$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: Fg7YuMHbPdYN8LK93BaHMBbtI3B0oAKz7upDVDgssHw= Subject key identifier: C0:8A:95:09:F1:FB:70:12:97:7D:3A:96:7C:C7:D4:7C:17:29:97:31 Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 5D90DA46A43F90827ED92A5EDFAEF9FBF9FB7E24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 0230 Signing time: Sun 19 Oct 2025 15:02:06 +0000 Manifest this update: Sun 19 Oct 2025 14:57:06 +0000 Manifest next update: Wed 22 Oct 2025 22:32:06 +0000 Files and hashes: 1: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: PoUfFWTvv28uKyrYeaMh3T/jvxQb6hulFIaz7fVYPTw=) 2: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: ZRfsCQv1mcZoiRSwy7LI1d6CoRcsZN8L2GBIckM4y/U=) 3: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: 4QR+gugbMt3XTXLmS+jmbG8OAYdSMe7r0raBn7L/jI0=) 4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: uU+9x3F5Wh10f2yBN/1eDuWO0H9Ms5DAoMSr38lZ7RI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:90:da:46:a4:3f:90:82:7e:d9:2a:5e:df:ae:f9:fb:f9:fb:7e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Oct 19 14:57:06 2025 GMT Not After : Oct 22 22:32:06 2025 GMT Subject: CN=C08A9509F1FB7012977D3A967CC7D47C17299731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:3b:52:e9:2a:28:f5:9e:c2:93:04:bd:f5: 0d:ce:48:83:f9:3f:4b:85:96:4f:0b:9f:04:3e:4b: 76:15:a5:2a:3b:52:09:ed:d3:06:20:93:bc:33:7f: 82:6a:ee:56:ce:62:4e:9a:e2:34:52:0d:59:81:bc: fc:44:57:ce:ee:40:a4:f4:af:9b:51:6d:fb:27:90: db:59:d4:ab:32:11:9e:09:09:62:d3:df:4e:0d:9f: 0e:c4:ed:47:b5:19:35:e0:4f:ca:87:d2:29:c7:97: 0b:2b:30:dd:b7:bd:4b:a3:b3:b9:f9:d9:53:7d:6d: c5:ca:9c:7d:8c:20:fc:b6:84:3c:5b:8c:e2:87:46: df:1b:97:8c:40:6a:28:08:7a:a3:24:c1:be:e7:03: 1c:8f:72:49:dd:94:4b:6e:2c:af:ee:53:5d:55:14: e1:96:74:a0:71:d8:b6:d1:a7:93:62:92:63:6f:86: fe:db:da:4b:29:b9:be:b4:91:94:e0:cf:19:35:a6: 5d:87:b0:52:e0:a0:5f:33:b8:7f:51:04:31:ae:13: e4:85:c7:59:2f:c5:e3:43:81:88:30:38:f3:aa:18: ba:b2:a5:37:55:4e:20:b3:9a:80:0a:74:3b:3c:54: 6d:4a:6b:92:5c:40:8a:8f:bb:69:7c:ac:c0:f0:41: 7b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8A:95:09:F1:FB:70:12:97:7D:3A:96:7C:C7:D4:7C:17:29:97:31 X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:be:23:1e:d2:c3:cc:46:d3:00:36:27:ce:0f:7e:b4:ef:3d: a8:86:41:9c:b0:ca:7b:99:24:57:00:8a:25:e5:ff:0f:11:48: d1:84:15:7c:dc:bf:cd:5a:8d:83:d6:00:88:27:4e:7a:55:26: e0:f5:95:1d:a2:fe:86:34:ba:f0:ea:b0:d3:7f:aa:8e:30:1a: 86:0f:13:21:0d:cf:b6:95:af:39:8c:5c:73:b9:48:c8:01:f9: 96:2d:1a:1f:41:d3:c3:b9:bb:a5:12:8b:c6:53:3f:52:96:10: 08:be:65:a2:99:16:65:b4:c7:39:15:c3:3c:3f:48:6f:06:cf: d7:98:e3:84:c6:a7:23:c2:d6:1d:85:6f:f5:2d:81:f3:ee:88: a4:0c:d3:d5:fc:02:75:67:dd:7e:c8:d3:4d:63:ac:05:01:14: 93:8e:80:f7:3c:ab:66:d3:4d:96:3e:be:92:9b:f5:e9:97:97: b7:42:07:f6:9f:c4:83:93:58:88:5f:d3:86:fa:32:e9:8d:6b: e9:98:2b:2d:f2:ea:9b:e2:4f:63:6d:83:92:e6:3a:09:44:33: 35:cd:6f:32:56:dc:69:0c:e7:32:46:59:3e:0c:aa:f5:20:40: 8c:43:52:b1:67:79:ed:f5:62:6f:33:59:f1:ad:91:77:b6:9d: e9:d6:33:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZDaRqQ/kIJ+2Spe3675+/n7fiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNTEwMTkxNDU3MDZaFw0yNTEwMjIyMjMyMDZaMDMxMTAvBgNV BAMTKEMwOEE5NTA5RjFGQjcwMTI5NzdEM0E5NjdDQzdENDdDMTcyOTk3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5DtS6Soo9Z7CkwS99Q3OSIP5 P0uFlk8LnwQ+S3YVpSo7Ugnt0wYgk7wzf4Jq7lbOYk6a4jRSDVmBvPxEV87uQKT0 r5tRbfsnkNtZ1KsyEZ4JCWLT304Nnw7E7Ue1GTXgT8qH0inHlwsrMN23vUujs7n5 2VN9bcXKnH2MIPy2hDxbjOKHRt8bl4xAaigIeqMkwb7nAxyPckndlEtuLK/uU11V FOGWdKBx2LbRp5NikmNvhv7b2kspub60kZTgzxk1pl2HsFLgoF8zuH9RBDGuE+SF x1kvxeNDgYgwOPOqGLqypTdVTiCzmoAKdDs8VG1Ka5JcQIqPu2l8rMDwQXvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwIqVCfH7cBKXfTqWfMfUfBcplzEwHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEm+Ix7Sw8xG0wA2J84PfrTvPaiGQZywynuZ JFcAiiXl/w8RSNGEFXzcv81ajYPWAIgnTnpVJuD1lR2i/oY0uvDqsNN/qo4wGoYP EyENz7aVrzmMXHO5SMgB+ZYtGh9B08O5u6USi8ZTP1KWEAi+ZaKZFmW0xzkVwzw/ SG8Gz9eY44TGpyPC1h2Fb/UtgfPuiKQM09X8AnVn3X7I001jrAUBFJOOgPc8q2bT TZY+vpKb9emXl7dCB/afxIOTWIhf04b6MumNa+mYKy3y6pviT2Ntg5LmOglEMzXN bzJW3GkM5zJGWT4MqvUgQIxDUrFnee31Ym8zWfGtkXe2nenWMzs= -----END CERTIFICATE-----Generated at Mon Oct 20 23:22:24 2025 by rpki-client