$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: uZXmubX2g0XUIeYsy0rN3vyxki5Arx7KAyhliWD/hz8= Subject key identifier: 27:CD:29:13:D5:2C:E0:14:FF:DD:8D:ED:34:7A:04:80:9C:16:6C:A5 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 670497A17D55E0E85AD89C47E7DFBC96A44196D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: 52 Signing time: Thu 05 Jun 2025 11:11:43 +0000 Manifest this update: Thu 05 Jun 2025 11:06:43 +0000 Manifest next update: Sun 08 Jun 2025 22:37:43 +0000 Files and hashes: 1: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: Gtp/+K549azB+5pUUWPxLkTWkLDGicnzvBzvU09wiAY=) 2: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: 7ceQsT7wupGWngFP5eb/oB3wqMoNA7X+OD09RwfVkw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:04:97:a1:7d:55:e0:e8:5a:d8:9c:47:e7:df:bc:96:a4:41:96:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Jun 5 11:06:43 2025 GMT Not After : Jun 8 22:37:43 2025 GMT Subject: CN=27CD2913D52CE014FFDD8DED347A04809C166CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:27:86:07:2c:d4:4f:9f:e1:19:5b:65:2d: 62:0c:a5:eb:b1:52:c9:fe:a4:c0:72:14:c5:cb:46: fb:ef:28:f9:96:a1:a8:e2:ec:99:5b:53:a8:38:90: 08:f7:d0:c1:d0:b4:8f:6e:d9:bb:b9:fc:d8:4d:83: e9:a7:ff:21:71:a9:0a:b8:8d:12:0d:9a:63:15:00: 81:fe:d5:71:b5:67:70:fd:72:4f:a7:fa:b7:97:15: 0a:86:c3:bb:23:f9:fe:77:b3:94:7b:ba:d0:87:98: 17:14:14:3c:6c:63:21:96:60:1f:de:62:97:2b:c6: 1f:92:e2:69:b2:32:96:b6:cc:5b:e3:47:d1:54:b8: 7d:ab:83:a8:6f:69:8c:61:3a:41:4a:0e:b8:01:0e: 04:40:f8:61:af:a7:58:59:2d:d9:a1:f2:e8:da:bb: 6e:fe:06:0e:fa:34:7e:18:29:b3:43:28:35:bf:b5: 47:33:c1:23:81:20:7a:df:46:da:d9:62:77:6d:8c: 02:29:9f:00:b0:83:87:52:82:2f:5c:66:21:cc:76: 59:c9:c7:d9:fe:f6:ba:ad:b2:4a:d4:e1:29:cb:51: 77:d0:6e:c4:d0:c0:65:81:5e:bf:29:cc:c9:1c:f9: ca:1c:91:4a:d0:0f:f5:a4:31:66:b2:38:67:d4:55: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CD:29:13:D5:2C:E0:14:FF:DD:8D:ED:34:7A:04:80:9C:16:6C:A5 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cb:98:7d:ba:04:36:c5:d0:b3:77:ff:9c:dc:cc:80:11:f9: 71:47:18:fb:4f:23:77:16:5d:d4:05:f5:c6:d4:3a:f8:01:7f: ec:18:3b:d2:a8:88:18:f6:ec:9f:a0:5e:66:b3:80:a3:87:92: 3e:7e:4b:b8:49:fb:2d:38:e6:38:77:63:a9:e2:a1:43:e0:35: c1:7d:6e:b8:ee:98:e6:46:c7:9e:3c:7e:58:a8:dc:52:fc:09: 40:75:12:82:5c:c9:67:ef:20:aa:e1:57:ad:39:fd:01:22:ce: 06:17:cc:0c:09:43:fa:3e:68:dd:6c:2a:90:e8:c1:49:16:2e: ae:92:bf:ce:de:5d:fe:d7:d7:62:b4:e1:a1:d5:81:41:6c:0d: 62:e9:8d:cc:27:f6:55:b1:fd:44:96:98:52:f2:92:28:17:a7: 5c:d6:9c:f0:ec:d5:e6:0a:25:bc:36:aa:c3:b2:37:16:e4:10: f2:fb:17:de:61:6f:e3:96:98:10:0b:e5:20:e5:78:41:52:e6: 31:dd:9d:e1:13:d0:0e:4c:04:65:a6:1c:54:f2:7f:f1:39:37: 12:d1:4d:d1:7d:3a:f8:6c:ee:1b:26:f8:da:cf:8a:88:8b:4a: 8d:21:a8:c6:fb:0e:d8:38:3b:2f:8e:08:3a:2d:d4:40:cd:15: 73:6f:cf:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwSXoX1V4Oha2JxH59+8lqRBltcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNTA2MDUxMTA2NDNaFw0yNTA2MDgyMjM3NDNaMDMxMTAvBgNV BAMTKDI3Q0QyOTEzRDUyQ0UwMTRGRkREOERFRDM0N0EwNDgwOUMxNjZDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPCeGByzUT5/hGVtlLWIMpeux Usn+pMByFMXLRvvvKPmWoaji7JlbU6g4kAj30MHQtI9u2bu5/NhNg+mn/yFxqQq4 jRINmmMVAIH+1XG1Z3D9ck+n+reXFQqGw7sj+f53s5R7utCHmBcUFDxsYyGWYB/e Ypcrxh+S4mmyMpa2zFvjR9FUuH2rg6hvaYxhOkFKDrgBDgRA+GGvp1hZLdmh8uja u27+Bg76NH4YKbNDKDW/tUczwSOBIHrfRtrZYndtjAIpnwCwg4dSgi9cZiHMdlnJ x9n+9rqtskrU4SnLUXfQbsTQwGWBXr8pzMkc+cockUrQD/WkMWayOGfUVWOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ80pE9Us4BT/3Y3tNHoEgJwWbKUwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbLmH26BDbF0LN3/5zczIAR+XFHGPtPI3cW XdQF9cbUOvgBf+wYO9KoiBj27J+gXmazgKOHkj5+S7hJ+y045jh3Y6nioUPgNcF9 brjumOZGx548flio3FL8CUB1EoJcyWfvIKrhV605/QEizgYXzAwJQ/o+aN1sKpDo wUkWLq6Sv87eXf7X12K04aHVgUFsDWLpjcwn9lWx/USWmFLykigXp1zWnPDs1eYK Jbw2qsOyNxbkEPL7F95hb+OWmBAL5SDleEFS5jHdneET0A5MBGWmHFTyf/E5NxLR TdF9Ovhs7hsm+NrPioiLSo0hqMb7Dtg4Oy+OCDot1EDNFXNvz70= -----END CERTIFICATE-----Generated at Sat Jun 7 22:23:17 2025 by rpki-client