$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: mVLRACxAtuLSy3NVA1oo0K1EMLC45pWqiXMgZkXD+vc= Subject key identifier: AE:12:5F:F8:48:4A:50:71:46:E1:B8:58:AA:FB:42:EA:F6:46:2D:60 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 54EBE02FE598DA4FFA232E9D41016AD2D71F8880 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 01F9 Signing time: Wed 09 Apr 2025 03:31:46 +0000 Manifest this update: Wed 09 Apr 2025 03:26:46 +0000 Manifest next update: Sat 12 Apr 2025 14:24:46 +0000 Files and hashes: 1: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: sDxRXCQp0YhA4EUoYPlhgRc1l3DUG/A3owlHLie+cQg=) 2: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: sexqXYVW8ieC6sdlJt/dGasLBkG6h3AUR692knSaF1U=) 3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: vQcGVK6JhkO4JP+rgl0UnF9Tyyv/ls7fzCiRnSShb9U=) 4: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: didHUC2i8BNVDGemsimPQyBpi9yorQIkpjmF1+f7UV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 14:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:eb:e0:2f:e5:98:da:4f:fa:23:2e:9d:41:01:6a:d2:d7:1f:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Apr 9 03:26:46 2025 GMT Not After : Apr 12 14:24:46 2025 GMT Subject: CN=AE125FF8484A507146E1B858AAFB42EAF6462D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:b9:19:e7:5a:62:b3:5c:e0:65:3b:c6:e6: e7:89:68:e2:a5:14:54:20:ac:77:f1:78:5f:76:32: a0:b5:5c:25:1f:80:25:67:bb:49:9e:fc:b1:3f:bf: d6:7d:30:fd:a1:95:eb:a5:6d:44:e1:5d:a7:67:1e: 9e:28:c5:b0:97:9b:ac:14:29:d6:cf:81:26:07:e4: c0:82:5d:bb:80:86:f2:7c:d8:14:c4:96:85:d5:19: 9f:64:4b:8e:20:74:2e:63:3c:c0:4e:2e:42:3b:c8: 67:91:d2:36:05:35:fd:e9:b6:39:92:1c:52:16:b1: 22:c7:3b:9d:6c:33:fe:94:2e:8d:7b:5b:19:54:2a: 6e:7b:cd:df:ef:92:24:a9:b5:d6:63:41:be:64:cc: eb:77:bb:b2:99:83:bf:c4:40:3a:56:e8:40:23:bf: 02:33:6f:e0:f7:d9:bb:71:68:a8:b6:f2:b2:8e:ef: 0a:2c:3e:0e:41:ed:a2:83:8c:0e:83:10:2e:65:2b: 0f:a2:7d:6a:23:6b:40:73:1e:3a:d3:5a:30:56:81: f2:1d:64:4e:09:1f:5f:8e:42:91:55:17:84:bc:05: 57:33:e3:6f:d9:94:4d:76:f3:93:14:94:d5:6e:12: c7:9a:69:e8:dd:3f:d8:06:c2:75:d8:8d:74:e1:c7: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:12:5F:F8:48:4A:50:71:46:E1:B8:58:AA:FB:42:EA:F6:46:2D:60 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b8:f2:00:bf:55:06:68:90:74:76:b3:bb:cc:09:9d:35:0e: 70:51:fa:66:73:e0:4d:89:5a:8f:ea:63:69:dd:2c:b5:ff:22: ac:3c:78:29:cd:6a:59:0f:07:8c:04:76:f4:b9:9c:29:a4:65: af:a2:4d:40:10:b9:f0:63:ac:08:af:30:d2:f2:13:39:f6:89: 32:49:74:c6:9e:31:d1:d9:7b:b0:b7:f5:e2:83:16:7c:e8:8b: fc:8d:be:b2:12:15:59:79:8e:e2:af:ed:a3:66:c4:e2:e0:a0: d6:1c:68:99:55:f8:89:6b:cb:53:8b:d3:8d:89:60:89:2e:83: e9:e6:f7:ae:39:ac:ab:94:26:bf:18:98:74:5d:c7:1f:43:e2: 15:c1:9c:55:56:1e:b0:a7:c1:5c:83:d2:7d:32:75:f3:ad:e0: b8:87:a2:c5:6c:0c:ca:7c:b3:a2:ac:7d:80:21:72:ea:72:5b: 4c:f9:f9:38:ec:8c:84:2c:64:3c:85:68:25:bf:3f:83:e9:f7: 29:0a:f8:04:68:89:22:1f:41:f3:d0:c4:57:f2:6c:16:2f:21: 98:80:fc:d3:3c:7c:65:cf:85:72:e6:24:2f:6c:39:e1:c2:9b: 91:fc:d6:61:69:16:27:55:61:80:0c:f4:5d:89:d8:07:58:3f: 9f:0a:be:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOvgL+WY2k/6Iy6dQQFq0tcfiIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTA0MDkwMzI2NDZaFw0yNTA0MTIxNDI0NDZaMDMxMTAvBgNV BAMTKEFFMTI1RkY4NDg0QTUwNzE0NkUxQjg1OEFBRkI0MkVBRjY0NjJENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PrkZ51pis1zgZTvG5ueJaOKl FFQgrHfxeF92MqC1XCUfgCVnu0me/LE/v9Z9MP2hleulbUThXadnHp4oxbCXm6wU KdbPgSYH5MCCXbuAhvJ82BTEloXVGZ9kS44gdC5jPMBOLkI7yGeR0jYFNf3ptjmS HFIWsSLHO51sM/6ULo17WxlUKm57zd/vkiSptdZjQb5kzOt3u7KZg7/EQDpW6EAj vwIzb+D32btxaKi28rKO7wosPg5B7aKDjA6DEC5lKw+ifWoja0BzHjrTWjBWgfId ZE4JH1+OQpFVF4S8BVcz42/ZlE1285MUlNVuEseaaejdP9gGwnXYjXThxy+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrhJf+EhKUHFG4bhYqvtC6vZGLWAwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEW48gC/VQZokHR2s7vMCZ01DnBR+mZz4E2J Wo/qY2ndLLX/Iqw8eCnNalkPB4wEdvS5nCmkZa+iTUAQufBjrAivMNLyEzn2iTJJ dMaeMdHZe7C39eKDFnzoi/yNvrISFVl5juKv7aNmxOLgoNYcaJlV+Ilry1OL042J YIkug+nm9645rKuUJr8YmHRdxx9D4hXBnFVWHrCnwVyD0n0ydfOt4LiHosVsDMp8 s6KsfYAhcupyW0z5+TjsjIQsZDyFaCW/P4Pp9ykK+ARoiSIfQfPQxFfybBYvIZiA /NM8fGXPhXLmJC9sOeHCm5H81mFpFidVYYAM9F2J2AdYP58KviU= -----END CERTIFICATE-----Generated at Wed Apr 9 14:07:33 2025 by rpki-client