$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: XJIY6Tn8XroeNK54ONo+Bh/iMBSlJuyxdL6HJsvNaR4= Subject key identifier: 67:62:51:65:60:81:BE:F3:61:FF:F2:BB:18:8E:1A:C6:32:09:FA:A8 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 5097E55E53F48C07C1B21DEE8690016FBAE6FE5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 03A5 Signing time: Wed 05 Nov 2025 16:01:03 +0000 Manifest this update: Wed 05 Nov 2025 15:56:03 +0000 Manifest next update: Sat 08 Nov 2025 19:01:03 +0000 Files and hashes: 1: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) 2: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: DUtjgopVoOSqj1NzOELxhLSVq6fkerBut9cWzAUmFRY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:97:e5:5e:53:f4:8c:07:c1:b2:1d:ee:86:90:01:6f:ba:e6:fe:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Nov 5 15:56:03 2025 GMT Not After : Nov 8 19:01:03 2025 GMT Subject: CN=676251656081BEF361FFF2BB188E1AC63209FAA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:4f:13:b9:0b:68:5c:8c:92:58:8d:0e:d4: 82:f4:3c:e8:52:e4:14:49:eb:5c:c8:ee:7a:3a:91: 44:63:ac:82:fa:f5:c4:3b:f1:f2:d0:17:14:23:10: 71:b0:aa:94:ed:a0:02:72:8d:4e:c8:fa:09:68:53: da:e8:84:2e:0c:1e:1a:ef:70:53:64:a4:96:cb:59: 2e:af:d5:30:8d:17:4b:7e:a0:9a:56:bf:69:b8:70: 24:d0:88:b7:70:81:91:3f:6f:ef:0d:d7:54:2b:93: 47:c0:80:c9:52:6c:aa:e5:04:5f:ce:a8:37:91:69: a6:27:6d:8f:ea:30:e4:0f:4e:9c:b9:63:b9:c8:d2: 3f:97:78:5b:cf:ea:d5:ab:bb:e4:be:a9:0c:a8:9c: 09:f0:67:08:88:dc:0f:88:95:27:d2:b2:9d:f5:ce: 4e:20:08:30:8f:9a:74:2c:3b:5a:58:60:d4:d8:fa: 7f:2a:b6:83:8e:28:27:b8:1d:0f:3d:b8:d8:af:9a: e5:65:3a:90:5c:a9:34:74:e5:f3:3f:f2:23:e3:26: c2:6b:2b:2d:a2:0d:b4:89:68:78:cf:f3:0d:cc:fd: ce:7c:3b:86:2c:8c:90:47:08:60:5a:81:0f:d6:61: 90:47:8e:e9:a3:d6:cc:1b:bf:52:1f:7d:70:7e:e3: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:62:51:65:60:81:BE:F3:61:FF:F2:BB:18:8E:1A:C6:32:09:FA:A8 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:50:31:19:37:a0:f6:f5:5c:00:05:15:d9:6f:2a:97:d4:28: a3:41:ba:1a:ef:88:c3:29:c5:9f:e5:25:9b:8e:d1:23:6b:f6: a5:d6:e1:82:f8:c0:26:9a:42:cb:5e:b8:24:a4:08:b3:ea:98: f7:62:4a:e1:31:6c:ab:1c:9c:96:41:b3:84:09:8c:79:18:18: fd:ca:3f:e8:b9:b9:4e:82:68:cf:aa:77:a5:0e:5f:3b:14:10: fb:cf:52:5c:55:af:97:9e:d8:fd:11:dc:82:c5:be:3a:3d:82: 77:04:47:1d:9d:92:c3:c3:1b:6b:bf:b7:89:9f:d2:bf:a6:75: 43:bc:ab:a2:d8:e2:a6:3d:80:5c:8e:4e:49:95:3d:81:80:de: 47:59:16:e6:f6:e0:bf:b6:5d:be:07:d8:91:5c:ff:d1:74:a3: 79:99:c2:94:f4:c3:14:e3:4c:8c:2a:14:e2:b8:f7:4c:d1:7a: a2:e3:01:31:42:54:c2:d3:72:ee:a6:0b:d9:0f:45:14:c8:9a: 14:e3:47:cf:0b:d7:57:e9:84:84:f8:3e:ca:ad:40:99:ae:7b: 4a:96:63:d0:8c:3c:c7:aa:8a:eb:fc:86:c1:f0:57:c7:70:2a: a9:f0:20:ac:69:c3:dc:32:dd:b3:2a:02:f2:44:1b:0e:8c:0c: d4:4a:59:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJflXlP0jAfBsh3uhpABb7rm/l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTExMDUxNTU2MDNaFw0yNTExMDgxOTAxMDNaMDMxMTAvBgNV BAMTKDY3NjI1MTY1NjA4MUJFRjM2MUZGRjJCQjE4OEUxQUM2MzIwOUZBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3E8TuQtoXIySWI0O1IL0POhS 5BRJ61zI7no6kURjrIL69cQ78fLQFxQjEHGwqpTtoAJyjU7I+gloU9rohC4MHhrv cFNkpJbLWS6v1TCNF0t+oJpWv2m4cCTQiLdwgZE/b+8N11Qrk0fAgMlSbKrlBF/O qDeRaaYnbY/qMOQPTpy5Y7nI0j+XeFvP6tWru+S+qQyonAnwZwiI3A+IlSfSsp31 zk4gCDCPmnQsO1pYYNTY+n8qtoOOKCe4HQ89uNivmuVlOpBcqTR05fM/8iPjJsJr Ky2iDbSJaHjP8w3M/c58O4YsjJBHCGBagQ/WYZBHjumj1swbv1IffXB+494bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ2JRZWCBvvNh//K7GI4axjIJ+qgwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBQMRk3oPb1XAAFFdlvKpfUKKNBuhrviMMp xZ/lJZuO0SNr9qXW4YL4wCaaQsteuCSkCLPqmPdiSuExbKscnJZBs4QJjHkYGP3K P+i5uU6CaM+qd6UOXzsUEPvPUlxVr5ee2P0R3ILFvjo9gncERx2dksPDG2u/t4mf 0r+mdUO8q6LY4qY9gFyOTkmVPYGA3kdZFub24L+2Xb4H2JFc/9F0o3mZwpT0wxTj TIwqFOK490zReqLjATFCVMLTcu6mC9kPRRTImhTjR88L11fphIT4PsqtQJmue0qW Y9CMPMeqiuv8hsHwV8dwKqnwIKxpw9wy3bMqAvJEGw6MDNRKWRs= -----END CERTIFICATE-----Generated at Wed Nov 5 21:10:34 2025 by rpki-client