$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: ZM7ZccCefY7huyl9vAfdZVmHDV1riQhbNa+XlguIPms= Subject key identifier: E1:E9:7A:1F:C1:82:84:E3:82:D2:77:E2:2D:34:F7:9F:CB:4A:21:CB Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 592DC789BCF519BAFC370194A7226993C69FEA7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 021D Signing time: Sat 06 Sep 2025 23:42:04 +0000 Manifest this update: Sat 06 Sep 2025 23:37:04 +0000 Manifest next update: Wed 10 Sep 2025 10:09:04 +0000 Files and hashes: 1: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: +FhC96CbulaIENr/TNCeXtRPdSsQxbPlmoBC5rak2eM=) 2: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: uU+9x3F5Wh10f2yBN/1eDuWO0H9Ms5DAoMSr38lZ7RI=) 3: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: PoUfFWTvv28uKyrYeaMh3T/jvxQb6hulFIaz7fVYPTw=) 4: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: ZRfsCQv1mcZoiRSwy7LI1d6CoRcsZN8L2GBIckM4y/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2d:c7:89:bc:f5:19:ba:fc:37:01:94:a7:22:69:93:c6:9f:ea:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Sep 6 23:37:04 2025 GMT Not After : Sep 10 10:09:04 2025 GMT Subject: CN=E1E97A1FC18284E382D277E22D34F79FCB4A21CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:ef:cf:c9:aa:e0:c2:ec:c3:1d:9b:e1:dd: b6:9a:05:a0:e7:0d:8c:a3:5e:9d:3c:70:94:1b:46: 92:b6:40:14:de:a4:42:d4:0e:2b:b7:fa:45:fa:10: 44:4b:b4:42:38:6b:72:16:f5:07:f8:7d:f4:12:fd: ef:77:4e:72:7e:89:66:be:af:41:5e:11:13:6a:6f: cd:ab:e2:25:55:da:1f:c1:d2:c0:6e:df:0c:be:e0: 48:24:50:e7:16:e9:84:69:c2:16:14:2f:36:c6:e1: 2d:43:6f:35:1a:2e:ae:87:12:83:4d:d8:48:b1:b6: 75:02:19:d2:52:0e:9d:4f:52:f9:4a:60:93:b2:7d: 46:26:29:6f:e3:fc:1c:81:db:af:12:31:5f:13:e2: 68:34:fd:67:56:0f:c5:75:0e:4d:1b:eb:87:93:c9: c7:35:c7:25:61:cb:df:2f:d0:b6:e6:57:f4:1f:a4: 36:0b:06:28:65:21:6e:e2:b4:0d:8e:6b:4a:12:70: db:e0:92:a8:71:28:8a:08:75:05:72:6d:32:56:c1: 8b:68:a3:8f:ab:07:9d:b4:00:23:9f:d9:e7:7f:59: ad:c1:3f:52:09:9c:25:a0:2f:cc:17:d1:52:c1:98: 3a:49:8c:ed:d9:e0:a1:ee:3e:1a:d1:c4:8b:d4:ce: c1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E9:7A:1F:C1:82:84:E3:82:D2:77:E2:2D:34:F7:9F:CB:4A:21:CB X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:9e:f6:a7:77:2c:7b:36:d2:66:68:45:03:64:f8:60:f2:7e: d0:1a:01:08:e6:c5:6f:18:c5:d8:5d:2d:9f:88:a9:93:47:e8: 32:34:82:73:d9:38:f7:f5:54:c9:58:70:22:f3:ea:96:af:81: 82:db:45:4f:c5:bc:96:54:38:26:8f:7f:36:16:0a:fa:6f:1e: 39:9c:1c:95:6a:06:74:b4:29:19:7c:05:ac:a8:55:07:99:ae: 4e:da:d3:3a:04:b9:86:40:e7:cd:ee:fb:f8:df:61:87:d3:9e: 9d:8c:2a:04:ee:1e:e0:cc:13:e7:78:ff:0b:7d:f0:5b:ae:90: 9f:f9:02:56:7d:55:23:4a:95:19:08:54:e6:44:4b:73:0f:bb: a8:12:1f:57:84:a7:d0:58:d8:b8:08:95:84:34:c0:ca:2b:b4: 7f:21:ef:b7:9d:83:e0:3c:22:82:9b:7b:8e:7b:44:97:f0:4f: 7f:e1:e7:7e:93:d3:d9:f6:70:60:f6:dd:d0:1b:d7:b3:65:20: 7f:99:9d:3a:74:08:5b:ab:d8:5a:8a:56:73:ea:e2:88:7e:c3: de:6c:b9:3a:c7:18:8f:2e:86:a9:9c:f5:c5:2c:48:69:51:5e: 5a:25:6f:ae:20:f7:6b:f8:ff:87:a1:59:2b:23:02:9d:d3:41: 98:1e:65:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWS3Hibz1Gbr8NwGUpyJpk8af6nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNTA5MDYyMzM3MDRaFw0yNTA5MTAxMDA5MDRaMDMxMTAvBgNV BAMTKEUxRTk3QTFGQzE4Mjg0RTM4MkQyNzdFMjJEMzRGNzlGQ0I0QTIxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfe/PyargwuzDHZvh3baaBaDn DYyjXp08cJQbRpK2QBTepELUDiu3+kX6EERLtEI4a3IW9Qf4ffQS/e93TnJ+iWa+ r0FeERNqb82r4iVV2h/B0sBu3wy+4EgkUOcW6YRpwhYULzbG4S1DbzUaLq6HEoNN 2EixtnUCGdJSDp1PUvlKYJOyfUYmKW/j/ByB268SMV8T4mg0/WdWD8V1Dk0b64eT ycc1xyVhy98v0LbmV/QfpDYLBihlIW7itA2Oa0oScNvgkqhxKIoIdQVybTJWwYto o4+rB520ACOf2ed/Wa3BP1IJnCWgL8wX0VLBmDpJjO3Z4KHuPhrRxIvUzsHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4el6H8GChOOC0nfiLTT3n8tKIcswHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASe9qd3LHs20mZoRQNk+GDyftAaAQjmxW8Y xdhdLZ+IqZNH6DI0gnPZOPf1VMlYcCLz6pavgYLbRU/FvJZUOCaPfzYWCvpvHjmc HJVqBnS0KRl8BayoVQeZrk7a0zoEuYZA583u+/jfYYfTnp2MKgTuHuDME+d4/wt9 8FuukJ/5AlZ9VSNKlRkIVOZES3MPu6gSH1eEp9BY2LgIlYQ0wMortH8h77edg+A8 IoKbe457RJfwT3/h536T09n2cGD23dAb17NlIH+ZnTp0CFur2FqKVnPq4oh+w95s uTrHGI8uhqmc9cUsSGlRXlolb64g92v4/4ehWSsjAp3TQZgeZSM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:14 2025 by rpki-client