$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: IJOLuFUM/zMklgyPYmCIUP6XpXenaELBf+vAt4geQL8= Subject key identifier: C3:9B:4E:8C:36:64:A5:35:C3:BD:BC:AB:75:73:B9:34:65:D7:52:24 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 0A601EAE885820B525F7E488B81A32C657EF5F16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 03A3 Signing time: Fri 31 Oct 2025 21:32:02 +0000 Manifest this update: Fri 31 Oct 2025 21:27:02 +0000 Manifest next update: Tue 04 Nov 2025 05:54:02 +0000 Files and hashes: 1: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) 2: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: rvb7xb7y1AXy1rk/nHBGZgZqeubK1fcjv83IWzmspLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 05:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:60:1e:ae:88:58:20:b5:25:f7:e4:88:b8:1a:32:c6:57:ef:5f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Oct 31 21:27:02 2025 GMT Not After : Nov 4 05:54:02 2025 GMT Subject: CN=C39B4E8C3664A535C3BDBCAB7573B93465D75224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:2d:fa:b2:4d:73:26:3a:93:fc:bc:6c:da: 47:56:9a:cb:b9:6b:d0:ab:e3:63:6a:d3:68:20:81: 39:f5:92:72:2b:5c:68:c2:0b:77:3f:4a:80:56:3d: 34:2b:10:6e:76:03:98:18:3f:3b:bc:43:e9:71:70: 89:ab:f2:a2:33:88:98:96:ef:21:20:38:c0:73:38: 7e:3f:d6:e8:c9:fb:bc:65:f8:2d:51:a1:93:11:5a: c0:cb:d5:eb:c1:c9:3d:1a:e4:e9:9c:46:50:88:2f: 1e:65:77:fd:25:bc:6f:a0:fe:8f:91:a0:a9:6a:b4: 05:dc:71:11:78:cf:6d:55:ad:2d:74:b7:50:7f:cb: e3:83:92:2d:97:32:d9:06:20:cb:22:84:c6:0d:31: 21:1a:38:4d:6d:77:b8:45:3e:c5:bf:3d:fa:6b:61: c7:48:b0:d4:0d:58:63:e2:8c:ef:82:b5:76:6e:c4: 77:32:8d:6e:ad:36:4b:de:0a:52:8b:56:fa:af:9e: 7a:00:18:95:d7:b5:96:a9:1e:2b:34:e8:5a:59:8c: b4:f9:c7:a9:17:b9:5d:fb:c4:dc:9a:2b:41:48:dd: 1f:17:f1:3b:34:8b:56:dc:be:45:24:32:15:b8:45: 48:5b:bb:f6:95:cd:ec:d5:2b:17:cc:3c:f5:93:46: 9d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9B:4E:8C:36:64:A5:35:C3:BD:BC:AB:75:73:B9:34:65:D7:52:24 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:aa:d5:b2:e7:34:fd:a2:c3:ee:c8:c4:74:80:ef:43:f3:a9: a2:4c:39:93:03:af:ef:39:02:df:12:59:c1:48:89:a6:5c:63: 00:bf:6f:7c:41:88:18:56:8a:35:d4:ff:e3:7e:dc:76:fe:59: f5:5d:5b:2b:bb:5c:cf:22:3c:6f:bf:5e:0e:29:58:4a:80:3e: 44:97:23:56:40:72:ab:d1:b0:f1:5c:b1:0a:79:43:b1:6e:2d: 39:09:92:a3:74:30:7d:10:27:f0:ff:6f:27:84:47:b1:11:ff: cb:89:80:f2:ce:08:89:c9:14:da:0d:b7:b7:9a:98:c6:b0:06: d5:0b:cc:35:5c:15:0b:c7:87:ac:47:e5:21:2d:28:23:73:c6: a7:9e:b2:53:3e:c7:a3:09:6a:15:69:f2:1e:87:dc:1d:26:a5: b7:ca:bd:10:a2:d2:5b:52:37:09:88:f6:c2:78:e7:76:6f:73: 67:9b:dd:05:89:f2:b1:4b:6f:e1:c1:fb:50:67:01:c6:58:80: d8:e1:39:5b:b8:bc:3a:18:dc:6e:6c:80:5f:fe:5e:23:90:93: 43:eb:c0:80:b8:1e:67:9f:45:64:05:63:e6:ca:74:25:a6:22: 86:12:6e:b3:7a:d2:14:75:de:2b:26:c7:bf:ae:42:fa:c6:7c: 7d:13:01:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmAerohYILUl9+SIuBoyxlfvXxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTEwMzEyMTI3MDJaFw0yNTExMDQwNTU0MDJaMDMxMTAvBgNV BAMTKEMzOUI0RThDMzY2NEE1MzVDM0JEQkNBQjc1NzNCOTM0NjVENzUyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Si36sk1zJjqT/Lxs2kdWmsu5 a9Cr42Nq02gggTn1knIrXGjCC3c/SoBWPTQrEG52A5gYPzu8Q+lxcImr8qIziJiW 7yEgOMBzOH4/1ujJ+7xl+C1RoZMRWsDL1evByT0a5OmcRlCILx5ld/0lvG+g/o+R oKlqtAXccRF4z21VrS10t1B/y+ODki2XMtkGIMsihMYNMSEaOE1td7hFPsW/Pfpr YcdIsNQNWGPijO+CtXZuxHcyjW6tNkveClKLVvqvnnoAGJXXtZapHis06FpZjLT5 x6kXuV37xNyaK0FI3R8X8Ts0i1bcvkUkMhW4RUhbu/aVzezVKxfMPPWTRp3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw5tOjDZkpTXDvbyrdXO5NGXXUiQwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6q1bLnNP2iw+7IxHSA70PzqaJMOZMDr+85 At8SWcFIiaZcYwC/b3xBiBhWijXU/+N+3Hb+WfVdWyu7XM8iPG+/Xg4pWEqAPkSX I1ZAcqvRsPFcsQp5Q7FuLTkJkqN0MH0QJ/D/byeER7ER/8uJgPLOCInJFNoNt7ea mMawBtULzDVcFQvHh6xH5SEtKCNzxqeeslM+x6MJahVp8h6H3B0mpbfKvRCi0ltS NwmI9sJ453Zvc2eb3QWJ8rFLb+HB+1BnAcZYgNjhOVu4vDoY3G5sgF/+XiOQk0Pr wIC4HmefRWQFY+bKdCWmIoYSbrN60hR13ismx7+uQvrGfH0TAYE= -----END CERTIFICATE-----Generated at Sun Nov 2 06:19:07 2025 by rpki-client