$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: liJdmYht3rH9dyG3axYEw5WIHpf30ktqqxrVRHCtotA= Subject key identifier: 64:B9:41:DA:64:BF:E4:CA:90:FF:72:E9:1A:80:95:45:05:E9:3C:C6 Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 0FF0F6085DE3E834F9AC20A4046FDB87BA6D0A99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 01F8 Signing time: Sun 15 Jun 2025 09:32:05 +0000 Manifest this update: Sun 15 Jun 2025 09:27:05 +0000 Manifest next update: Wed 18 Jun 2025 21:26:05 +0000 Files and hashes: 1: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: sYgiB3Jn8X1ASKZnYGZZG/XLLXdqQHnH4YbqiaJW2IU=) 2: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: uU+9x3F5Wh10f2yBN/1eDuWO0H9Ms5DAoMSr38lZ7RI=) 3: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: PoUfFWTvv28uKyrYeaMh3T/jvxQb6hulFIaz7fVYPTw=) 4: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: ZRfsCQv1mcZoiRSwy7LI1d6CoRcsZN8L2GBIckM4y/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f0:f6:08:5d:e3:e8:34:f9:ac:20:a4:04:6f:db:87:ba:6d:0a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Jun 15 09:27:05 2025 GMT Not After : Jun 18 21:26:05 2025 GMT Subject: CN=64B941DA64BFE4CA90FF72E91A80954505E93CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:2e:39:1d:98:23:62:d3:f3:7a:3a:b8:11: 53:53:e9:90:d3:6f:c2:b9:0a:92:6c:ad:70:44:08: 22:1a:68:64:1a:1f:34:81:b5:e6:f9:b3:4f:b5:c8: 06:6c:b5:86:b6:f3:44:da:88:7e:f5:f4:f6:10:48: 6d:d3:d0:cc:39:47:a3:c6:75:c5:a3:9a:bd:5b:91: f2:ad:8e:b7:4b:3b:d1:cf:6e:3e:50:cb:8b:8a:19: 93:7a:28:1a:72:54:31:16:d0:cc:43:8e:e6:22:66: 4b:a6:53:59:65:19:f6:47:1e:70:24:6b:50:d1:30: f0:ce:c0:8d:de:30:91:d8:a9:50:e6:e9:b1:ee:f9: 5c:d7:f9:e1:0b:8f:b7:37:8d:3e:0f:ce:89:ab:95: e1:b5:08:de:32:15:39:4e:7c:68:ba:3a:4e:24:5c: ae:69:7b:1d:ab:6e:61:63:64:d5:00:e2:b0:67:85: 56:99:38:10:8f:08:70:df:83:c4:61:86:7e:c1:46: d8:27:f4:5d:a0:e6:09:9d:c6:3a:ed:1d:f9:45:8d: 7d:7b:17:6a:d6:d8:d8:9c:44:db:48:21:ef:da:14: 20:65:cd:f5:b3:0e:c2:ca:d2:bf:2e:00:e4:12:8d: 28:70:ba:bb:42:e9:8b:da:bb:ef:c5:99:97:1c:fb: ec:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B9:41:DA:64:BF:E4:CA:90:FF:72:E9:1A:80:95:45:05:E9:3C:C6 X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8b:fe:56:07:19:4c:48:bb:58:4b:24:f3:12:dd:1f:fb:a6: 45:56:7f:f4:b2:15:09:78:b6:93:f6:98:a0:ab:88:99:0e:77: 1a:37:06:a7:8e:f9:ed:74:69:ab:b7:86:dd:55:26:30:00:5a: ed:40:00:da:1f:3f:0e:bf:30:4c:cf:aa:c0:41:a4:90:8b:a7: 6b:a3:30:97:5c:e2:56:6f:57:a4:94:cb:2c:a6:c9:fb:9c:5e: 90:45:bd:ad:4d:54:e9:ee:cd:92:f8:9b:8a:c6:66:4e:83:d0: 8c:ae:80:56:5f:2f:b7:0d:e8:d1:8e:f4:4f:8e:aa:82:fb:b8: 98:f3:da:80:41:01:d9:28:13:e8:b2:8b:5c:ba:e9:06:d7:ba: d0:61:6c:ef:e0:8d:b8:64:53:21:ef:27:98:99:86:29:53:09: c6:56:b1:97:5d:18:13:67:34:8b:a9:25:53:67:f5:50:41:12: ca:33:d7:d2:61:75:2d:6b:75:a7:ad:2c:6d:14:a3:96:8e:5e: e9:3b:d8:a3:7e:69:9d:1a:bf:48:c7:65:58:c0:1f:b4:c7:54: c7:cd:2a:52:08:05:de:a9:04:70:03:aa:e4:73:69:8e:e6:20: 1a:34:5b:9c:ec:59:9b:ce:58:61:0e:06:94:b5:5a:a8:b2:08: 9c:32:1c:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/D2CF3j6DT5rCCkBG/bh7ptCpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNTA2MTUwOTI3MDVaFw0yNTA2MTgyMTI2MDVaMDMxMTAvBgNV BAMTKDY0Qjk0MURBNjRCRkU0Q0E5MEZGNzJFOTFBODA5NTQ1MDVFOTNDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxC45HZgjYtPzejq4EVNT6ZDT b8K5CpJsrXBECCIaaGQaHzSBteb5s0+1yAZstYa280TaiH719PYQSG3T0Mw5R6PG dcWjmr1bkfKtjrdLO9HPbj5Qy4uKGZN6KBpyVDEW0MxDjuYiZkumU1llGfZHHnAk a1DRMPDOwI3eMJHYqVDm6bHu+VzX+eELj7c3jT4PzomrleG1CN4yFTlOfGi6Ok4k XK5pex2rbmFjZNUA4rBnhVaZOBCPCHDfg8Rhhn7BRtgn9F2g5gmdxjrtHflFjX17 F2rW2NicRNtIIe/aFCBlzfWzDsLK0r8uAOQSjShwurtC6Yvau+/FmZcc++xtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZLlB2mS/5MqQ/3LpGoCVRQXpPMYwHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOL/lYHGUxIu1hLJPMS3R/7pkVWf/SyFQl4 tpP2mKCriJkOdxo3BqeO+e10aau3ht1VJjAAWu1AANofPw6/MEzPqsBBpJCLp2uj MJdc4lZvV6SUyyymyfucXpBFva1NVOnuzZL4m4rGZk6D0IyugFZfL7cN6NGO9E+O qoL7uJjz2oBBAdkoE+iyi1y66QbXutBhbO/gjbhkUyHvJ5iZhilTCcZWsZddGBNn NIupJVNn9VBBEsoz19JhdS1rdaetLG0Uo5aOXuk72KN+aZ0av0jHZVjAH7THVMfN KlIIBd6pBHADquRzaY7mIBo0W5zsWZvOWGEOBpS1WqiyCJwyHBQ= -----END CERTIFICATE-----Generated at Mon Jun 16 22:16:19 2025 by rpki-client