$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: aPsFCW5H7uWxT45p7ilz9QoXfUvT9165qVDbqPC+W6s= Subject key identifier: 7B:4A:32:23:17:4F:90:FD:6E:6A:61:67:DB:6D:85:93:AD:9F:1B:77 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 6DB7B8711A781B5469DAD8E765CCB67D51D15A92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 0360 Signing time: Thu 05 Jun 2025 01:51:03 +0000 Manifest this update: Thu 05 Jun 2025 01:46:03 +0000 Manifest next update: Sun 08 Jun 2025 11:55:03 +0000 Files and hashes: 1: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) 2: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: dCx9+lSxVFA82S55A/Ih/45glDu4Z7ANETE/R8HUQPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 11:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b7:b8:71:1a:78:1b:54:69:da:d8:e7:65:cc:b6:7d:51:d1:5a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Jun 5 01:46:03 2025 GMT Not After : Jun 8 11:55:03 2025 GMT Subject: CN=7B4A3223174F90FD6E6A6167DB6D8593AD9F1B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8a:09:a1:f9:32:dc:2d:35:95:f9:43:66:61: 59:d2:c3:54:51:4b:48:ca:12:dd:89:29:b9:16:2b: 16:61:eb:ae:91:7a:bd:7c:0c:9b:ca:50:b2:37:35: 3b:47:65:38:b2:f2:4b:42:a2:93:46:b4:58:d7:a6: 56:dc:bf:83:19:45:af:87:09:a7:07:d0:37:14:5e: 91:41:b8:3e:d6:81:18:25:ac:1e:ff:de:20:7f:a7: a3:c3:2a:d5:89:27:5e:d2:c0:9b:90:81:5d:b8:1f: 8f:0f:07:76:73:72:f5:30:30:2a:c9:50:67:c5:23: 9c:4f:0b:0e:95:91:22:02:d0:f5:d1:6d:9b:c7:f7: 96:64:5d:fe:5a:55:03:2e:2c:cf:cc:35:9c:24:aa: c5:c0:81:f2:a7:1b:d1:b2:60:e9:3e:fd:16:da:eb: 2d:40:94:e6:c5:fc:80:28:db:42:b4:6a:12:c4:5e: e0:95:72:a5:d2:cb:bf:db:96:4f:15:35:40:30:2a: 8b:6e:03:df:9f:c4:d4:b7:d5:20:43:ff:72:d6:ee: 1c:0f:0c:ca:4f:55:b1:09:09:d7:ea:05:d4:13:00: 8a:df:65:6a:60:23:65:7a:ba:44:3a:1e:76:44:db: 0b:8f:9a:42:cb:de:2d:a3:2d:db:5d:1d:ff:27:4b: 02:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4A:32:23:17:4F:90:FD:6E:6A:61:67:DB:6D:85:93:AD:9F:1B:77 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b0:d3:5d:3f:7a:27:2e:9a:56:b3:8c:9d:0c:b5:46:2a:ab: 45:47:86:d8:ea:17:7e:f1:bf:1d:be:07:ee:86:a1:fd:11:59: 2e:a1:ed:cc:8a:f9:00:53:64:8b:59:49:21:ce:65:e3:f3:4e: 43:34:dc:f7:65:fe:9e:14:f0:13:1a:05:1e:e5:ec:90:57:de: 20:fc:8e:d9:0e:2c:84:d9:12:1b:3e:f7:54:c8:20:97:5d:4c: c1:e7:4c:ca:c4:12:71:4a:40:bc:a7:57:10:84:5f:91:34:d8: 61:db:34:94:a0:45:e7:47:14:62:f9:69:ce:48:4d:31:e7:2d: 6b:b5:14:cd:03:f5:cd:5a:74:56:7d:8c:bd:ce:b7:4f:9c:24: c5:3a:8f:89:6d:ef:22:ca:2e:c2:bd:c8:d0:18:54:27:7b:86: ea:2f:7c:7c:fe:4b:59:b9:d4:84:51:02:c4:ef:92:ce:8e:f6: ff:59:fc:ee:99:cb:1b:05:ee:d4:ff:2a:bb:79:7b:79:b2:dd: 37:b3:2b:07:5c:36:f9:d5:9a:56:23:87:8a:cf:c1:90:47:9d: c5:04:3d:fe:83:49:8a:34:02:4b:8c:c6:21:30:5c:06:2a:1c: cd:f0:ec:2c:38:2b:66:8c:30:bd:e0:5a:56:2d:7e:89:86:6f: 7c:0d:0a:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbbe4cRp4G1Rp2tjnZcy2fVHRWpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTA2MDUwMTQ2MDNaFw0yNTA2MDgxMTU1MDNaMDMxMTAvBgNV BAMTKDdCNEEzMjIzMTc0RjkwRkQ2RTZBNjE2N0RCNkQ4NTkzQUQ5RjFCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjigmh+TLcLTWV+UNmYVnSw1RR S0jKEt2JKbkWKxZh666Rer18DJvKULI3NTtHZTiy8ktCopNGtFjXplbcv4MZRa+H CacH0DcUXpFBuD7WgRglrB7/3iB/p6PDKtWJJ17SwJuQgV24H48PB3ZzcvUwMCrJ UGfFI5xPCw6VkSIC0PXRbZvH95ZkXf5aVQMuLM/MNZwkqsXAgfKnG9GyYOk+/Rba 6y1AlObF/IAo20K0ahLEXuCVcqXSy7/blk8VNUAwKotuA9+fxNS31SBD/3LW7hwP DMpPVbEJCdfqBdQTAIrfZWpgI2V6ukQ6HnZE2wuPmkLL3i2jLdtdHf8nSwK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe0oyIxdPkP1uamFn222Fk62fG3cwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKw010/eicumlazjJ0MtUYqq0VHhtjqF37x vx2+B+6Gof0RWS6h7cyK+QBTZItZSSHOZePzTkM03Pdl/p4U8BMaBR7l7JBX3iD8 jtkOLITZEhs+91TIIJddTMHnTMrEEnFKQLynVxCEX5E02GHbNJSgRedHFGL5ac5I TTHnLWu1FM0D9c1adFZ9jL3Ot0+cJMU6j4lt7yLKLsK9yNAYVCd7huovfHz+S1m5 1IRRAsTvks6O9v9Z/O6ZyxsF7tT/Krt5e3my3TezKwdcNvnVmlYjh4rPwZBHncUE Pf6DSYo0AkuMxiEwXAYqHM3w7Cw4K2aMML3gWlYtfomGb3wNCq4= -----END CERTIFICATE-----Generated at Fri Jun 6 17:09:13 2025 by rpki-client