$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: fY9rgl8DxXLFhzqP4Z8o9szQI//qltFOTBLGwdVBfgU= Subject key identifier: 23:24:13:C5:25:DB:23:CC:BA:E7:E0:96:C7:82:A2:6B:47:70:23:77 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 78E71287C40DD54CB5F0988347E5E8AE21FA49C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 0212 Signing time: Wed 04 Jun 2025 05:51:48 +0000 Manifest this update: Wed 04 Jun 2025 05:46:48 +0000 Manifest next update: Sat 07 Jun 2025 11:38:48 +0000 Files and hashes: 1: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) 2: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: sDxRXCQp0YhA4EUoYPlhgRc1l3DUG/A3owlHLie+cQg=) 3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 4: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: kQbjnvH9ObUpTX5hNDKmguK3aDtEL5fZXgGa01o3J6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e7:12:87:c4:0d:d5:4c:b5:f0:98:83:47:e5:e8:ae:21:fa:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Jun 4 05:46:48 2025 GMT Not After : Jun 7 11:38:48 2025 GMT Subject: CN=232413C525DB23CCBAE7E096C782A26B47702377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7b:f3:89:1c:9e:da:0b:da:81:89:53:89:f5: d8:9e:0f:95:5b:c9:ca:2e:55:f0:b5:a7:99:ad:ff: 08:fe:cf:62:c2:d5:c4:71:37:17:56:b6:50:4b:e3: 2d:3a:40:e7:28:21:69:b2:6f:43:85:e0:fd:b3:56: 3f:51:e1:95:69:fa:86:aa:be:d1:7e:17:3d:4c:b5: 62:c2:6c:c4:ca:d3:6c:5c:2e:9c:d7:fd:3d:13:24: c9:bf:23:6b:89:3d:33:7f:e6:ee:25:2b:ec:6a:d7: 46:46:91:2d:25:e6:e8:fb:07:33:c0:4c:a5:e3:2d: 09:aa:3e:e6:ac:0a:0f:d9:4c:0f:45:0a:4c:12:e7: 7f:f6:9c:e9:1d:a5:47:72:e3:fd:ba:70:74:e1:76: 26:32:6b:58:35:c2:e3:78:ab:6a:3b:e3:fd:f6:21: 92:49:26:01:54:ac:46:0c:20:94:5d:95:87:07:47: da:79:da:45:d9:59:bf:d4:d4:72:6d:52:e2:31:f5: e3:5e:9a:05:20:5d:d7:2d:2c:00:7b:e2:05:f0:76: ed:f2:4a:67:fe:5d:83:2c:5b:7f:34:fd:84:90:01: cd:10:b7:c2:76:0c:75:db:25:da:6d:0a:8e:75:09: 90:6e:fd:d5:58:71:cc:bb:91:be:f4:4b:c8:e7:90: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:24:13:C5:25:DB:23:CC:BA:E7:E0:96:C7:82:A2:6B:47:70:23:77 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2b:1a:47:fd:9c:0a:40:e3:f3:02:e8:1c:93:56:df:7c:86: 2c:8d:ec:ab:46:ac:66:cc:74:90:53:a0:25:2a:b5:07:31:d2: 72:98:b6:17:e9:dd:91:4c:e8:de:fd:71:1d:0d:f1:17:e1:0a: 67:6e:71:7a:6e:89:a8:05:a5:8c:c2:69:63:23:e2:75:f4:d9: 4f:b2:cf:88:74:99:ee:20:f5:8e:ec:82:79:ae:be:4b:b0:5e: ee:e5:e0:1f:b6:b2:38:0b:5a:3f:81:26:bc:6e:94:8c:31:57: 85:26:86:a8:ea:9d:11:c0:a3:ed:79:de:72:f2:41:b5:79:49: 2b:9b:80:c2:a8:9f:14:e2:55:bb:2b:ba:15:7e:8f:77:ca:1f: 65:9a:d6:81:6c:08:5b:0c:8e:02:c4:44:62:4e:53:03:06:18: 6a:fe:e2:e7:f0:e0:56:d8:a2:85:de:9d:2a:91:10:12:1d:a2: 6f:90:88:b5:07:bd:82:e1:b3:9a:23:dd:a4:b6:97:bf:dc:24: 36:db:65:0b:f1:17:a5:d1:2e:ef:46:0f:34:f2:06:e0:df:d9: 46:d8:d2:8d:b9:00:4e:7f:02:ab:e5:7f:5b:a4:42:16:2c:4a: d2:8b:8e:68:0a:06:93:59:c2:54:d5:5a:36:36:d9:f6:dd:a9: 08:ae:34:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOcSh8QN1Uy18JiDR+XoriH6ScAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTA2MDQwNTQ2NDhaFw0yNTA2MDcxMTM4NDhaMDMxMTAvBgNV BAMTKDIzMjQxM0M1MjVEQjIzQ0NCQUU3RTA5NkM3ODJBMjZCNDc3MDIzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDce/OJHJ7aC9qBiVOJ9dieD5Vb ycouVfC1p5mt/wj+z2LC1cRxNxdWtlBL4y06QOcoIWmyb0OF4P2zVj9R4ZVp+oaq vtF+Fz1MtWLCbMTK02xcLpzX/T0TJMm/I2uJPTN/5u4lK+xq10ZGkS0l5uj7BzPA TKXjLQmqPuasCg/ZTA9FCkwS53/2nOkdpUdy4/26cHThdiYya1g1wuN4q2o74/32 IZJJJgFUrEYMIJRdlYcHR9p52kXZWb/U1HJtUuIx9eNemgUgXdctLAB74gXwdu3y Smf+XYMsW380/YSQAc0Qt8J2DHXbJdptCo51CZBu/dVYccy7kb70S8jnkDIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIyQTxSXbI8y65+CWx4Kia0dwI3cwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcrGkf9nApA4/MC6ByTVt98hiyN7KtGrGbM dJBToCUqtQcx0nKYthfp3ZFM6N79cR0N8RfhCmducXpuiagFpYzCaWMj4nX02U+y z4h0me4g9Y7sgnmuvkuwXu7l4B+2sjgLWj+BJrxulIwxV4UmhqjqnRHAo+153nLy QbV5SSubgMKonxTiVbsruhV+j3fKH2Wa1oFsCFsMjgLERGJOUwMGGGr+4ufw4FbY ooXenSqREBIdom+QiLUHvYLhs5oj3aS2l7/cJDbbZQvxF6XRLu9GDzTyBuDf2UbY 0o25AE5/Aqvlf1ukQhYsStKLjmgKBpNZwlTVWjY22fbdqQiuNE4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:17 2025 by rpki-client