$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: LTZhjlp0YkGr6JID6XDkvZhx7KhcWWS1GGmi7tpVjLs= Subject key identifier: A0:6E:5E:EC:68:56:53:ED:DE:3D:05:7C:68:BF:1E:35:91:5A:56:8C Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 58E63779EA4540BEA0BEF5172549FDA7E69225B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 0216 Signing time: Sat 23 Aug 2025 01:22:06 +0000 Manifest this update: Sat 23 Aug 2025 01:17:06 +0000 Manifest next update: Tue 26 Aug 2025 02:26:06 +0000 Files and hashes: 1: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: ZRfsCQv1mcZoiRSwy7LI1d6CoRcsZN8L2GBIckM4y/U=) 2: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: xNdzwPZaKx31raamSIMgwODyKUj7pldCWphKJtP9nxE=) 3: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: PoUfFWTvv28uKyrYeaMh3T/jvxQb6hulFIaz7fVYPTw=) 4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: uU+9x3F5Wh10f2yBN/1eDuWO0H9Ms5DAoMSr38lZ7RI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e6:37:79:ea:45:40:be:a0:be:f5:17:25:49:fd:a7:e6:92:25:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Aug 23 01:17:06 2025 GMT Not After : Aug 26 02:26:06 2025 GMT Subject: CN=A06E5EEC685653EDDE3D057C68BF1E35915A568C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ef:44:a3:49:9a:c1:e7:fd:fa:0e:f2:f7:47: 2c:be:4a:b8:b9:11:8b:e9:83:a6:3d:6f:1d:e9:8f: 8f:3b:eb:a2:9a:83:0c:94:dd:b9:53:6f:34:b0:e2: ac:55:25:8b:4c:1f:f2:dd:52:6a:19:87:0f:73:f9: 74:cc:97:80:28:29:12:ac:05:18:19:52:2e:06:f6: 70:d9:4c:2b:ee:a7:11:9d:c1:a5:0b:c6:fb:48:b4: 77:b4:91:1c:72:0c:52:8b:42:06:d9:3a:4b:88:c9: 9e:bc:b1:ec:91:bf:a6:37:3c:ea:96:60:9d:b6:5d: 56:49:41:3e:2d:4e:11:bf:08:86:b4:04:a9:83:0c: 6d:b1:87:a3:fa:96:af:f5:67:aa:3c:fc:1c:9a:e1: 42:b1:c7:ef:3f:c4:26:f0:47:d6:47:eb:00:0f:8e: 1c:fe:a4:94:a0:85:ec:b2:2c:3c:b0:70:c4:b2:5c: d5:b5:f4:69:e7:30:a4:99:8f:38:eb:01:fa:06:a3: 10:7d:04:4b:8d:22:bd:3a:b5:5e:71:2a:f7:6f:5a: eb:48:be:cf:bc:e1:95:be:34:77:5c:f6:21:ae:dc: 25:c3:fd:67:ea:16:87:97:9c:5c:7c:3c:a5:be:cc: 0c:1b:45:41:ed:2a:33:e8:4b:fc:d3:15:46:02:81: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6E:5E:EC:68:56:53:ED:DE:3D:05:7C:68:BF:1E:35:91:5A:56:8C X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:be:38:91:d3:87:b3:8a:78:1b:d0:31:a8:4d:a0:37:6a:7a: 56:09:1e:d7:e7:19:1f:f7:26:2f:99:e9:75:54:e2:a3:b9:22: 8b:09:38:3f:4c:e3:bf:a2:d8:8a:da:66:ac:09:92:bc:e9:75: 27:1f:1f:ad:fe:ab:40:aa:b4:0c:c4:88:60:08:14:d7:3a:77: ec:f0:da:6c:14:97:c2:c0:e1:44:50:70:59:d7:44:d3:d4:16: 42:54:b2:6a:94:7e:a7:96:80:be:d9:a7:d6:99:73:d8:d1:59: 92:65:7d:b7:85:ab:42:4f:1c:8e:84:7a:f4:fb:dc:6e:fa:e0: 90:ff:5e:7f:e5:58:34:a7:a8:86:b3:ba:08:4c:65:60:5f:e3: a0:6a:53:68:e3:0f:05:5f:9f:2c:6a:da:ef:5b:70:58:dc:00: 87:e0:37:b2:de:a2:2b:80:d6:9c:cb:cd:a1:e6:e5:0f:c7:55: cd:d1:65:d5:15:8a:d2:ca:98:ea:b8:c5:79:c0:04:26:ed:71: ad:58:30:40:9a:ae:68:36:b9:e0:b6:6d:f1:e8:36:b6:70:08: bd:26:26:e2:87:e9:cd:d9:89:e7:3a:b8:61:04:12:28:03:ca: ba:59:be:3b:7e:00:ee:ac:54:cb:b0:eb:88:5e:71:56:81:55: 09:3a:e9:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWOY3eepFQL6gvvUXJUn9p+aSJbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNTA4MjMwMTE3MDZaFw0yNTA4MjYwMjI2MDZaMDMxMTAvBgNV BAMTKEEwNkU1RUVDNjg1NjUzRURERTNEMDU3QzY4QkYxRTM1OTE1QTU2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD170SjSZrB5/36DvL3Ryy+Sri5 EYvpg6Y9bx3pj48766KagwyU3blTbzSw4qxVJYtMH/LdUmoZhw9z+XTMl4AoKRKs BRgZUi4G9nDZTCvupxGdwaULxvtItHe0kRxyDFKLQgbZOkuIyZ68seyRv6Y3POqW YJ22XVZJQT4tThG/CIa0BKmDDG2xh6P6lq/1Z6o8/Bya4UKxx+8/xCbwR9ZH6wAP jhz+pJSgheyyLDywcMSyXNW19GnnMKSZjzjrAfoGoxB9BEuNIr06tV5xKvdvWutI vs+84ZW+NHdc9iGu3CXD/WfqFoeXnFx8PKW+zAwbRUHtKjPoS/zTFUYCgey3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoG5e7GhWU+3ePQV8aL8eNZFaVowwHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFu+OJHTh7OKeBvQMahNoDdqelYJHtfnGR/3 Ji+Z6XVU4qO5IosJOD9M47+i2IraZqwJkrzpdScfH63+q0CqtAzEiGAIFNc6d+zw 2mwUl8LA4URQcFnXRNPUFkJUsmqUfqeWgL7Zp9aZc9jRWZJlfbeFq0JPHI6EevT7 3G764JD/Xn/lWDSnqIazughMZWBf46BqU2jjDwVfnyxq2u9bcFjcAIfgN7LeoiuA 1pzLzaHm5Q/HVc3RZdUVitLKmOq4xXnABCbtca1YMECarmg2ueC2bfHoNrZwCL0m JuKH6c3Ziec6uGEEEigDyrpZvjt+AO6sVMuw64hecVaBVQk66ck= -----END CERTIFICATE-----Generated at Sat Aug 23 14:36:54 2025 by rpki-client