$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: lScCYShiMz+y2t+gpQHjI+bMh50+3dA+fwQWv6qHhRw= Subject key identifier: DD:E2:6D:9B:A1:C3:32:02:99:50:E8:B8:CC:84:6A:3E:82:55:90:D4 Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 362096AFAECE5C0238F179FBCFB5C47586BD4BB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 02D0 Signing time: Thu 23 Oct 2025 20:01:31 +0000 Manifest this update: Thu 23 Oct 2025 19:56:31 +0000 Manifest next update: Sun 26 Oct 2025 22:49:31 +0000 Files and hashes: 1: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=) 2: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: I6jZdYlvXUw2uQPIZzmfaKaudQJgElrmf4VsKIhG4xI=) 3: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: rNCEVC57YsG1pLsfroR7lL5bhtvNw6HpUyrSsSif6rU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 22:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:20:96:af:ae:ce:5c:02:38:f1:79:fb:cf:b5:c4:75:86:bd:4b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: Oct 23 19:56:31 2025 GMT Not After : Oct 26 22:49:31 2025 GMT Subject: CN=DDE26D9BA1C332029950E8B8CC846A3E825590D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:3e:1c:a9:28:fb:c1:79:20:04:03:da:e8: 2a:84:4c:e6:a8:89:52:5c:8e:c6:21:08:4e:10:0d: 49:55:16:81:71:0e:a6:b8:f0:13:ae:e9:28:12:51: ae:82:00:5f:a6:24:f4:68:c4:6c:03:f5:21:e6:75: b5:5f:74:33:c4:7e:95:12:c2:d2:70:19:cf:47:58: 6c:c8:44:d2:89:ea:d6:e3:fa:4a:9d:73:e4:03:6c: cd:0a:1d:eb:4f:c3:f5:ce:77:69:4b:54:0c:f1:f2: dd:97:e2:a1:77:c3:9b:14:0a:d9:8f:ff:54:a7:4c: b7:65:bb:7c:dc:ae:dc:cb:a2:ba:81:e0:1a:5a:4f: f8:f6:17:ae:2b:c9:1a:4d:d4:20:8a:e9:b3:58:5a: 43:9b:b0:d7:2c:f7:7d:76:fc:4e:b1:22:c3:2d:59: 33:fa:c3:8f:2a:06:6d:b1:e9:5a:7a:64:85:0f:56: 24:a3:77:5b:db:b2:c8:b3:a9:b9:f5:5c:2c:2d:07: 83:bb:0b:5a:8b:84:8e:02:d5:c4:e6:70:09:b8:ed: 0e:7d:99:ff:6e:63:b7:6c:47:0c:62:9f:36:1a:ed: 13:f7:9d:2f:ed:61:9c:8d:f8:0e:84:02:dd:bc:c8: 28:f9:5a:6d:4a:f3:73:61:22:1f:89:1b:c4:20:5d: a2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E2:6D:9B:A1:C3:32:02:99:50:E8:B8:CC:84:6A:3E:82:55:90:D4 X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:08:c9:99:7f:e0:b6:37:a8:e8:7c:08:81:7d:e9:b2:0e:05: ef:ad:e6:29:ad:7f:cb:9c:c5:d9:25:22:9d:4a:4b:a0:3e:c9: a5:b7:f7:14:23:e2:52:e9:a1:99:ee:e3:fc:a1:6a:98:be:94: 93:e3:39:59:5f:2d:be:0e:79:d4:f9:08:91:74:1e:f6:76:b2: 4c:09:43:09:81:6a:12:21:33:71:43:bd:e7:79:b9:cd:c2:3a: 56:78:9b:46:ba:ed:56:54:54:53:03:e0:09:84:1a:e6:4c:c0: 1b:49:7e:53:63:45:cc:dc:d5:29:72:1a:6c:80:a6:7c:ae:e6: 29:11:a6:0a:b6:ee:84:1c:7c:5c:d9:48:79:0f:df:fb:06:7b: 10:0b:f2:c8:af:b7:7f:3c:78:ed:27:66:27:19:2c:c9:cc:e4: 1d:e9:92:0b:a9:f7:e4:e7:55:bd:82:f0:3a:8c:fe:02:92:a4: dd:d6:51:05:a1:cd:92:d0:a5:8c:71:ef:71:53:9c:8d:7e:9a: 32:a6:9b:6d:2a:46:3e:71:8a:f3:65:3f:81:d0:91:ef:a3:9a: 03:50:ba:ef:7d:e5:07:fa:d7:83:3b:8b:ae:8c:07:6f:b0:04: d2:66:37:06:6f:52:89:80:b4:30:bf:2f:b8:52:5d:5c:00:65: 53:c5:60:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNiCWr67OXAI48Xn7z7XEdYa9S7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNTEwMjMxOTU2MzFaFw0yNTEwMjYyMjQ5MzFaMDMxMTAvBgNV BAMTKERERTI2RDlCQTFDMzMyMDI5OTUwRThCOENDODQ2QTNFODI1NTkwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBj4cqSj7wXkgBAPa6CqETOao iVJcjsYhCE4QDUlVFoFxDqa48BOu6SgSUa6CAF+mJPRoxGwD9SHmdbVfdDPEfpUS wtJwGc9HWGzIRNKJ6tbj+kqdc+QDbM0KHetPw/XOd2lLVAzx8t2X4qF3w5sUCtmP /1SnTLdlu3zcrtzLorqB4BpaT/j2F64ryRpN1CCK6bNYWkObsNcs9312/E6xIsMt WTP6w48qBm2x6Vp6ZIUPViSjd1vbssizqbn1XCwtB4O7C1qLhI4C1cTmcAm47Q59 mf9uY7dsRwxinzYa7RP3nS/tYZyN+A6EAt28yCj5Wm1K83NhIh+JG8QgXaKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3eJtm6HDMgKZUOi4zIRqPoJVkNQwHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUIyZl/4LY3qOh8CIF96bIOBe+t5imtf8uc xdklIp1KS6A+yaW39xQj4lLpoZnu4/yhapi+lJPjOVlfLb4OedT5CJF0HvZ2skwJ QwmBahIhM3FDved5uc3COlZ4m0a67VZUVFMD4AmEGuZMwBtJflNjRczc1SlyGmyA pnyu5ikRpgq27oQcfFzZSHkP3/sGexAL8sivt388eO0nZicZLMnM5B3pkgup9+Tn Vb2C8DqM/gKSpN3WUQWhzZLQpYxx73FTnI1+mjKmm20qRj5xivNlP4HQke+jmgNQ uu995Qf614M7i66MB2+wBNJmNwZvUomAtDC/L7hSXVwAZVPFYDM= -----END CERTIFICATE-----Generated at Sat Oct 25 16:35:13 2025 by rpki-client