$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft File: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft (raw, json) Hash identifier: pI+Rlzv5wMBSIXaRaDc+HygJ4ScVGYT5Wyhu4XJBJUQ= Subject key identifier: 6F:EA:28:55:A1:2C:3D:4C:4F:82:F5:3C:9D:9B:7C:7D:96:A5:FC:B4 Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Certificate serial: 4010CEB15142C9A3C44532B617B5BAE18545C589 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft Manifest number: 01BD Signing time: Sat 05 Apr 2025 12:41:18 +0000 Manifest this update: Sat 05 Apr 2025 12:36:18 +0000 Manifest next update: Tue 08 Apr 2025 14:53:18 +0000 Files and hashes: 1: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: h7S6wYW5PbjWPPZImqnHAQEExu6SHfaYmZDzvVKKqG0=) 2: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: mSliD1vp9W3HskEo7RkLZAe+zzV/2ow/Kxu30d1qJXM=) 3: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl (hash: umv/2mFPWS6LlmQV+j+i0tMnH074HFnTFBDtuetnhnU=) 4: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: inrFUM/5CwXojBI2sTkJRY2EzoHBVXYYugcwwrqYnSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 14:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:10:ce:b1:51:42:c9:a3:c4:45:32:b6:17:b5:ba:e1:85:45:c5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Validity Not Before: Apr 5 12:36:18 2025 GMT Not After : Apr 8 14:53:18 2025 GMT Subject: CN=6FEA2855A12C3D4C4F82F53C9D9B7C7D96A5FCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:dc:c2:26:f6:32:38:fb:28:37:63:4f:33: 61:e2:a2:69:41:7b:04:0b:31:68:1c:3d:ca:7b:99: 26:15:b7:5f:f4:9a:6a:5e:e3:f7:8f:eb:76:6a:ad: 86:c3:3b:de:a3:04:ce:f5:78:a8:34:10:44:8e:7c: 74:5c:17:29:be:00:cb:46:95:51:3e:e7:42:d2:71: e9:bd:46:6a:36:49:3c:bf:a7:89:2c:e6:fb:01:c5: f5:ad:a7:00:0f:8b:73:97:f4:f0:1f:6e:a5:d3:cc: c5:ad:fb:ee:6b:81:99:7e:42:61:f8:18:50:0c:04: 38:b2:b3:8a:bd:c4:e9:89:d9:eb:d4:c5:8e:c7:d3: 92:3b:97:9b:31:70:d5:84:b4:08:49:40:f9:0c:66: 94:a4:2d:2d:69:47:09:46:b9:4e:65:72:9c:71:46: 8f:17:89:b0:a2:1f:3e:1d:56:b3:a7:f6:68:eb:76: 0f:e5:8a:88:cc:3b:be:01:af:3f:bd:81:d6:06:70: 9b:33:5e:c8:67:82:78:a2:e6:6f:38:ef:2f:97:a4: c3:ff:61:7d:f8:ae:45:1e:a6:d5:89:03:b6:1c:7c: 8f:e5:59:a5:11:30:a2:b7:66:2d:47:93:67:dc:26: 17:7b:63:ea:50:11:51:ec:cd:d2:40:51:51:7c:ea: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EA:28:55:A1:2C:3D:4C:4F:82:F5:3C:9D:9B:7C:7D:96:A5:FC:B4 X509v3 Authority Key Identifier: keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:1a:6d:9e:18:a2:13:a3:aa:fb:fa:97:2c:75:37:ad:2e:81: 2c:69:d7:1a:bf:33:20:a6:0c:fd:db:d4:8d:8f:70:94:b2:77: d5:7c:4c:41:8a:88:a8:93:ad:c7:88:dc:56:1a:bc:1d:40:cd: 4d:47:9c:17:21:26:cd:0e:1d:ad:f2:a5:44:57:e9:32:b8:cd: ee:07:cb:bf:3a:99:d3:4a:b3:15:69:eb:bf:21:28:e9:75:93: b0:4a:19:b7:c3:d8:c4:4d:ad:4b:95:8d:96:83:e5:48:73:07: e8:b9:d5:d5:a7:92:14:4b:ea:9a:d4:e0:64:79:be:88:41:ec: c7:c2:7c:d2:d5:49:68:e4:e7:40:12:1b:ce:59:d2:1a:65:53: 99:52:ef:7a:fe:a7:00:a8:fe:20:d4:5a:d3:f6:b1:16:b3:86: a2:11:02:b6:b3:2c:36:19:33:78:65:58:38:fd:00:39:15:4c: 00:2a:bc:aa:c2:16:57:86:1a:b9:3d:99:8c:1a:77:f7:57:57: ae:a7:84:55:be:07:d0:a6:7a:fe:ff:7d:68:66:22:f8:b8:96: 06:9c:43:30:85:44:53:a0:8e:0a:21:93:1e:2c:17:9a:b2:75: 05:c3:f2:da:01:8a:04:c0:35:79:58:a5:bb:05:b8:d1:8f:ee: 13:bd:21:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBDOsVFCyaPERTK2F7W64YVFxYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1 N0IxRTM1QjAeFw0yNTA0MDUxMjM2MThaFw0yNTA0MDgxNDUzMThaMDMxMTAvBgNV BAMTKDZGRUEyODU1QTEyQzNENEM0RjgyRjUzQzlEOUI3QzdEOTZBNUZDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDtzCJvYyOPsoN2NPM2HiomlB ewQLMWgcPcp7mSYVt1/0mmpe4/eP63ZqrYbDO96jBM71eKg0EESOfHRcFym+AMtG lVE+50LScem9Rmo2STy/p4ks5vsBxfWtpwAPi3OX9PAfbqXTzMWt++5rgZl+QmH4 GFAMBDiys4q9xOmJ2evUxY7H05I7l5sxcNWEtAhJQPkMZpSkLS1pRwlGuU5lcpxx Ro8XibCiHz4dVrOn9mjrdg/liojMO74Brz+9gdYGcJszXshngnii5m847y+XpMP/ YX34rkUeptWJA7YcfI/lWaURMKK3Zi1Hk2fcJhd7Y+pQEVHszdJAUVF86k7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb+ooVaEsPUxPgvU8nZt8fZal/LQwHwYDVR0j BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix RTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFC MkQ1N0IxRTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMabZ4YohOjqvv6lyx1N60ugSxp1xq/MyCm DP3b1I2PcJSyd9V8TEGKiKiTrceI3FYavB1AzU1HnBchJs0OHa3ypURX6TK4ze4H y786mdNKsxVp678hKOl1k7BKGbfD2MRNrUuVjZaD5UhzB+i51dWnkhRL6prU4GR5 vohB7MfCfNLVSWjk50ASG85Z0hplU5lS73r+pwCo/iDUWtP2sRazhqIRArazLDYZ M3hlWDj9ADkVTAAqvKrCFleGGrk9mYwad/dXV66nhFW+B9Cmev7/fWhmIvi4lgac QzCFRFOgjgohkx4sF5qydQXD8toBigTANXlYpbsFuNGP7hO9IQc= -----END CERTIFICATE-----Generated at Sun Apr 6 04:40:30 2025 by rpki-client