$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: 3/G5KqjefSDdQEAo1klk3dfFec5W0VDhCY38CR3P6g4= Subject key identifier: 5B:D9:9A:C0:34:48:61:86:F9:F8:56:F5:DE:59:F9:42:07:8B:A2:BF Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 347B3E910CC4B8F38877E9E4E3043989800494C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: 74 Signing time: Thu 21 Aug 2025 08:21:45 +0000 Manifest this update: Thu 21 Aug 2025 08:16:45 +0000 Manifest next update: Sun 24 Aug 2025 17:43:45 +0000 Files and hashes: 1: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: Gtp/+K549azB+5pUUWPxLkTWkLDGicnzvBzvU09wiAY=) 2: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: BLaLvQ/cHLm8UGh/fbSRAoSSOCgOLmtMjTjwCKK7Udo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7b:3e:91:0c:c4:b8:f3:88:77:e9:e4:e3:04:39:89:80:04:94:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Aug 21 08:16:45 2025 GMT Not After : Aug 24 17:43:45 2025 GMT Subject: CN=5BD99AC034486186F9F856F5DE59F942078BA2BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:61:17:f7:cb:ca:52:56:3f:84:d1:af:94: a6:dc:fb:be:ea:c1:d0:5f:d5:4d:86:0c:a5:3c:34: 6e:44:e4:f6:68:8d:d7:40:a4:3c:e4:3f:b7:eb:2a: bd:28:4a:86:9f:e7:57:93:e2:6c:e2:cf:91:ef:ec: e1:d4:44:b0:a1:7f:99:d2:04:ca:cb:98:24:4b:4e: 1c:69:6d:29:ac:5a:16:4b:bb:46:11:53:0b:7b:6f: a8:ab:a7:1f:7e:e2:55:8c:1e:ea:52:c9:ab:24:e3: 4d:7f:ae:6f:00:35:31:92:5c:fc:2c:f9:5c:30:fe: 42:3a:c0:65:e3:40:ef:59:2c:91:72:d9:64:52:21: f6:ac:23:98:46:b0:fc:5c:79:ee:7b:0f:f6:d8:2b: 22:b9:65:a2:76:bc:39:65:b5:be:5b:07:3d:f5:14: 82:6e:6a:7b:ad:e0:3e:cb:96:09:9f:11:fa:b7:a1: 92:1f:56:9b:d1:e2:68:e6:56:68:80:ce:e9:bd:d3: 11:03:8b:2c:82:aa:30:1f:e1:ab:f8:8e:75:f8:df: 84:20:41:2b:ad:1c:4d:a9:74:40:a4:53:0e:82:d1: 3b:b6:80:2e:2e:6e:17:b1:4b:4b:4c:43:61:28:87: 9f:11:04:b6:88:00:0a:de:be:41:fd:14:ee:24:b4: 03:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D9:9A:C0:34:48:61:86:F9:F8:56:F5:DE:59:F9:42:07:8B:A2:BF X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:58:3d:ed:de:49:b0:12:b5:2c:13:cc:a7:c9:a3:00:74:ec: cc:e0:77:81:5e:cb:1c:4c:e4:c3:9c:3d:31:c2:68:8e:d8:81: e9:f3:2d:d6:57:ba:62:15:0a:6e:a6:5d:48:70:1a:5d:13:cb: 8c:58:1c:f2:db:b4:cf:30:93:17:fc:a0:e8:0c:67:22:45:e7: 7a:1b:72:d6:fb:f3:1b:6b:b1:61:0c:d5:27:75:0a:ba:9a:eb: a1:a3:0f:08:bc:48:9e:b1:e9:92:a5:07:ea:f2:cc:90:a6:4e: e0:f4:0b:aa:64:c8:e1:0d:e1:6e:9b:36:fa:4c:0d:8c:14:46: df:db:24:eb:d5:a9:4d:be:38:91:47:7a:ef:0d:ed:83:4d:41: 6b:43:c2:4e:4a:6a:88:1e:4b:5c:7c:2b:e5:3a:5a:24:3b:b0: 8b:34:b7:7b:13:2e:1c:01:93:5e:cc:89:c3:8c:4c:ac:28:d2: 9b:15:19:f2:0a:4b:cb:32:64:9d:8d:c1:e6:6b:85:bd:38:62: 05:e3:b5:aa:41:7b:fa:8f:cc:fd:95:00:0d:61:7e:83:04:58: 01:ee:65:03:57:4d:d9:40:62:72:6c:15:6c:04:f9:c9:8f:cf: df:d8:00:3f:29:e8:0a:7f:6e:80:ea:71:2f:fc:ee:69:38:d9: d4:b7:c7:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHs+kQzEuPOId+nk4wQ5iYAElMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNTA4MjEwODE2NDVaFw0yNTA4MjQxNzQzNDVaMDMxMTAvBgNV BAMTKDVCRDk5QUMwMzQ0ODYxODZGOUY4NTZGNURFNTlGOTQyMDc4QkEyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAY2EX98vKUlY/hNGvlKbc+77q wdBf1U2GDKU8NG5E5PZojddApDzkP7frKr0oSoaf51eT4mziz5Hv7OHURLChf5nS BMrLmCRLThxpbSmsWhZLu0YRUwt7b6irpx9+4lWMHupSyask401/rm8ANTGSXPws +Vww/kI6wGXjQO9ZLJFy2WRSIfasI5hGsPxcee57D/bYKyK5ZaJ2vDlltb5bBz31 FIJuanut4D7LlgmfEfq3oZIfVpvR4mjmVmiAzum90xEDiyyCqjAf4av4jnX434Qg QSutHE2pdECkUw6C0Tu2gC4ubhexS0tMQ2Eoh58RBLaIAArevkH9FO4ktANFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9mawDRIYYb5+Fb13ln5QgeLor8wHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhYPe3eSbAStSwTzKfJowB07Mzgd4FeyxxM 5MOcPTHCaI7YgenzLdZXumIVCm6mXUhwGl0Ty4xYHPLbtM8wkxf8oOgMZyJF53ob ctb78xtrsWEM1Sd1Crqa66GjDwi8SJ6x6ZKlB+ryzJCmTuD0C6pkyOEN4W6bNvpM DYwURt/bJOvVqU2+OJFHeu8N7YNNQWtDwk5KaogeS1x8K+U6WiQ7sIs0t3sTLhwB k17MicOMTKwo0psVGfIKS8syZJ2NweZrhb04YgXjtapBe/qPzP2VAA1hfoMEWAHu ZQNXTdlAYnJsFWwE+cmPz9/YAD8p6Ap/boDqcS/87mk42dS3x/E= -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:49 2025 by rpki-client