$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: RlF/6KM+504Jd/JBqL4eCCwVHTVOkTSBg7E+JWWroO0= Subject key identifier: 19:41:C9:3A:64:67:CF:BB:63:FF:8B:2A:48:D6:91:46:CC:F0:97:C5 Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 41A270EBED10A16BC521854C8143452313BC48DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: A6 Signing time: Thu 12 Jun 2025 02:52:12 +0000 Manifest this update: Thu 12 Jun 2025 02:47:12 +0000 Manifest next update: Sun 15 Jun 2025 14:50:12 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=) 2: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: a62XLIMfYJiScvdMsH6ZHZWiqRuSRay/eqFQvmJ6zgw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 12:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a2:70:eb:ed:10:a1:6b:c5:21:85:4c:81:43:45:23:13:bc:48:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Jun 12 02:47:12 2025 GMT Not After : Jun 15 14:50:12 2025 GMT Subject: CN=1941C93A6467CFBB63FF8B2A48D69146CCF097C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:d8:c7:8a:0d:ac:32:48:46:34:b5:c8:fb: 97:bc:06:3e:02:2f:01:5e:ba:57:ee:9f:97:a8:2a: fb:df:6d:1c:3b:37:5b:97:9f:fc:4d:53:77:66:9d: 9a:9e:77:d5:1d:11:9c:00:2b:3e:4b:fa:5f:ed:a0: 2d:78:23:7c:7f:9a:d3:5a:89:01:37:30:fe:bb:46: 8a:f2:2e:d7:88:9f:78:39:28:3f:79:32:61:a0:ff: fd:73:8a:31:18:90:3c:82:02:01:a6:bf:7f:b5:0d: 7b:2b:b7:63:68:2c:39:61:30:fd:8e:1e:71:42:a8: 40:cf:88:10:a3:bb:ff:ac:ca:ec:f9:9d:4b:e9:87: 85:2a:bd:05:88:88:1f:b7:93:67:28:85:80:4b:32: 6f:32:0a:09:84:de:01:c8:e1:4a:58:3e:2f:5c:8d: bb:31:44:ba:bf:12:8a:73:0f:57:23:25:7f:9a:3c: 8a:b5:00:13:24:ad:e2:76:8d:77:9e:de:a0:6c:e9: 59:81:60:03:3e:b5:92:6b:9f:91:98:02:5d:67:89: aa:5e:51:f6:09:a5:44:59:97:64:6c:ba:39:ec:1a: 45:da:7f:69:b7:63:7d:0e:37:d3:39:bb:6c:15:a7: 82:87:88:c4:fa:13:d6:c3:e2:46:17:ed:46:0e:83: 02:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:41:C9:3A:64:67:CF:BB:63:FF:8B:2A:48:D6:91:46:CC:F0:97:C5 X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c8:3f:21:34:84:5a:aa:24:e5:d0:ac:a9:ae:d7:94:d6:79: c5:ec:d5:68:70:bc:8c:b6:cc:45:02:37:51:ff:61:ad:74:5f: 6d:e3:7d:3a:5e:e9:ea:b7:13:d4:19:22:0f:b7:ec:a1:d4:84: 9c:37:b7:83:8b:01:21:6b:85:72:95:69:7c:ad:ab:56:23:8e: 24:29:c8:e1:7a:de:eb:aa:54:84:30:c4:4b:ea:46:ad:7c:c3: 45:f9:76:1a:43:fd:f0:74:17:57:89:ea:67:f6:2d:b0:a1:7f: 85:7c:0b:db:ee:5f:51:f8:05:78:bd:3c:c6:b2:4c:68:b5:f7: 63:de:77:74:45:ec:af:93:3c:52:15:ea:8a:6b:51:4b:2b:75: 44:8c:29:cf:75:e6:4d:52:b4:43:b9:9b:2d:3d:72:9b:d7:e3: bd:c2:8a:23:c0:b5:e2:5b:fb:89:65:c5:01:de:b8:90:61:12: 34:c7:b7:99:1f:8e:a6:6f:ba:1c:b9:c7:5c:de:ec:45:31:f3: d1:5a:93:09:5a:5a:42:24:26:83:de:4b:1c:b5:b6:1c:86:ae: f4:31:b4:aa:f6:08:5a:18:dc:6a:f7:6c:f4:02:d3:6a:80:16: bf:cd:80:9b:47:74:a1:76:4c:95:35:4f:a9:55:e9:91:d5:bb: 90:0e:ba:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQaJw6+0QoWvFIYVMgUNFIxO8SN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNTA2MTIwMjQ3MTJaFw0yNTA2MTUxNDUwMTJaMDMxMTAvBgNV BAMTKDE5NDFDOTNBNjQ2N0NGQkI2M0ZGOEIyQTQ4RDY5MTQ2Q0NGMDk3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXXdjHig2sMkhGNLXI+5e8Bj4C LwFeulfun5eoKvvfbRw7N1uXn/xNU3dmnZqed9UdEZwAKz5L+l/toC14I3x/mtNa iQE3MP67RoryLteIn3g5KD95MmGg//1zijEYkDyCAgGmv3+1DXsrt2NoLDlhMP2O HnFCqEDPiBCju/+syuz5nUvph4UqvQWIiB+3k2cohYBLMm8yCgmE3gHI4UpYPi9c jbsxRLq/EopzD1cjJX+aPIq1ABMkreJ2jXee3qBs6VmBYAM+tZJrn5GYAl1niape UfYJpURZl2RsujnsGkXaf2m3Y30ON9M5u2wVp4KHiMT6E9bD4kYX7UYOgwJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUHJOmRnz7tj/4sqSNaRRszwl8UwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDIPyE0hFqqJOXQrKmu15TWecXs1WhwvIy2 zEUCN1H/Ya10X23jfTpe6eq3E9QZIg+37KHUhJw3t4OLASFrhXKVaXytq1YjjiQp yOF63uuqVIQwxEvqRq18w0X5dhpD/fB0F1eJ6mf2LbChf4V8C9vuX1H4BXi9PMay TGi192Ped3RF7K+TPFIV6oprUUsrdUSMKc915k1StEO5my09cpvX473CiiPAteJb +4llxQHeuJBhEjTHt5kfjqZvuhy5x1ze7EUx89FakwlaWkIkJoPeSxy1thyGrvQx tKr2CFoY3Gr3bPQC02qAFr/NgJtHdKF2TJU1T6lV6ZHVu5AOuto= -----END CERTIFICATE-----Generated at Thu Jun 12 13:53:57 2025 by rpki-client