$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: LVCS89pLXAknVuIF+pz/NC/Fx+Tq9FHAI9EwPE/sSnQ= Subject key identifier: 42:07:A0:0F:39:B5:C8:07:EA:76:C2:31:B7:A3:78:66:05:81:F0:56 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 405E0BC9617BC592FCFD3309991B81C622B1AB81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 021D Signing time: Sat 28 Jun 2025 20:31:52 +0000 Manifest this update: Sat 28 Jun 2025 20:26:52 +0000 Manifest next update: Wed 02 Jul 2025 04:59:52 +0000 Files and hashes: 1: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) 2: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: sDxRXCQp0YhA4EUoYPlhgRc1l3DUG/A3owlHLie+cQg=) 3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 4: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: FnhI5eEClrvaMAmgUHpqUp6cnUW76no6E34pwLxsAvw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5e:0b:c9:61:7b:c5:92:fc:fd:33:09:99:1b:81:c6:22:b1:ab:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Jun 28 20:26:52 2025 GMT Not After : Jul 2 04:59:52 2025 GMT Subject: CN=4207A00F39B5C807EA76C231B7A378660581F056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:8a:a5:15:58:f4:5a:3c:50:77:1a:ef:14: 24:38:db:46:44:9d:c2:3c:ab:47:4c:8d:c3:1f:32: b4:ce:81:6b:64:3a:bd:ae:e3:7c:4d:2d:69:01:8b: 32:5f:57:2e:fa:c7:73:d2:e0:6e:0d:c5:20:0d:e1: 28:4a:2d:da:69:97:bc:55:8e:85:78:5c:d4:4e:b2: a0:20:09:f5:58:70:15:98:0c:21:59:ac:89:8b:20: e6:d9:cd:6a:98:9a:94:b9:74:c5:29:72:6f:52:08: 54:05:5b:58:76:51:68:d5:0b:1d:13:2c:e3:17:f5: 3f:9d:77:e2:99:f6:72:7c:ed:01:c7:22:11:2d:d9: ff:70:e4:52:2e:7b:02:f2:dc:f3:6d:d1:b0:4f:24: 43:ba:ba:88:4c:d5:83:48:9c:da:ab:71:5e:fe:53: d6:c0:bb:2e:83:ff:76:e5:31:05:5c:88:fa:eb:01: cf:90:26:c5:01:24:0e:8b:57:64:1e:13:f7:d6:e4: 75:6b:d0:78:42:dd:96:19:74:b4:11:5a:8f:7d:86: 75:57:5b:1d:c3:e3:1c:92:6d:b0:73:5b:d3:b6:34: ab:5c:38:23:2d:c4:4f:3b:75:b8:ca:29:e1:e4:cd: c5:00:5e:d5:d8:32:e2:57:5f:94:34:65:bc:1d:1d: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:07:A0:0F:39:B5:C8:07:EA:76:C2:31:B7:A3:78:66:05:81:F0:56 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:84:ba:ae:6c:0e:a8:95:bd:03:4b:a6:a5:42:a6:6f:a9:c7: 7f:01:59:72:06:88:a1:54:55:e4:14:12:4c:56:76:97:96:29: 69:f0:15:64:05:40:6a:39:98:1e:a5:3c:33:c5:69:d0:30:ec: 88:29:91:42:fa:00:37:c2:68:87:5e:74:b5:e1:26:9a:e6:c1: e1:74:71:5b:c6:46:1d:a4:b1:5b:95:8a:b5:8d:5b:02:d7:b6: ef:dd:80:bc:be:8d:09:71:68:b2:8a:9a:3c:7f:8d:a1:65:ec: 5c:42:61:04:d6:77:36:c3:b6:db:98:0a:ba:c2:c3:61:56:30: f8:1b:25:c5:67:39:a3:b9:64:be:04:fa:ac:49:5d:12:c7:55: ee:de:d1:df:3d:5f:31:fe:6f:bd:1b:cf:56:8d:16:cb:49:2f: 8a:1f:36:51:9d:8b:3d:5a:85:f7:cb:51:06:0e:a6:0c:14:aa: 25:8a:ef:32:1e:38:1a:00:4c:f8:f1:56:7a:c2:83:35:e0:cc: 75:cc:50:ee:15:d7:6a:90:f6:c2:40:64:2d:51:66:0f:d5:73: 1b:3f:fe:62:29:b3:e3:16:1d:67:5f:7b:0d:61:00:92:2b:aa: 1f:d8:c1:d6:e1:b5:f2:e4:36:95:ad:18:f2:80:de:47:d5:04: 4d:df:91:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQF4LyWF7xZL8/TMJmRuBxiKxq4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTA2MjgyMDI2NTJaFw0yNTA3MDIwNDU5NTJaMDMxMTAvBgNV BAMTKDQyMDdBMDBGMzlCNUM4MDdFQTc2QzIzMUI3QTM3ODY2MDU4MUYwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ84qlFVj0WjxQdxrvFCQ420ZE ncI8q0dMjcMfMrTOgWtkOr2u43xNLWkBizJfVy76x3PS4G4NxSAN4ShKLdppl7xV joV4XNROsqAgCfVYcBWYDCFZrImLIObZzWqYmpS5dMUpcm9SCFQFW1h2UWjVCx0T LOMX9T+dd+KZ9nJ87QHHIhEt2f9w5FIuewLy3PNt0bBPJEO6uohM1YNInNqrcV7+ U9bAuy6D/3blMQVciPrrAc+QJsUBJA6LV2QeE/fW5HVr0HhC3ZYZdLQRWo99hnVX Wx3D4xySbbBzW9O2NKtcOCMtxE87dbjKKeHkzcUAXtXYMuJXX5Q0ZbwdHRFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQgegDzm1yAfqdsIxt6N4ZgWB8FYwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2Euq5sDqiVvQNLpqVCpm+px38BWXIGiKFU VeQUEkxWdpeWKWnwFWQFQGo5mB6lPDPFadAw7IgpkUL6ADfCaIdedLXhJprmweF0 cVvGRh2ksVuVirWNWwLXtu/dgLy+jQlxaLKKmjx/jaFl7FxCYQTWdzbDttuYCrrC w2FWMPgbJcVnOaO5ZL4E+qxJXRLHVe7e0d89XzH+b70bz1aNFstJL4ofNlGdiz1a hffLUQYOpgwUqiWK7zIeOBoATPjxVnrCgzXgzHXMUO4V12qQ9sJAZC1RZg/Vcxs/ /mIps+MWHWdfew1hAJIrqh/YwdbhtfLkNpWtGPKA3kfVBE3fkSY= -----END CERTIFICATE-----Generated at Mon Jun 30 05:38:08 2025 by rpki-client