$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json) Hash identifier: PJx5sEGtnPIIqMm9ggtY9hSon4NEwccOluBhTU0/5dQ= Subject key identifier: E9:63:B7:A7:76:D2:4F:F1:04:0C:52:0F:48:AE:D1:A3:8E:48:4C:02 Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 42D71AA93B2BAA618946BF3A206EEA83330411D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft Manifest number: 0164 Signing time: Mon 04 Aug 2025 19:31:17 +0000 Manifest this update: Mon 04 Aug 2025 19:26:17 +0000 Manifest next update: Fri 08 Aug 2025 01:31:17 +0000 Files and hashes: 1: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: u880hi+D7DiVMZTtM0R2zluDGsZisp33kG58HiXq4yE=) 2: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: Ra4kBxyKq0eMRR5T+q214TFxoVWgjk/J53dcHzjeFD8=) 3: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: MnZ81ah3SR9+kIxaE8Wp/UnzR5VkHSQFJ81BmC8+Gjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 01:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d7:1a:a9:3b:2b:aa:61:89:46:bf:3a:20:6e:ea:83:33:04:11:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: Aug 4 19:26:17 2025 GMT Not After : Aug 8 01:31:17 2025 GMT Subject: CN=E963B7A776D24FF1040C520F48AED1A38E484C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:8f:6e:43:c2:6b:3d:47:f3:5b:af:e8:b6: b6:d1:87:a2:f0:64:62:a9:94:a1:da:77:93:f6:bc: 5f:c5:e9:02:06:c5:40:c2:1f:59:c4:26:74:42:07: 43:1c:8e:a4:26:7c:f7:27:26:aa:cf:ef:0f:33:5b: bb:b3:6e:76:6b:dd:5a:c3:41:64:f1:c6:9e:1b:c7: 8a:75:6a:d8:52:8a:64:88:1c:45:fc:14:35:c0:70: cc:c8:45:c5:5a:2a:64:d3:ea:a0:1b:70:da:84:05: f0:f7:87:7a:81:2d:33:61:07:9c:98:45:d7:23:87: 9a:28:da:7d:93:4f:29:9e:c7:72:86:ba:c6:c1:ea: b6:61:86:99:4a:b2:ef:a0:7e:84:82:57:c4:be:4a: 8b:07:d5:4c:8c:60:da:e8:b8:60:08:bd:10:a7:bd: fc:e1:a1:8c:23:4b:82:d2:51:9a:88:49:f5:a7:f5: 02:9c:71:1c:63:99:36:a9:5e:a8:f8:0b:2b:d9:c8: 4b:7d:b2:d7:27:d7:0b:1a:ba:c9:68:ff:31:ae:d9: ef:6d:56:99:c6:a1:f6:42:db:ce:5a:7e:7e:23:7d: 32:00:ce:ae:c1:82:17:6e:97:90:eb:6c:8f:32:28: 86:fb:d4:df:02:a4:ba:88:a0:9f:25:e5:96:90:9d: 9d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:63:B7:A7:76:D2:4F:F1:04:0C:52:0F:48:AE:D1:A3:8E:48:4C:02 X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7a:3d:16:ee:41:e6:06:70:7a:5a:ae:a7:8c:ca:78:29:59: c1:c8:07:a6:03:72:df:29:ec:08:2b:af:ed:03:c8:29:c2:60: 55:bb:49:76:fe:25:cc:9b:05:13:97:13:0e:65:10:57:c6:60: a3:87:db:79:c4:02:97:58:bd:ba:9c:b5:6c:f2:cb:42:b5:2e: be:b0:15:ac:09:5c:42:e4:a5:7e:8e:9d:a0:81:56:d8:67:81: 0a:ed:cf:3a:29:af:1e:b2:58:de:60:14:7d:9b:67:0f:f0:b8: ca:dc:83:f1:fd:d5:a6:c6:d6:e4:ae:c4:5a:38:ca:55:87:b9: 40:59:fe:db:d1:53:ce:b7:ba:b4:96:6f:88:11:b2:79:54:19: ef:8f:de:2c:08:2f:58:4e:db:e3:9f:2e:d8:ec:91:8f:e1:6e: 8a:49:3b:90:4c:1b:a6:da:a0:15:42:3e:f7:be:2e:79:e6:19: 2b:26:66:23:05:15:54:cb:42:3f:91:99:37:84:35:04:24:b2: 4d:44:6b:1a:84:a0:09:c7:5d:c2:7c:9d:f7:3c:e2:43:92:4b: b7:70:6a:9f:d9:b4:98:e3:f9:d7:d7:d4:f9:35:44:06:46:03: 28:15:99:0e:02:9d:26:21:f1:47:98:68:1d:9f:24:b9:05:ae: 14:06:5f:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQtcaqTsrqmGJRr86IG7qgzMEEdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNTA4MDQxOTI2MTdaFw0yNTA4MDgwMTMxMTdaMDMxMTAvBgNV BAMTKEU5NjNCN0E3NzZEMjRGRjEwNDBDNTIwRjQ4QUVEMUEzOEU0ODRDMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCod49uQ8JrPUfzW6/otrbRh6Lw ZGKplKHad5P2vF/F6QIGxUDCH1nEJnRCB0McjqQmfPcnJqrP7w8zW7uzbnZr3VrD QWTxxp4bx4p1athSimSIHEX8FDXAcMzIRcVaKmTT6qAbcNqEBfD3h3qBLTNhB5yY Rdcjh5oo2n2TTymex3KGusbB6rZhhplKsu+gfoSCV8S+SosH1UyMYNrouGAIvRCn vfzhoYwjS4LSUZqISfWn9QKccRxjmTapXqj4CyvZyEt9stcn1wsauslo/zGu2e9t VpnGofZC285afn4jfTIAzq7Bghdul5DrbI8yKIb71N8CpLqIoJ8l5ZaQnZ1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6WO3p3bST/EEDFIPSK7Ro45ITAIwHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3 QTBERUVDMUU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG96PRbuQeYGcHparqeMyngpWcHIB6YDct8p 7Agrr+0DyCnCYFW7SXb+JcybBROXEw5lEFfGYKOH23nEApdYvbqctWzyy0K1Lr6w FawJXELkpX6OnaCBVthngQrtzzoprx6yWN5gFH2bZw/wuMrcg/H91abG1uSuxFo4 ylWHuUBZ/tvRU863urSWb4gRsnlUGe+P3iwIL1hO2+OfLtjskY/hbopJO5BMG6ba oBVCPve+LnnmGSsmZiMFFVTLQj+RmTeENQQksk1EaxqEoAnHXcJ8nfc84kOSS7dw ap/ZtJjj+dfX1Pk1RAZGAygVmQ4CnSYh8UeYaB2fJLkFrhQGX9s= -----END CERTIFICATE-----Generated at Wed Aug 6 18:31:26 2025 by rpki-client