$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: jHOqyW9HNL0xIqWjMgfxPoFXKwbET7EqPc/MTPOVsfM= Subject key identifier: D9:7A:96:2A:EA:98:9D:66:72:7A:5F:05:BE:C3:48:1F:F5:18:FD:28 Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 2CCCE5FC7C65DE02293036D34B5B339670981402 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 02AD Signing time: Sat 09 Aug 2025 12:51:30 +0000 Manifest this update: Sat 09 Aug 2025 12:46:30 +0000 Manifest next update: Tue 12 Aug 2025 17:14:30 +0000 Files and hashes: 1: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: WhcI/rPTYxL6IUCY8wiBGmvUbl7gccw0l7rmDchqDAA=) 2: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: n1IxpG27NeGWVU3ScMKrTqUkHBDqSb1j3hZPwSETR3g=) 3: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 17:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cc:e5:fc:7c:65:de:02:29:30:36:d3:4b:5b:33:96:70:98:14:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: Aug 9 12:46:30 2025 GMT Not After : Aug 12 17:14:30 2025 GMT Subject: CN=D97A962AEA989D66727A5F05BEC3481FF518FD28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:ba:df:22:20:99:47:21:03:a1:03:dc:f3: b5:db:00:2e:a7:60:4d:b8:0c:fe:32:fe:b9:b7:f1: f4:d3:07:e7:06:a6:4a:69:ae:5a:82:fc:c0:88:28: 79:ca:61:9c:22:94:b8:f9:96:50:c4:bc:7b:d7:f6: 7a:75:2b:b9:2d:8b:06:0d:b3:c9:89:4b:ab:e3:a2: 83:b0:b8:b8:4e:05:9f:99:93:00:eb:c2:fd:fc:fd: 34:fe:cb:cd:1f:22:71:60:5a:a5:1b:a4:46:cd:5d: ff:50:40:b6:70:f6:51:a7:00:91:34:a1:d1:4f:1b: e5:e3:1c:dc:3a:c9:28:bf:cb:a2:65:92:04:db:f7: 3f:0f:6f:8c:98:9d:c4:b9:13:32:40:59:fb:f5:bf: 4c:db:e1:0a:a5:ab:a5:2c:37:c9:27:95:07:57:d8: 03:07:7f:10:ea:75:d0:55:9a:8b:11:64:7f:2a:89: f5:9b:16:ba:d9:43:87:76:65:9a:3d:7d:99:8f:91: d8:73:13:0d:8f:07:11:82:b3:42:ec:b9:be:1f:18: 9e:2f:58:25:76:8d:92:13:d8:a8:80:70:ed:56:e5: 7a:21:b6:a3:69:d9:e3:6f:f0:0f:36:da:18:bd:e6: 15:05:bb:b7:e2:fa:2d:4c:15:de:88:2a:61:43:b4: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7A:96:2A:EA:98:9D:66:72:7A:5F:05:BE:C3:48:1F:F5:18:FD:28 X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:62:e6:f3:05:ea:ce:e0:ca:08:69:1a:5a:07:6e:89:b3:eb: f9:d3:37:ee:26:e3:72:2a:a4:1c:19:32:36:41:ab:cb:01:d2: 9a:78:db:88:41:89:56:0c:4d:6f:aa:12:11:8b:fe:81:b0:4e: 09:65:fd:5f:f7:d2:71:c6:4e:76:f7:54:1e:83:7a:cd:b7:21: d3:b0:8f:83:e4:1b:3f:5d:52:39:46:66:a7:95:b6:d9:3b:7e: 56:91:c3:93:61:2b:df:45:a0:9b:ab:5a:c6:af:f9:47:c2:2a: 61:6b:e8:2c:e0:24:6d:50:fd:e8:50:c9:29:17:1c:5d:cf:07: d2:89:92:63:f6:90:31:29:de:7b:41:e0:b9:63:5f:42:97:4b: 51:9c:62:67:72:ff:7d:db:13:f5:a8:32:8c:e9:8d:4b:dc:c6: f0:98:8e:2a:e5:83:18:d6:35:79:f3:31:24:72:45:88:6d:0f: bd:80:86:53:bb:56:b2:66:fe:54:e1:70:09:2f:6b:00:5f:b0: 2e:4b:14:db:60:98:42:e9:51:cd:bc:e7:b9:19:0c:4c:32:3d: e5:18:c8:38:80:3e:7f:d2:a0:5e:51:bd:73:7c:71:8c:c1:ee: 6d:a4:60:6c:4a:76:50:aa:ba:77:a4:25:f2:61:bf:67:5d:dc: c1:b0:da:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMzl/Hxl3gIpMDbTS1szlnCYFAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNTA4MDkxMjQ2MzBaFw0yNTA4MTIxNzE0MzBaMDMxMTAvBgNV BAMTKEQ5N0E5NjJBRUE5ODlENjY3MjdBNUYwNUJFQzM0ODFGRjUxOEZEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpbrfIiCZRyEDoQPc87XbAC6n YE24DP4y/rm38fTTB+cGpkpprlqC/MCIKHnKYZwilLj5llDEvHvX9np1K7ktiwYN s8mJS6vjooOwuLhOBZ+ZkwDrwv38/TT+y80fInFgWqUbpEbNXf9QQLZw9lGnAJE0 odFPG+XjHNw6ySi/y6JlkgTb9z8Pb4yYncS5EzJAWfv1v0zb4Qqlq6UsN8knlQdX 2AMHfxDqddBVmosRZH8qifWbFrrZQ4d2ZZo9fZmPkdhzEw2PBxGCs0Lsub4fGJ4v WCV2jZIT2KiAcO1W5XohtqNp2eNv8A822hi95hUFu7fi+i1MFd6IKmFDtINZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2XqWKuqYnWZyel8FvsNIH/UY/SgwHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNi5vMF6s7gyghpGloHbomz6/nTN+4m43Iq pBwZMjZBq8sB0pp424hBiVYMTW+qEhGL/oGwTgll/V/30nHGTnb3VB6Des23IdOw j4PkGz9dUjlGZqeVttk7flaRw5NhK99FoJurWsav+UfCKmFr6CzgJG1Q/ehQySkX HF3PB9KJkmP2kDEp3ntB4LljX0KXS1GcYmdy/33bE/WoMozpjUvcxvCYjirlgxjW NXnzMSRyRYhtD72AhlO7VrJm/lThcAkvawBfsC5LFNtgmELpUc2857kZDEwyPeUY yDiAPn/SoF5RvXN8cYzB7m2kYGxKdlCqunekJfJhv2dd3MGw2ls= -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:56 2025 by rpki-client