$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json) Hash identifier: DbZAwN3Ood0hPmtL8cDkc7oAIUVGbprNBFBAi7rnEbI= Subject key identifier: 77:66:C5:8B:0E:74:F3:E2:C9:DC:4E:2D:0B:B3:65:CC:7A:44:F8:39 Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B Certificate issuer: /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Certificate serial: 27F6AF5544F2B8B5D2497554CD5D6B9AFE6AD103 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft Manifest number: 9D Signing time: Sat 23 Aug 2025 02:11:03 +0000 Manifest this update: Sat 23 Aug 2025 02:06:03 +0000 Manifest next update: Tue 26 Aug 2025 06:12:03 +0000 Files and hashes: 1: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: yKiDxhWfxN5oGwNYpvG1zEMGKUQsQ0DGt1nV0fb1tUg=) 2: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: XksCWCwCEfjKtaahou1lG189rxAz7b8EI9jL1IweY6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f6:af:55:44:f2:b8:b5:d2:49:75:54:cd:5d:6b:9a:fe:6a:d1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Validity Not Before: Aug 23 02:06:03 2025 GMT Not After : Aug 26 06:12:03 2025 GMT Subject: CN=7766C58B0E74F3E2C9DC4E2D0BB365CC7A44F839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:69:ae:47:ca:6e:bd:0e:a1:11:cd:6e:d1: 08:c4:c3:62:68:8a:28:52:eb:4d:a4:de:fc:04:80: e0:c8:4f:c1:38:18:65:8d:fe:3f:bf:1b:4a:f0:ec: c9:a6:10:aa:2f:fc:25:37:51:bd:c5:f2:10:69:8b: ea:91:ed:4d:3a:b2:a6:07:7b:45:18:b6:55:9c:09: f1:10:a9:6a:04:e3:48:d1:d1:22:eb:a1:b4:cd:c2: 76:45:36:a1:b3:64:8e:70:73:fe:ae:e2:d6:4d:00: 2d:a6:b0:e2:82:f4:7e:22:eb:3b:cf:c3:b8:74:00: a4:71:71:37:19:c5:70:22:d0:b7:4f:81:97:27:dd: d8:76:09:68:43:d4:9e:73:38:7d:fd:c4:e2:5f:86: 1a:4a:1b:53:ba:62:0e:09:21:f3:29:55:ed:55:bf: 7e:b3:b3:8a:02:58:f2:a7:f4:82:e3:b2:39:2c:2c: 4d:ff:75:9d:b8:f6:71:2a:2f:e9:11:72:fd:7b:cd: 1e:54:0e:4d:65:43:21:46:2d:e0:0c:1e:57:be:f8: 04:ce:d6:2b:0d:2e:a0:c6:87:88:83:0f:8e:76:b0: 17:5f:8c:04:da:17:53:8e:50:60:7b:81:07:91:e8: 89:4f:85:f6:3d:ef:7c:2d:50:96:60:5e:a7:44:92: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:66:C5:8B:0E:74:F3:E2:C9:DC:4E:2D:0B:B3:65:CC:7A:44:F8:39 X509v3 Authority Key Identifier: keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:01:bb:06:1f:5e:ac:3d:fc:aa:28:a0:da:ea:49:37:40:77: e4:94:34:2a:97:eb:a7:74:e6:03:9a:ca:34:14:d9:fb:7c:f9: a1:66:16:4e:fb:7a:b2:29:c7:40:8a:2e:99:54:b5:94:f4:30: 2f:9a:b8:46:a6:80:f8:63:b6:24:7f:17:ee:ba:6f:06:7f:4c: 83:68:40:aa:4e:8e:3e:68:0b:93:5d:5a:e9:47:2f:45:e6:d7: 47:68:ca:50:a0:fb:93:3f:d0:fd:ec:31:65:ad:dc:da:75:77: d9:5a:cc:9b:97:f9:7f:cb:79:a4:c4:9e:eb:90:52:cb:98:f9: 8e:15:4d:f4:60:5d:8a:e5:e8:dc:ba:75:98:cc:06:7b:a7:7a: 81:c4:12:ae:c9:8d:12:f6:71:1c:f7:1a:73:ce:33:b7:71:42: 48:8e:38:eb:ad:26:19:33:ff:13:f1:7c:5b:7e:21:93:12:1c: f1:ff:61:cb:8f:b6:69:f1:53:8b:4b:23:4d:56:5c:6b:10:42: 59:39:ea:5b:93:d2:4b:75:66:be:5b:83:49:eb:88:3c:16:dc: 11:f8:90:d7:43:a8:03:bb:83:0a:aa:95:36:8e:a6:70:e1:bd: 8f:59:36:87:ac:dc:cf:58:a2:49:72:22:9c:16:f3:61:2a:5a: cc:09:d4:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/avVUTyuLXSSXVUzV1rmv5q0QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3 Nzk1N0UzQjAeFw0yNTA4MjMwMjA2MDNaFw0yNTA4MjYwNjEyMDNaMDMxMTAvBgNV BAMTKDc3NjZDNThCMEU3NEYzRTJDOURDNEUyRDBCQjM2NUNDN0E0NEY4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaGmuR8puvQ6hEc1u0QjEw2Jo iihS602k3vwEgODIT8E4GGWN/j+/G0rw7MmmEKov/CU3Ub3F8hBpi+qR7U06sqYH e0UYtlWcCfEQqWoE40jR0SLrobTNwnZFNqGzZI5wc/6u4tZNAC2msOKC9H4i6zvP w7h0AKRxcTcZxXAi0LdPgZcn3dh2CWhD1J5zOH39xOJfhhpKG1O6Yg4JIfMpVe1V v36zs4oCWPKn9ILjsjksLE3/dZ249nEqL+kRcv17zR5UDk1lQyFGLeAMHle++ATO 1isNLqDGh4iDD452sBdfjATaF1OOUGB7gQeR6IlPhfY973wtUJZgXqdEkoqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd2bFiw508+LJ3E4tC7NlzHpE+DkwHwYDVR0j BBgwFoAUFM+Z3vobknbr7mEYDfR3AXeVfjswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTdmNTE2MS0wNzBmLTQzMzktYWY0ZS1iYzMzZmRmYjY3YjgvMC8xNENGOTlERUZB MUI5Mjc2RUJFRTYxMTgwREY0NzcwMTc3OTU3RTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3Nzk1 N0UzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk3ZjUxNjEtMDcwZi00MzM5LWFm NGUtYmMzM2ZkZmI2N2I4LzAvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3 MDE3Nzk1N0UzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEBuwYfXqw9/KoooNrqSTdAd+SUNCqX66d0 5gOayjQU2ft8+aFmFk77erIpx0CKLplUtZT0MC+auEamgPhjtiR/F+66bwZ/TINo QKpOjj5oC5NdWulHL0Xm10doylCg+5M/0P3sMWWt3Np1d9lazJuX+X/LeaTEnuuQ UsuY+Y4VTfRgXYrl6Ny6dZjMBnuneoHEEq7JjRL2cRz3GnPOM7dxQkiOOOutJhkz /xPxfFt+IZMSHPH/YcuPtmnxU4tLI01WXGsQQlk56luT0kt1Zr5bg0nriDwW3BH4 kNdDqAO7gwqqlTaOpnDhvY9ZNoes3M9YoklyIpwW82EqWswJ1Os= -----END CERTIFICATE-----Generated at Sat Aug 23 17:03:24 2025 by rpki-client