$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: ywLfpJqrOtivi1eOtiI2A/9cKDb67lP+LBe352EtCRU= Subject key identifier: 93:85:63:D3:E4:E8:46:D2:9D:F6:BC:44:3E:79:92:23:CF:E7:4D:D6 Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 3CD1B2EBE62E40DD9732C1D05A208C5A2F2CE8C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: C6 Signing time: Sat 23 Aug 2025 01:52:17 +0000 Manifest this update: Sat 23 Aug 2025 01:47:17 +0000 Manifest next update: Tue 26 Aug 2025 12:44:17 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=) 2: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: BBzze3rgvjDjaehbrS5moXf5pLK6Qc7SsXrIWz6McDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d1:b2:eb:e6:2e:40:dd:97:32:c1:d0:5a:20:8c:5a:2f:2c:e8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Aug 23 01:47:17 2025 GMT Not After : Aug 26 12:44:17 2025 GMT Subject: CN=938563D3E4E846D29DF6BC443E799223CFE74DD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:19:69:e1:dc:5e:5b:26:a4:f0:b6:51:39: 67:35:a1:81:71:15:49:9c:b8:37:13:ce:87:ff:72: cf:dd:f0:67:dd:db:44:7b:45:dc:18:32:e5:0a:e4: 39:a5:31:c6:56:91:3b:09:01:a2:69:77:26:40:da: 38:82:c4:87:b0:f5:47:be:4e:a5:a0:c5:09:b1:7f: 5d:41:a2:19:4a:49:e9:dc:7b:17:c4:dd:b3:78:03: 30:4c:50:4e:5f:0e:18:0b:4e:20:95:09:e3:d1:a1: ee:29:35:2b:8a:78:63:87:91:e9:c3:6e:5b:2d:73: 77:b1:15:c2:42:a3:f1:61:43:bd:f7:14:71:d0:ad: c6:ed:06:f0:73:d3:b8:71:6a:72:8c:6b:d0:82:17: 3b:12:e9:52:c9:6e:e4:98:7f:74:bf:53:ee:03:55: 14:37:50:87:b3:da:10:4d:38:4f:c8:8e:4e:aa:5f: dd:0b:48:d8:2b:61:74:8b:7a:06:02:e8:77:c3:43: a1:71:f2:bf:bf:a8:f2:f2:4c:22:50:90:79:bb:fb: 6c:e0:85:b9:1d:0e:e5:16:26:8f:4c:fb:66:e7:22: b9:77:04:99:1c:f6:a9:56:d7:be:c4:fe:bb:a0:0b: 6b:10:fc:01:ff:ff:a2:5b:24:4d:92:9a:63:b4:18: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:85:63:D3:E4:E8:46:D2:9D:F6:BC:44:3E:79:92:23:CF:E7:4D:D6 X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:00:37:c8:b9:3f:b2:55:be:10:ee:54:32:26:03:ea:06:c4: e6:81:72:8f:69:00:92:43:c1:30:e0:c4:88:da:cb:d2:5d:a6: a5:e4:d2:40:4d:57:1f:77:28:8a:43:f3:6c:a9:85:de:71:61: 64:0a:03:0e:7c:0a:41:06:4c:b6:a2:74:02:d0:43:42:3a:b7: c2:8d:c8:47:15:ca:45:01:29:2e:3a:f8:73:2d:4d:fc:3d:95: d3:71:c3:28:16:f7:f2:42:e0:e0:f8:a1:84:42:30:9c:de:fc: cb:ee:9b:27:15:4d:a1:11:ee:df:6c:e9:c4:72:01:37:0c:bb: a4:c0:32:9d:70:c3:c3:58:06:e1:e3:38:66:02:cd:99:f0:57: 47:b9:4d:e1:ae:60:a9:09:a0:0e:ac:f3:b7:17:e9:86:4d:03: c4:35:3e:5b:17:ba:71:87:48:a7:da:8e:d9:60:21:32:8f:36: a8:e6:de:06:f3:2c:0a:24:0d:9b:4f:7b:eb:b0:80:f5:9f:c4: 88:ba:f1:be:fa:d8:bc:02:c7:4a:25:4d:1d:6c:54:90:29:22: c3:59:1d:b3:94:69:c8:40:e1:a6:58:df:fb:dd:3d:d6:f8:b9: ec:0f:15:97:9a:31:eb:f8:21:05:4a:6f:e5:d6:01:bd:cd:f7: 5f:86:a0:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNGy6+YuQN2XMsHQWiCMWi8s6MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNTA4MjMwMTQ3MTdaFw0yNTA4MjYxMjQ0MTdaMDMxMTAvBgNV BAMTKDkzODU2M0QzRTRFODQ2RDI5REY2QkM0NDNFNzk5MjIzQ0ZFNzRERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0xlp4dxeWyak8LZROWc1oYFx FUmcuDcTzof/cs/d8Gfd20R7RdwYMuUK5DmlMcZWkTsJAaJpdyZA2jiCxIew9Ue+ TqWgxQmxf11BohlKSencexfE3bN4AzBMUE5fDhgLTiCVCePRoe4pNSuKeGOHkenD blstc3exFcJCo/FhQ733FHHQrcbtBvBz07hxanKMa9CCFzsS6VLJbuSYf3S/U+4D VRQ3UIez2hBNOE/Ijk6qX90LSNgrYXSLegYC6HfDQ6Fx8r+/qPLyTCJQkHm7+2zg hbkdDuUWJo9M+2bnIrl3BJkc9qlW177E/rugC2sQ/AH//6JbJE2SmmO0GCLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk4Vj0+ToRtKd9rxEPnmSI8/nTdYwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAAN8i5P7JVvhDuVDImA+oGxOaBco9pAJJD wTDgxIjay9JdpqXk0kBNVx93KIpD82yphd5xYWQKAw58CkEGTLaidALQQ0I6t8KN yEcVykUBKS46+HMtTfw9ldNxwygW9/JC4OD4oYRCMJze/MvumycVTaER7t9s6cRy ATcMu6TAMp1ww8NYBuHjOGYCzZnwV0e5TeGuYKkJoA6s87cX6YZNA8Q1PlsXunGH SKfajtlgITKPNqjm3gbzLAokDZtPe+uwgPWfxIi68b762LwCx0olTR1sVJApIsNZ HbOUachA4aZY3/vdPdb4uewPFZeaMev4IQVKb+XWAb3N91+GoNI= -----END CERTIFICATE-----Generated at Sun Aug 24 00:35:20 2025 by rpki-client