$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: 7bdi13LNnejr8RCzt/G1fsCMyQNSGBiHb3sMC1X8IK0= Subject key identifier: 89:78:A9:F0:39:D6:9D:A7:C0:79:7F:AC:59:6A:89:39:37:3B:C9:B8 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 4CA4A9F0DD8CB778134478B7B27ADD2618E241C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 0228 Signing time: Mon 21 Jul 2025 15:01:46 +0000 Manifest this update: Mon 21 Jul 2025 14:56:46 +0000 Manifest next update: Thu 24 Jul 2025 15:01:46 +0000 Files and hashes: 1: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) 2: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: YL+CYFgH/Z4fqQjrgnwVEsAt6dhAxWtf9T8KSDlKrPo=) 3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 4: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a4:a9:f0:dd:8c:b7:78:13:44:78:b7:b2:7a:dd:26:18:e2:41:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Jul 21 14:56:46 2025 GMT Not After : Jul 24 15:01:46 2025 GMT Subject: CN=8978A9F039D69DA7C0797FAC596A8939373BC9B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b5:f1:e3:53:b0:26:e9:68:9c:7e:b2:d7:0c: 62:61:7a:d2:1b:7c:0f:40:03:29:17:fa:04:a6:f3: 97:51:61:87:0b:8f:5b:0a:22:4a:c1:01:32:ce:42: 01:0b:0f:3f:c9:ac:8d:67:4d:42:68:0e:d2:db:a2: f0:17:13:6f:d5:23:2d:2f:33:0e:77:8c:81:d4:99: 39:bc:b9:ae:b7:6a:28:2b:70:f8:00:1b:04:f2:f9: e1:3a:5e:d4:38:47:ef:8e:13:b0:e4:0c:c4:7f:9b: 6b:c3:b4:30:ce:92:d0:d0:8d:1d:04:bd:83:f4:5d: 2a:8e:81:ad:70:24:ba:e1:2a:85:af:62:92:b8:48: 84:1c:ab:39:86:fd:42:73:a6:86:98:9e:d0:df:57: 59:d9:b5:2c:50:4e:35:4d:c8:b4:24:a8:37:58:78: 69:29:67:b5:c3:ac:ee:91:8a:48:f3:fa:cb:11:13: 1e:ec:7f:32:77:3f:46:d8:92:78:bc:f6:6d:a6:9f: a2:38:15:69:c9:45:22:b3:21:32:c6:b7:b6:ad:b1: 16:f1:30:77:e5:89:38:46:0e:7a:ad:21:96:94:fb: a7:af:90:b6:9b:91:b0:22:11:f4:66:53:28:af:e7: 50:c9:db:55:e2:18:39:6d:35:fc:ea:79:29:64:b3: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:78:A9:F0:39:D6:9D:A7:C0:79:7F:AC:59:6A:89:39:37:3B:C9:B8 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f5:66:0a:e1:c6:eb:86:e2:fc:c0:b6:57:61:c9:cb:86:e4: e6:a3:75:b0:fe:f8:c4:5b:b2:af:07:24:63:11:9a:df:5f:c6: a4:1d:6f:91:8b:90:1d:d0:b2:d1:cb:a3:e0:f3:d6:76:78:3d: cf:06:a4:f4:a7:1a:ab:51:97:b6:44:5d:9a:ec:cb:6b:f9:42: a7:be:7e:5a:9d:d9:ca:7f:a8:d0:5f:63:5f:1c:e3:a6:06:fc: e8:62:64:f9:03:48:f8:1d:90:d8:59:1b:9e:a1:89:a9:ff:b1: c1:92:01:d6:b8:36:3a:94:d6:e3:20:74:24:eb:3c:f7:14:1d: e1:cf:fb:78:07:08:20:b8:36:e0:35:99:05:1d:c1:f3:eb:4d: 14:bf:79:b9:81:b2:d1:46:5e:0a:01:9b:7f:f0:32:c1:69:6c: 9d:86:ca:f3:02:0a:df:4a:c9:23:80:87:74:26:72:ee:58:63: dc:59:9f:8e:90:72:88:26:bc:7f:f9:d7:db:f1:b0:25:8b:3e: cc:70:44:f8:23:74:7c:61:9d:fc:dd:f4:c8:79:33:d8:e5:b7: 4d:3c:92:e4:75:e3:12:e1:de:df:39:13:78:ed:04:17:89:c5: c7:6e:58:e5:25:e8:48:dd:6a:67:4e:de:c0:59:c2:1f:04:74: 62:0c:7f:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTKSp8N2Mt3gTRHi3snrdJhjiQccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTA3MjExNDU2NDZaFw0yNTA3MjQxNTAxNDZaMDMxMTAvBgNV BAMTKDg5NzhBOUYwMzlENjlEQTdDMDc5N0ZBQzU5NkE4OTM5MzczQkM5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDftfHjU7Am6WicfrLXDGJhetIb fA9AAykX+gSm85dRYYcLj1sKIkrBATLOQgELDz/JrI1nTUJoDtLbovAXE2/VIy0v Mw53jIHUmTm8ua63aigrcPgAGwTy+eE6XtQ4R++OE7DkDMR/m2vDtDDOktDQjR0E vYP0XSqOga1wJLrhKoWvYpK4SIQcqzmG/UJzpoaYntDfV1nZtSxQTjVNyLQkqDdY eGkpZ7XDrO6Rikjz+ssREx7sfzJ3P0bYkni89m2mn6I4FWnJRSKzITLGt7atsRbx MHfliThGDnqtIZaU+6evkLabkbAiEfRmUyiv51DJ21XiGDltNfzqeSlks/VfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXip8DnWnafAeX+sWWqJOTc7ybgwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKL1ZgrhxuuG4vzAtldhycuG5OajdbD++MRb sq8HJGMRmt9fxqQdb5GLkB3QstHLo+Dz1nZ4Pc8GpPSnGqtRl7ZEXZrsy2v5Qqe+ flqd2cp/qNBfY18c46YG/OhiZPkDSPgdkNhZG56hian/scGSAda4NjqU1uMgdCTr PPcUHeHP+3gHCCC4NuA1mQUdwfPrTRS/ebmBstFGXgoBm3/wMsFpbJ2GyvMCCt9K ySOAh3Qmcu5YY9xZn46QcogmvH/519vxsCWLPsxwRPgjdHxhnfzd9Mh5M9jlt008 kuR14xLh3t85E3jtBBeJxcduWOUl6EjdamdO3sBZwh8EdGIMf7M= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:55 2025 by rpki-client