$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: A/JqQeyJRljDoocQifabf2buort+FAIJtFQkLuiBq6Y= Subject key identifier: 78:48:06:B9:74:57:C2:03:4F:82:A3:6C:D7:E4:F8:DA:29:5B:73:95 Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 3F0A351B18C1F78E255D35C1D782A28D43F8BD20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 02D5 Signing time: Tue 04 Nov 2025 03:01:31 +0000 Manifest this update: Tue 04 Nov 2025 02:56:31 +0000 Manifest next update: Fri 07 Nov 2025 08:09:31 +0000 Files and hashes: 1: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: rNCEVC57YsG1pLsfroR7lL5bhtvNw6HpUyrSsSif6rU=) 2: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=) 3: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: RGPkIPgDIPdS+g6ZbWRhxJl+GZ+m1UhI3Ct+vQhKrbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0a:35:1b:18:c1:f7:8e:25:5d:35:c1:d7:82:a2:8d:43:f8:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: Nov 4 02:56:31 2025 GMT Not After : Nov 7 08:09:31 2025 GMT Subject: CN=784806B97457C2034F82A36CD7E4F8DA295B7395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:4e:40:08:84:8f:83:b9:f0:d8:94:52:46: fe:4e:16:c5:1f:83:8c:06:95:bc:e7:65:80:62:fb: bd:46:2c:09:50:a5:83:fe:83:b0:59:5a:d5:2d:5e: 75:31:0d:61:93:84:10:cb:1e:15:3d:b6:e8:21:10: 30:73:b0:9f:c1:71:e3:d1:21:f1:fb:bb:9c:50:93: 6a:f8:65:1c:06:1e:73:40:89:09:02:4a:a2:a0:cb: 54:c9:25:ff:1b:b2:19:65:35:26:4c:b7:95:ff:0d: 8d:04:c8:09:10:85:82:61:d0:c4:bc:4e:b6:76:c1: a0:ef:77:9e:86:2d:6c:c3:65:36:4d:19:03:c3:0b: bd:43:73:de:c3:52:05:38:e7:02:56:86:a6:73:d7: dc:42:91:1a:62:e8:34:6d:d4:1e:da:e2:07:07:bc: 59:05:6c:ff:32:00:04:4b:81:e7:63:26:ec:90:05: 83:e2:da:46:78:3d:7d:76:7a:56:66:2a:7a:6f:8c: 0f:bf:e9:51:b2:fb:ba:df:1f:c3:c2:9b:df:af:eb: ff:20:0d:09:6c:d2:0e:b4:73:2c:a3:0f:5a:4d:f7: 23:ab:88:47:9f:2f:3b:a6:5d:34:d8:59:a1:7d:2c: 96:33:25:ba:93:5c:e7:61:ed:ec:74:0c:a8:ac:c3: 5d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:48:06:B9:74:57:C2:03:4F:82:A3:6C:D7:E4:F8:DA:29:5B:73:95 X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:37:e2:66:7e:76:cd:0f:4e:e8:98:ee:f0:31:6a:60:53:75: 3f:db:c4:35:02:dd:9f:8e:51:eb:96:9e:b1:bd:14:2d:60:db: 8d:fc:0f:44:53:1a:2d:01:d7:3d:95:45:64:b8:f0:4a:fc:16: 90:8a:59:f9:36:9a:4e:73:d7:c6:32:cc:ed:bc:0a:9d:b2:b8: 57:8d:e6:5e:b5:92:3d:c0:f3:8c:8e:fb:19:89:5c:9b:22:7a: 74:34:47:6e:c2:57:80:9f:9a:e0:f2:5f:33:45:f2:1e:af:83: 8d:34:51:a8:a1:a2:a1:de:0c:1e:a0:da:34:8f:9b:ee:ed:55: a4:d6:fe:57:bc:0d:4d:99:a3:1e:4f:f5:85:5e:ae:d4:72:64: d6:b6:39:ed:2d:2e:e0:6a:3a:81:d1:7c:a0:79:b7:e6:0f:d3: 3b:f6:41:24:83:7a:03:0f:a8:5b:9d:e3:59:ff:84:57:cb:c3: e2:bb:68:4c:b7:88:b6:84:e7:f9:c4:88:2d:14:a7:4d:c9:e8: e6:a8:0f:8e:55:f4:26:9a:78:72:f0:2d:f2:1d:57:72:cd:08: c4:8b:fe:1b:cc:62:7e:80:0d:09:04:8e:9b:c9:63:4f:6e:89: 9b:87:61:6e:11:23:ec:db:9b:7c:4c:8a:ef:5d:ff:9d:95:6e: 30:a3:a6:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwo1GxjB944lXTXB14KijUP4vSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNTExMDQwMjU2MzFaFw0yNTExMDcwODA5MzFaMDMxMTAvBgNV BAMTKDc4NDgwNkI5NzQ1N0MyMDM0RjgyQTM2Q0Q3RTRGOERBMjk1QjczOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YU5ACISPg7nw2JRSRv5OFsUf g4wGlbznZYBi+71GLAlQpYP+g7BZWtUtXnUxDWGThBDLHhU9tughEDBzsJ/BcePR IfH7u5xQk2r4ZRwGHnNAiQkCSqKgy1TJJf8bshllNSZMt5X/DY0EyAkQhYJh0MS8 TrZ2waDvd56GLWzDZTZNGQPDC71Dc97DUgU45wJWhqZz19xCkRpi6DRt1B7a4gcH vFkFbP8yAARLgedjJuyQBYPi2kZ4PX12elZmKnpvjA+/6VGy+7rfH8PCm9+v6/8g DQls0g60cyyjD1pN9yOriEefLzumXTTYWaF9LJYzJbqTXOdh7ex0DKisw12tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEgGuXRXwgNPgqNs1+T42ilbc5UwHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADc34mZ+ds0PTuiY7vAxamBTdT/bxDUC3Z+O UeuWnrG9FC1g2438D0RTGi0B1z2VRWS48Er8FpCKWfk2mk5z18YyzO28Cp2yuFeN 5l61kj3A84yO+xmJXJsienQ0R27CV4CfmuDyXzNF8h6vg400UaihoqHeDB6g2jSP m+7tVaTW/le8DU2Zox5P9YVertRyZNa2Oe0tLuBqOoHRfKB5t+YP0zv2QSSDegMP qFud41n/hFfLw+K7aEy3iLaE5/nEiC0Up03J6OaoD45V9CaaeHLwLfIdV3LNCMSL /hvMYn6ADQkEjpvJY09uiZuHYW4RI+zbm3xMiu9d/52VbjCjpp4= -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:38 2025 by rpki-client