$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: EPiR36or4gie87+lzJwMF9lfJpSItyyqkDLOXo0wCno= Subject key identifier: 65:17:95:DE:F2:3A:92:7E:D4:1B:14:E0:F3:D5:AA:DA:B4:B9:96:35 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 269F8BC5E58A38ADF441DF6904B2DA89D4A65BB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 037C Signing time: Wed 06 Aug 2025 11:11:04 +0000 Manifest this update: Wed 06 Aug 2025 11:06:04 +0000 Manifest next update: Sat 09 Aug 2025 20:00:04 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: kEJCiNSxKG7By5mXSrtKbEuY4Z1AwlAW1PO1sMmSv6Y=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9f:8b:c5:e5:8a:38:ad:f4:41:df:69:04:b2:da:89:d4:a6:5b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Aug 6 11:06:04 2025 GMT Not After : Aug 9 20:00:04 2025 GMT Subject: CN=651795DEF23A927ED41B14E0F3D5AADAB4B99635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:ee:25:50:ed:82:33:f1:11:22:8e:0b:3a: c4:4a:43:d5:ca:bf:01:5d:b3:fc:9a:ae:bd:0b:70: 66:d5:44:4a:90:9e:13:57:a6:21:2e:3d:ef:33:28: fe:72:37:ba:90:03:ca:c7:49:13:09:3e:c9:d2:7e: 2b:2d:9c:98:19:9c:f0:35:b0:38:d9:8c:b8:8d:04: c5:4c:32:ce:53:36:56:f0:83:02:32:dd:15:2f:1c: c3:91:04:14:b9:b1:d6:48:bd:9e:b6:fc:7e:04:1a: 7f:9f:50:98:9f:4d:59:dd:b4:e1:d1:51:24:bb:86: 64:f4:cd:96:49:dc:eb:85:cd:92:92:42:87:d6:01: 5a:fa:9b:77:ea:ff:20:63:85:30:e8:2b:09:ea:2a: a2:a5:88:24:d6:3e:25:35:56:dd:6b:61:5d:b4:66: 2e:cd:ab:c1:5d:85:08:88:9c:a8:a6:07:bf:77:14: a0:b8:24:7a:d5:f4:01:4c:00:95:3c:33:9a:59:48: 1d:f2:a1:cf:1a:6a:7a:d7:b4:98:db:8a:af:5d:5f: 9a:c0:fa:39:91:1d:ab:e5:8e:7c:2d:31:9a:e0:f1: b4:8a:e5:5c:1d:19:15:82:65:4f:4f:3d:b3:66:7b: 7e:5e:6a:a1:85:e2:f0:a0:9b:60:47:3c:b8:d8:91: 43:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:17:95:DE:F2:3A:92:7E:D4:1B:14:E0:F3:D5:AA:DA:B4:B9:96:35 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0e:c8:28:4f:ef:d2:e4:16:17:2b:a5:21:2e:e6:75:97:c2: 9b:3a:25:9a:94:3e:02:83:02:c0:1b:0f:cf:7c:5a:b1:f3:e8: 9d:fb:08:ef:8c:d5:ee:45:05:d3:6d:e5:0f:42:35:96:4e:f6: 08:71:08:83:73:97:64:1f:e6:53:56:15:52:71:cd:e1:93:70: 12:37:52:41:8b:ee:83:25:57:fb:c6:62:31:08:ab:3f:96:59: bf:39:94:e3:0d:7a:30:e3:18:af:00:13:fb:e9:42:2f:12:6e: 5d:bc:e7:98:1b:2c:c8:30:74:a8:21:0f:07:3d:58:76:37:1b: db:ca:de:0b:e3:82:b5:62:82:da:f9:b0:c3:28:20:82:ab:ad: ec:20:cf:86:a1:30:43:04:39:aa:62:e8:42:67:d6:58:60:80: 09:0a:60:fc:c1:25:c8:f5:b7:42:0e:b5:bf:eb:cc:ed:6e:f8: 2f:be:31:36:57:43:0c:1c:fd:61:1a:a6:09:a5:63:fe:80:92: a9:54:71:c1:33:81:15:05:b1:94:ff:64:dc:83:37:bd:ff:bf: 43:29:f7:1f:f4:d8:3a:a4:14:1a:40:96:09:1a:bc:04:81:1b: 5b:41:b3:55:4f:a0:2c:2b:6b:79:32:e9:8d:38:96:8d:c2:bd: 30:48:28:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJp+LxeWKOK30Qd9pBLLaidSmW7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTA4MDYxMTA2MDRaFw0yNTA4MDkyMDAwMDRaMDMxMTAvBgNV BAMTKDY1MTc5NURFRjIzQTkyN0VENDFCMTRFMEYzRDVBQURBQjRCOTk2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+u4lUO2CM/ERIo4LOsRKQ9XK vwFds/yarr0LcGbVREqQnhNXpiEuPe8zKP5yN7qQA8rHSRMJPsnSfistnJgZnPA1 sDjZjLiNBMVMMs5TNlbwgwIy3RUvHMORBBS5sdZIvZ62/H4EGn+fUJifTVndtOHR USS7hmT0zZZJ3OuFzZKSQofWAVr6m3fq/yBjhTDoKwnqKqKliCTWPiU1Vt1rYV20 Zi7Nq8FdhQiInKimB793FKC4JHrV9AFMAJU8M5pZSB3yoc8aanrXtJjbiq9dX5rA +jmRHavljnwtMZrg8bSK5VwdGRWCZU9PPbNme35eaqGF4vCgm2BHPLjYkUNNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZReV3vI6kn7UGxTg89Wq2rS5ljUwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAOyChP79LkFhcrpSEu5nWXwps6JZqUPgKD AsAbD898WrHz6J37CO+M1e5FBdNt5Q9CNZZO9ghxCINzl2Qf5lNWFVJxzeGTcBI3 UkGL7oMlV/vGYjEIqz+WWb85lOMNejDjGK8AE/vpQi8Sbl2855gbLMgwdKghDwc9 WHY3G9vK3gvjgrVigtr5sMMoIIKrrewgz4ahMEMEOapi6EJn1lhggAkKYPzBJcj1 t0IOtb/rzO1u+C++MTZXQwwc/WEapgmlY/6AkqlUccEzgRUFsZT/ZNyDN73/v0Mp 9x/02DqkFBpAlgkavASBG1tBs1VPoCwra3ky6Y04lo3CvTBIKGE= -----END CERTIFICATE-----Generated at Fri Aug 8 12:59:22 2025 by rpki-client