$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft File: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft (raw, json) Hash identifier: U3IzuC7HnAdzJusjU0vhNQ/ZfPYysTwKE/9htk+Zdy4= Subject key identifier: 57:6B:C6:1F:79:E5:38:01:0E:76:80:AC:42:81:71:46:6F:C1:D6:4E Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Certificate serial: 22FB49A0E90214552833E99FCD030F595C6B0749 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft Manifest number: 01D7 Signing time: Mon 02 Jun 2025 06:31:20 +0000 Manifest this update: Mon 02 Jun 2025 06:26:20 +0000 Manifest next update: Thu 05 Jun 2025 11:14:20 +0000 Files and hashes: 1: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl (hash: EXyYB3T1ZNDv9jqda9a313c0IfgTeRSYfaZFtbcx1DE=) 2: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: inrFUM/5CwXojBI2sTkJRY2EzoHBVXYYugcwwrqYnSY=) 3: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: mSliD1vp9W3HskEo7RkLZAe+zzV/2ow/Kxu30d1qJXM=) 4: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: h7S6wYW5PbjWPPZImqnHAQEExu6SHfaYmZDzvVKKqG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 11:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fb:49:a0:e9:02:14:55:28:33:e9:9f:cd:03:0f:59:5c:6b:07:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Validity Not Before: Jun 2 06:26:20 2025 GMT Not After : Jun 5 11:14:20 2025 GMT Subject: CN=576BC61F79E538010E7680AC428171466FC1D64E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:36:80:a2:86:4a:17:1f:3c:c7:37:5b:04: 77:d0:3a:90:7d:1c:e6:9d:2b:e8:e4:f6:05:9e:bf: b6:63:a9:4e:72:2a:fd:20:e3:e3:2a:d0:21:42:7f: 89:c6:f8:75:1c:ee:d9:8c:40:ed:5e:c5:89:ba:04: 75:f5:d6:9c:08:b0:9f:7f:15:0c:63:ca:69:a1:56: 0d:61:06:0a:b2:11:b9:44:30:86:68:91:53:8d:3f: bf:a6:6f:7c:df:59:11:87:84:00:8a:dd:cb:d8:b9: a6:83:a1:e0:66:6e:f3:14:14:4e:6b:8c:49:9e:69: 41:75:1a:66:52:3e:52:fa:5c:86:a8:5f:b6:14:dd: 94:cd:aa:ce:f8:e6:df:8b:8c:cb:8a:3e:fb:81:f2: 90:17:f0:2f:0f:0c:b7:2d:df:bb:f7:a9:e7:2d:9a: 00:ab:f9:dd:0d:97:fd:4c:f6:68:7d:82:c5:c9:d9: 67:e5:b4:df:00:4e:89:ee:67:2f:24:11:ff:b7:4b: fe:89:37:e1:65:f3:15:c4:84:f9:a0:e4:b6:fb:33: b3:12:13:20:79:4f:13:e9:5f:45:89:9c:9f:47:fc: e0:a8:33:1e:84:82:e5:44:50:d4:72:ee:12:1d:17: 5d:1b:aa:3f:fe:96:2f:5c:4c:8c:5a:88:ef:8f:19: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6B:C6:1F:79:E5:38:01:0E:76:80:AC:42:81:71:46:6F:C1:D6:4E X509v3 Authority Key Identifier: keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7f:88:c1:7c:77:7e:63:26:7f:14:e1:23:b2:c7:6e:f0:bb: 44:89:2b:6c:43:44:35:7f:25:be:60:93:2e:b5:80:77:07:c4: 03:03:29:4f:2f:dd:19:ac:e3:fe:ce:b3:d2:7e:ec:e6:1e:bf: a5:28:06:03:cd:c3:ff:ad:55:bd:9f:b6:57:6e:99:ef:ff:b0: 6a:2c:8a:ca:e8:42:a5:82:3c:46:be:bc:f9:2f:8b:32:21:e3: 64:72:d0:e5:ab:ae:82:16:c6:8b:ab:b9:52:26:a1:19:bc:82: 21:22:fa:79:a4:61:fc:7a:e3:c6:54:f9:6e:35:2e:f4:96:46: f5:6f:f8:03:55:be:94:d8:3a:45:6a:e6:71:8a:07:15:fe:f2: 1e:ea:c4:6b:ee:5c:89:79:1d:87:1b:f9:d9:1f:e5:41:31:fc: de:cf:68:2a:4f:29:56:be:18:ef:62:5b:7b:5c:ca:a3:96:c8: e9:9a:28:11:ea:e5:52:97:37:00:b5:65:56:17:40:63:1f:3f: ee:b0:f2:9c:e5:a3:8a:39:fc:a7:8c:5c:c1:7e:3b:93:e3:a6: d7:d1:98:65:ae:55:a1:4e:2f:64:cc:6d:e5:03:33:89:6b:a5: 3e:e3:e9:98:fa:ee:56:41:1e:f5:7a:59:57:aa:54:d8:9a:5b: 73:e3:d9:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvtJoOkCFFUoM+mfzQMPWVxrB0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1 N0IxRTM1QjAeFw0yNTA2MDIwNjI2MjBaFw0yNTA2MDUxMTE0MjBaMDMxMTAvBgNV BAMTKDU3NkJDNjFGNzlFNTM4MDEwRTc2ODBBQzQyODE3MTQ2NkZDMUQ2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh5zaAooZKFx88xzdbBHfQOpB9 HOadK+jk9gWev7ZjqU5yKv0g4+Mq0CFCf4nG+HUc7tmMQO1exYm6BHX11pwIsJ9/ FQxjymmhVg1hBgqyEblEMIZokVONP7+mb3zfWRGHhACK3cvYuaaDoeBmbvMUFE5r jEmeaUF1GmZSPlL6XIaoX7YU3ZTNqs745t+LjMuKPvuB8pAX8C8PDLct37v3qect mgCr+d0Nl/1M9mh9gsXJ2WfltN8ATonuZy8kEf+3S/6JN+Fl8xXEhPmg5Lb7M7MS EyB5TxPpX0WJnJ9H/OCoMx6EguVEUNRy7hIdF10bqj/+li9cTIxaiO+PGXDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2vGH3nlOAEOdoCsQoFxRm/B1k4wHwYDVR0j BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix RTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFC MkQ1N0IxRTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFx/iMF8d35jJn8U4SOyx27wu0SJK2xDRDV/ Jb5gky61gHcHxAMDKU8v3Rms4/7Os9J+7OYev6UoBgPNw/+tVb2ftldume//sGos isroQqWCPEa+vPkvizIh42Ry0OWrroIWxouruVImoRm8giEi+nmkYfx648ZU+W41 LvSWRvVv+ANVvpTYOkVq5nGKBxX+8h7qxGvuXIl5HYcb+dkf5UEx/N7PaCpPKVa+ GO9iW3tcyqOWyOmaKBHq5VKXNwC1ZVYXQGMfP+6w8pzlo4o5/KeMXMF+O5PjptfR mGWuVaFOL2TMbeUDM4lrpT7j6Zj67lZBHvV6WVeqVNiaW3Pj2fE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:38 2025 by rpki-client