$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: eoVjY5zSRdvdBNhp7MTPpqQRPWTmtkjLt+etlx/uuoA= Subject key identifier: 25:E8:8F:A8:3C:DF:37:F2:CF:E1:E4:BB:52:6B:9B:3C:09:CB:37:98 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 53653C9794107D7EA68607477684039E8907CD6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 0375 Signing time: Mon 21 Jul 2025 19:11:09 +0000 Manifest this update: Mon 21 Jul 2025 19:06:09 +0000 Manifest next update: Fri 25 Jul 2025 02:24:09 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: yQ31vOga/AKaXfrF+dfD7Zc04HI17QOxc6yXtSq30BI=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:65:3c:97:94:10:7d:7e:a6:86:07:47:76:84:03:9e:89:07:cd:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Jul 21 19:06:09 2025 GMT Not After : Jul 25 02:24:09 2025 GMT Subject: CN=25E88FA83CDF37F2CFE1E4BB526B9B3C09CB3798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f9:6f:69:1e:03:df:a3:04:82:0b:88:74:bc: f1:40:7a:a8:c0:de:c4:ab:e6:b8:a4:8f:83:af:cc: 0d:bf:b6:c0:18:3c:ce:70:0d:18:e4:1c:1d:8e:79: 6c:56:85:77:f5:c0:42:29:b3:20:13:89:5e:a1:cc: 33:5d:b2:5e:59:45:09:74:e1:f0:d0:01:82:83:11: 8b:bd:b0:e1:fd:70:c0:bc:c5:5b:d6:a1:ef:f1:18: 32:7c:2c:bd:d4:a1:a3:9b:0d:23:f0:22:ef:d6:3f: 88:f3:0b:58:af:94:23:d6:dd:de:71:35:a3:ac:cf: ed:b9:6d:a8:9e:86:e5:93:99:21:38:e3:89:62:f6: 02:21:95:dd:1d:84:3e:35:e9:bb:01:e9:74:00:36: f2:33:41:9b:bd:ac:dc:05:de:37:ab:10:4e:bc:92: 43:d5:d9:9f:01:00:b7:ea:a4:9e:a7:ff:ba:a8:33: 2e:00:70:b5:e0:e4:3e:03:bb:ff:d7:16:65:71:ea: 6c:fd:ee:d3:ac:eb:9d:66:e0:1e:91:20:38:6f:bf: ce:4a:14:50:8c:ca:32:be:b4:b7:be:37:2d:6b:69: 2b:a5:75:6c:43:35:66:26:dd:99:55:72:5d:30:81: 95:9a:9d:a0:a5:fb:33:d0:06:19:88:d7:67:57:b5: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E8:8F:A8:3C:DF:37:F2:CF:E1:E4:BB:52:6B:9B:3C:09:CB:37:98 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8f:89:c4:d1:ab:d5:cf:e2:2a:6a:97:e0:ba:e7:c4:cf:c0: 1f:3f:2a:f1:15:29:08:79:68:c0:18:5d:0b:9d:2a:77:74:c0: ee:4e:2c:99:b6:ac:55:77:a5:b9:07:49:17:ab:f7:16:0e:47: 4d:42:fe:b4:1a:91:87:3a:0a:b1:16:fb:8d:86:e5:de:e1:81: 74:ae:14:c8:ed:76:84:78:88:12:11:f9:7b:91:70:08:b9:57: 31:d7:e5:bf:e6:7f:9f:3a:cb:a2:70:33:e3:d2:ff:90:fe:9b: 7c:20:e2:80:4d:ff:e8:22:dc:b3:00:9b:33:56:cb:8d:75:0e: 76:fd:f0:85:12:b5:3f:1e:3e:97:14:8d:d8:48:a3:b5:ea:0f: 98:c4:26:27:25:ad:53:44:4d:be:56:8c:22:b7:07:ef:e5:17: 0e:26:38:56:ae:ae:c4:bb:a5:f9:7c:ec:a3:20:32:98:2f:e4: a6:e6:d9:6a:d3:6e:8b:9f:8f:a4:b9:9d:d4:37:fd:8d:7e:42: 26:72:6c:2d:8d:71:4f:3d:03:8c:85:18:27:b0:62:45:3a:3d: 66:cc:d0:fa:fd:1e:50:fa:61:cb:3f:51:c5:aa:dd:9d:e7:99: 45:a2:b8:3f:81:2e:25:99:77:0e:94:ba:5c:9a:d0:27:38:fe: d3:af:b6:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2U8l5QQfX6mhgdHdoQDnokHzW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTA3MjExOTA2MDlaFw0yNTA3MjUwMjI0MDlaMDMxMTAvBgNV BAMTKDI1RTg4RkE4M0NERjM3RjJDRkUxRTRCQjUyNkI5QjNDMDlDQjM3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+W9pHgPfowSCC4h0vPFAeqjA 3sSr5rikj4OvzA2/tsAYPM5wDRjkHB2OeWxWhXf1wEIpsyATiV6hzDNdsl5ZRQl0 4fDQAYKDEYu9sOH9cMC8xVvWoe/xGDJ8LL3UoaObDSPwIu/WP4jzC1ivlCPW3d5x NaOsz+25baiehuWTmSE444li9gIhld0dhD416bsB6XQANvIzQZu9rNwF3jerEE68 kkPV2Z8BALfqpJ6n/7qoMy4AcLXg5D4Du//XFmVx6mz97tOs651m4B6RIDhvv85K FFCMyjK+tLe+Ny1raSuldWxDNWYm3ZlVcl0wgZWanaCl+zPQBhmI12dXtZjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJeiPqDzfN/LP4eS7UmubPAnLN5gwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2PicTRq9XP4ipql+C658TPwB8/KvEVKQh5 aMAYXQudKnd0wO5OLJm2rFV3pbkHSRer9xYOR01C/rQakYc6CrEW+42G5d7hgXSu FMjtdoR4iBIR+XuRcAi5VzHX5b/mf586y6JwM+PS/5D+m3wg4oBN/+gi3LMAmzNW y411Dnb98IUStT8ePpcUjdhIo7XqD5jEJiclrVNETb5WjCK3B+/lFw4mOFaursS7 pfl87KMgMpgv5Kbm2WrTboufj6S5ndQ3/Y1+QiZybC2NcU89A4yFGCewYkU6PWbM 0Pr9HlD6Ycs/UcWq3Z3nmUWiuD+BLiWZdw6Uulya0Cc4/tOvtlw= -----END CERTIFICATE-----Generated at Wed Jul 23 02:06:18 2025 by rpki-client