$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: 9nzfWSbVqlsX6cTdUjhbLrVz2cJuqx1Uf1wWK7oSc30= Subject key identifier: 07:EE:CE:87:52:A5:7E:53:DC:40:56:E4:6E:F0:F0:8A:00:1E:17:DB Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 4E1AA46AF6A8D160AEA67D1A248A87BA20C51EF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 02A5 Signing time: Tue 22 Jul 2025 12:11:27 +0000 Manifest this update: Tue 22 Jul 2025 12:06:27 +0000 Manifest next update: Fri 25 Jul 2025 16:37:27 +0000 Files and hashes: 1: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=) 2: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: bFQwXHOpu2grietOEeUz4xLNk1CmnVbt3GsAbZuRclE=) 3: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: WhcI/rPTYxL6IUCY8wiBGmvUbl7gccw0l7rmDchqDAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1a:a4:6a:f6:a8:d1:60:ae:a6:7d:1a:24:8a:87:ba:20:c5:1e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: Jul 22 12:06:27 2025 GMT Not After : Jul 25 16:37:27 2025 GMT Subject: CN=07EECE8752A57E53DC4056E46EF0F08A001E17DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:07:79:4d:24:00:9b:40:f8:8f:c1:06:17:2b: b7:3a:81:15:77:78:87:25:ad:dd:07:fc:1e:6f:86: 74:ac:46:59:11:5c:73:21:c7:a3:d1:09:cf:3a:0c: ef:45:e6:7e:89:c1:d2:13:c0:3d:a6:6f:95:4d:4d: b6:d6:e4:dc:4d:5a:cf:7b:32:76:f7:58:41:8a:ef: b3:f1:8e:e7:a7:8e:bf:84:d4:b6:66:32:34:54:2b: 7d:a4:94:16:92:62:85:cd:d1:7b:f9:ce:f6:51:57: 96:94:26:0d:26:c7:a6:22:b8:21:46:ff:30:e7:23: 79:40:87:29:3c:d4:76:94:76:0c:27:52:77:c0:a7: e0:43:de:a0:28:b8:33:1f:33:c9:91:e9:e1:b5:87: 7e:62:50:82:6a:bb:4f:f7:77:d4:65:bd:34:27:e9: e9:d4:6f:3f:15:8e:19:0b:4f:e9:98:6c:f8:82:7d: 99:b5:85:49:ad:3d:d6:57:4c:89:56:4b:ba:87:24: 2e:c7:e7:f2:97:cd:2b:19:36:e7:97:c6:2d:fb:04: 26:1b:f3:25:e9:0c:ae:b2:48:08:2d:e7:18:1b:9d: a7:39:67:a3:30:e6:9f:3f:c6:fc:94:e4:24:84:da: 11:64:50:09:0d:3e:ae:51:5d:32:c7:a9:6b:ce:83: 7a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EE:CE:87:52:A5:7E:53:DC:40:56:E4:6E:F0:F0:8A:00:1E:17:DB X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:00:6c:01:bf:74:8d:8f:24:a2:c6:ad:56:85:de:b9:6d:9e: c2:a6:a8:52:a5:c9:64:68:ee:7f:74:af:f2:a4:d4:2d:06:e9: 2d:b0:1d:20:17:97:09:d6:11:af:10:1e:f0:77:7e:c9:4b:eb: 31:1e:02:67:2e:67:63:93:41:52:1a:4b:fc:14:0d:47:f2:58: 5f:77:b6:ac:72:9f:dc:a3:aa:31:b0:18:81:95:80:38:92:5d: fc:88:8a:ad:d0:81:ff:86:1d:fc:3d:8e:fb:46:86:74:b3:48: 10:3b:04:22:ac:17:19:0e:38:84:1e:b1:eb:56:c1:3e:89:cf: 42:b8:fb:77:7b:b1:7a:df:d8:b1:03:84:91:a7:b4:bd:ec:4d: 09:f9:17:40:af:e8:44:cf:3a:6a:78:4a:22:e4:cd:ce:ae:c6: 83:d1:3f:65:a8:87:61:e0:92:ee:c2:5a:fd:c1:17:0c:03:eb: 8e:d8:ad:2e:60:84:14:9a:5b:f4:36:90:3d:e1:dd:75:d1:65: 24:5a:bf:06:c4:95:82:fa:90:c6:97:77:4c:b4:3c:8e:6e:3f: 92:ff:c1:f8:99:ce:ff:79:ca:be:fd:bf:4f:07:9a:33:f0:c0: 12:9f:b9:10:2c:26:70:6d:72:6d:fc:cd:cf:a0:9f:2d:94:ea: 4f:40:3c:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThqkavao0WCupn0aJIqHuiDFHvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNTA3MjIxMjA2MjdaFw0yNTA3MjUxNjM3MjdaMDMxMTAvBgNV BAMTKDA3RUVDRTg3NTJBNTdFNTNEQzQwNTZFNDZFRjBGMDhBMDAxRTE3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtB3lNJACbQPiPwQYXK7c6gRV3 eIclrd0H/B5vhnSsRlkRXHMhx6PRCc86DO9F5n6JwdITwD2mb5VNTbbW5NxNWs97 Mnb3WEGK77Pxjuenjr+E1LZmMjRUK32klBaSYoXN0Xv5zvZRV5aUJg0mx6YiuCFG /zDnI3lAhyk81HaUdgwnUnfAp+BD3qAouDMfM8mR6eG1h35iUIJqu0/3d9RlvTQn 6enUbz8VjhkLT+mYbPiCfZm1hUmtPdZXTIlWS7qHJC7H5/KXzSsZNueXxi37BCYb 8yXpDK6ySAgt5xgbnac5Z6Mw5p8/xvyU5CSE2hFkUAkNPq5RXTLHqWvOg3qnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB+7Oh1KlflPcQFbkbvDwigAeF9swHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwAbAG/dI2PJKLGrVaF3rltnsKmqFKlyWRo 7n90r/Kk1C0G6S2wHSAXlwnWEa8QHvB3fslL6zEeAmcuZ2OTQVIaS/wUDUfyWF93 tqxyn9yjqjGwGIGVgDiSXfyIiq3Qgf+GHfw9jvtGhnSzSBA7BCKsFxkOOIQesetW wT6Jz0K4+3d7sXrf2LEDhJGntL3sTQn5F0Cv6ETPOmp4SiLkzc6uxoPRP2Woh2Hg ku7CWv3BFwwD647YrS5ghBSaW/Q2kD3h3XXRZSRavwbElYL6kMaXd0y0PI5uP5L/ wfiZzv95yr79v08HmjPwwBKfuRAsJnBtcm38zc+gny2U6k9APJE= -----END CERTIFICATE-----Generated at Thu Jul 24 12:16:11 2025 by rpki-client