$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json) Hash identifier: Dq+6Mx/xw7kv4WnkfocY6QSXREBcUO6akZpdwMMea0k= Subject key identifier: A4:AB:61:3B:4B:01:0B:9A:E7:B5:9C:8F:47:D3:65:29:D5:1B:E8:AE Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B Certificate issuer: /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Certificate serial: 19FAF2A3ACEF0DF5642DE6E7B0DF3C5DC785B863 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft Manifest number: 6C Signing time: Wed 07 May 2025 03:20:59 +0000 Manifest this update: Wed 07 May 2025 03:15:59 +0000 Manifest next update: Sat 10 May 2025 05:09:59 +0000 Files and hashes: 1: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: mrWxMVSbcGtqRHbGUIQMapJi6RYxVWbYfIP/9rmq31c=) 2: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: dVzkaZwBc16NerGBbnPkInQRl7szohhHPD7ETdIV3jg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fa:f2:a3:ac:ef:0d:f5:64:2d:e6:e7:b0:df:3c:5d:c7:85:b8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Validity Not Before: May 7 03:15:59 2025 GMT Not After : May 10 05:09:59 2025 GMT Subject: CN=A4AB613B4B010B9AE7B59C8F47D36529D51BE8AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:ea:09:9f:4f:e1:f5:7e:29:61:75:99:fe: 44:93:82:99:f4:5a:f2:f4:49:5b:19:ee:6a:a3:7d: b6:a7:3d:cc:42:1a:37:31:c7:c6:1c:53:4a:a6:a9: 27:88:1c:d6:e9:a0:d1:b1:2f:cd:47:7b:c6:65:c2: 0a:0b:0d:10:26:fd:31:1c:a2:27:b1:dc:3d:8a:39: 3b:13:31:04:96:19:2e:83:1c:3d:76:c5:f8:cf:61: 80:34:6b:ee:f5:57:4e:25:1f:f1:a9:09:1a:73:1b: c4:b5:af:f1:9c:11:33:7e:88:53:78:62:b6:c7:f6: d7:2c:1f:77:aa:0b:2c:ec:0f:88:8f:65:4e:25:d2: 4e:33:b1:5e:73:b4:8a:9c:31:23:1f:c3:0b:01:03: af:d0:43:94:16:a4:78:03:ce:59:5a:2c:91:9b:0a: b1:90:23:ef:b8:0b:00:cf:c7:67:33:a3:39:73:97: e1:35:1c:90:d4:93:82:c0:f1:2a:32:ad:5b:82:fb: 40:b5:55:42:ec:3c:22:35:a5:4a:90:24:4e:18:61: 4e:9e:d8:a6:c9:b2:18:bb:d1:8d:cb:2d:d2:7f:ed: cd:86:5d:ad:7b:78:50:aa:8e:ba:1b:e2:dd:f6:78: 37:cb:46:13:ca:e1:8b:e4:e5:d4:69:07:6b:70:5d: 31:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AB:61:3B:4B:01:0B:9A:E7:B5:9C:8F:47:D3:65:29:D5:1B:E8:AE X509v3 Authority Key Identifier: keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:80:f9:6c:cc:c9:ec:f4:70:96:cc:d2:61:38:c4:d9:ba:55: 40:a2:6c:67:c1:0e:40:ac:17:16:5b:1c:46:f5:b7:27:3b:fc: a0:d8:04:2b:ab:fa:29:f5:8f:da:1f:cc:38:a1:a2:0a:98:76: 24:00:1a:25:9f:bc:13:69:99:11:a2:e1:d2:64:35:65:92:6c: 48:08:1a:79:87:8b:d9:3a:9c:ac:86:12:2d:8a:d2:0b:d6:05: 24:b6:bc:9c:44:07:e2:40:6d:cf:cc:c7:ef:9a:aa:fd:f7:56: e3:36:59:b2:57:a0:38:27:b9:da:0c:96:48:b6:33:3f:77:09: 3a:1d:5e:ef:b8:d9:28:39:bd:60:bb:20:49:c8:5c:b6:05:56: b1:f8:20:7c:8f:35:c5:f0:f8:96:fc:7b:f0:da:f4:8d:3a:a2: 13:bc:87:f5:44:8f:bf:e6:40:fd:b0:1d:98:3c:61:52:48:4c: 26:06:c5:27:5f:54:fc:25:c5:d7:19:01:6e:ad:8e:e3:9b:bd: 9d:03:e8:6e:2b:13:2c:d9:ff:4a:a3:67:f5:e2:80:3e:11:d3: 5c:bf:9a:96:b4:a2:7b:97:8c:40:55:59:bb:73:1d:d8:ff:4c: 1f:78:35:fb:28:3e:08:a1:57:32:a2:e9:b3:1b:6c:78:d5:90: 90:8c:1e:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGfryo6zvDfVkLebnsN88XceFuGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3 Nzk1N0UzQjAeFw0yNTA1MDcwMzE1NTlaFw0yNTA1MTAwNTA5NTlaMDMxMTAvBgNV BAMTKEE0QUI2MTNCNEIwMTBCOUFFN0I1OUM4RjQ3RDM2NTI5RDUxQkU4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCua+oJn0/h9X4pYXWZ/kSTgpn0 WvL0SVsZ7mqjfbanPcxCGjcxx8YcU0qmqSeIHNbpoNGxL81He8ZlwgoLDRAm/TEc oiex3D2KOTsTMQSWGS6DHD12xfjPYYA0a+71V04lH/GpCRpzG8S1r/GcETN+iFN4 YrbH9tcsH3eqCyzsD4iPZU4l0k4zsV5ztIqcMSMfwwsBA6/QQ5QWpHgDzllaLJGb CrGQI++4CwDPx2czozlzl+E1HJDUk4LA8SoyrVuC+0C1VULsPCI1pUqQJE4YYU6e 2KbJshi70Y3LLdJ/7c2GXa17eFCqjrob4t32eDfLRhPK4Yvk5dRpB2twXTGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpKthO0sBC5rntZyPR9NlKdUb6K4wHwYDVR0j BBgwFoAUFM+Z3vobknbr7mEYDfR3AXeVfjswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTdmNTE2MS0wNzBmLTQzMzktYWY0ZS1iYzMzZmRmYjY3YjgvMC8xNENGOTlERUZB MUI5Mjc2RUJFRTYxMTgwREY0NzcwMTc3OTU3RTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3Nzk1 N0UzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk3ZjUxNjEtMDcwZi00MzM5LWFm NGUtYmMzM2ZkZmI2N2I4LzAvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3 MDE3Nzk1N0UzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECA+WzMyez0cJbM0mE4xNm6VUCibGfBDkCs FxZbHEb1tyc7/KDYBCur+in1j9ofzDihogqYdiQAGiWfvBNpmRGi4dJkNWWSbEgI GnmHi9k6nKyGEi2K0gvWBSS2vJxEB+JAbc/Mx++aqv33VuM2WbJXoDgnudoMlki2 Mz93CTodXu+42Sg5vWC7IEnIXLYFVrH4IHyPNcXw+Jb8e/Da9I06ohO8h/VEj7/m QP2wHZg8YVJITCYGxSdfVPwlxdcZAW6tjuObvZ0D6G4rEyzZ/0qjZ/XigD4R01y/ mpa0onuXjEBVWbtzHdj/TB94NfsoPgihVzKi6bMbbHjVkJCMHoc= -----END CERTIFICATE-----Generated at Wed May 7 18:07:24 2025 by rpki-client