$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: PmjZl3ys5Hp2mDLGyqZpYYuOgFUkxNn385JwVPkzpT4= Subject key identifier: 9C:EB:CD:BE:C7:A1:3C:C0:13:24:0D:DB:EA:FC:5D:92:E5:1B:49:8F Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 66D10860E30F6191513E8727B559A21ED3436C21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: C9 Signing time: Sat 30 Aug 2025 04:22:17 +0000 Manifest this update: Sat 30 Aug 2025 04:17:17 +0000 Manifest next update: Tue 02 Sep 2025 04:51:17 +0000 Files and hashes: 1: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: erElZoX8Dvu4DzgUVLrsHLQyAf+Uu5YgPI8V0dY1OW8=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d1:08:60:e3:0f:61:91:51:3e:87:27:b5:59:a2:1e:d3:43:6c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Aug 30 04:17:17 2025 GMT Not After : Sep 2 04:51:17 2025 GMT Subject: CN=9CEBCDBEC7A13CC013240DDBEAFC5D92E51B498F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:39:55:f1:8a:b5:b2:a3:3a:43:77:bc:24: 79:f9:28:1b:e6:ba:60:41:5f:bc:52:74:b7:8c:18: af:ca:e7:48:ca:d8:16:d6:61:d5:c9:b3:ff:d4:23: b4:ad:97:e4:92:ed:b8:e1:6e:c9:8a:f5:86:08:d6: 3b:ca:7f:d8:c5:6b:41:7b:c3:f6:d9:46:47:d9:08: 71:2e:96:a5:37:e2:35:c1:af:0e:86:f5:2d:c4:ef: bc:bf:df:1e:80:59:c3:fe:85:bb:42:7b:77:84:d3: 51:74:47:0e:ce:2e:31:4a:48:a8:ae:30:ab:0c:b6: f9:b0:a7:e8:a7:55:5d:3d:b8:f0:40:04:15:47:93: cb:c0:e3:8a:36:03:3b:2c:8e:a1:50:a9:c4:dc:ef: e6:39:29:4f:9c:ff:8f:40:08:06:d2:f8:12:cb:ae: c0:d3:e0:8a:b0:04:da:f6:d7:98:9f:cb:36:76:6b: 59:ae:58:cb:fc:f7:e2:f4:b6:79:db:31:9d:7d:01: f9:f4:94:5b:44:f3:c0:f7:27:ee:cb:de:ca:6d:09: 7a:4f:e7:ff:b9:8c:33:72:76:24:45:95:0a:79:a0: b9:a1:27:6c:04:3b:ed:b1:66:e7:1a:cc:b1:e3:6d: af:db:9f:14:30:83:dd:cb:c7:c7:c1:7d:4c:70:d3: e2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:CD:BE:C7:A1:3C:C0:13:24:0D:DB:EA:FC:5D:92:E5:1B:49:8F X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:15:f9:ba:a1:45:a0:1f:8a:1d:c0:b0:8a:70:97:d6:b3:e1: 55:2b:c2:3d:9e:f7:11:91:74:d6:36:43:2a:0c:7e:cc:ee:74: c4:d1:f4:80:b8:fb:30:57:3c:a0:31:fa:c4:d5:67:3d:d4:64: 65:ce:ab:53:e3:84:f6:11:31:0e:ec:bc:05:c5:c9:f5:78:cd: c1:3a:24:e8:75:c6:9c:9b:82:5c:46:93:51:e0:a3:dc:12:86: 2e:52:27:0e:5e:71:73:fb:14:54:96:4e:7c:f4:94:12:16:20: 8b:6c:79:a8:03:b2:9f:b9:9a:5a:04:c0:45:bf:c4:08:b6:b6: 44:76:02:08:9c:4b:91:e1:20:0a:11:27:29:17:38:7f:9e:e2: 61:23:c5:81:e5:ac:ef:37:8f:9b:08:0b:25:a3:c4:3c:f2:9f: d3:d1:a9:54:bf:22:38:ad:85:68:79:fc:d7:fa:62:0b:56:32: 08:c2:ab:f2:4b:bf:9c:7a:08:18:43:c9:4c:3f:67:1d:ef:18: 99:a4:db:72:07:3d:3a:c1:b4:7e:96:0e:76:5d:f8:0b:7c:df: 0a:d5:32:56:ab:e6:fe:58:22:64:50:1b:bc:dc:81:20:1c:42: 9f:a1:f0:15:a6:ec:e5:0e:54:99:9c:61:84:ef:90:d7:76:53: 0e:5c:a0:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtEIYOMPYZFRPocntVmiHtNDbCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNTA4MzAwNDE3MTdaFw0yNTA5MDIwNDUxMTdaMDMxMTAvBgNV BAMTKDlDRUJDREJFQzdBMTNDQzAxMzI0MEREQkVBRkM1RDkyRTUxQjQ5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJATlV8Yq1sqM6Q3e8JHn5KBvm umBBX7xSdLeMGK/K50jK2BbWYdXJs//UI7Stl+SS7bjhbsmK9YYI1jvKf9jFa0F7 w/bZRkfZCHEulqU34jXBrw6G9S3E77y/3x6AWcP+hbtCe3eE01F0Rw7OLjFKSKiu MKsMtvmwp+inVV09uPBABBVHk8vA44o2AzssjqFQqcTc7+Y5KU+c/49ACAbS+BLL rsDT4IqwBNr215ifyzZ2a1muWMv89+L0tnnbMZ19Afn0lFtE88D3J+7L3sptCXpP 5/+5jDNydiRFlQp5oLmhJ2wEO+2xZucazLHjba/bnxQwg93Lx8fBfUxw0+JPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnOvNvsehPMATJA3b6vxdkuUbSY8wHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIV+bqhRaAfih3AsIpwl9az4VUrwj2e9xGR dNY2QyoMfszudMTR9IC4+zBXPKAx+sTVZz3UZGXOq1PjhPYRMQ7svAXFyfV4zcE6 JOh1xpybglxGk1Hgo9wShi5SJw5ecXP7FFSWTnz0lBIWIItseagDsp+5mloEwEW/ xAi2tkR2AgicS5HhIAoRJykXOH+e4mEjxYHlrO83j5sICyWjxDzyn9PRqVS/Ijit hWh5/Nf6YgtWMgjCq/JLv5x6CBhDyUw/Zx3vGJmk23IHPTrBtH6WDnZd+At83wrV Mlar5v5YImRQG7zcgSAcQp+h8BWm7OUOVJmcYYTvkNd2Uw5coM0= -----END CERTIFICATE-----Generated at Sun Aug 31 07:34:47 2025 by rpki-client