$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: J1ZeXdKKiDuzsqoYHHSvElk2iDGdOtXDpOk646NrM3g= Subject key identifier: A2:10:56:C4:F3:E3:5D:0F:33:18:EB:25:4B:EE:9F:9D:94:6A:02:8B Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 195B5804934959D310C1A9F8426B270CD35CAAE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 01E5 Signing time: Sun 04 May 2025 17:22:00 +0000 Manifest this update: Sun 04 May 2025 17:17:00 +0000 Manifest next update: Wed 07 May 2025 23:13:00 +0000 Files and hashes: 1: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: ZRfsCQv1mcZoiRSwy7LI1d6CoRcsZN8L2GBIckM4y/U=) 2: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: PoUfFWTvv28uKyrYeaMh3T/jvxQb6hulFIaz7fVYPTw=) 3: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: exdGmKOKKt70bm1vqx5u1Y2LLcraBPW6Ju7aovoqink=) 4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: uU+9x3F5Wh10f2yBN/1eDuWO0H9Ms5DAoMSr38lZ7RI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 23:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5b:58:04:93:49:59:d3:10:c1:a9:f8:42:6b:27:0c:d3:5c:aa:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: May 4 17:17:00 2025 GMT Not After : May 7 23:13:00 2025 GMT Subject: CN=A21056C4F3E35D0F3318EB254BEE9F9D946A028B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:63:42:c5:9a:aa:77:ae:28:99:75:de:dc: c0:ac:7b:54:90:56:96:7b:18:b7:63:85:d3:fc:98: 6a:5c:ba:76:d5:c1:fe:68:e1:69:62:08:9c:b3:72: 91:c6:66:9b:26:10:08:9c:61:f0:65:3e:6d:79:8f: c9:92:c7:2c:fb:08:64:5d:3b:f7:01:84:70:25:73: 8c:9b:cb:cb:83:ee:6c:9d:47:a2:36:f7:d8:8c:cc: f5:fd:69:fa:fd:ca:90:90:2e:85:4d:2d:4e:3f:a1: e9:d3:f3:bd:a2:c1:e9:22:70:44:19:5b:c4:50:89: ad:37:6e:1c:6d:8c:dd:3c:5f:f6:2d:c6:e5:3e:cf: 2b:75:d5:87:5a:7f:cc:fd:82:4e:71:69:f7:bb:16: 2a:cc:da:5b:52:b1:40:11:e5:f2:46:67:bc:1b:a7: ed:f0:c5:16:97:cd:b3:7f:4e:29:c9:ca:53:03:db: fc:12:eb:e2:c8:b7:e1:8e:ba:ca:e5:0b:23:47:4e: 0f:01:b0:43:e6:f2:53:b3:3a:70:53:a7:eb:9d:ba: 28:54:4d:25:68:f5:8a:3a:6c:44:78:d8:df:e7:4a: 3c:e2:a9:5d:76:24:e5:b1:15:f0:17:83:4d:24:fe: 04:65:b5:41:ab:4d:fa:55:21:8c:44:83:24:f4:fc: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:10:56:C4:F3:E3:5D:0F:33:18:EB:25:4B:EE:9F:9D:94:6A:02:8B X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:8e:57:33:5a:af:3a:27:50:b9:fb:58:15:b0:85:a0:d3:0d: 7d:4c:3c:1a:54:90:b0:bf:8b:f8:83:48:f0:0d:c8:20:0b:5e: ab:aa:41:fc:c6:26:08:23:fd:c9:fb:8d:e6:fc:3c:b5:f4:24: 2f:a0:64:39:26:dd:b8:49:38:3f:6f:c3:36:03:b3:9e:4f:af: cf:f7:50:80:a3:82:c0:ca:a0:44:34:05:33:86:c6:4b:34:98: 7f:82:3d:c7:8d:fc:a4:d3:25:17:9e:04:68:d7:3d:de:28:22: 3f:4c:7f:de:ea:cb:b3:74:4d:18:73:d8:db:f1:3a:89:2a:a6: 3f:cc:f5:b0:de:fa:4f:ce:8a:fd:46:47:c0:35:48:8b:83:55: 6d:5d:a3:ea:3c:44:32:05:52:20:7c:24:d3:38:ca:63:3e:c7: 9b:cd:07:0a:9a:f7:71:d4:e2:02:3c:71:73:05:50:3e:9c:18: d0:dc:c4:84:1a:e5:7e:cd:99:08:ae:95:61:8e:e8:c2:9e:da: 64:3b:5d:59:0d:3a:a3:a3:e0:cf:25:0a:7a:ba:d7:5d:99:88: b8:d7:92:46:14:30:7e:63:be:96:82:8c:18:bf:dd:4f:5b:0e: c7:dc:3d:cb:ec:a6:13:93:75:d9:9a:77:9b:0f:fc:05:aa:ca: 10:fd:4c:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVtYBJNJWdMQwan4QmsnDNNcquMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNTA1MDQxNzE3MDBaFw0yNTA1MDcyMzEzMDBaMDMxMTAvBgNV BAMTKEEyMTA1NkM0RjNFMzVEMEYzMzE4RUIyNTRCRUU5RjlEOTQ2QTAyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiIWNCxZqqd64omXXe3MCse1SQ VpZ7GLdjhdP8mGpcunbVwf5o4WliCJyzcpHGZpsmEAicYfBlPm15j8mSxyz7CGRd O/cBhHAlc4yby8uD7mydR6I299iMzPX9afr9ypCQLoVNLU4/oenT872iwekicEQZ W8RQia03bhxtjN08X/YtxuU+zyt11Ydaf8z9gk5xafe7FirM2ltSsUAR5fJGZ7wb p+3wxRaXzbN/TinJylMD2/wS6+LIt+GOusrlCyNHTg8BsEPm8lOzOnBTp+uduihU TSVo9Yo6bER42N/nSjziqV12JOWxFfAXg00k/gRltUGrTfpVIYxEgyT0/B59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUohBWxPPjXQ8zGOslS+6fnZRqAoswHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaOVzNarzonULn7WBWwhaDTDX1MPBpUkLC/ i/iDSPANyCALXquqQfzGJggj/cn7jeb8PLX0JC+gZDkm3bhJOD9vwzYDs55Pr8/3 UICjgsDKoEQ0BTOGxks0mH+CPceN/KTTJReeBGjXPd4oIj9Mf97qy7N0TRhz2Nvx Ookqpj/M9bDe+k/Oiv1GR8A1SIuDVW1do+o8RDIFUiB8JNM4ymM+x5vNBwqa93HU 4gI8cXMFUD6cGNDcxIQa5X7NmQiulWGO6MKe2mQ7XVkNOqOj4M8lCnq6112ZiLjX kkYUMH5jvpaCjBi/3U9bDsfcPcvsphOTddmad5sP/AWqyhD9TGI= -----END CERTIFICATE-----Generated at Tue May 6 19:26:20 2025 by rpki-client