$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json) Hash identifier: 2EQMV/usgsqYj/Lz6gkJElkYmhUbLYxm1q69q9gPWCs= Subject key identifier: 15:E6:FD:5B:C1:22:73:8F:66:4D:A4:D0:4C:A3:D0:59:3D:00:14:5C Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 388491D3FBF298C87F351D11648CE9BE9E9578EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft Manifest number: 0172 Signing time: Thu 04 Sep 2025 12:51:17 +0000 Manifest this update: Thu 04 Sep 2025 12:46:17 +0000 Manifest next update: Sun 07 Sep 2025 18:31:17 +0000 Files and hashes: 1: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: u880hi+D7DiVMZTtM0R2zluDGsZisp33kG58HiXq4yE=) 2: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: Ra4kBxyKq0eMRR5T+q214TFxoVWgjk/J53dcHzjeFD8=) 3: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: 0RLceV77+q1mImAjcVRM2PK58U/hVNtmqwvbbWEUXt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:84:91:d3:fb:f2:98:c8:7f:35:1d:11:64:8c:e9:be:9e:95:78:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: Sep 4 12:46:17 2025 GMT Not After : Sep 7 18:31:17 2025 GMT Subject: CN=15E6FD5BC122738F664DA4D04CA3D0593D00145C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:18:05:c6:b3:64:38:da:39:93:94:5d:d0: f3:2e:72:33:89:61:3a:9c:f1:e3:52:e5:6f:dd:00: 5c:67:55:0f:86:91:f0:ec:ed:ef:8e:10:11:93:27: f8:90:30:de:c0:84:12:c0:da:34:99:b4:69:3d:e6: 3b:19:20:a5:94:51:f0:e3:da:9f:f6:98:42:25:9b: 72:ad:ae:fe:8f:b7:d8:19:f6:90:90:23:1f:83:25: 3b:9f:14:0e:cf:9d:67:fe:f9:70:1b:72:af:7f:a7: 3f:6d:9d:69:cf:26:df:34:c7:d5:6e:83:14:9d:a0: 2b:94:0f:05:ff:e6:92:5f:b4:24:bf:80:3e:d5:1f: 2e:ea:08:1a:20:35:0a:ff:1b:44:69:58:6c:e7:83: 7e:51:54:cf:11:71:fd:ed:80:99:32:13:5e:6d:f8: be:01:03:32:f6:d2:c6:b3:ab:16:7e:24:d8:a3:75: 79:6c:56:25:4c:eb:4d:e8:7a:55:2f:ba:02:84:fb: 95:76:48:c8:77:1a:a4:3d:99:79:7a:d0:e8:eb:78: ce:b7:ff:fe:e0:5d:55:98:3f:f4:39:ed:27:89:cc: 52:9e:62:08:14:67:40:bc:19:94:05:b4:28:5b:9c: 20:86:b5:14:1e:81:9f:19:e9:44:c0:b8:2f:bd:ec: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E6:FD:5B:C1:22:73:8F:66:4D:A4:D0:4C:A3:D0:59:3D:00:14:5C X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:87:3d:99:77:31:e9:5a:c7:30:7b:7e:6b:85:b9:75:37:b3: cd:e6:c2:9d:e5:6f:3a:e3:f4:ab:af:33:d0:dc:07:ee:f3:0c: 8c:14:99:cf:d4:ff:51:95:2c:7b:50:a8:e9:a1:bf:ad:ad:5a: c1:60:ea:b5:f9:54:ad:ab:1d:2b:a8:c7:c6:9f:a2:61:9d:d4: 18:61:b8:21:61:17:3f:36:05:fb:99:45:a1:43:30:57:a7:c2: 0b:a5:6b:bd:a1:6f:7d:2a:95:cc:d8:f8:fd:b6:42:95:f0:a4: 7a:06:4d:f7:44:e5:64:d9:85:4f:20:fa:bc:a8:86:46:58:eb: 81:b2:14:b5:6d:16:e8:7f:fe:5f:75:7c:fc:35:c7:37:4c:33: e7:c6:cb:3d:9a:43:dc:a8:31:af:72:75:4f:26:f6:89:e9:d3: c2:89:01:c3:ec:69:13:98:9b:40:16:4c:1b:d3:ae:0d:44:b8: a7:47:85:b2:c1:58:a7:19:2c:fb:cc:98:0c:0c:36:02:4d:5a: 0e:8e:4d:15:b3:7b:6f:3b:aa:0f:16:8b:c0:63:c0:7b:96:24: 4b:22:aa:40:a6:17:fc:ba:e8:16:39:7a:fa:03:d0:4c:7d:d7: 9c:d1:9d:fa:63:e5:20:8d:5f:9d:88:ce:f8:0f:a2:a9:09:e7: ca:fa:a3:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOISR0/vymMh/NR0RZIzpvp6VeOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNTA5MDQxMjQ2MTdaFw0yNTA5MDcxODMxMTdaMDMxMTAvBgNV BAMTKDE1RTZGRDVCQzEyMjczOEY2NjREQTREMDRDQTNEMDU5M0QwMDE0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4RgFxrNkONo5k5Rd0PMucjOJ YTqc8eNS5W/dAFxnVQ+GkfDs7e+OEBGTJ/iQMN7AhBLA2jSZtGk95jsZIKWUUfDj 2p/2mEIlm3Ktrv6Pt9gZ9pCQIx+DJTufFA7PnWf++XAbcq9/pz9tnWnPJt80x9Vu gxSdoCuUDwX/5pJftCS/gD7VHy7qCBogNQr/G0RpWGzng35RVM8Rcf3tgJkyE15t +L4BAzL20sazqxZ+JNijdXlsViVM603oelUvugKE+5V2SMh3GqQ9mXl60OjreM63 //7gXVWYP/Q57SeJzFKeYggUZ0C8GZQFtChbnCCGtRQegZ8Z6UTAuC+97BCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFeb9W8Eic49mTaTQTKPQWT0AFFwwHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3 QTBERUVDMUU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSHPZl3MelaxzB7fmuFuXU3s83mwp3lbzrj 9KuvM9DcB+7zDIwUmc/U/1GVLHtQqOmhv62tWsFg6rX5VK2rHSuox8afomGd1Bhh uCFhFz82BfuZRaFDMFenwgula72hb30qlczY+P22QpXwpHoGTfdE5WTZhU8g+ryo hkZY64GyFLVtFuh//l91fPw1xzdMM+fGyz2aQ9yoMa9ydU8m9onp08KJAcPsaROY m0AWTBvTrg1EuKdHhbLBWKcZLPvMmAwMNgJNWg6OTRWze287qg8Wi8BjwHuWJEsi qkCmF/y66BY5evoD0Ex915zRnfpj5SCNX52IzvgPoqkJ58r6o7Y= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:43 2025 by rpki-client