$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: mfZv6T1Xq9Fo66x8dXGuGcijbDDTCMdrI/fkVAVncg0= Subject key identifier: 4F:7A:B1:97:CD:D8:02:16:5F:B6:41:10:93:B7:1C:E7:44:63:13:B0 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 1A519C8191991795C102FD4FD9CB4AE0B7A638BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: 5C Signing time: Fri 27 Jun 2025 16:11:41 +0000 Manifest this update: Fri 27 Jun 2025 16:06:41 +0000 Manifest next update: Tue 01 Jul 2025 02:26:41 +0000 Files and hashes: 1: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: EIGoF07TzY7SkV8IxYT80lnFZjLwlne371+Kh7TrTWo=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: Gtp/+K549azB+5pUUWPxLkTWkLDGicnzvBzvU09wiAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 02:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:51:9c:81:91:99:17:95:c1:02:fd:4f:d9:cb:4a:e0:b7:a6:38:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Jun 27 16:06:41 2025 GMT Not After : Jul 1 02:26:41 2025 GMT Subject: CN=4F7AB197CDD802165FB6411093B71CE7446313B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:ea:6d:39:0f:4e:a6:93:cf:96:d5:26:37: 9d:6a:39:28:14:dc:e6:b5:9d:99:42:11:73:84:ed: 38:9f:b3:78:0b:df:7d:43:2c:da:73:c1:50:ed:78: d4:ee:5e:7a:4f:23:f6:a0:7a:2c:73:fd:7f:db:7a: 78:25:86:c7:f5:c8:a1:8f:30:3a:96:56:6d:c7:8b: 2e:19:90:60:65:7f:30:62:49:d4:64:00:e5:99:55: b9:b1:8a:fd:1d:2e:57:b2:fc:91:0a:f7:33:e0:d6: 2f:4e:9d:be:13:17:a3:40:49:0a:a4:7e:10:87:a1: 35:de:74:27:ce:f6:35:1c:54:19:2b:67:61:bc:94: 46:bb:66:2a:02:62:29:20:9d:a6:2e:64:86:b2:3f: be:fd:5b:fb:bf:09:2c:a5:ab:58:2b:97:ce:b1:5c: 25:b6:a9:82:63:6f:1f:eb:e3:c6:64:7e:cf:9e:57: 67:e4:19:38:ed:71:5f:d4:37:19:f7:c4:70:33:b1: ee:71:a9:6d:56:89:3a:31:1a:ab:41:f3:87:9b:e5: cd:13:e7:48:41:8b:be:56:b9:ff:50:55:62:20:9f: b4:36:68:ef:d7:e2:0c:16:cf:9a:34:56:83:3c:d1: 98:2d:61:ac:c9:37:61:c9:fb:f8:7e:53:a3:5d:73: de:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7A:B1:97:CD:D8:02:16:5F:B6:41:10:93:B7:1C:E7:44:63:13:B0 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:fa:89:33:8e:b1:82:97:de:5e:ef:24:1c:04:d7:ab:5e:00: 47:12:eb:27:e8:04:d8:8a:89:7c:a4:6a:86:c2:5a:fa:f8:b5: f4:b2:16:2d:ee:60:08:47:d5:53:e6:77:ce:8c:87:ef:c9:97: 60:29:ab:99:7d:f7:de:a9:3a:62:d8:03:0c:3b:09:aa:97:e2: aa:fc:74:c6:e8:d2:38:21:c4:59:c2:c5:59:7a:eb:73:f1:d0: d1:3c:b8:c7:cb:77:1d:3c:f5:18:04:1b:c2:d4:5f:3e:a5:b5: 51:8e:00:20:32:04:48:dd:47:42:f8:1c:b3:92:07:b6:13:97: da:0c:18:fc:b7:2a:7c:f9:c4:4e:eb:2d:02:6e:6a:5b:62:dc: 4d:c8:f7:e2:79:86:82:dd:0d:b6:11:24:98:54:4b:22:7f:80: 35:88:94:14:0d:20:cc:7f:b5:2a:f3:63:02:fd:46:39:cf:8c: da:66:c4:1a:f4:3d:f8:1d:29:d6:f2:25:99:0b:f9:13:14:28: 92:48:ea:39:5e:48:40:50:85:0b:a7:9b:89:20:ad:46:d0:a8: ad:d2:ac:96:7e:7e:b8:5b:fe:3d:96:c7:fe:f2:e6:b5:6c:8c: c7:24:c2:29:5a:80:6c:ac:7f:da:cf:9e:27:de:5e:1c:fd:28: 29:3a:0e:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGlGcgZGZF5XBAv1P2ctK4LemOL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNTA2MjcxNjA2NDFaFw0yNTA3MDEwMjI2NDFaMDMxMTAvBgNV BAMTKDRGN0FCMTk3Q0REODAyMTY1RkI2NDExMDkzQjcxQ0U3NDQ2MzEzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWeptOQ9OppPPltUmN51qOSgU 3Oa1nZlCEXOE7Tifs3gL331DLNpzwVDteNTuXnpPI/ageixz/X/benglhsf1yKGP MDqWVm3Hiy4ZkGBlfzBiSdRkAOWZVbmxiv0dLley/JEK9zPg1i9Onb4TF6NASQqk fhCHoTXedCfO9jUcVBkrZ2G8lEa7ZioCYikgnaYuZIayP779W/u/CSylq1grl86x XCW2qYJjbx/r48Zkfs+eV2fkGTjtcV/UNxn3xHAzse5xqW1WiToxGqtB84eb5c0T 50hBi75Wuf9QVWIgn7Q2aO/X4gwWz5o0VoM80ZgtYazJN2HJ+/h+U6Ndc94tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT3qxl83YAhZftkEQk7cc50RjE7AwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAML6iTOOsYKX3l7vJBwE16teAEcS6yfoBNiK iXykaobCWvr4tfSyFi3uYAhH1VPmd86Mh+/Jl2Apq5l9996pOmLYAww7CaqX4qr8 dMbo0jghxFnCxVl663Px0NE8uMfLdx089RgEG8LUXz6ltVGOACAyBEjdR0L4HLOS B7YTl9oMGPy3Knz5xE7rLQJualti3E3I9+J5hoLdDbYRJJhUSyJ/gDWIlBQNIMx/ tSrzYwL9RjnPjNpmxBr0PfgdKdbyJZkL+RMUKJJI6jleSEBQhQunm4kgrUbQqK3S rJZ+frhb/j2Wx/7y5rVsjMckwilagGysf9rPnifeXhz9KCk6Djw= -----END CERTIFICATE-----Generated at Sun Jun 29 21:53:08 2025 by rpki-client