$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: Yarkxw1VFfXDs231Mpq1kyGAvwY/vWb4NDxlGS+nkA8= Subject key identifier: C4:0D:2E:53:F8:8C:3B:88:8A:F8:3D:04:1B:F8:96:D6:F6:86:DD:88 Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 51C52CCD5DAA654950855376E73B2ED23E16D4DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: A5 Signing time: Mon 09 Jun 2025 18:02:11 +0000 Manifest this update: Mon 09 Jun 2025 17:57:11 +0000 Manifest next update: Fri 13 Jun 2025 02:51:11 +0000 Files and hashes: 1: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: sn87PoLqP4CqM3pxtdAxeLrFzgZOIiJYyiuUH1K6PnA=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 02:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c5:2c:cd:5d:aa:65:49:50:85:53:76:e7:3b:2e:d2:3e:16:d4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Jun 9 17:57:11 2025 GMT Not After : Jun 13 02:51:11 2025 GMT Subject: CN=C40D2E53F88C3B888AF83D041BF896D6F686DD88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7b:df:bb:5b:fb:6c:0c:75:b1:4f:84:dd:28: 73:57:5d:11:60:31:ab:19:9e:b1:76:aa:fe:18:f5: 50:f3:cc:09:8c:39:46:a5:24:51:96:2d:c2:02:b2: b1:09:65:49:fc:11:b6:bd:1e:4a:1b:39:42:b9:b0: a6:34:31:d2:f1:84:47:84:e8:1e:d3:e3:ef:f0:08: 92:08:6a:ea:d4:f1:47:1d:aa:e0:56:09:ae:c9:a5: 4d:a8:b1:2e:77:d7:61:81:04:01:54:c1:24:a3:2c: 83:2b:b7:cc:70:82:44:42:4d:88:2e:ed:5f:15:ed: 02:48:8f:1d:d7:6c:fa:87:98:3f:cf:bd:ce:c0:95: f0:a3:e3:2c:6f:b2:57:28:df:39:6a:c4:36:00:97: 83:14:77:53:4f:4d:ac:d1:7c:e2:45:23:82:31:6d: a0:f7:86:01:51:8e:36:55:dc:a5:61:ab:06:d4:47: 59:49:30:b9:5e:66:7b:19:2a:bb:2c:5e:68:5a:99: 4d:4e:1a:ae:0f:de:df:36:6d:1c:2d:a0:59:08:de: 4b:ca:95:a0:30:1c:5f:da:19:7e:60:5b:41:8a:97: 2d:68:e9:b1:73:20:06:4a:97:94:29:3c:47:a1:d5: c6:99:a7:96:74:76:74:18:71:91:27:63:38:d2:de: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0D:2E:53:F8:8C:3B:88:8A:F8:3D:04:1B:F8:96:D6:F6:86:DD:88 X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:de:c0:35:c0:cf:fd:34:4d:71:f2:c1:15:b2:8c:8e:e5:29: 65:8e:88:58:90:9a:b0:56:28:1a:dc:91:fc:76:49:7c:b4:d3: f5:1f:f2:55:71:fb:0d:2c:71:aa:bd:9c:c6:ae:c0:12:43:a3: ff:ef:5b:f6:29:aa:74:51:67:db:3b:14:28:62:35:b7:fe:b8: 80:6e:f4:5a:1d:a8:b4:74:45:61:c7:68:ea:41:9f:59:b5:18: 95:a9:8f:b1:a8:7d:bd:c2:dd:ac:1f:b9:60:83:d2:f1:b4:fd: bd:e6:1c:d1:fd:0e:35:82:02:8d:75:cb:95:41:cf:17:2c:40: 12:41:fb:89:f1:8c:f0:b2:c3:98:d4:8f:da:e6:e0:c4:7a:db: ca:77:8b:1f:eb:40:38:5a:d6:62:3c:81:91:9b:82:ae:f9:ed: fa:43:d4:63:8b:35:4b:b1:b9:78:e6:c5:2d:e6:d4:b8:67:46: 27:89:28:ef:91:ba:58:4b:db:19:36:b4:ca:2b:9e:18:b0:bc: 3d:e2:9b:da:49:6d:f5:75:8f:13:07:26:4f:5b:26:54:09:83: be:78:46:d9:3c:ff:7b:7b:5e:97:76:79:fe:53:1c:0a:43:22: ed:68:32:a6:92:43:f9:0f:0e:c9:19:b8:35:e0:7d:27:df:74: c3:44:8c:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcUszV2qZUlQhVN25zsu0j4W1NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNTA2MDkxNzU3MTFaFw0yNTA2MTMwMjUxMTFaMDMxMTAvBgNV BAMTKEM0MEQyRTUzRjg4QzNCODg4QUY4M0QwNDFCRjg5NkQ2RjY4NkREODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDke9+7W/tsDHWxT4TdKHNXXRFg MasZnrF2qv4Y9VDzzAmMOUalJFGWLcICsrEJZUn8Eba9HkobOUK5sKY0MdLxhEeE 6B7T4+/wCJIIaurU8UcdquBWCa7JpU2osS5312GBBAFUwSSjLIMrt8xwgkRCTYgu 7V8V7QJIjx3XbPqHmD/Pvc7AlfCj4yxvslco3zlqxDYAl4MUd1NPTazRfOJFI4Ix baD3hgFRjjZV3KVhqwbUR1lJMLleZnsZKrssXmhamU1OGq4P3t82bRwtoFkI3kvK laAwHF/aGX5gW0GKly1o6bFzIAZKl5QpPEeh1caZp5Z0dnQYcZEnYzjS3jODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxA0uU/iMO4iK+D0EG/iW1vaG3YgwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfewDXAz/00TXHywRWyjI7lKWWOiFiQmrBW KBrckfx2SXy00/Uf8lVx+w0scaq9nMauwBJDo//vW/YpqnRRZ9s7FChiNbf+uIBu 9FodqLR0RWHHaOpBn1m1GJWpj7Gofb3C3awfuWCD0vG0/b3mHNH9DjWCAo11y5VB zxcsQBJB+4nxjPCyw5jUj9rm4MR628p3ix/rQDha1mI8gZGbgq757fpD1GOLNUux uXjmxS3m1LhnRieJKO+RulhL2xk2tMornhiwvD3im9pJbfV1jxMHJk9bJlQJg754 Rtk8/3t7Xpd2ef5THApDIu1oMqaSQ/kPDskZuDXgfSffdMNEjDM= -----END CERTIFICATE-----Generated at Tue Jun 10 21:19:27 2025 by rpki-client