$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: d6uYbqPlqat1G3UHmPPgo2Qv1hZ4kp+dHZze6bQkw04= Subject key identifier: 2A:A7:21:25:49:01:EB:51:1C:85:39:E7:34:FD:07:CC:EB:27:82:1C Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 5D9687B8B57F82289800537A9A4F63DC7593D80A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 0365 Signing time: Mon 16 Jun 2025 06:50:59 +0000 Manifest this update: Mon 16 Jun 2025 06:45:59 +0000 Manifest next update: Thu 19 Jun 2025 07:26:59 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: CnNj/GO0kyYUsVybckmCrqun5gLsmMZmf6esj7R7GMI=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 07:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:96:87:b8:b5:7f:82:28:98:00:53:7a:9a:4f:63:dc:75:93:d8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Jun 16 06:45:59 2025 GMT Not After : Jun 19 07:26:59 2025 GMT Subject: CN=2AA721254901EB511C8539E734FD07CCEB27821C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e0:50:fa:d4:38:dc:4b:ba:77:a1:73:4f:c6: 83:3d:0c:a0:6a:eb:60:7e:ef:84:0b:d6:67:14:d1: 8c:48:d5:1b:12:8f:95:46:b1:6d:fe:b9:6e:02:cc: 6a:5f:bb:a2:14:6c:20:9c:22:32:a4:6c:47:69:46: 3a:ee:8d:6a:ee:30:f7:06:b8:23:7b:e1:ee:64:b9: 18:c0:5b:df:2e:d7:26:f1:e3:ff:e7:03:46:7e:f8: 92:53:2d:f2:e0:e5:03:31:c7:e7:d0:56:f2:61:74: eb:32:28:39:80:5f:ca:53:41:08:15:06:38:4d:ca: 63:27:b4:25:57:e8:03:5d:63:2e:93:8d:86:38:77: 46:51:c3:78:51:b4:81:88:b0:d6:c9:82:2e:52:33: c7:a3:74:c5:20:f3:6e:f2:18:e8:12:fd:2d:d9:9e: cb:33:1e:bc:76:37:be:60:d0:6f:15:13:c7:af:1b: 60:23:59:20:27:4b:13:e5:0d:91:d6:34:ea:89:14: ed:aa:8c:70:5e:50:84:ab:10:34:94:ff:4c:a5:14: a3:f2:9a:ee:29:29:97:6b:a8:08:97:9a:04:56:13: df:91:35:00:de:91:cd:89:e3:16:79:84:fc:5a:fe: 80:51:10:0f:a9:a8:15:ee:ab:c8:10:a9:5c:99:e1: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A7:21:25:49:01:EB:51:1C:85:39:E7:34:FD:07:CC:EB:27:82:1C X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b6:54:92:7b:b4:56:66:7b:73:b6:32:9c:81:ee:9a:73:f6: 5e:29:05:9f:d1:01:70:b9:e7:73:84:c2:fd:09:39:85:13:b9: d9:81:12:63:48:f0:f8:1e:00:38:b5:aa:d6:41:2d:87:46:d5: a7:47:57:0a:a3:1d:6c:33:ea:d1:fe:8d:28:0f:bb:0b:b1:30: 19:4c:44:66:98:68:6e:d2:e4:8d:82:08:a9:df:13:1c:f6:83: b6:97:cf:76:1e:75:49:3d:5c:88:15:5f:a9:bd:06:b3:46:a8: 14:fa:d8:fb:1d:30:27:7a:e8:ad:ab:0d:30:9a:c5:c9:81:b7: 88:50:94:f8:ec:34:ba:04:e6:f9:46:ad:27:e2:2a:72:8d:05: d6:87:7c:00:9f:55:f2:e1:d7:0d:aa:5c:b8:70:0a:ca:5b:12: 70:fd:3b:1c:6e:29:e9:af:9c:f5:31:85:a0:b6:cc:16:48:35: e0:91:e2:d5:4f:3d:ef:ff:04:71:31:3b:18:e9:78:49:90:33: a4:c0:20:6e:9d:a1:67:0b:7e:59:a6:41:96:3f:8f:af:67:2e: f4:19:e1:01:8c:39:8c:53:29:4b:7d:52:c5:25:dd:c2:07:e9: 6c:c2:b5:82:3f:e7:21:61:49:5d:fa:ac:c0:9a:18:50:2d:ba: 7f:9f:8a:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZaHuLV/giiYAFN6mk9j3HWT2AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTA2MTYwNjQ1NTlaFw0yNTA2MTkwNzI2NTlaMDMxMTAvBgNV BAMTKDJBQTcyMTI1NDkwMUVCNTExQzg1MzlFNzM0RkQwN0NDRUIyNzgyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb4FD61DjcS7p3oXNPxoM9DKBq 62B+74QL1mcU0YxI1RsSj5VGsW3+uW4CzGpfu6IUbCCcIjKkbEdpRjrujWruMPcG uCN74e5kuRjAW98u1ybx4//nA0Z++JJTLfLg5QMxx+fQVvJhdOsyKDmAX8pTQQgV BjhNymMntCVX6ANdYy6TjYY4d0ZRw3hRtIGIsNbJgi5SM8ejdMUg827yGOgS/S3Z nsszHrx2N75g0G8VE8evG2AjWSAnSxPlDZHWNOqJFO2qjHBeUISrEDSU/0ylFKPy mu4pKZdrqAiXmgRWE9+RNQDekc2J4xZ5hPxa/oBREA+pqBXuq8gQqVyZ4VeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKqchJUkB61EchTnnNP0HzOsnghwwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKG2VJJ7tFZme3O2MpyB7ppz9l4pBZ/RAXC5 53OEwv0JOYUTudmBEmNI8PgeADi1qtZBLYdG1adHVwqjHWwz6tH+jSgPuwuxMBlM RGaYaG7S5I2CCKnfExz2g7aXz3YedUk9XIgVX6m9BrNGqBT62PsdMCd66K2rDTCa xcmBt4hQlPjsNLoE5vlGrSfiKnKNBdaHfACfVfLh1w2qXLhwCspbEnD9OxxuKemv nPUxhaC2zBZINeCR4tVPPe//BHExOxjpeEmQM6TAIG6doWcLflmmQZY/j69nLvQZ 4QGMOYxTKUt9UsUl3cIH6WzCtYI/5yFhSV36rMCaGFAtun+fijw= -----END CERTIFICATE-----Generated at Tue Jun 17 01:35:11 2025 by rpki-client