$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: 4pJG3nyOYQ3nM8SxliPTy2+DTJ5ZbCwy/wII+xxYD54= Subject key identifier: 78:FE:84:B9:C9:FC:91:87:A0:CE:B4:A8:F0:BC:B8:76:81:25:29:FA Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 459AA4994C20BCDE4891075FE339F75CEE616EDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 0296 Signing time: Tue 17 Jun 2025 20:31:31 +0000 Manifest this update: Tue 17 Jun 2025 20:26:31 +0000 Manifest next update: Sat 21 Jun 2025 05:58:31 +0000 Files and hashes: 1: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=) 2: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: WhcI/rPTYxL6IUCY8wiBGmvUbl7gccw0l7rmDchqDAA=) 3: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: eB0u8u77iZSaTIWF3+NiCc7ByFEq/FTm+oH9yi20JjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 05:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9a:a4:99:4c:20:bc:de:48:91:07:5f:e3:39:f7:5c:ee:61:6e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: Jun 17 20:26:31 2025 GMT Not After : Jun 21 05:58:31 2025 GMT Subject: CN=78FE84B9C9FC9187A0CEB4A8F0BCB876812529FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e7:4c:50:21:e4:ae:1b:4f:51:09:75:4b:83: e2:a4:76:f9:62:eb:c4:d1:08:62:f5:f2:65:5b:aa: ef:7a:c1:bb:96:3b:48:ef:0b:85:76:33:01:a0:2a: 64:f6:9a:07:b7:ad:7b:e4:94:3c:f8:60:21:b5:32: 00:a6:23:5f:90:ab:2a:2b:f9:6e:71:7e:c8:bc:4c: 88:84:c1:cb:03:43:58:98:2e:bc:87:47:2b:c6:fb: 42:90:c3:67:28:a1:dd:e6:dc:87:9f:d3:88:ad:56: d3:c9:1e:5c:2a:e8:95:dc:e5:81:7b:0c:8e:53:fe: b6:d2:53:23:38:85:ff:9c:e4:79:51:c5:e1:d7:9b: d7:bf:20:f9:4b:4d:7c:fd:b0:66:86:7e:79:fb:85: 5e:ad:29:e1:fd:03:f4:7a:2f:bc:c0:67:66:5d:31: 23:65:83:f6:95:43:66:fe:af:05:75:ff:ff:48:e0: 20:e4:71:8f:64:8a:98:c9:d8:64:8c:b7:ee:a4:da: 28:6a:c2:be:00:1b:46:0a:4d:0c:af:59:31:dd:cf: 0c:c5:a9:45:68:f0:d3:eb:06:86:24:31:88:3f:93: dc:80:a4:6a:1d:bf:b7:e9:b3:da:e2:78:17:70:c3: 56:3f:39:b0:0a:ac:b8:a6:c7:08:0e:08:a2:c6:e4: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FE:84:B9:C9:FC:91:87:A0:CE:B4:A8:F0:BC:B8:76:81:25:29:FA X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:af:68:ca:a8:ce:e2:9e:c0:3a:4f:64:f7:0d:3b:9c:77:5d: 7c:94:8d:56:66:18:33:e5:5e:a3:86:c3:94:5c:8a:e6:97:ee: b0:fe:b6:b0:b9:e3:3d:c2:42:2e:2f:27:05:d6:08:96:91:a9: 35:55:f3:21:2e:b4:ed:2b:6d:52:81:c2:fd:3c:ab:27:e8:ed: fc:7d:66:f9:af:db:28:04:b4:bb:71:b6:77:83:1b:72:03:ad: 6d:75:3d:5c:af:95:04:0e:8a:79:08:ea:f2:ab:0e:bb:bc:92: ca:76:76:b9:2e:5c:53:e2:fc:a3:ea:52:03:a7:0b:f2:b3:53: 55:63:19:48:3b:a2:b3:5f:e2:e3:12:5a:7c:2a:a9:06:b1:14: f0:31:61:57:b4:8c:24:cb:5c:ae:69:52:42:ea:cc:3e:77:93: b3:00:05:8c:f4:2f:b4:ff:90:62:ae:33:7d:d5:27:3b:7c:cf: c6:17:80:e2:de:74:9f:19:7c:7b:ee:ba:3e:66:fa:66:4d:9e: 60:36:18:15:b1:b2:60:c7:e1:cc:91:16:89:b2:21:ad:50:08: 1e:f5:70:e1:ab:4b:67:75:e3:89:1d:6b:cf:56:d0:ef:52:f4: e2:22:c6:18:f4:d8:60:74:f8:1f:bf:5e:5e:a9:fa:ad:7c:f9: 6b:d0:40:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZqkmUwgvN5IkQdf4zn3XO5hbtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNTA2MTcyMDI2MzFaFw0yNTA2MjEwNTU4MzFaMDMxMTAvBgNV BAMTKDc4RkU4NEI5QzlGQzkxODdBMENFQjRBOEYwQkNCODc2ODEyNTI5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS50xQIeSuG09RCXVLg+Kkdvli 68TRCGL18mVbqu96wbuWO0jvC4V2MwGgKmT2mge3rXvklDz4YCG1MgCmI1+Qqyor +W5xfsi8TIiEwcsDQ1iYLryHRyvG+0KQw2cood3m3Ief04itVtPJHlwq6JXc5YF7 DI5T/rbSUyM4hf+c5HlRxeHXm9e/IPlLTXz9sGaGfnn7hV6tKeH9A/R6L7zAZ2Zd MSNlg/aVQ2b+rwV1//9I4CDkcY9kipjJ2GSMt+6k2ihqwr4AG0YKTQyvWTHdzwzF qUVo8NPrBoYkMYg/k9yApGodv7fps9rieBdww1Y/ObAKrLimxwgOCKLG5J1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeP6Eucn8kYegzrSo8Ly4doElKfowHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6vaMqozuKewDpPZPcNO5x3XXyUjVZmGDPl XqOGw5RciuaX7rD+trC54z3CQi4vJwXWCJaRqTVV8yEutO0rbVKBwv08qyfo7fx9 Zvmv2ygEtLtxtneDG3IDrW11PVyvlQQOinkI6vKrDru8ksp2drkuXFPi/KPqUgOn C/KzU1VjGUg7orNf4uMSWnwqqQaxFPAxYVe0jCTLXK5pUkLqzD53k7MABYz0L7T/ kGKuM33VJzt8z8YXgOLedJ8ZfHvuuj5m+mZNnmA2GBWxsmDH4cyRFomyIa1QCB71 cOGrS2d144kda89W0O9S9OIixhj02GB0+B+/Xl6p+q18+WvQQBU= -----END CERTIFICATE-----Generated at Thu Jun 19 17:05:10 2025 by rpki-client