$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: 3lrbc9Th72Zztjs6CvpdEOhC8t4FAFppiD9/X5c51+w= Subject key identifier: D2:98:07:FB:39:37:D5:3D:9E:D8:F6:8F:14:F3:3A:D3:6E:A0:55:DD Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 7422CD3CE6CB727A94CA2C98B0E3AB460C7F8352 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 0201 Signing time: Mon 28 Apr 2025 02:01:47 +0000 Manifest this update: Mon 28 Apr 2025 01:56:47 +0000 Manifest next update: Thu 01 May 2025 03:01:47 +0000 Files and hashes: 1: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: hdLunghqASdjG/nQfzJEzHE+KPGhCHEzyna8hG0k+eQ=) 2: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: vQcGVK6JhkO4JP+rgl0UnF9Tyyv/ls7fzCiRnSShb9U=) 3: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: sDxRXCQp0YhA4EUoYPlhgRc1l3DUG/A3owlHLie+cQg=) 4: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: sexqXYVW8ieC6sdlJt/dGasLBkG6h3AUR692knSaF1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 03:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:22:cd:3c:e6:cb:72:7a:94:ca:2c:98:b0:e3:ab:46:0c:7f:83:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Apr 28 01:56:47 2025 GMT Not After : May 1 03:01:47 2025 GMT Subject: CN=D29807FB3937D53D9ED8F68F14F33AD36EA055DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:dc:3e:07:f8:2c:c5:7f:6b:14:9c:ed:e8: a1:9b:bf:97:83:f6:6d:bf:93:d4:52:1e:4d:45:4f: 6f:d8:7b:f2:8a:18:35:33:00:08:43:00:25:f0:bb: a4:8e:83:38:db:0d:ea:d0:ab:00:6d:b8:43:8d:a9: 4a:5f:ac:54:8b:e3:29:29:d6:f2:d0:3d:82:d4:33: 82:a0:df:61:37:4f:25:bd:cf:ec:cb:0e:80:f9:00: 73:dd:f2:38:52:7a:2b:f2:b4:6c:a4:f8:65:e0:c0: 63:be:79:32:42:9f:b8:35:c7:d9:b2:93:df:42:fd: 6b:f3:30:92:be:ea:3b:c9:be:b2:48:f3:d6:79:58: 96:1c:60:e8:47:9c:36:c9:89:65:4b:df:64:d1:f4: aa:a1:6b:3e:1c:eb:6f:85:59:99:b7:97:cc:d7:8a: 20:f8:23:16:74:39:d9:9a:2b:64:61:37:4e:a3:f7: 96:20:66:d9:a3:63:4a:e4:cc:19:b3:cf:37:a7:76: d5:bf:39:f8:72:d5:ee:a3:59:3b:10:eb:3f:da:f7: 39:27:d3:27:63:87:2d:cd:ef:2e:34:83:6f:11:3c: f9:e3:2f:6c:57:d2:d6:47:15:3a:1a:da:6f:d2:ea: 49:89:1e:f9:dc:7f:ae:62:dd:c6:c7:c1:6b:78:97: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:98:07:FB:39:37:D5:3D:9E:D8:F6:8F:14:F3:3A:D3:6E:A0:55:DD X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:aa:a7:9a:f5:a8:c6:6a:0b:9b:1c:4e:7b:07:10:fe:ac:70: b3:56:67:78:f8:fd:ef:b7:ca:ff:c6:7f:88:15:30:7b:e2:bd: b4:98:fe:dd:86:55:09:9f:88:bd:6d:f3:82:4d:f7:09:35:6b: c8:7c:41:ce:f5:96:07:28:ac:c8:f9:be:89:ac:51:52:71:ae: 7b:4a:3c:0a:7b:2f:3f:d2:c1:28:76:23:66:e7:84:b4:56:bb: e0:37:c6:62:58:8a:a1:c4:eb:e6:65:c9:d9:83:13:72:9c:6d: 6c:6a:de:33:6c:90:44:f6:75:79:72:c8:46:ed:c3:c6:94:f5: 11:53:09:62:cb:81:16:50:52:60:ae:70:7a:24:07:27:9f:a9: 84:66:16:32:78:f6:3a:7b:87:c7:1b:53:0c:91:28:24:0d:0c: 5e:53:07:ab:d6:d2:49:e4:a7:3b:cd:45:92:1f:fe:cb:27:f8: c8:56:13:ca:85:27:60:27:15:6c:03:6e:90:c7:1b:db:ff:49: 50:84:73:4f:cf:b4:d3:f6:4c:3d:ad:77:d7:0a:06:70:62:89: b6:29:45:07:c3:36:2e:d0:4f:b6:96:75:2f:2a:97:b8:b8:6c: 6f:1e:cf:47:55:d3:ef:51:98:04:51:7e:37:a4:56:e9:fc:d2: e1:bd:4c:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCLNPObLcnqUyiyYsOOrRgx/g1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTA0MjgwMTU2NDdaFw0yNTA1MDEwMzAxNDdaMDMxMTAvBgNV BAMTKEQyOTgwN0ZCMzkzN0Q1M0Q5RUQ4RjY4RjE0RjMzQUQzNkVBMDU1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76Nw+B/gsxX9rFJzt6KGbv5eD 9m2/k9RSHk1FT2/Ye/KKGDUzAAhDACXwu6SOgzjbDerQqwBtuEONqUpfrFSL4ykp 1vLQPYLUM4Kg32E3TyW9z+zLDoD5AHPd8jhSeivytGyk+GXgwGO+eTJCn7g1x9my k99C/WvzMJK+6jvJvrJI89Z5WJYcYOhHnDbJiWVL32TR9Kqhaz4c62+FWZm3l8zX iiD4IxZ0OdmaK2RhN06j95YgZtmjY0rkzBmzzzendtW/Ofhy1e6jWTsQ6z/a9zkn 0ydjhy3N7y40g28RPPnjL2xX0tZHFToa2m/S6kmJHvncf65i3cbHwWt4l2N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0pgH+zk31T2e2PaPFPM6026gVd0wHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGqp5r1qMZqC5scTnsHEP6scLNWZ3j4/e+3 yv/Gf4gVMHvivbSY/t2GVQmfiL1t84JN9wk1a8h8Qc71lgcorMj5vomsUVJxrntK PAp7Lz/SwSh2I2bnhLRWu+A3xmJYiqHE6+ZlydmDE3KcbWxq3jNskET2dXlyyEbt w8aU9RFTCWLLgRZQUmCucHokByefqYRmFjJ49jp7h8cbUwyRKCQNDF5TB6vW0knk pzvNRZIf/ssn+MhWE8qFJ2AnFWwDbpDHG9v/SVCEc0/PtNP2TD2td9cKBnBiibYp RQfDNi7QT7aWdS8ql7i4bG8ez0dV0+9RmARRfjekVun80uG9TDY= -----END CERTIFICATE-----Generated at Wed Apr 30 02:32:02 2025 by rpki-client