$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: JLodP8I86MgEnOQLrZ+Hufp6wNRvr5XRhY5DASLibX8= Subject key identifier: 40:D4:4B:AA:5F:51:C8:AD:50:3E:FA:2A:5B:E9:49:7F:E3:68:B3:38 Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 04CE0836988550F1CC2A610C3564D3E0BF8F85C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 01FE Signing time: Sun 29 Jun 2025 12:42:01 +0000 Manifest this update: Sun 29 Jun 2025 12:37:01 +0000 Manifest next update: Wed 02 Jul 2025 18:57:01 +0000 Files and hashes: 1: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: ZRfsCQv1mcZoiRSwy7LI1d6CoRcsZN8L2GBIckM4y/U=) 2: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: XNJ++xZpl6GtX23cYa4CLEbDAG+RsgdSwsFQQqQ2Mas=) 3: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: uU+9x3F5Wh10f2yBN/1eDuWO0H9Ms5DAoMSr38lZ7RI=) 4: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: PoUfFWTvv28uKyrYeaMh3T/jvxQb6hulFIaz7fVYPTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ce:08:36:98:85:50:f1:cc:2a:61:0c:35:64:d3:e0:bf:8f:85:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Jun 29 12:37:01 2025 GMT Not After : Jul 2 18:57:01 2025 GMT Subject: CN=40D44BAA5F51C8AD503EFA2A5BE9497FE368B338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:d0:33:ad:9a:5b:57:f0:4e:79:a6:83:ea: 7b:6a:6b:7e:03:c8:93:ea:db:4a:5b:7a:2b:ea:7c: b1:1e:4f:ec:6b:4d:91:77:61:5b:02:17:04:64:35: a5:71:0c:75:ba:7b:a0:d2:0d:fd:dd:b3:73:84:ab: 1d:3b:4c:30:c4:8d:fd:ff:bd:57:aa:7a:eb:5e:bb: 25:c7:cf:aa:aa:40:a8:2d:68:1c:6c:ac:df:23:c6: 7d:e2:cc:15:06:a0:e3:d0:25:38:8e:9d:c7:c8:5d: 87:09:00:eb:a9:e8:99:f0:fa:64:b5:39:cc:2d:03: f7:53:5b:3b:e5:1d:c6:39:6e:4d:06:87:ac:6b:dc: 4e:aa:f4:5b:91:a2:d5:3f:08:a2:83:3e:8b:cc:ab: ff:17:95:3c:13:c4:0e:4b:02:92:63:89:56:cb:74: 04:3d:38:32:0f:e9:f0:84:34:0b:41:78:28:83:96: 6b:d3:ff:de:31:6c:2b:17:b5:b7:79:da:6e:22:7f: de:16:e3:d0:95:82:7a:e3:93:f2:69:95:c3:b8:af: 03:bf:a7:d8:83:65:99:61:6b:49:3f:32:93:3e:58: f1:de:0d:6e:8c:d6:ba:4d:78:b9:4e:7d:83:0e:d9: 47:0a:69:19:60:a5:02:99:f0:0e:b6:42:cb:fb:ca: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D4:4B:AA:5F:51:C8:AD:50:3E:FA:2A:5B:E9:49:7F:E3:68:B3:38 X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:77:47:57:8c:08:a3:36:58:76:ac:10:e7:e3:b4:03:d2:d7: cd:8e:3e:65:6a:ff:75:56:3d:90:9d:b0:ce:47:e6:83:bc:da: a8:7a:70:a9:e2:b3:ff:7a:97:b1:57:85:cd:97:46:df:37:e3: 8d:8e:7c:50:ac:e4:bf:11:9f:be:a9:66:58:c5:f0:33:97:ab: 46:cf:f0:96:79:29:a3:20:7d:f5:b0:08:61:4b:03:85:18:2a: 9d:cf:c4:f6:25:1f:f4:8a:84:02:7d:1a:4c:77:19:d9:9b:10: 73:04:7c:87:b9:b6:b5:85:79:8c:dc:d9:a6:9d:b3:c6:50:84: 6f:e9:57:3b:90:04:88:84:36:af:f3:2a:af:35:c6:bb:fd:4b: 45:4d:ba:fb:91:00:ce:f9:9b:7a:ad:fd:42:e9:a6:fa:83:b7: 44:c3:fc:8a:3d:1c:d5:68:01:ab:0f:e5:62:59:58:68:f8:73: a4:ee:bf:b6:f9:f0:bc:bf:72:da:e6:88:c8:c7:9c:06:fc:02: 24:ee:e2:1c:8d:31:1c:ed:13:6f:df:85:12:10:34:4a:c2:d1: ce:cf:53:16:5b:73:3d:88:c5:4f:8b:83:1f:0b:fa:eb:05:e4: 17:14:ab:f0:19:ce:11:a5:1e:80:a8:db:1a:21:3e:6a:54:3f: d4:d7:65:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBM4INpiFUPHMKmEMNWTT4L+PhcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNTA2MjkxMjM3MDFaFw0yNTA3MDIxODU3MDFaMDMxMTAvBgNV BAMTKDQwRDQ0QkFBNUY1MUM4QUQ1MDNFRkEyQTVCRTk0OTdGRTM2OEIzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKjtAzrZpbV/BOeaaD6ntqa34D yJPq20pbeivqfLEeT+xrTZF3YVsCFwRkNaVxDHW6e6DSDf3ds3OEqx07TDDEjf3/ vVeqeuteuyXHz6qqQKgtaBxsrN8jxn3izBUGoOPQJTiOncfIXYcJAOup6Jnw+mS1 OcwtA/dTWzvlHcY5bk0Gh6xr3E6q9FuRotU/CKKDPovMq/8XlTwTxA5LApJjiVbL dAQ9ODIP6fCENAtBeCiDlmvT/94xbCsXtbd52m4if94W49CVgnrjk/JplcO4rwO/ p9iDZZlha0k/MpM+WPHeDW6M1rpNeLlOfYMO2UcKaRlgpQKZ8A62Qsv7yv8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQNRLql9RyK1QPvoqW+lJf+NoszgwHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKN3R1eMCKM2WHasEOfjtAPS182OPmVq/3VW PZCdsM5H5oO82qh6cKnis/96l7FXhc2XRt83442OfFCs5L8Rn76pZljF8DOXq0bP 8JZ5KaMgffWwCGFLA4UYKp3PxPYlH/SKhAJ9Gkx3GdmbEHMEfIe5trWFeYzc2aad s8ZQhG/pVzuQBIiENq/zKq81xrv9S0VNuvuRAM75m3qt/ULppvqDt0TD/Io9HNVo AasP5WJZWGj4c6Tuv7b58Ly/ctrmiMjHnAb8AiTu4hyNMRztE2/fhRIQNErC0c7P UxZbcz2IxU+Lgx8L+usF5BcUq/AZzhGlHoCo2xohPmpUP9TXZX0= -----END CERTIFICATE-----Generated at Mon Jun 30 00:33:47 2025 by rpki-client