$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: VbpyrThowKl0urJemzpCDjv+6pkbhykRnUVkGHrppto= Subject key identifier: E6:7F:0A:EE:CF:DE:8A:66:72:EC:6D:66:7B:D7:98:C5:51:20:64:B9 Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 086B52F07055018CDC095DBB1752325CD6EE5C0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: 94 Signing time: Sat 03 May 2025 00:12:11 +0000 Manifest this update: Sat 03 May 2025 00:07:11 +0000 Manifest next update: Tue 06 May 2025 01:08:11 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: ED2vOK9zeRK0rdqZ2eLv2tRE69XX1TK/iNLD2rQ69i4=) 2: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: pZMuN/0Y558HZgj3Tq0GFRyjc0JT5i6qYi4LAYKxaNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 01:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6b:52:f0:70:55:01:8c:dc:09:5d:bb:17:52:32:5c:d6:ee:5c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: May 3 00:07:11 2025 GMT Not After : May 6 01:08:11 2025 GMT Subject: CN=E67F0AEECFDE8A6672EC6D667BD798C5512064B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ff:fa:be:dd:bb:7f:ba:f9:c6:35:43:0a:e1: fb:0e:49:ee:b3:8f:18:2f:3c:24:f7:32:62:19:d2: 8a:4a:4f:e2:69:04:c2:c3:a2:59:fa:2d:bd:a0:32: 58:8e:94:0a:f2:59:c3:17:5a:c6:25:7b:0f:03:3d: 8e:01:70:2b:5e:f8:6c:cf:c6:07:d3:fd:c7:93:f2: 3f:48:5c:c1:64:62:b9:4c:93:09:84:64:f9:51:78: bc:2b:96:72:73:e1:61:2a:43:19:45:30:7a:54:30: 1d:fd:13:c7:be:66:6f:49:b6:b4:81:bc:bb:ec:c8: 74:a1:99:1e:97:2a:9e:61:01:95:5a:86:d9:16:c3: 81:85:97:ce:32:af:e8:b2:66:75:71:83:d6:7b:f9: 86:94:d3:26:e4:6b:09:7c:46:cd:08:59:37:84:9b: 70:0d:6a:75:c6:ec:dc:44:b5:9a:5c:ae:8f:76:f3: 42:e2:d2:95:d8:d4:3d:f2:c5:57:09:8e:bf:3f:4a: 03:3a:05:50:68:17:02:de:1f:de:a2:f5:ab:9c:fd: e5:bd:cc:88:41:07:b2:e1:25:0d:e4:63:b2:f7:52: 19:79:6f:e9:2f:d8:9c:c7:f0:29:2e:64:a1:f0:92: c9:a3:34:5b:8e:bf:6c:88:44:41:1f:c5:b2:e1:86: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7F:0A:EE:CF:DE:8A:66:72:EC:6D:66:7B:D7:98:C5:51:20:64:B9 X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f1:ec:94:30:56:af:9b:6c:29:be:7e:d1:cf:e3:08:0c:20: 79:56:7a:d0:0d:7e:54:2d:62:3c:80:1e:4e:84:2c:53:9c:7c: b4:47:38:59:1a:eb:ee:6d:e3:e4:6d:e6:51:a0:78:33:61:b7: 55:21:6d:cc:9c:69:86:37:f2:11:8e:e5:26:12:6a:67:d7:d6: 48:7c:f7:bc:b3:36:ad:ed:7e:3b:5c:9c:ac:49:b3:7c:48:50: 5b:a4:12:c8:8f:0f:c0:ab:c0:05:9c:39:fd:de:2c:fd:d9:8d: 1d:5e:4e:f5:1e:dc:ee:93:9b:57:30:29:47:74:bd:ba:6b:22: 2b:10:29:1a:ef:ef:57:5c:57:3e:19:88:76:ed:ef:7d:81:0c: a6:9b:81:68:d1:ee:bd:7a:9c:f7:5c:72:c5:ec:5d:cc:d6:31: 05:7b:48:53:3b:91:fa:31:05:c4:fa:08:ef:2b:38:97:90:41: 56:27:c3:2d:a9:b2:da:a3:f8:b6:41:9f:9b:5b:98:1d:46:b2: eb:cd:1d:5e:a6:3e:78:cd:79:01:61:b6:3e:2a:03:84:12:55: 44:b9:d8:ac:d4:46:f9:36:ac:d4:db:ea:0c:28:37:9f:4b:97: fe:c6:ab:1b:4b:40:b3:d2:3e:38:1f:22:31:b2:1f:86:17:3c: f1:20:37:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCGtS8HBVAYzcCV27F1IyXNbuXA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNTA1MDMwMDA3MTFaFw0yNTA1MDYwMTA4MTFaMDMxMTAvBgNV BAMTKEU2N0YwQUVFQ0ZERThBNjY3MkVDNkQ2NjdCRDc5OEM1NTEyMDY0QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe//q+3bt/uvnGNUMK4fsOSe6z jxgvPCT3MmIZ0opKT+JpBMLDoln6Lb2gMliOlAryWcMXWsYlew8DPY4BcCte+GzP xgfT/ceT8j9IXMFkYrlMkwmEZPlReLwrlnJz4WEqQxlFMHpUMB39E8e+Zm9JtrSB vLvsyHShmR6XKp5hAZVahtkWw4GFl84yr+iyZnVxg9Z7+YaU0ybkawl8Rs0IWTeE m3ANanXG7NxEtZpcro9280Li0pXY1D3yxVcJjr8/SgM6BVBoFwLeH96i9auc/eW9 zIhBB7LhJQ3kY7L3Uhl5b+kv2JzH8CkuZKHwksmjNFuOv2yIREEfxbLhhgvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5n8K7s/eimZy7G1me9eYxVEgZLkwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXx7JQwVq+bbCm+ftHP4wgMIHlWetANflQt YjyAHk6ELFOcfLRHOFka6+5t4+Rt5lGgeDNht1UhbcycaYY38hGO5SYSamfX1kh8 97yzNq3tfjtcnKxJs3xIUFukEsiPD8CrwAWcOf3eLP3ZjR1eTvUe3O6Tm1cwKUd0 vbprIisQKRrv71dcVz4ZiHbt732BDKabgWjR7r16nPdccsXsXczWMQV7SFM7kfox BcT6CO8rOJeQQVYnwy2pstqj+LZBn5tbmB1GsuvNHV6mPnjNeQFhtj4qA4QSVUS5 2KzURvk2rNTb6gwoN59Ll/7GqxtLQLPSPjgfIjGyH4YXPPEgN+A= -----END CERTIFICATE-----Generated at Sun May 4 23:39:28 2025 by rpki-client