$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json) Hash identifier: FDrwm+HE8kBCbz8WahQ8XH4enFIgXrZFgLSWNZPiTmA= Subject key identifier: C7:E0:F3:F1:21:26:F4:69:FF:BC:E7:42:32:B1:8F:C6:10:95:2B:13 Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B Certificate issuer: /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Certificate serial: 0957367648B1D6027F7E13A2876375F87435B82F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft Manifest number: B6 Signing time: Sat 18 Oct 2025 14:11:02 +0000 Manifest this update: Sat 18 Oct 2025 14:06:02 +0000 Manifest next update: Tue 21 Oct 2025 15:35:02 +0000 Files and hashes: 1: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: jpjn8N5Gozhf6XIcPPbZvhtUv3C5wi2Hp2eJpXAX090=) 2: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: XksCWCwCEfjKtaahou1lG189rxAz7b8EI9jL1IweY6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:57:36:76:48:b1:d6:02:7f:7e:13:a2:87:63:75:f8:74:35:b8:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Validity Not Before: Oct 18 14:06:02 2025 GMT Not After : Oct 21 15:35:02 2025 GMT Subject: CN=C7E0F3F12126F469FFBCE74232B18FC610952B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:9c:f2:44:e7:09:c4:49:24:62:8a:07:26: d3:61:ea:8e:a5:2f:ac:8b:4d:21:1a:dc:b9:86:b9: 35:5e:b0:44:17:74:1a:d9:09:13:10:18:33:69:01: 01:d7:14:82:ce:42:3e:04:3c:d6:3f:b9:5f:62:67: a7:59:57:6b:e6:95:46:3d:1b:c5:75:3a:69:98:84: a1:b9:82:22:dd:75:52:5b:50:b1:6f:4c:4a:8b:37: 40:29:47:ae:95:22:0d:ec:9f:7c:0e:07:bd:3b:b5: 61:02:4c:b8:0b:6a:56:dc:58:8a:13:18:c3:4f:7a: 9b:dc:a0:e7:4a:08:17:79:1a:0d:a4:e5:62:2a:c5: 0d:52:7b:b0:56:11:aa:13:b8:c8:64:bc:83:30:d7: 40:1c:38:4f:45:1d:65:d1:bb:c9:0a:23:9d:c2:e5: 3f:cb:1f:d4:02:58:4c:14:6a:85:ee:88:fb:7f:3e: 5d:4c:c3:76:3e:2c:01:49:9c:51:16:c3:f9:a3:b4: a7:94:4b:2c:46:a0:fc:d2:28:09:62:35:bf:c0:d2: 57:55:70:55:f8:06:01:d9:8d:27:cf:35:b9:f5:b1: da:7a:e9:85:0a:00:72:af:78:62:1f:21:a9:51:91: 12:fc:d6:d3:de:f3:c0:8a:d3:91:f7:6e:9e:c4:0b: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E0:F3:F1:21:26:F4:69:FF:BC:E7:42:32:B1:8F:C6:10:95:2B:13 X509v3 Authority Key Identifier: keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e4:b0:55:6c:77:8f:d5:ad:bd:c8:ca:0a:72:a4:2d:be:87: 1f:85:12:f2:4e:d6:d4:9b:e3:93:7e:e3:ae:84:ef:fa:3e:f7: 4c:e1:9a:f3:d0:7f:b5:0d:bf:d7:7e:01:bd:4b:16:cf:59:bd: 74:94:af:10:fd:c9:e1:cf:03:73:05:4e:2a:ae:42:b3:8f:ec: 8a:9f:f7:e5:90:8b:84:96:98:32:f0:58:90:22:18:81:4f:e2: 31:8f:ee:3f:87:d0:6e:46:01:a9:08:84:79:e6:d7:31:86:5f: 10:34:1c:94:14:f1:08:3e:1e:e5:30:33:ea:41:4a:e9:c0:e7: 99:21:4e:e7:3b:e0:18:5d:88:bd:ae:8c:6c:55:ef:ac:53:dc: 41:15:29:b1:30:27:3a:4f:ca:38:a3:f7:2f:ff:61:51:a1:39: d4:0e:5a:64:1c:86:36:6a:a6:c4:e3:c3:a3:b0:6a:10:ae:d3: 22:ff:df:87:93:9a:7f:bf:3b:33:3b:3c:00:e9:3d:71:71:f1: 1f:d8:e3:a3:18:a9:77:ac:30:da:22:31:93:b5:49:a9:96:88: 5d:80:a5:6e:d0:af:88:c1:bc:a2:6d:89:12:0a:e0:04:3a:bf: d2:3a:56:21:8d:d9:3c:b6:97:ec:d1:fd:59:8d:17:08:09:b4: b7:16:f2:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVc2dkix1gJ/fhOih2N1+HQ1uC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3 Nzk1N0UzQjAeFw0yNTEwMTgxNDA2MDJaFw0yNTEwMjExNTM1MDJaMDMxMTAvBgNV BAMTKEM3RTBGM0YxMjEyNkY0NjlGRkJDRTc0MjMyQjE4RkM2MTA5NTJCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqWpzyROcJxEkkYooHJtNh6o6l L6yLTSEa3LmGuTVesEQXdBrZCRMQGDNpAQHXFILOQj4EPNY/uV9iZ6dZV2vmlUY9 G8V1OmmYhKG5giLddVJbULFvTEqLN0ApR66VIg3sn3wOB707tWECTLgLalbcWIoT GMNPepvcoOdKCBd5Gg2k5WIqxQ1Se7BWEaoTuMhkvIMw10AcOE9FHWXRu8kKI53C 5T/LH9QCWEwUaoXuiPt/Pl1Mw3Y+LAFJnFEWw/mjtKeUSyxGoPzSKAliNb/A0ldV cFX4BgHZjSfPNbn1sdp66YUKAHKveGIfIalRkRL81tPe88CK05H3bp7ECywRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx+Dz8SEm9Gn/vOdCMrGPxhCVKxMwHwYDVR0j BBgwFoAUFM+Z3vobknbr7mEYDfR3AXeVfjswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTdmNTE2MS0wNzBmLTQzMzktYWY0ZS1iYzMzZmRmYjY3YjgvMC8xNENGOTlERUZB MUI5Mjc2RUJFRTYxMTgwREY0NzcwMTc3OTU3RTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3Nzk1 N0UzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk3ZjUxNjEtMDcwZi00MzM5LWFm NGUtYmMzM2ZkZmI2N2I4LzAvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3 MDE3Nzk1N0UzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbksFVsd4/Vrb3IygpypC2+hx+FEvJO1tSb 45N+466E7/o+90zhmvPQf7UNv9d+Ab1LFs9ZvXSUrxD9yeHPA3MFTiquQrOP7Iqf 9+WQi4SWmDLwWJAiGIFP4jGP7j+H0G5GAakIhHnm1zGGXxA0HJQU8Qg+HuUwM+pB SunA55khTuc74BhdiL2ujGxV76xT3EEVKbEwJzpPyjij9y//YVGhOdQOWmQchjZq psTjw6OwahCu0yL/34eTmn+/OzM7PADpPXFx8R/Y46MYqXesMNoiMZO1SamWiF2A pW7Qr4jBvKJtiRIK4AQ6v9I6ViGN2Ty2l+zR/VmNFwgJtLcW8gk= -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:56 2025 by rpki-client