$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: /7xa1xSg3ukPYWZ+KctPPNFHLnFUDih2lsSkcpeEZz4= Subject key identifier: AC:DC:93:36:16:15:2C:CA:FA:CD:B1:22:44:E3:F2:8F:6B:C8:85:3B Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 2ED1F2BA0FF6EC6C654D858A4F7F0BEDABE677F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 022F Signing time: Tue 05 Aug 2025 22:51:48 +0000 Manifest this update: Tue 05 Aug 2025 22:46:48 +0000 Manifest next update: Sat 09 Aug 2025 05:05:48 +0000 Files and hashes: 1: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) 2: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: 1uAjFQypzuWN/JekOBz2KHbbRpcBjxSo7svNa7sL8YU=) 3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 4: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d1:f2:ba:0f:f6:ec:6c:65:4d:85:8a:4f:7f:0b:ed:ab:e6:77:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Aug 5 22:46:48 2025 GMT Not After : Aug 9 05:05:48 2025 GMT Subject: CN=ACDC933616152CCAFACDB12244E3F28F6BC8853B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:dc:da:78:35:5c:2c:ef:51:7c:67:21:f2: b2:08:80:ab:64:36:ff:23:4e:6c:93:6b:cb:d8:59: 73:99:bc:d1:22:3d:80:fd:f7:18:bd:50:fe:6a:1b: 78:47:9e:8d:25:2d:c3:24:7d:40:bb:ec:fa:2a:f8: af:3f:38:77:6a:1e:ed:33:fd:a3:bc:19:05:97:53: df:bb:b5:5f:e1:ee:13:ce:57:c5:52:55:53:18:24: e1:06:45:27:d9:7e:50:cd:bc:b6:ce:f2:50:f4:d9: 7a:c6:29:58:62:1f:62:89:f1:77:35:87:43:ae:13: 11:a4:50:20:04:0b:7e:b2:5f:c8:99:5b:47:4d:a9: 62:a8:23:45:1a:e0:ae:b2:e8:19:53:88:16:87:26: 6a:ba:d8:63:f2:e2:11:77:06:fe:20:0d:73:45:14: 23:28:09:5d:e2:74:65:03:00:87:7f:26:35:9a:ae: 60:12:0e:d8:00:e5:b7:56:4c:1b:9d:eb:e9:81:ae: 3a:b7:d7:69:26:bb:7c:c4:77:7d:3d:3e:63:07:ac: 4b:94:39:08:e1:51:2a:b1:c1:ec:c3:45:dd:df:a4: 5c:99:5a:5f:0a:14:86:3c:20:92:81:c5:43:b7:91: 54:54:1c:fd:a5:75:3b:b3:3b:3e:ed:57:68:21:4a: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DC:93:36:16:15:2C:CA:FA:CD:B1:22:44:E3:F2:8F:6B:C8:85:3B X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:47:62:34:d5:71:25:ff:64:21:6a:74:70:47:6a:f1:05:3d: b3:71:a6:27:99:2e:2d:6d:9f:b9:46:bc:8d:fe:c8:47:64:4c: 84:b5:06:66:dc:8a:7f:ee:2a:03:17:e1:c7:eb:0c:8a:c1:3c: 7f:39:56:87:29:09:13:20:dd:64:c8:7b:d2:c8:a4:c6:b7:26: 27:b4:da:9b:7d:d4:45:4b:a8:6e:a1:46:a5:82:07:0e:60:96: a9:1c:e7:60:5c:b3:47:0c:41:3d:5d:37:b4:3f:41:e1:34:c1: 16:41:48:be:a9:9b:70:ea:6d:e6:b9:b9:3b:bd:46:3c:1d:b5: db:e4:6c:6f:a1:c4:61:d2:2c:8e:7f:c8:26:f6:65:c1:dd:d0: ff:c8:12:bb:9a:14:71:0b:95:d4:bf:82:2b:c8:6f:12:48:59: d2:09:b1:99:24:29:55:30:73:22:99:d9:da:f7:77:f9:61:b9: 37:de:f8:7f:0e:00:a8:ee:1a:9f:a9:64:e4:72:3e:b6:25:9c: e1:c2:3d:74:22:0f:1e:f4:1a:80:24:d9:40:22:bb:86:31:74: 18:c5:c3:ca:e8:1c:e6:9e:04:3b:26:ea:ce:e5:11:f1:5c:fb: 46:40:c4:7b:73:0f:38:2e:93:92:c8:6f:40:14:99:b2:5e:e2: 98:75:9d:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtHyug/27GxlTYWKT38L7avmd/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTA4MDUyMjQ2NDhaFw0yNTA4MDkwNTA1NDhaMDMxMTAvBgNV BAMTKEFDREM5MzM2MTYxNTJDQ0FGQUNEQjEyMjQ0RTNGMjhGNkJDODg1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxdzaeDVcLO9RfGch8rIIgKtk Nv8jTmyTa8vYWXOZvNEiPYD99xi9UP5qG3hHno0lLcMkfUC77Poq+K8/OHdqHu0z /aO8GQWXU9+7tV/h7hPOV8VSVVMYJOEGRSfZflDNvLbO8lD02XrGKVhiH2KJ8Xc1 h0OuExGkUCAEC36yX8iZW0dNqWKoI0Ua4K6y6BlTiBaHJmq62GPy4hF3Bv4gDXNF FCMoCV3idGUDAId/JjWarmASDtgA5bdWTBud6+mBrjq312kmu3zEd309PmMHrEuU OQjhUSqxwezDRd3fpFyZWl8KFIY8IJKBxUO3kVRUHP2ldTuzOz7tV2ghSh4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrNyTNhYVLMr6zbEiROPyj2vIhTswHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdHYjTVcSX/ZCFqdHBHavEFPbNxpieZLi1t n7lGvI3+yEdkTIS1Bmbcin/uKgMX4cfrDIrBPH85VocpCRMg3WTIe9LIpMa3Jie0 2pt91EVLqG6hRqWCBw5glqkc52Bcs0cMQT1dN7Q/QeE0wRZBSL6pm3Dqbea5uTu9 RjwdtdvkbG+hxGHSLI5/yCb2ZcHd0P/IEruaFHELldS/givIbxJIWdIJsZkkKVUw cyKZ2dr3d/lhuTfe+H8OAKjuGp+pZORyPrYlnOHCPXQiDx70GoAk2UAiu4YxdBjF w8roHOaeBDsm6s7lEfFc+0ZAxHtzDzguk5LIb0AUmbJe4ph1nWI= -----END CERTIFICATE-----Generated at Thu Aug 7 03:22:08 2025 by rpki-client