$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json) Hash identifier: 3y8PavZL3dtHSnGezuq2eSEjv6ufmPmdWydRN8u/aow= Subject key identifier: 65:5D:DD:C2:B8:4A:E2:0D:A9:20:E5:81:D1:78:32:31:BF:53:44:EE Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B Certificate issuer: /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Certificate serial: 2679BC6955873E7E4106251FA20E69080B2F6922 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft Manifest number: 95 Signing time: Wed 06 Aug 2025 05:51:02 +0000 Manifest this update: Wed 06 Aug 2025 05:46:02 +0000 Manifest next update: Sat 09 Aug 2025 13:31:02 +0000 Files and hashes: 1: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: 2Q3Zg4mIt5/3FpLO5EuUfo8uHc3/fr26gvJxs71PjJE=) 2: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: dVzkaZwBc16NerGBbnPkInQRl7szohhHPD7ETdIV3jg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:79:bc:69:55:87:3e:7e:41:06:25:1f:a2:0e:69:08:0b:2f:69:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Validity Not Before: Aug 6 05:46:02 2025 GMT Not After : Aug 9 13:31:02 2025 GMT Subject: CN=655DDDC2B84AE20DA920E581D1783231BF5344EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:58:2b:6d:36:bb:e8:58:56:9a:f4:fd:67: 8b:2f:7d:32:5e:c8:1c:e6:20:1d:d0:e5:69:ea:7a: 99:c3:5c:ad:02:23:bc:01:0b:77:31:a4:ba:fd:ae: 53:be:a7:16:31:21:1e:e6:2d:04:f7:29:61:60:74: 2a:47:52:3c:ca:be:7b:e1:74:77:84:01:2f:1f:3a: 1a:35:43:53:90:dc:8b:06:8c:16:0c:b2:8f:75:70: 7c:39:ae:23:7b:fd:1c:5b:8f:12:f2:1f:83:3e:f0: aa:9a:55:05:32:c1:74:cb:d3:05:14:15:66:bb:69: bf:dc:83:99:3d:34:6e:10:ed:f9:c4:7d:24:8b:22: b2:f0:84:a0:f0:d1:f5:37:0f:1e:99:9a:f4:da:69: 5f:20:fd:1d:27:0f:15:c8:b3:af:95:1d:65:0e:4f: 3e:de:65:5b:43:61:04:99:20:91:c4:bf:f4:1a:bd: af:22:a9:c1:85:bd:11:81:2e:5b:4e:06:26:22:0d: 74:5e:b7:7b:58:45:a8:6b:45:c2:c5:ae:0d:3b:80: c9:3c:d3:a2:9a:ba:6a:38:25:bd:8a:4a:64:89:39: 3c:dd:0b:fa:c0:20:19:5a:a0:fc:db:7b:81:df:3a: ef:da:02:79:5d:da:74:46:13:7b:86:05:1d:0a:d7: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5D:DD:C2:B8:4A:E2:0D:A9:20:E5:81:D1:78:32:31:BF:53:44:EE X509v3 Authority Key Identifier: keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:57:d9:dc:13:e9:7a:70:f3:33:fb:60:05:74:79:53:ca:07: 54:5a:3b:fa:93:59:22:4f:e2:1f:5b:b5:d1:ac:a9:d3:6d:be: 68:c4:84:cd:aa:18:cc:74:63:fa:e1:3c:46:1c:93:09:b6:b7: 0e:9d:6a:a6:a4:6b:e2:3d:ee:31:09:9e:c6:93:4d:21:bd:c7: b5:69:ad:96:48:12:2e:12:f3:85:73:15:22:82:02:6d:a5:fd: c2:f5:3f:3e:7f:55:b0:e0:37:ff:c2:dd:c4:ca:55:0b:3a:0a: 0d:f6:2a:fa:cf:3b:58:1b:6c:0a:6a:bf:24:4a:b9:86:32:a4: f3:d1:40:95:62:8b:f9:19:3e:15:6c:c5:a0:09:23:cd:3a:a7: 0f:73:14:c0:67:99:df:6c:b9:9e:33:7a:24:2c:9f:6c:d0:d7: 15:6f:ba:4d:3e:bb:27:87:f5:56:30:8c:47:81:b1:44:e6:49: 44:72:e8:c7:67:94:75:70:29:f5:f0:0e:39:33:91:02:f7:a1: a1:c5:ca:7a:b3:51:e2:f3:f1:c2:ca:f6:eb:4b:de:48:9c:d8: fe:c7:5f:eb:a5:3b:bc:85:d9:cd:c5:26:c1:0e:e4:bf:fa:ea: 49:d0:02:33:93:b8:db:95:67:db:31:f9:93:ef:7d:2c:44:e6: 03:45:28:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJnm8aVWHPn5BBiUfog5pCAsvaSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3 Nzk1N0UzQjAeFw0yNTA4MDYwNTQ2MDJaFw0yNTA4MDkxMzMxMDJaMDMxMTAvBgNV BAMTKDY1NUREREMyQjg0QUUyMERBOTIwRTU4MUQxNzgzMjMxQkY1MzQ0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IVgrbTa76FhWmvT9Z4svfTJe yBzmIB3Q5WnqepnDXK0CI7wBC3cxpLr9rlO+pxYxIR7mLQT3KWFgdCpHUjzKvnvh dHeEAS8fOho1Q1OQ3IsGjBYMso91cHw5riN7/RxbjxLyH4M+8KqaVQUywXTL0wUU FWa7ab/cg5k9NG4Q7fnEfSSLIrLwhKDw0fU3Dx6ZmvTaaV8g/R0nDxXIs6+VHWUO Tz7eZVtDYQSZIJHEv/Qava8iqcGFvRGBLltOBiYiDXRet3tYRahrRcLFrg07gMk8 06Kaumo4Jb2KSmSJOTzdC/rAIBlaoPzbe4HfOu/aAnld2nRGE3uGBR0K1031AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZV3dwrhK4g2pIOWB0XgyMb9TRO4wHwYDVR0j BBgwFoAUFM+Z3vobknbr7mEYDfR3AXeVfjswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTdmNTE2MS0wNzBmLTQzMzktYWY0ZS1iYzMzZmRmYjY3YjgvMC8xNENGOTlERUZB MUI5Mjc2RUJFRTYxMTgwREY0NzcwMTc3OTU3RTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3Nzk1 N0UzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk3ZjUxNjEtMDcwZi00MzM5LWFm NGUtYmMzM2ZkZmI2N2I4LzAvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3 MDE3Nzk1N0UzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZX2dwT6Xpw8zP7YAV0eVPKB1RaO/qTWSJP 4h9btdGsqdNtvmjEhM2qGMx0Y/rhPEYckwm2tw6daqaka+I97jEJnsaTTSG9x7Vp rZZIEi4S84VzFSKCAm2l/cL1Pz5/VbDgN//C3cTKVQs6Cg32KvrPO1gbbApqvyRK uYYypPPRQJVii/kZPhVsxaAJI806pw9zFMBnmd9suZ4zeiQsn2zQ1xVvuk0+uyeH 9VYwjEeBsUTmSURy6MdnlHVwKfXwDjkzkQL3oaHFynqzUeLz8cLK9utL3kic2P7H X+ulO7yF2c3FJsEO5L/66knQAjOTuNuVZ9sx+ZPvfSxE5gNFKBk= -----END CERTIFICATE-----Generated at Wed Aug 6 14:07:06 2025 by rpki-client