$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: HS6VELfhDz52HyQhzQuKsDEAwFgpdPDGFEAIHyNxsO4= Subject key identifier: 04:7E:6C:75:81:B4:E8:73:97:B7:15:AB:10:2D:D6:41:8E:37:1D:98 Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 2C508515057E6FEEFBF60619400D18A7A8DEF183 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 020E Signing time: Tue 05 Aug 2025 16:12:05 +0000 Manifest this update: Tue 05 Aug 2025 16:07:05 +0000 Manifest next update: Fri 08 Aug 2025 17:26:05 +0000 Files and hashes: 1: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: 7KZBvR5EegJcUVY9xMtU+TSCvihD2nDkHejslPRh5G0=) 2: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: ZRfsCQv1mcZoiRSwy7LI1d6CoRcsZN8L2GBIckM4y/U=) 3: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: uU+9x3F5Wh10f2yBN/1eDuWO0H9Ms5DAoMSr38lZ7RI=) 4: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: PoUfFWTvv28uKyrYeaMh3T/jvxQb6hulFIaz7fVYPTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:50:85:15:05:7e:6f:ee:fb:f6:06:19:40:0d:18:a7:a8:de:f1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Aug 5 16:07:05 2025 GMT Not After : Aug 8 17:26:05 2025 GMT Subject: CN=047E6C7581B4E87397B715AB102DD6418E371D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:7f:46:37:fc:ba:50:d9:bc:1c:6d:e4:c2: 05:9f:90:c0:d8:36:d0:26:90:c0:bb:9b:da:02:b1: 23:9b:f3:a3:f0:8c:79:91:08:ce:d6:82:6a:79:93: 4a:7a:1b:59:1b:c8:79:b9:57:30:04:6f:c6:97:41: ea:c9:66:8e:5b:3d:3c:c7:cc:7d:99:fc:cb:40:9f: 64:a0:01:d3:96:2d:8b:e3:d9:20:5a:d4:cc:22:a1: 80:d1:9d:32:d8:ab:03:9f:7e:38:2c:01:94:bb:66: f8:7e:0f:54:34:de:6b:ac:85:3d:fb:49:a8:23:00: 54:a7:b8:b7:94:99:26:db:bb:2e:43:04:e8:28:55: 41:bd:95:5a:ac:e5:4b:65:d9:7b:69:4d:c9:dc:83: 0e:06:56:47:fc:e0:da:8a:23:69:9e:47:12:6f:d2: e3:cc:9a:42:d0:0b:fa:61:33:f1:ff:e2:eb:c3:8a: cc:b0:02:e1:4b:a3:ba:e1:a5:37:71:ef:c1:94:97: b9:8f:96:d4:57:56:f2:c4:88:5f:1a:8d:9f:a0:76: ef:3c:60:fd:ef:e7:3f:c1:23:25:7e:41:64:aa:ed: df:fe:c4:55:a0:cd:38:7e:9b:d3:12:c8:dc:9e:32: f6:45:d5:cb:f0:04:64:3d:29:39:3a:97:1a:04:70: 7c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7E:6C:75:81:B4:E8:73:97:B7:15:AB:10:2D:D6:41:8E:37:1D:98 X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ba:f9:97:c6:a7:35:d7:43:57:c0:02:79:dc:37:fa:37:8e: 0c:ba:e6:27:fd:d3:fd:ef:f8:a3:3b:3d:0c:ed:82:94:af:2a: 56:98:54:85:db:0f:ab:23:27:33:7f:18:c7:41:37:4c:4a:3e: a8:b2:d9:9f:13:8d:84:e5:4d:5f:f8:80:7f:1e:81:43:9b:7f: 54:97:80:c4:62:32:11:bc:bc:86:9e:ce:60:cd:b8:14:cc:eb: 2e:c2:73:3c:14:aa:63:0d:36:40:dd:5b:44:78:da:e9:42:10: 44:e2:d7:82:61:8f:20:8a:96:ae:40:21:97:06:bf:ca:bc:2c: 68:52:be:9b:5c:ae:fd:eb:4d:ee:de:b9:90:32:dc:7e:2c:f8: df:10:37:06:48:ee:f6:77:14:d2:e2:b4:75:0c:24:65:ff:b0: 3d:fe:fc:25:28:09:87:a5:18:df:14:ad:6b:d1:fa:3e:a5:19: 83:ca:64:79:3d:64:5b:7b:5c:e8:75:47:45:7d:ab:03:bf:ec: 4d:68:6c:df:b1:df:48:c1:55:0e:8e:a3:86:46:e4:c8:18:70: 77:5b:08:55:52:95:f2:dc:6d:36:d6:04:3a:40:b5:f4:55:74: c3:06:71:ad:8a:e3:2f:39:9a:bc:31:c8:f9:c9:cd:39:6e:47: d3:96:aa:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFCFFQV+b+779gYZQA0Yp6je8YMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNTA4MDUxNjA3MDVaFw0yNTA4MDgxNzI2MDVaMDMxMTAvBgNV BAMTKDA0N0U2Qzc1ODFCNEU4NzM5N0I3MTVBQjEwMkRENjQxOEUzNzFEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUH9GN/y6UNm8HG3kwgWfkMDY NtAmkMC7m9oCsSOb86PwjHmRCM7Wgmp5k0p6G1kbyHm5VzAEb8aXQerJZo5bPTzH zH2Z/MtAn2SgAdOWLYvj2SBa1MwioYDRnTLYqwOffjgsAZS7Zvh+D1Q03mushT37 SagjAFSnuLeUmSbbuy5DBOgoVUG9lVqs5Utl2XtpTcncgw4GVkf84NqKI2meRxJv 0uPMmkLQC/phM/H/4uvDisywAuFLo7rhpTdx78GUl7mPltRXVvLEiF8ajZ+gdu88 YP3v5z/BIyV+QWSq7d/+xFWgzTh+m9MSyNyeMvZF1cvwBGQ9KTk6lxoEcHzXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBH5sdYG06HOXtxWrEC3WQY43HZgwHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKG6+ZfGpzXXQ1fAAnncN/o3jgy65if90/3v +KM7PQztgpSvKlaYVIXbD6sjJzN/GMdBN0xKPqiy2Z8TjYTlTV/4gH8egUObf1SX gMRiMhG8vIaezmDNuBTM6y7CczwUqmMNNkDdW0R42ulCEETi14JhjyCKlq5AIZcG v8q8LGhSvptcrv3rTe7euZAy3H4s+N8QNwZI7vZ3FNLitHUMJGX/sD3+/CUoCYel GN8UrWvR+j6lGYPKZHk9ZFt7XOh1R0V9qwO/7E1obN+x30jBVQ6Oo4ZG5MgYcHdb CFVSlfLcbTbWBDpAtfRVdMMGca2K4y85mrwxyPnJzTluR9OWqnU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:52 2025 by rpki-client