$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: bso/J7+CPn0TzrM03s0iyaGdJCkXpzhGhcZ3b7oxDS8= Subject key identifier: 47:8A:76:F9:FB:72:56:45:54:03:EE:9C:FF:B3:C0:0A:56:8E:42:00 Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 744D80639205BFFCEF0C36EFF0980625221C58C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: C0 Signing time: Sat 09 Aug 2025 09:32:15 +0000 Manifest this update: Sat 09 Aug 2025 09:27:15 +0000 Manifest next update: Tue 12 Aug 2025 19:58:15 +0000 Files and hashes: 1: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: 81zQkeeLCXv0cckwXV1aoRZ2veO6r+gRpj5oW97tD3s=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 19:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:4d:80:63:92:05:bf:fc:ef:0c:36:ef:f0:98:06:25:22:1c:58:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Aug 9 09:27:15 2025 GMT Not After : Aug 12 19:58:15 2025 GMT Subject: CN=478A76F9FB7256455403EE9CFFB3C00A568E4200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:a4:2e:37:9f:16:17:f1:79:e1:32:5a:6e: a3:dd:e2:f7:5a:62:8b:b4:2e:db:0f:40:2d:39:5d: a6:c0:03:9a:ce:19:6f:ff:84:cd:d1:d5:a8:c3:44: 9c:9e:47:45:4d:99:6f:2e:99:66:bb:85:5f:e2:0a: 28:14:66:cb:bf:99:b9:a0:70:1c:04:2e:8f:a6:be: 36:5c:89:75:26:54:49:8d:f8:fe:3e:77:e9:96:1f: 58:43:34:9e:c8:fe:33:ee:8b:cf:06:0b:e5:22:36: a2:43:f3:87:14:db:7f:6b:6d:3b:fd:28:53:f2:62: 18:f5:04:77:39:34:bb:9e:f5:94:76:bc:b5:3a:06: 5d:39:2b:f6:1f:53:29:69:cf:54:09:f0:45:25:1b: 4d:97:70:82:7b:d2:40:e7:e3:a3:9d:38:4a:c2:75: c9:1b:0c:c0:43:ad:9d:37:5d:6c:20:c4:67:bb:4c: 82:28:fe:da:c4:a6:6c:6b:64:c6:37:bc:46:ec:ff: b1:2a:31:f8:76:13:dc:43:3c:d8:8a:da:0a:a9:89: 11:d0:76:84:14:0c:e5:c0:71:a9:a8:36:3b:a4:7c: 58:38:ab:a7:4e:d0:01:9d:91:cf:6b:45:4a:80:ec: d7:44:17:a5:d2:b3:86:41:93:ec:66:ab:ff:75:65: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8A:76:F9:FB:72:56:45:54:03:EE:9C:FF:B3:C0:0A:56:8E:42:00 X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f1:27:cc:4e:5a:7a:12:b3:c9:f3:e0:53:cb:f0:0f:e2:a6: 86:61:1e:2c:b0:2d:fd:65:30:4f:00:2c:02:0b:13:fb:fa:c1: 30:63:16:6b:f5:43:63:1e:d6:bb:98:57:7a:17:4a:29:07:4d: 61:42:8d:db:c1:af:07:65:74:31:52:d2:3f:f7:c5:14:7f:9e: e9:b6:d9:fb:c8:ed:06:15:8a:a5:23:e8:0e:7e:d0:50:76:ab: 87:71:0d:27:b7:db:f5:40:42:68:a4:7d:64:7e:66:2b:f0:50: 11:f0:9f:4d:8f:e1:70:cd:e0:87:20:3e:49:4a:ef:9f:8f:a9: c5:81:51:5b:4d:3c:99:8c:a5:8e:e3:70:70:8d:58:ee:7e:78: 5b:9d:03:8e:c6:1c:4e:44:8f:3b:79:c0:26:9b:1e:ed:4f:bb: ec:28:d1:d1:38:d6:6b:b6:82:d4:38:32:e1:84:a8:ec:36:07: cc:a4:00:46:0f:75:64:8c:a5:a4:50:06:cf:19:4b:d6:d9:38: 8c:a4:f9:64:c7:40:23:1c:c3:5e:a9:62:b8:9b:16:11:24:1c: 36:de:9c:82:22:92:b4:bf:51:46:87:1f:a9:4b:ab:9c:24:20: 02:86:d8:1f:6b:19:85:08:43:de:0a:a4:e6:cd:70:74:97:65: 00:86:98:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdE2AY5IFv/zvDDbv8JgGJSIcWMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNTA4MDkwOTI3MTVaFw0yNTA4MTIxOTU4MTVaMDMxMTAvBgNV BAMTKDQ3OEE3NkY5RkI3MjU2NDU1NDAzRUU5Q0ZGQjNDMDBBNTY4RTQyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eaQuN58WF/F54TJabqPd4vda You0LtsPQC05XabAA5rOGW//hM3R1ajDRJyeR0VNmW8umWa7hV/iCigUZsu/mbmg cBwELo+mvjZciXUmVEmN+P4+d+mWH1hDNJ7I/jPui88GC+UiNqJD84cU239rbTv9 KFPyYhj1BHc5NLue9ZR2vLU6Bl05K/YfUylpz1QJ8EUlG02XcIJ70kDn46OdOErC dckbDMBDrZ03XWwgxGe7TIIo/trEpmxrZMY3vEbs/7EqMfh2E9xDPNiK2gqpiRHQ doQUDOXAcamoNjukfFg4q6dO0AGdkc9rRUqA7NdEF6XSs4ZBk+xmq/91ZQg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR4p2+ftyVkVUA+6c/7PAClaOQgAwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbxJ8xOWnoSs8nz4FPL8A/ipoZhHiywLf1l ME8ALAILE/v6wTBjFmv1Q2Me1ruYV3oXSikHTWFCjdvBrwdldDFS0j/3xRR/num2 2fvI7QYViqUj6A5+0FB2q4dxDSe32/VAQmikfWR+ZivwUBHwn02P4XDN4IcgPklK 75+PqcWBUVtNPJmMpY7jcHCNWO5+eFudA47GHE5Ejzt5wCabHu1Pu+wo0dE41mu2 gtQ4MuGEqOw2B8ykAEYPdWSMpaRQBs8ZS9bZOIyk+WTHQCMcw16pYribFhEkHDbe nIIikrS/UUaHH6lLq5wkIAKG2B9rGYUIQ94KpObNcHSXZQCGmCE= -----END CERTIFICATE-----Generated at Mon Aug 11 09:57:07 2025 by rpki-client