$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft File: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft (raw, json) Hash identifier: tz9TwQ6XgHpkMaxTLR8LfgCqgjKxe3g5xe31ns4JI7g= Subject key identifier: 61:49:C4:BD:9C:D9:CB:B7:EC:C3:81:4A:01:7D:2D:38:6E:C2:B5:B0 Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Certificate serial: 2B8DA23FA17712E3DA18336C22379C52D4261132 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft Manifest number: 01EF Signing time: Mon 21 Jul 2025 12:51:19 +0000 Manifest this update: Mon 21 Jul 2025 12:46:19 +0000 Manifest next update: Thu 24 Jul 2025 22:38:19 +0000 Files and hashes: 1: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: SQEisBhY0DV53zHr/sBQtcOCDd0Bbr0+fAzbajSxd3s=) 2: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: FK++k16W5o1G1ymHbgbWCr22LclnvM/8CkDyIWrtSXU=) 3: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: O62FaU7sfJ7WBpQAG4VOlHgoxy59qAGq0CxPAvacDkY=) 4: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl (hash: x16T/AKlla1Qn49a0r5eoixKReInYn65VEPeSaztQ3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:8d:a2:3f:a1:77:12:e3:da:18:33:6c:22:37:9c:52:d4:26:11:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Validity Not Before: Jul 21 12:46:19 2025 GMT Not After : Jul 24 22:38:19 2025 GMT Subject: CN=6149C4BD9CD9CBB7ECC3814A017D2D386EC2B5B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:95:2a:1b:83:91:72:f9:af:f1:16:f5:25: cf:e7:ba:ae:8a:12:30:43:5a:6b:9c:c7:1a:d4:9f: 13:14:6a:d1:24:d0:7e:ab:7d:c2:42:7c:45:64:35: fb:51:d7:f5:35:43:77:f6:c0:66:f4:6f:c4:9c:d4: 53:73:ae:7d:03:6e:8b:24:3d:02:c2:f9:58:bf:1d: a4:3f:c3:0f:a9:e8:56:54:36:e0:aa:34:a9:71:4c: a6:44:c9:e5:bf:36:c5:87:95:45:59:a6:ff:29:c8: 69:57:33:5e:04:04:87:31:ae:95:9a:cc:06:47:cd: 90:d3:e7:fe:1c:05:42:fe:2f:9e:44:54:31:14:d4: ee:1a:7c:f1:27:b3:9c:14:7a:ea:a2:32:0e:ee:f3: a5:13:aa:60:59:1f:55:5b:3c:f0:c0:08:1e:3b:81: 79:93:f0:50:c4:ee:b7:d8:97:f2:a7:76:4b:b8:54: 0f:4f:48:34:5a:ba:b7:b0:e0:2a:10:31:92:42:dc: 04:db:b5:33:4e:7a:ff:1e:2d:a7:f5:d7:ca:3a:b3: 6b:3c:28:a7:2b:d3:8e:69:27:69:98:9c:95:8c:e7: 72:f7:69:3c:e1:aa:8e:9d:58:de:84:55:91:e8:4c: 0a:67:ea:39:36:9b:33:30:c2:7e:5f:5e:3a:d0:cd: ef:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:49:C4:BD:9C:D9:CB:B7:EC:C3:81:4A:01:7D:2D:38:6E:C2:B5:B0 X509v3 Authority Key Identifier: keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:54:4a:38:90:6a:ad:8c:a2:a4:1e:5e:3d:28:46:6d:75:f6: d7:52:2b:f0:1e:e5:e2:28:3b:96:f6:90:0f:2d:54:ec:7d:1f: 1b:49:8b:8d:1c:a2:4b:98:a8:e7:74:61:e3:aa:17:01:76:1b: 9f:19:a4:42:6b:87:df:32:41:0a:56:dc:93:80:3e:d1:36:9c: e3:1f:be:4f:5f:45:08:7d:90:ce:0d:63:0e:ba:9e:f7:13:0c: b9:1c:d0:cd:d6:2c:04:d5:26:2b:d0:69:79:39:c3:0a:3a:b0: 75:e0:2e:5e:1f:9f:df:7c:dd:64:6e:6a:e1:4e:70:5f:c0:98: f7:e1:c8:15:a1:77:29:49:11:63:0c:69:e9:fa:a8:1d:05:38: ff:b2:73:8b:8e:24:2b:aa:66:de:b0:a2:96:89:f7:0b:46:0b: 37:ac:52:1d:06:5e:ff:3c:74:38:b0:52:c5:2b:67:4e:77:cd: 23:17:18:64:a7:29:78:6b:ef:ac:e3:0f:69:c1:a2:f0:fb:cb: d5:39:48:d8:80:af:11:1c:a0:80:bd:b8:0d:9f:66:d4:70:b0: 7a:60:62:10:10:0d:ee:bd:20:13:09:2a:65:44:be:7c:9c:f8: 71:b4:ee:0f:d0:8c:12:95:62:bf:cd:49:a3:46:1f:08:d7:5c: 21:12:a2:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK42iP6F3EuPaGDNsIjecUtQmETIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1 N0IxRTM1QjAeFw0yNTA3MjExMjQ2MTlaFw0yNTA3MjQyMjM4MTlaMDMxMTAvBgNV BAMTKDYxNDlDNEJEOUNEOUNCQjdFQ0MzODE0QTAxN0QyRDM4NkVDMkI1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb95UqG4ORcvmv8Rb1Jc/nuq6K EjBDWmucxxrUnxMUatEk0H6rfcJCfEVkNftR1/U1Q3f2wGb0b8Sc1FNzrn0Dbosk PQLC+Vi/HaQ/ww+p6FZUNuCqNKlxTKZEyeW/NsWHlUVZpv8pyGlXM14EBIcxrpWa zAZHzZDT5/4cBUL+L55EVDEU1O4afPEns5wUeuqiMg7u86UTqmBZH1VbPPDACB47 gXmT8FDE7rfYl/Kndku4VA9PSDRaurew4CoQMZJC3ATbtTNOev8eLaf118o6s2s8 KKcr045pJ2mYnJWM53L3aTzhqo6dWN6EVZHoTApn6jk2mzMwwn5fXjrQze+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYUnEvZzZy7fsw4FKAX0tOG7CtbAwHwYDVR0j BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix RTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFC MkQ1N0IxRTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZUSjiQaq2MoqQeXj0oRm119tdSK/Ae5eIo O5b2kA8tVOx9HxtJi40cokuYqOd0YeOqFwF2G58ZpEJrh98yQQpW3JOAPtE2nOMf vk9fRQh9kM4NYw66nvcTDLkc0M3WLATVJivQaXk5wwo6sHXgLl4fn9983WRuauFO cF/AmPfhyBWhdylJEWMMaen6qB0FOP+yc4uOJCuqZt6wopaJ9wtGCzesUh0GXv88 dDiwUsUrZ053zSMXGGSnKXhr76zjD2nBovD7y9U5SNiArxEcoIC9uA2fZtRwsHpg YhAQDe69IBMJKmVEvnyc+HG07g/QjBKVYr/NSaNGHwjXXCESovA= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:11 2025 by rpki-client