$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: ikxddp0qtt+z7/7VDMvmbyOarm6ojO9DkgtGUyCfh4g= Subject key identifier: 64:3B:7E:C9:55:C0:38:82:D3:1A:9C:D6:81:A1:D1:0B:9B:BD:88:7D Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 2BFC7A4A62E7FAD5174315A03F4D28B59786387B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 0383 Signing time: Fri 22 Aug 2025 11:31:02 +0000 Manifest this update: Fri 22 Aug 2025 11:26:02 +0000 Manifest next update: Mon 25 Aug 2025 11:33:02 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: 4Gy0Lfk+/jVW6VnAUtfD4WNR8UK+ATXwmqpehko9srA=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fc:7a:4a:62:e7:fa:d5:17:43:15:a0:3f:4d:28:b5:97:86:38:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Aug 22 11:26:02 2025 GMT Not After : Aug 25 11:33:02 2025 GMT Subject: CN=643B7EC955C03882D31A9CD681A1D10B9BBD887D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:04:2d:d5:89:11:63:c1:04:af:b2:c9:6e: 7d:0e:7e:24:39:5c:f2:f6:0e:79:f7:b0:8a:1e:b2: fc:83:76:ca:64:12:83:39:0b:85:ab:e6:a6:66:38: bf:26:9e:66:f4:1e:07:12:ac:4b:b6:d0:53:e9:ac: c7:b6:a6:89:bf:d4:cb:43:fb:9f:6d:45:ba:c8:ca: 99:f5:b2:9b:74:4a:0e:36:c2:7b:bd:1f:63:6a:bb: 51:70:b6:8c:0e:6a:fe:8c:fc:89:f7:0b:73:30:d5: 58:1e:e2:c1:48:e6:7e:70:03:b4:d9:aa:62:97:a2: 6f:e3:4b:9a:10:13:d2:e0:b8:fa:3e:70:b3:13:11: 1e:7b:e7:7c:4a:0d:3a:01:42:d1:c6:3f:9e:8b:d4: bc:11:d3:2a:b5:35:c9:0a:48:d0:a4:cb:5e:fd:3c: a5:99:6a:c6:dd:30:c3:15:fc:a6:a2:b6:53:d0:f6: 4e:ab:27:a2:e9:d0:14:2f:dd:a8:20:7d:aa:75:1b: bf:2d:db:e3:a8:9b:d0:d6:36:77:1a:6f:aa:55:38: 38:95:da:e1:02:d4:22:d8:bf:a0:79:ea:4a:17:3c: f6:30:ed:7e:eb:08:73:22:b8:0b:24:9f:66:ec:de: 1b:1d:1d:1f:7e:9e:6f:a9:76:58:8e:bc:4c:66:80: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3B:7E:C9:55:C0:38:82:D3:1A:9C:D6:81:A1:D1:0B:9B:BD:88:7D X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c8:36:e7:4c:19:ac:8b:f3:9f:e3:42:8e:76:9f:16:37:73: 6f:51:01:24:fa:b5:69:2d:9f:bf:d7:b2:fe:6b:47:f5:07:3c: a5:69:26:a8:8d:11:d5:2b:17:b5:ee:9c:f1:83:94:04:17:e5: ac:76:a1:1f:36:78:94:bb:57:e4:88:1f:8e:00:06:fc:ec:30: ad:60:49:12:8e:fe:d1:e0:8d:fd:ca:cc:91:a0:6c:aa:4a:d5: 78:9a:05:df:64:e5:41:97:68:ee:8a:2b:25:26:bc:80:a1:43: 1f:07:12:be:c8:d4:c1:a8:c1:67:57:98:56:1e:3c:51:80:d0: f2:5d:5c:2f:5e:ac:61:61:ec:bc:2f:e2:05:73:7b:1e:8f:be: 4f:b5:06:31:84:5f:e0:ad:a3:06:2e:a1:d0:bf:90:d3:00:0a: 94:6f:52:b5:b7:0c:fa:fe:d7:8b:ec:f7:38:5e:da:09:af:0a: a3:9f:c3:7f:66:3c:41:48:1b:28:6b:29:e1:07:67:d9:21:7b: 27:cb:89:01:8f:80:a7:e5:f8:5e:97:bf:26:98:06:57:a3:e7: 22:8d:61:9a:bc:e9:88:32:f3:93:cd:a4:86:76:ba:5a:1c:b9: 48:cd:8c:c7:42:f8:50:f4:07:69:2c:4a:e8:45:c2:f0:c7:96: d2:54:b7:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/x6SmLn+tUXQxWgP00otZeGOHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTA4MjIxMTI2MDJaFw0yNTA4MjUxMTMzMDJaMDMxMTAvBgNV BAMTKDY0M0I3RUM5NTVDMDM4ODJEMzFBOUNENjgxQTFEMTBCOUJCRDg4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqQQt1YkRY8EEr7LJbn0OfiQ5 XPL2Dnn3sIoesvyDdspkEoM5C4Wr5qZmOL8mnmb0HgcSrEu20FPprMe2pom/1MtD +59tRbrIypn1spt0Sg42wnu9H2Nqu1FwtowOav6M/In3C3Mw1Vge4sFI5n5wA7TZ qmKXom/jS5oQE9LguPo+cLMTER5753xKDToBQtHGP56L1LwR0yq1NckKSNCky179 PKWZasbdMMMV/KaitlPQ9k6rJ6Lp0BQv3aggfap1G78t2+Oom9DWNncab6pVODiV 2uEC1CLYv6B56koXPPYw7X7rCHMiuAskn2bs3hsdHR9+nm+pdliOvExmgBhnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZDt+yVXAOILTGpzWgaHRC5u9iH0wHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbINudMGayL85/jQo52nxY3c29RAST6tWkt n7/Xsv5rR/UHPKVpJqiNEdUrF7XunPGDlAQX5ax2oR82eJS7V+SIH44ABvzsMK1g SRKO/tHgjf3KzJGgbKpK1XiaBd9k5UGXaO6KKyUmvIChQx8HEr7I1MGowWdXmFYe PFGA0PJdXC9erGFh7Lwv4gVzex6Pvk+1BjGEX+CtowYuodC/kNMACpRvUrW3DPr+ 14vs9zhe2gmvCqOfw39mPEFIGyhrKeEHZ9kheyfLiQGPgKfl+F6XvyaYBlej5yKN YZq86Ygy85PNpIZ2ulocuUjNjMdC+FD0B2ksSuhFwvDHltJUt8k= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:40 2025 by rpki-client