$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: hdzBAJNwrTlFnIYMsH/tMvWlrVkIACKyYanfFl8Ws2k= Subject key identifier: 9B:8F:28:E7:1B:CA:69:DA:2E:F5:19:9D:66:E2:0F:A2:24:85:5B:15 Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 40EFEFB9E7363055666DA1359617D8EEFBD5C90F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 0286 Signing time: Mon 12 May 2025 15:21:26 +0000 Manifest this update: Mon 12 May 2025 15:16:26 +0000 Manifest next update: Thu 15 May 2025 22:58:26 +0000 Files and hashes: 1: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: WhcI/rPTYxL6IUCY8wiBGmvUbl7gccw0l7rmDchqDAA=) 2: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: 7xj5m5H8kBQvKeDM9lzXAWtpcbRYI+kcs3JEwOPONLQ=) 3: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ef:ef:b9:e7:36:30:55:66:6d:a1:35:96:17:d8:ee:fb:d5:c9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: May 12 15:16:26 2025 GMT Not After : May 15 22:58:26 2025 GMT Subject: CN=9B8F28E71BCA69DA2EF5199D66E20FA224855B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:94:f4:b6:83:f7:86:05:5d:6e:cc:6a:e4: 2b:5b:1c:e4:a0:bc:27:32:54:53:b8:e8:60:df:9c: 6f:9d:52:1b:c6:03:af:46:cf:e3:1a:08:27:88:4b: d7:25:43:93:87:b5:ef:83:eb:c6:f5:15:1b:68:31: 0f:fe:e4:1f:ef:d0:63:a2:dd:1a:36:64:28:74:3f: 34:b5:a2:a3:0a:c5:1c:36:3b:25:fa:2f:52:a2:39: 51:f3:17:06:3f:e1:f3:b5:ec:10:80:45:2f:f7:6d: 40:dc:1e:34:4f:eb:ac:88:6e:2c:f7:e0:1d:7b:5d: e4:64:fc:8c:9e:f6:93:ea:dd:ce:46:9a:31:fb:ef: 38:ea:18:8b:1b:42:20:d5:a7:a5:3d:1b:c2:2e:f4: 8c:37:cc:84:a5:21:27:c8:eb:50:11:90:bb:fd:a9: ff:f6:9a:f8:21:a9:43:86:3b:0f:2f:9c:39:2a:36: 7c:b1:c5:61:dc:12:1c:01:e6:f9:48:4a:ec:c2:f9: d2:ca:79:f9:0c:df:ec:7e:6f:32:28:ac:d8:89:79: 07:a3:f4:a3:f3:fe:90:62:f4:a1:d0:cb:9c:3c:11: f6:b1:16:f3:8c:b8:fa:6b:e3:d6:c6:c1:58:8c:56: 8e:0d:9b:0f:5d:87:70:1b:47:cc:d3:be:96:6f:d1: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8F:28:E7:1B:CA:69:DA:2E:F5:19:9D:66:E2:0F:A2:24:85:5B:15 X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:29:9d:bf:2a:a9:08:85:0c:07:db:9f:8f:bd:80:87:07:cc: a8:34:fc:dc:e3:7e:cc:34:60:c2:82:37:6f:7d:61:33:e5:8e: fe:3a:c0:95:93:30:62:2c:c7:17:db:e3:2f:45:e3:72:1f:b7: 7e:70:46:c0:a6:37:5f:70:d4:72:61:9f:34:28:10:7c:1b:0d: 0b:6d:02:eb:10:ba:1c:e4:29:98:2d:60:1b:95:d9:c1:46:38: ab:73:01:a0:ef:f8:fa:a9:ab:a0:47:38:de:68:da:bc:b7:a6: f3:31:af:53:1a:41:7c:6b:49:db:cd:69:43:e8:55:90:7f:b7: 81:65:58:ea:1d:bf:68:9c:a0:3c:e8:26:fd:99:6a:4d:42:99: b2:f1:25:16:dc:df:d0:61:cb:6c:f9:db:8e:e9:30:da:07:fd: 3a:46:4f:45:80:e5:20:2d:ca:23:8f:b1:73:73:d1:36:37:58: d9:b2:9f:22:e3:2d:f7:32:05:32:f2:91:1e:fc:db:30:6a:d3: 46:a3:79:71:e0:11:c8:12:7c:26:b3:74:04:a5:96:44:ed:58: d7:89:a8:bd:50:2f:be:ec:80:74:6f:e1:f6:0a:ea:e4:20:06: 40:6e:31:65:a7:a4:85:b4:48:5f:9f:b1:d6:0a:05:cf:04:38: 8e:4e:d3:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQO/vuec2MFVmbaE1lhfY7vvVyQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNTA1MTIxNTE2MjZaFw0yNTA1MTUyMjU4MjZaMDMxMTAvBgNV BAMTKDlCOEYyOEU3MUJDQTY5REEyRUY1MTk5RDY2RTIwRkEyMjQ4NTVCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKZT0toP3hgVdbsxq5CtbHOSg vCcyVFO46GDfnG+dUhvGA69Gz+MaCCeIS9clQ5OHte+D68b1FRtoMQ/+5B/v0GOi 3Ro2ZCh0PzS1oqMKxRw2OyX6L1KiOVHzFwY/4fO17BCARS/3bUDcHjRP66yIbiz3 4B17XeRk/Iye9pPq3c5GmjH77zjqGIsbQiDVp6U9G8Iu9Iw3zISlISfI61ARkLv9 qf/2mvghqUOGOw8vnDkqNnyxxWHcEhwB5vlISuzC+dLKefkM3+x+bzIorNiJeQej 9KPz/pBi9KHQy5w8EfaxFvOMuPpr49bGwViMVo4Nmw9dh3AbR8zTvpZv0ZGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm48o5xvKadou9RmdZuIPoiSFWxUwHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEopnb8qqQiFDAfbn4+9gIcHzKg0/Nzjfsw0 YMKCN299YTPljv46wJWTMGIsxxfb4y9F43Ift35wRsCmN19w1HJhnzQoEHwbDQtt AusQuhzkKZgtYBuV2cFGOKtzAaDv+Pqpq6BHON5o2ry3pvMxr1MaQXxrSdvNaUPo VZB/t4FlWOodv2icoDzoJv2Zak1CmbLxJRbc39Bhy2z5247pMNoH/TpGT0WA5SAt yiOPsXNz0TY3WNmynyLjLfcyBTLykR782zBq00ajeXHgEcgSfCazdASllkTtWNeJ qL1QL77sgHRv4fYK6uQgBkBuMWWnpIW0SF+fsdYKBc8EOI5O08o= -----END CERTIFICATE-----Generated at Wed May 14 07:57:18 2025 by rpki-client