$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: VRQInzW2U88ZnasgsaMk8TMbBIkyFTWGtQEPcBzceFs= Subject key identifier: CC:ED:D1:75:64:16:B1:90:57:EC:D2:7D:47:A6:0C:55:13:86:FC:06 Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 193ED9CF0FF369C7B2E96DF989F605D87A5EC04B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 0281 Signing time: Thu 01 May 2025 19:01:32 +0000 Manifest this update: Thu 01 May 2025 18:56:32 +0000 Manifest next update: Sun 04 May 2025 20:54:32 +0000 Files and hashes: 1: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: IEGN9s++XvmpJI3kAgAIfER1jbYWM5BM2If9WaJ1wd4=) 2: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=) 3: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: WhcI/rPTYxL6IUCY8wiBGmvUbl7gccw0l7rmDchqDAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 20:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3e:d9:cf:0f:f3:69:c7:b2:e9:6d:f9:89:f6:05:d8:7a:5e:c0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: May 1 18:56:32 2025 GMT Not After : May 4 20:54:32 2025 GMT Subject: CN=CCEDD1756416B19057ECD27D47A60C551386FC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:79:d8:66:57:8d:7b:19:54:32:72:96:5f: 2d:68:76:4b:12:7c:9c:e7:38:b6:1b:84:c5:fe:64: 4e:ec:59:be:c6:1e:b5:36:9b:f1:c5:82:52:13:29: ea:7d:96:3f:65:00:03:49:84:88:70:61:75:40:19: ca:1a:f3:ea:fa:ae:f6:f2:50:cc:f8:e3:8e:fa:34: 46:e3:93:52:eb:a4:ce:81:7f:24:6d:a9:24:7d:54: 6a:b3:3d:1a:e6:73:d1:fc:1b:66:99:40:91:9e:d7: cf:c8:65:7c:d1:8a:5f:4f:54:14:36:65:7a:96:5d: 93:63:08:05:47:7e:d5:05:8b:ef:8c:39:72:f1:0c: 48:bf:8d:75:4c:65:a7:12:c6:d1:29:56:6f:9c:bb: 82:23:02:61:ee:4a:88:72:c9:e4:f0:61:c7:92:23: 3a:f3:ee:b1:a7:ad:ab:f1:ab:6e:6e:29:bd:91:93: 6e:b7:77:dd:6a:98:d7:11:86:0d:1b:d0:3a:db:d2: ad:2a:ad:b8:a5:c2:15:6e:3b:4d:e0:74:b8:1a:f2: b5:ed:10:78:ec:95:f9:42:d9:53:61:d9:16:be:9d: 6b:a7:8c:62:09:22:9a:01:cc:e1:a0:37:45:4c:fd: b7:9a:55:64:02:07:38:4c:2e:8b:77:67:64:39:a7: 18:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:ED:D1:75:64:16:B1:90:57:EC:D2:7D:47:A6:0C:55:13:86:FC:06 X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6f:55:3f:d5:fa:c8:c2:e5:ad:87:53:d0:da:1a:16:89:f7: 2c:47:c9:4e:3c:f0:5b:ab:7f:59:88:42:f4:40:48:2d:55:a5: c1:c2:39:56:b8:48:b9:2a:e1:fb:78:64:76:aa:3a:1c:b0:1f: 5c:cf:4a:64:30:99:4f:44:5a:e0:6a:0d:4e:ba:65:88:11:84: 86:31:96:53:b5:2a:75:1d:8f:ee:cc:7a:28:72:42:fa:cd:c2: c4:d6:09:25:ed:05:fd:4c:30:67:8b:76:49:2a:30:62:35:68: e6:20:51:5f:78:85:86:c9:ef:97:79:9f:a9:7e:32:f1:f1:fe: e9:7d:44:ac:08:92:aa:d0:e4:2e:9d:35:f9:11:e2:42:72:6f: dd:5c:ea:ca:30:63:03:1c:75:29:4f:ec:ad:76:2c:4d:e1:3a: fb:37:8f:49:f4:fa:cb:2e:42:89:80:a9:7a:5f:d1:e4:6f:b7: 85:de:17:0c:d7:d8:15:56:04:67:ea:ff:7e:c3:19:43:d6:93: 35:c1:53:bf:d5:62:3d:ee:c0:14:02:f4:fd:04:e0:66:b5:23: e9:e8:af:91:89:ee:97:9c:ef:d4:fb:7e:6d:1f:a4:fd:c9:f2: 14:3d:69:01:ca:bb:b4:2c:0f:78:6e:af:6f:83:6e:28:93:30: f0:82:ab:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGT7Zzw/zacey6W35ifYF2HpewEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNTA1MDExODU2MzJaFw0yNTA1MDQyMDU0MzJaMDMxMTAvBgNV BAMTKENDRUREMTc1NjQxNkIxOTA1N0VDRDI3RDQ3QTYwQzU1MTM4NkZDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oHnYZleNexlUMnKWXy1odksS fJznOLYbhMX+ZE7sWb7GHrU2m/HFglITKep9lj9lAANJhIhwYXVAGcoa8+r6rvby UMz44476NEbjk1LrpM6BfyRtqSR9VGqzPRrmc9H8G2aZQJGe18/IZXzRil9PVBQ2 ZXqWXZNjCAVHftUFi++MOXLxDEi/jXVMZacSxtEpVm+cu4IjAmHuSohyyeTwYceS Izrz7rGnravxq25uKb2Rk263d91qmNcRhg0b0Drb0q0qrbilwhVuO03gdLga8rXt EHjslflC2VNh2Ra+nWunjGIJIpoBzOGgN0VM/beaVWQCBzhMLot3Z2Q5pxjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzO3RdWQWsZBX7NJ9R6YMVROG/AYwHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlvVT/V+sjC5a2HU9DaGhaJ9yxHyU488Fur f1mIQvRASC1VpcHCOVa4SLkq4ft4ZHaqOhywH1zPSmQwmU9EWuBqDU66ZYgRhIYx llO1KnUdj+7MeihyQvrNwsTWCSXtBf1MMGeLdkkqMGI1aOYgUV94hYbJ75d5n6l+ MvHx/ul9RKwIkqrQ5C6dNfkR4kJyb91c6sowYwMcdSlP7K12LE3hOvs3j0n0+ssu QomAqXpf0eRvt4XeFwzX2BVWBGfq/37DGUPWkzXBU7/VYj3uwBQC9P0E4Ga1I+no r5GJ7pec79T7fm0fpP3J8hQ9aQHKu7QsD3hur2+DbiiTMPCCqzw= -----END CERTIFICATE-----Generated at Sat May 3 12:52:47 2025 by rpki-client