$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: kaAKlUrImAom5y5Naj/5paxkb8IUIYlGAHQk31je8/g= Subject key identifier: FF:70:D9:A4:56:98:54:FF:71:B1:72:2F:C7:11:4C:35:EA:BB:9D:1A Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 5DE7D98B26AD16DA6777142CCB42FC45F1A8F8E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 0376 Signing time: Thu 24 Jul 2025 02:30:59 +0000 Manifest this update: Thu 24 Jul 2025 02:25:59 +0000 Manifest next update: Sun 27 Jul 2025 05:39:59 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: sUwIU/syNQqaGfCRd1Mc+bLlJ+3fWphud3QYA/6SdaE=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 05:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e7:d9:8b:26:ad:16:da:67:77:14:2c:cb:42:fc:45:f1:a8:f8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Jul 24 02:25:59 2025 GMT Not After : Jul 27 05:39:59 2025 GMT Subject: CN=FF70D9A4569854FF71B1722FC7114C35EABB9D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:72:1a:c5:06:6b:ce:9b:a3:97:8f:73:c6: cc:bf:de:30:73:8a:86:ad:df:6e:66:cc:b0:92:f3: 27:b8:48:2f:88:ae:87:e0:87:c7:3f:1e:db:d0:59: 80:b1:4d:7d:9d:03:00:eb:36:2f:84:87:37:fd:bf: 1b:47:cc:f7:0f:97:79:0a:50:ae:a3:1c:c9:35:d5: 54:34:bf:54:50:35:fe:c8:db:71:4a:c0:08:4a:3e: 15:38:75:2b:4e:47:ba:ae:64:ee:5b:2f:bf:d8:f7: f6:76:f4:c1:4f:15:cd:64:e8:a7:df:c6:ce:36:31: c1:a6:ce:34:5e:42:69:51:ee:40:4c:3c:b3:41:d2: 14:14:bd:ab:b0:3d:11:cc:dd:58:6d:dd:f4:da:27: e7:c3:96:6f:3d:6b:da:fd:d5:04:07:52:2c:59:a3: a0:90:f9:be:87:cb:09:70:10:1d:d8:85:2c:40:72: 75:37:d6:c9:e8:1d:a9:6b:ef:73:fe:8b:b5:1a:53: 21:75:f0:23:c7:67:08:fb:ff:54:1f:21:8f:f6:5c: 7b:d2:d4:dc:b9:a8:52:e9:bc:c9:4a:fc:cd:57:d0: f9:22:d4:f9:4d:ec:a3:94:53:a6:0b:65:60:52:6e: f1:71:b5:3f:db:d6:62:39:73:79:b5:b4:ae:33:92: 19:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:70:D9:A4:56:98:54:FF:71:B1:72:2F:C7:11:4C:35:EA:BB:9D:1A X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:aa:9c:b3:61:33:08:d8:cc:86:7d:4a:b0:65:47:1c:cf:2a: b5:bc:aa:73:75:ed:c3:13:61:c9:02:80:4a:3a:65:34:dc:d3: 4b:7d:60:f0:9b:00:04:2e:f8:68:60:be:58:2d:82:a4:a5:c0: 51:85:eb:fd:1d:9e:03:2f:53:8c:10:9c:c6:be:b2:fd:9e:21: 65:b3:e8:61:cd:5c:77:fd:18:e9:f4:c9:e7:02:68:c5:40:a1: e5:09:4f:f3:2e:15:47:28:43:1a:f5:0f:60:4f:be:8e:ea:d6: 23:6a:2c:b3:2d:8e:05:67:0a:a6:5b:d4:6b:77:b3:cd:1c:18: fd:de:b8:a1:02:35:41:4f:64:ec:08:56:5c:c9:83:60:09:f6: 88:5c:92:c4:12:c1:a8:02:a7:0b:d5:79:63:e4:21:38:10:69: 3b:56:7a:4c:8f:a8:95:f9:25:58:f4:81:bb:0e:02:ee:08:28: f2:62:84:0c:fb:5f:44:5f:7b:b1:a4:33:fd:fa:3c:72:d4:50: 9a:2b:66:7a:1e:97:bc:f9:f5:8c:ed:a9:9a:db:64:11:75:26: 4b:e0:9b:3a:b5:2f:1e:08:ac:50:18:7f:dd:3a:9d:a4:0d:0a: e4:8f:fc:ad:00:d1:0e:33:a7:0e:1f:58:86:86:2e:d7:02:f0: e4:76:1a:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXefZiyatFtpndxQsy0L8RfGo+OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTA3MjQwMjI1NTlaFw0yNTA3MjcwNTM5NTlaMDMxMTAvBgNV BAMTKEZGNzBEOUE0NTY5ODU0RkY3MUIxNzIyRkM3MTE0QzM1RUFCQjlEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImHIaxQZrzpujl49zxsy/3jBz ioat325mzLCS8ye4SC+Irofgh8c/HtvQWYCxTX2dAwDrNi+Ehzf9vxtHzPcPl3kK UK6jHMk11VQ0v1RQNf7I23FKwAhKPhU4dStOR7quZO5bL7/Y9/Z29MFPFc1k6Kff xs42McGmzjReQmlR7kBMPLNB0hQUvauwPRHM3Vht3fTaJ+fDlm89a9r91QQHUixZ o6CQ+b6HywlwEB3YhSxAcnU31snoHalr73P+i7UaUyF18CPHZwj7/1QfIY/2XHvS 1Ny5qFLpvMlK/M1X0Pki1PlN7KOUU6YLZWBSbvFxtT/b1mI5c3m1tK4zkhmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/3DZpFaYVP9xsXIvxxFMNeq7nRowHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOqnLNhMwjYzIZ9SrBlRxzPKrW8qnN17cMT YckCgEo6ZTTc00t9YPCbAAQu+GhgvlgtgqSlwFGF6/0dngMvU4wQnMa+sv2eIWWz 6GHNXHf9GOn0yecCaMVAoeUJT/MuFUcoQxr1D2BPvo7q1iNqLLMtjgVnCqZb1Gt3 s80cGP3euKECNUFPZOwIVlzJg2AJ9ohcksQSwagCpwvVeWPkITgQaTtWekyPqJX5 JVj0gbsOAu4IKPJihAz7X0Rfe7GkM/36PHLUUJorZnoel7z59YztqZrbZBF1Jkvg mzq1Lx4IrFAYf906naQNCuSP/K0A0Q4zpw4fWIaGLtcC8OR2Gl4= -----END CERTIFICATE-----Generated at Thu Jul 24 12:06:41 2025 by rpki-client