$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft File: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft (raw, json) Hash identifier: eAKJCCkxyGtq0VhyHc/CKKXRNENpbBzMm/BmdpmtWLQ= Subject key identifier: 59:B0:19:37:7D:08:2A:FC:77:FF:49:FD:B5:8D:51:44:F3:99:E8:65 Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Certificate serial: 1E3B20809AA2C5A29E01A9075CD584DFFE457AE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft Manifest number: 021D Signing time: Mon 03 Nov 2025 12:51:23 +0000 Manifest this update: Mon 03 Nov 2025 12:46:23 +0000 Manifest next update: Thu 06 Nov 2025 21:57:23 +0000 Files and hashes: 1: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: O62FaU7sfJ7WBpQAG4VOlHgoxy59qAGq0CxPAvacDkY=) 2: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl (hash: WGu368GtUSO5vnpni6Y0DGHRwdwdEW9aDmb7r47T7KU=) 3: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: FK++k16W5o1G1ymHbgbWCr22LclnvM/8CkDyIWrtSXU=) 4: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: SQEisBhY0DV53zHr/sBQtcOCDd0Bbr0+fAzbajSxd3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3b:20:80:9a:a2:c5:a2:9e:01:a9:07:5c:d5:84:df:fe:45:7a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Validity Not Before: Nov 3 12:46:23 2025 GMT Not After : Nov 6 21:57:23 2025 GMT Subject: CN=59B019377D082AFC77FF49FDB58D5144F399E865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:a3:3f:88:67:28:e6:d4:7c:8e:5f:75:0d: 55:30:d3:db:eb:b9:b4:cf:56:bd:21:03:32:20:00: a2:dc:fe:15:e4:ca:19:4a:97:53:78:64:c3:21:b0: e0:00:5c:27:ef:a6:92:cb:ca:93:fb:84:3f:ef:88: be:19:57:00:fe:0d:0c:bd:d5:58:83:32:18:b9:90: 9c:1d:93:7d:bf:63:a0:75:0e:b4:c8:cd:76:f9:3b: f3:ca:02:0d:6d:6a:ef:cf:ba:c1:20:4c:a2:27:64: 39:d3:6a:de:f0:bb:9d:94:63:0b:79:57:d6:b8:04: 76:42:7a:fb:63:49:53:3f:9c:2c:c5:f4:16:23:8e: b0:10:41:d6:46:2e:19:e3:09:1f:94:a9:12:38:a4: fe:f1:63:77:fa:a0:31:7a:31:70:ad:07:b1:8c:21: 71:d3:85:b4:da:af:9f:fb:52:2c:aa:64:0a:9d:a1: 78:70:0f:af:76:f5:8a:44:dc:b9:99:9d:31:86:d0: e2:af:29:60:59:0f:13:26:9d:68:15:30:78:b0:5d: 78:6c:62:a1:bd:61:93:b6:86:f2:ac:f0:72:c5:95: 1f:e8:ea:bc:73:86:dd:5c:07:af:b6:68:d2:b6:28: a1:dd:b6:95:cb:3e:07:ec:93:4b:af:11:40:3c:07: 36:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B0:19:37:7D:08:2A:FC:77:FF:49:FD:B5:8D:51:44:F3:99:E8:65 X509v3 Authority Key Identifier: keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0a:2b:93:55:1f:b2:f9:42:42:bc:59:61:47:f2:29:0b:76: 2d:f7:ee:65:14:64:08:4e:cf:f9:f8:1a:12:34:2a:9e:02:fb: 3c:ee:63:0e:26:81:e8:c9:bd:ac:25:0a:10:6b:8b:ae:73:90: 46:0d:1f:30:96:a1:5d:e7:39:03:e6:7b:a8:a7:b9:42:ed:4f: 6f:f1:d4:14:da:f8:dc:96:98:c6:e3:8e:c8:0e:2d:70:cd:64: 6d:3a:b1:11:93:5b:b7:5a:83:0a:c0:9f:7f:c6:32:8f:a5:14: ec:6b:be:0f:eb:ed:6b:8b:aa:fd:f8:72:50:20:f0:c2:83:8e: fa:fa:bf:e4:32:6f:b1:6b:c8:e0:e5:0e:ea:d1:19:dd:27:b8: 46:66:23:57:51:ff:e9:b8:af:da:33:5e:0b:be:64:2a:89:0e: 78:de:f7:d1:1e:ce:de:bf:cb:e0:3d:b8:a3:18:4c:89:34:fc: 27:6f:73:91:0b:33:42:d9:bd:9b:cd:c2:05:22:2f:eb:20:44: 93:c3:6d:82:8d:8d:8a:92:11:e6:c3:93:af:ba:6b:2b:0a:0b: c9:08:c0:28:1e:f8:90:a9:7c:98:9c:c6:07:50:b3:e8:11:88: 8f:9a:8b:47:0b:1f:35:42:20:77:85:45:7c:3f:6b:a0:b5:c3: d8:e9:d5:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjsggJqixaKeAakHXNWE3/5FeugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1 N0IxRTM1QjAeFw0yNTExMDMxMjQ2MjNaFw0yNTExMDYyMTU3MjNaMDMxMTAvBgNV BAMTKDU5QjAxOTM3N0QwODJBRkM3N0ZGNDlGREI1OEQ1MTQ0RjM5OUU4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15aM/iGco5tR8jl91DVUw09vr ubTPVr0hAzIgAKLc/hXkyhlKl1N4ZMMhsOAAXCfvppLLypP7hD/viL4ZVwD+DQy9 1ViDMhi5kJwdk32/Y6B1DrTIzXb5O/PKAg1tau/PusEgTKInZDnTat7wu52UYwt5 V9a4BHZCevtjSVM/nCzF9BYjjrAQQdZGLhnjCR+UqRI4pP7xY3f6oDF6MXCtB7GM IXHThbTar5/7UiyqZAqdoXhwD6929YpE3LmZnTGG0OKvKWBZDxMmnWgVMHiwXXhs YqG9YZO2hvKs8HLFlR/o6rxzht1cB6+2aNK2KKHdtpXLPgfsk0uvEUA8BzbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWbAZN30IKvx3/0n9tY1RRPOZ6GUwHwYDVR0j BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix RTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFC MkQ1N0IxRTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAKK5NVH7L5QkK8WWFH8ikLdi337mUUZAhO z/n4GhI0Kp4C+zzuYw4mgejJvawlChBri65zkEYNHzCWoV3nOQPme6inuULtT2/x 1BTa+NyWmMbjjsgOLXDNZG06sRGTW7dagwrAn3/GMo+lFOxrvg/r7WuLqv34clAg 8MKDjvr6v+Qyb7FryODlDurRGd0nuEZmI1dR/+m4r9ozXgu+ZCqJDnje99Eezt6/ y+A9uKMYTIk0/Cdvc5ELM0LZvZvNwgUiL+sgRJPDbYKNjYqSEebDk6+6aysKC8kI wCge+JCpfJicxgdQs+gRiI+ai0cLHzVCIHeFRXw/a6C1w9jp1cI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:24 2025 by rpki-client