d2:77:61:45:cb: 6c:00:5e:5e:d4:81:da:17:64:01:95:51:73:b0:f6: a5:b3:49:d8:bf:0f:6e:ff:8a:3c:20:23:b0:6d:7d: 7c:0d:08:d9:16:d8:72:02:5d:79:6f:fa:f5:56:fb: 00:d1:46:62:59:6a:4d:25:b6:4a:6b:03:6c:f5:21: f3:26:d3:6f:c8:c9:16:c8:24:d8:5a:89:e6:c6:a0: d3:ac:72:61:46:5f:cc:2b:de:0b:c5:7a:fc:9b:e6: b6:ef:d7:50:80:88:e0:99:e0:c2:8b:04:79:66:36: 5f:bc:02:24:6f:fe:bb:ff:cb:ed:d1:15:eb:eb:69: af:d9:17:00:27:aa:27:df:cb:2a:10:21:0f:a8:fa: 8b:9f:db:e6:23:1e:c5:30:0c:8c:3a:15:45:5f:c3: c1:58:9d:73:be:2f:93:9d:9b:37:a4:d2:2f:b4:41: 37:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8E:A4:85:E7:03:3A:9A:D1:84:0C:F0:2A:AF:00:AB:1E:2C:97:C6 X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8e:4f:2a:da:6a:5c:23:99:d9:fa:a3:67:63:7b:74:1d:88: 3b:1c:11:da:56:e0:2f:a8:91:81:b2:c0:3f:ef:2a:b7:24:3e: 36:de:fd:d2:f3:0e:be:db:5d:e2:e6:36:a5:ca:bb:50:b6:ed: 12:7e:8c:da:68:37:94:b2:60:ea:84:a6:30:b8:66:67:86:8e: d7:ac:ba:80:99:a1:4c:6c:3b:94:58:bf:d0:2f:86:4a:df:a1: 21:06:04:11:45:83:29:7e:53:f8:d1:92:61:05:c5:45:54:b9: 1d:35:e3:a0:10:e9:ac:6b:25:08:86:95:15:e7:87:ca:ff:56: 7f:f6:4c:00:17:9a:ae:0f:b5:92:cc:c2:ed:ba:dc:a6:98:6a: 55:ab:f8:5e:7c:d9:30:dc:d1:ce:45:2e:13:18:39:c5:45:85: 94:e8:7c:d3:91:ed:5c:f2:c8:ca:17:7e:6d:ba:e8:3c:89:2b: 0a:63:06:d8:50:61:2b:82:fe:42:f0:cd:2f:26:ae:a0:81:ff: 01:2b:91:ed:d7:72:c3:91:38:4a:ff:6a:cf:81:cf:2c:2f:03: 5c:78:93:f3:36:38:63:dd:94:72:8c:6d:8f:fe:9b:29:aa:52: 22:34:68:8e:b9:55:52:ba:87:64:b7:10:e2:4e:b8:fc:94:a6: 86:72:d1:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRsoBJiKSk4UkuHO3ltSVErw6mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNTA1MTExMTU1MDVaFw0yNTA1MTQyMjQxMDVaMDMxMTAvBgNV BAMTKEM3OEVBNDg1RTcwMzNBOUFEMTg0MENGMDJBQUYwMEFCMUUyQzk3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7K7fuBvoDo8mppy+cUJTty/9 wntwMbwPWgpPxSam/P9sFJ4+n1QhX7a6gX0M1fU/4XC6bt2Qw5/+mzKlv4oWjuJx GNx+j8X2uhHabcUWVKTWfvjSd2FFy2wAXl7UgdoXZAGVUXOw9qWzSdi/D27/ijwg I7BtfXwNCNkW2HICXXlv+vVW+wDRRmJZak0ltkprA2z1IfMm02/IyRbIJNhaiebG oNOscmFGX8wr3gvFevyb5rbv11CAiOCZ4MKLBHlmNl+8AiRv/rv/y+3RFevraa/Z FwAnqiffyyoQIQ+o+ouf2+YjHsUwDIw6FUVfw8FYnXO+L5Odmzek0i+0QTdrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx46khecDOprRhAzwKq8Aqx4sl8YwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaOTyraalwjmdn6o2dje3QdiDscEdpW4C+o kYGywD/vKrckPjbe/dLzDr7bXeLmNqXKu1C27RJ+jNpoN5SyYOqEpjC4ZmeGjtes uoCZoUxsO5RYv9AvhkrfoSEGBBFFgyl+U/jRkmEFxUVUuR0146AQ6axrJQiGlRXn h8r/Vn/2TAAXmq4PtZLMwu263KaYalWr+F582TDc0c5FLhMYOcVFhZTofNOR7Vzy yMoXfm266DyJKwpjBthQYSuC/kLwzS8mrqCB/wErke3XcsOROEr/as+BzywvA1x4 k/M2OGPdlHKMbY/+mymqUiI0aI65VVK6h2S3EOJOuPyUpoZy0Qw= -----END CERTIFICATE-----Generated at Tue May 13 08:09:41 2025 by rpki-client