$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: 6eOefLn63JjVKfh5B0ooMigO2Xp+jn6XSVZfe6LDwJM= Subject key identifier: 62:EE:E5:80:BA:AA:40:61:79:E6:BC:89:3F:FE:C0:8E:D9:DD:25:DE Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 582581E9C1E7D8275E9437431F2C488A128954D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 023D Signing time: Sun 07 Sep 2025 04:51:48 +0000 Manifest this update: Sun 07 Sep 2025 04:46:48 +0000 Manifest next update: Wed 10 Sep 2025 11:59:48 +0000 Files and hashes: 1: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: ozsngEKMz2eJjK7ovU+3hkUhX35lx7CpNEV+Cyj1+h4=) 2: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) 3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 4: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:25:81:e9:c1:e7:d8:27:5e:94:37:43:1f:2c:48:8a:12:89:54:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Sep 7 04:46:48 2025 GMT Not After : Sep 10 11:59:48 2025 GMT Subject: CN=62EEE580BAAA406179E6BC893FFEC08ED9DD25DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b6:78:09:31:be:38:be:02:4f:10:e6:d7:0a: 9f:1d:50:74:ba:99:63:68:a7:51:35:20:30:6a:4f: d4:a4:54:64:d9:3f:22:7e:65:3a:a8:25:00:c0:bf: 40:54:61:c6:d2:6d:ee:fd:e0:bb:b5:ac:27:bc:c8: 20:46:65:d7:18:23:86:a5:4d:b9:a3:fd:5f:94:cb: 17:c0:2f:95:a2:bb:7b:6b:59:25:87:bf:65:e1:ec: 03:4c:0a:74:22:12:d0:88:41:f1:8c:47:63:09:91: 13:29:c4:87:04:b8:70:65:bc:8c:e0:f2:c4:56:c4: 21:cc:78:41:ed:70:d4:49:06:cf:2f:a3:31:f1:23: cd:18:6f:09:09:af:d9:46:dc:10:f9:8d:70:f3:e5: ae:2e:bf:76:a4:4a:7f:f1:17:d4:82:c7:ec:68:7b: e0:c7:5e:5f:fb:20:e0:82:5f:66:8a:52:a8:35:6e: bf:94:80:b2:2d:2c:b7:64:33:ee:58:fd:8a:d2:5a: a9:28:e9:1f:02:a0:e0:6e:f9:8b:28:55:38:10:5c: 44:78:9d:39:ff:a7:3f:7f:e4:51:25:2e:e6:c7:34: d5:3d:50:1a:41:54:b1:15:c2:a2:02:9d:a9:ac:c0: a6:34:ef:d9:20:73:38:5e:78:01:e3:0e:4d:41:a4: ea:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EE:E5:80:BA:AA:40:61:79:E6:BC:89:3F:FE:C0:8E:D9:DD:25:DE X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:11:a6:dc:11:74:92:96:0c:d8:84:79:1f:dd:03:1c:bf:74: 27:3d:82:40:d6:48:ba:2a:d7:3b:c5:58:a8:c0:8c:d5:6a:37: 1e:62:30:12:2f:2d:42:55:c8:7d:92:6d:45:53:7a:51:45:46: 6e:d9:79:4f:04:50:29:b0:55:cf:c2:f2:31:02:f1:a9:23:11: ba:4d:4a:a3:22:7a:d9:3a:a1:df:5a:0e:48:6d:5f:7b:63:1d: 3a:1a:da:64:bc:ab:cc:d2:b3:94:4e:a6:48:70:48:e0:ae:a7: c1:c1:1a:d4:ec:6f:15:bf:ae:74:8a:d5:95:ea:88:ba:f8:70: 5b:97:e3:3f:ed:38:7b:ff:f9:f1:aa:29:de:d8:4b:b5:20:f2: 6e:0e:14:5a:8a:84:f4:db:73:97:9f:00:b3:23:90:9d:22:39: b0:d7:5a:8d:15:9f:15:1a:5d:16:ca:fb:da:61:51:95:a8:26: 4e:8d:ea:26:6b:08:17:5f:56:ef:b9:ab:ce:a8:37:54:73:b8: 2c:ed:e7:34:b6:97:aa:77:0e:24:77:0b:d3:27:69:2d:94:15: b6:15:c3:c5:47:f9:5e:4f:63:51:51:e6:c0:7d:18:03:50:66: de:cc:e8:50:25:e2:e8:94:24:e8:a3:2b:cf:93:ba:72:d0:72: f0:3e:e8:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWCWB6cHn2CdelDdDHyxIihKJVNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTA5MDcwNDQ2NDhaFw0yNTA5MTAxMTU5NDhaMDMxMTAvBgNV BAMTKDYyRUVFNTgwQkFBQTQwNjE3OUU2QkM4OTNGRkVDMDhFRDlERDI1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDftngJMb44vgJPEObXCp8dUHS6 mWNop1E1IDBqT9SkVGTZPyJ+ZTqoJQDAv0BUYcbSbe794Lu1rCe8yCBGZdcYI4al Tbmj/V+UyxfAL5Wiu3trWSWHv2Xh7ANMCnQiEtCIQfGMR2MJkRMpxIcEuHBlvIzg 8sRWxCHMeEHtcNRJBs8vozHxI80YbwkJr9lG3BD5jXDz5a4uv3akSn/xF9SCx+xo e+DHXl/7IOCCX2aKUqg1br+UgLItLLdkM+5Y/YrSWqko6R8CoOBu+YsoVTgQXER4 nTn/pz9/5FElLubHNNU9UBpBVLEVwqICnamswKY079kgczheeAHjDk1BpOrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYu7lgLqqQGF55ryJP/7AjtndJd4wHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcRptwRdJKWDNiEeR/dAxy/dCc9gkDWSLoq 1zvFWKjAjNVqNx5iMBIvLUJVyH2SbUVTelFFRm7ZeU8EUCmwVc/C8jEC8akjEbpN SqMietk6od9aDkhtX3tjHToa2mS8q8zSs5ROpkhwSOCup8HBGtTsbxW/rnSK1ZXq iLr4cFuX4z/tOHv/+fGqKd7YS7Ug8m4OFFqKhPTbc5efALMjkJ0iObDXWo0VnxUa XRbK+9phUZWoJk6N6iZrCBdfVu+5q86oN1RzuCzt5zS2l6p3DiR3C9MnaS2UFbYV w8VH+V5PY1FR5sB9GANQZt7M6FAl4uiUJOijK8+TunLQcvA+6Ks= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:45 2025 by rpki-client