$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: HYJ3p3hwAhH4QPzTFReNOUwpgtzuin1tXOhzq/aLd/E= Subject key identifier: 92:F5:CF:69:CE:FA:61:AE:19:56:0C:ED:21:02:69:4D:BA:5B:F0:CC Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 3304D47D4E32263E82BBEC39AB9D9431D0B57145 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 036C Signing time: Wed 02 Jul 2025 06:51:00 +0000 Manifest this update: Wed 02 Jul 2025 06:46:00 +0000 Manifest next update: Sat 05 Jul 2025 09:14:00 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: 5A+eXKwQH21aiiwDYLMwcLwgbLNuhSF2xvrDQFk/7CQ=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 09:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:04:d4:7d:4e:32:26:3e:82:bb:ec:39:ab:9d:94:31:d0:b5:71:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Jul 2 06:46:00 2025 GMT Not After : Jul 5 09:14:00 2025 GMT Subject: CN=92F5CF69CEFA61AE19560CED2102694DBA5BF0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cf:e5:8f:87:f7:bb:d4:91:16:5c:f4:c3:40: 0d:b5:bb:15:14:e7:8f:17:c4:f4:b2:11:0c:9a:1c: 69:89:f5:6b:e9:85:5a:41:f5:5a:cb:07:52:f4:ab: c1:e8:0b:49:ef:67:15:43:4f:8a:e0:b7:04:90:7c: af:46:57:2a:bf:f6:5a:c1:76:89:af:1a:36:6f:5b: f9:2c:d0:19:4a:cc:c6:a0:a7:aa:8b:73:1f:7d:34: d4:04:37:90:8c:60:15:40:2d:81:b4:e8:2d:d9:32: fb:b2:dc:d1:d4:cc:b0:20:dd:9d:59:ff:e5:30:bb: c5:bf:7c:ae:5c:4f:9f:bd:86:4b:1d:ca:26:49:8c: 2b:5a:9a:84:af:df:40:01:77:ee:3c:37:ba:eb:81: 33:a2:e2:49:b6:3c:54:d6:8d:72:6d:d6:a3:9e:8a: 66:ba:9e:34:b4:90:3b:6f:71:12:8b:69:b0:66:6e: ad:28:ca:f1:e7:96:86:99:1a:d4:fa:0b:a6:5d:3a: a1:09:ca:38:d5:a9:13:ae:c6:3a:65:ad:7a:f2:cc: c8:65:e4:9b:4a:8d:d7:7f:7b:6c:ad:85:22:67:ca: 7a:99:76:2a:e9:85:e5:c7:b0:a7:3d:91:d7:41:83: 7d:19:c4:01:ac:73:d1:7d:f6:6a:c0:29:f3:31:6d: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F5:CF:69:CE:FA:61:AE:19:56:0C:ED:21:02:69:4D:BA:5B:F0:CC X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:37:14:c7:97:d2:30:72:37:a7:cf:a0:55:a6:80:f1:82:82: bc:8f:7b:1e:d0:21:9f:20:de:7e:85:b8:ac:ba:9b:8b:da:0e: 9e:b9:15:60:ce:cd:e3:ab:7a:76:3a:6f:68:2a:9c:9b:9e:18: 48:af:bf:7c:5c:ee:6c:21:d0:1a:f7:e8:97:4c:c1:9d:0a:b1: b6:8b:5d:72:09:d6:e7:98:a6:04:74:2f:e1:45:8d:3d:59:64: cd:e3:b3:c4:f4:12:9c:47:39:88:c4:31:4a:b4:e9:60:d8:d8: 09:a2:2e:2b:cf:fa:62:e6:14:43:98:1e:86:ae:77:aa:da:04: 12:fd:c1:e9:e6:95:1c:a0:0c:97:c9:67:e6:f0:f1:6c:1f:19: 7b:63:b1:d1:b3:4b:28:36:52:81:10:fa:07:a9:e0:8b:70:30: 49:cb:de:33:77:db:4b:f9:4f:67:dd:a1:4b:d4:a5:dd:95:55: bd:e5:d2:ed:65:ca:a5:cd:9d:dd:d4:50:2c:6f:a0:f9:55:8d: ca:45:69:31:87:aa:f0:f4:34:22:42:72:bf:6f:5a:05:5b:6e: 3f:d2:c4:db:6a:6f:2f:c1:28:37:b7:61:35:10:f9:7e:1b:59: e9:21:0d:38:ef:85:ef:0c:1f:7e:1e:22:f7:7c:45:4e:22:09: 4a:30:3d:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwTUfU4yJj6Cu+w5q52UMdC1cUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTA3MDIwNjQ2MDBaFw0yNTA3MDUwOTE0MDBaMDMxMTAvBgNV BAMTKDkyRjVDRjY5Q0VGQTYxQUUxOTU2MENFRDIxMDI2OTREQkE1QkYwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjz+WPh/e71JEWXPTDQA21uxUU 548XxPSyEQyaHGmJ9WvphVpB9VrLB1L0q8HoC0nvZxVDT4rgtwSQfK9GVyq/9lrB domvGjZvW/ks0BlKzMagp6qLcx99NNQEN5CMYBVALYG06C3ZMvuy3NHUzLAg3Z1Z /+Uwu8W/fK5cT5+9hksdyiZJjCtamoSv30ABd+48N7rrgTOi4km2PFTWjXJt1qOe ima6njS0kDtvcRKLabBmbq0oyvHnloaZGtT6C6ZdOqEJyjjVqROuxjplrXryzMhl 5JtKjdd/e2ythSJnynqZdirpheXHsKc9kddBg30ZxAGsc9F99mrAKfMxbdD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkvXPac76Ya4ZVgztIQJpTbpb8MwwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ3FMeX0jByN6fPoFWmgPGCgryPex7QIZ8g 3n6FuKy6m4vaDp65FWDOzeOrenY6b2gqnJueGEivv3xc7mwh0Br36JdMwZ0KsbaL XXIJ1ueYpgR0L+FFjT1ZZM3js8T0EpxHOYjEMUq06WDY2AmiLivP+mLmFEOYHoau d6raBBL9wenmlRygDJfJZ+bw8WwfGXtjsdGzSyg2UoEQ+gep4ItwMEnL3jN320v5 T2fdoUvUpd2VVb3l0u1lyqXNnd3UUCxvoPlVjcpFaTGHqvD0NCJCcr9vWgVbbj/S xNtqby/BKDe3YTUQ+X4bWekhDTjvhe8MH34eIvd8RU4iCUowPXQ= -----END CERTIFICATE-----Generated at Wed Jul 2 15:02:48 2025 by rpki-client