$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: WLTxHUXEE0bY6KeDTymaOYvTLkRopApfkx8BTo8P2qY= Subject key identifier: 16:4D:13:E0:C5:5C:15:23:C4:78:D8:6D:6B:EA:9F:44:26:36:CD:59 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 03B8865AFD12B803BC0176598E8A6C14FDAD47E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 0217 Signing time: Sun 15 Jun 2025 13:01:47 +0000 Manifest this update: Sun 15 Jun 2025 12:56:47 +0000 Manifest next update: Wed 18 Jun 2025 15:25:47 +0000 Files and hashes: 1: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: Q3k6aCHS/X3ZkkNEl3NDMXtA7U8B5rerhTUi6D8yJq8=) 2: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: sDxRXCQp0YhA4EUoYPlhgRc1l3DUG/A3owlHLie+cQg=) 3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 4: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b8:86:5a:fd:12:b8:03:bc:01:76:59:8e:8a:6c:14:fd:ad:47:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Jun 15 12:56:47 2025 GMT Not After : Jun 18 15:25:47 2025 GMT Subject: CN=164D13E0C55C1523C478D86D6BEA9F442636CD59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:7b:04:73:0b:7b:38:e4:6f:75:fa:82:50: cf:01:59:a7:c9:57:b8:c5:af:d8:d2:40:b4:ad:40: 92:b8:37:22:ae:77:ee:8d:c7:92:be:c5:ae:c2:c8: 52:f9:c9:d9:db:5d:bf:7b:d0:a1:a4:9f:0a:3e:e9: 8a:50:af:87:7e:92:47:d7:5e:68:3f:96:a0:6d:7d: e3:5d:69:bd:d1:fe:f8:66:42:9a:4f:38:33:87:d1: 03:c1:30:f4:63:55:f2:f8:e7:ad:17:18:87:20:a0: eb:eb:c5:ee:4f:f4:6c:86:f0:21:0d:39:5a:78:55: 77:34:93:23:5d:a4:60:aa:64:28:82:ff:4b:ef:3c: 0a:d2:6b:1c:62:23:1e:03:85:1d:3d:33:6e:5a:75: 09:bd:3d:8b:ae:96:85:d8:fc:30:d7:1c:d4:d0:68: 20:99:af:30:e1:1b:61:af:85:a3:93:93:42:df:d3: 12:14:ed:ed:dc:a6:b2:93:16:74:6a:a0:04:43:de: e6:55:ec:1f:fe:d2:4d:c4:7b:38:91:4a:c4:21:e9: ef:b6:33:84:b5:02:0f:16:46:d6:32:55:d9:ca:38: 41:fc:78:39:7a:83:cf:44:bb:84:13:88:95:30:85: bc:a6:ca:a7:36:ce:28:e0:d6:f7:cd:c4:a6:a6:92: 1f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4D:13:E0:C5:5C:15:23:C4:78:D8:6D:6B:EA:9F:44:26:36:CD:59 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:42:db:ca:f1:eb:53:2e:15:b1:ce:c2:6a:a1:2a:a2:2d:8f: 79:14:06:ae:9c:ff:85:79:2b:c1:71:c7:fc:d4:f0:98:7c:7c: d0:ef:04:c5:b0:2b:08:80:cc:4b:2f:2a:99:ed:cf:27:57:18: a2:f4:4a:a7:17:b3:c7:4c:4b:db:39:a6:41:b0:94:97:aa:35: cc:aa:97:bf:25:e3:27:44:b3:db:16:68:6f:e3:1d:c1:e8:fb: e3:b9:6f:88:55:41:bc:cb:f7:bd:bc:06:ec:43:d3:7b:ef:d1: 2a:e8:04:40:47:3f:77:a5:e1:fe:c1:b4:4e:aa:5b:91:c6:dd: 4d:41:a0:bc:e4:93:4b:af:ba:72:3d:e0:e5:17:37:d8:8e:38: 53:c3:36:35:14:9e:b5:b9:36:03:b6:54:1e:22:57:3c:db:e3: 04:9b:55:ff:05:53:4a:e9:7c:92:94:84:af:9d:f7:2e:46:dc: 09:f6:64:11:89:37:dc:68:5c:5f:e3:fc:55:f4:3d:28:42:e4: fd:ae:4e:b5:bf:36:e5:d0:df:ea:c7:86:d9:6a:84:f5:c3:33: e8:38:f2:bc:ca:f3:29:47:4e:b2:e2:45:00:48:2e:66:6a:21: 44:7f:f2:9b:c4:59:eb:fd:09:ff:79:89:9f:78:27:41:0b:02: d7:82:dc:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7iGWv0SuAO8AXZZjopsFP2tR+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTA2MTUxMjU2NDdaFw0yNTA2MTgxNTI1NDdaMDMxMTAvBgNV BAMTKDE2NEQxM0UwQzU1QzE1MjNDNDc4RDg2RDZCRUE5RjQ0MjYzNkNENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf+XsEcwt7OORvdfqCUM8BWafJ V7jFr9jSQLStQJK4NyKud+6Nx5K+xa7CyFL5ydnbXb970KGknwo+6YpQr4d+kkfX Xmg/lqBtfeNdab3R/vhmQppPODOH0QPBMPRjVfL4560XGIcgoOvrxe5P9GyG8CEN OVp4VXc0kyNdpGCqZCiC/0vvPArSaxxiIx4DhR09M25adQm9PYuuloXY/DDXHNTQ aCCZrzDhG2GvhaOTk0Lf0xIU7e3cprKTFnRqoARD3uZV7B/+0k3EeziRSsQh6e+2 M4S1Ag8WRtYyVdnKOEH8eDl6g89Eu4QTiJUwhbymyqc2zijg1vfNxKamkh9tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFk0T4MVcFSPEeNhta+qfRCY2zVkwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlC28rx61MuFbHOwmqhKqItj3kUBq6c/4V5 K8Fxx/zU8Jh8fNDvBMWwKwiAzEsvKpntzydXGKL0SqcXs8dMS9s5pkGwlJeqNcyq l78l4ydEs9sWaG/jHcHo++O5b4hVQbzL9728BuxD03vv0SroBEBHP3el4f7BtE6q W5HG3U1BoLzkk0uvunI94OUXN9iOOFPDNjUUnrW5NgO2VB4iVzzb4wSbVf8FU0rp fJKUhK+d9y5G3An2ZBGJN9xoXF/j/FX0PShC5P2uTrW/NuXQ3+rHhtlqhPXDM+g4 8rzK8ylHTrLiRQBILmZqIUR/8pvEWev9Cf95iZ94J0ELAteC3Ig= -----END CERTIFICATE-----Generated at Mon Jun 16 13:05:35 2025 by rpki-client