$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: 78YdvoS/N268ZAFLwVUWCElLV7j4q0rmxzS0Ve4IRKQ= Subject key identifier: B9:6C:67:52:3D:BC:B8:E5:9F:A9:0D:5B:05:93:04:2E:EB:A2:7B:68 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 787D30615EE6A222C9B5001657428776B77C2007 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 038A Signing time: Sat 06 Sep 2025 22:51:01 +0000 Manifest this update: Sat 06 Sep 2025 22:46:01 +0000 Manifest next update: Wed 10 Sep 2025 01:54:01 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: inoYz5PN3tnW6eopNF4Q3QRLOqbBUpHvz5a6QsVOMk8=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7d:30:61:5e:e6:a2:22:c9:b5:00:16:57:42:87:76:b7:7c:20:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Sep 6 22:46:01 2025 GMT Not After : Sep 10 01:54:01 2025 GMT Subject: CN=B96C67523DBCB8E59FA90D5B0593042EEBA27B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:18:44:a4:8e:9e:54:47:13:ef:5f:84:ef: aa:b4:d6:c9:80:23:2a:2f:40:ac:11:27:88:44:7a: 5b:5e:18:a8:ee:5e:17:1d:79:cb:63:5d:0f:5e:b2: b6:d7:65:42:98:dc:ce:85:9c:3c:61:f6:9b:b8:ff: 63:3e:2a:e9:01:4d:62:d4:b0:7d:97:b9:ab:6f:51: 90:7e:a3:4e:e3:8b:f9:df:3d:95:f4:bf:66:79:63: 3e:f8:42:9b:85:70:a7:96:27:32:a6:c2:3c:e2:6b: 29:8f:2f:a0:67:78:87:2f:23:f4:4a:6e:ed:7c:35: 94:14:14:bf:09:b2:a5:a0:68:8e:ab:d7:7b:04:7e: eb:38:99:9a:44:d8:bf:b3:46:71:fb:4e:06:e0:00: 50:7e:af:f6:cb:70:8a:b2:73:4c:d6:3c:f6:34:02: cb:d7:03:fb:23:d6:c2:ec:d4:6f:0d:42:0e:63:f9: ba:9e:91:a8:78:2b:a7:0a:bb:88:85:04:1d:a6:2e: 13:2d:de:22:7d:52:ca:c3:63:6e:9a:53:c0:3e:aa: 41:91:f4:15:25:13:72:7d:11:67:33:88:c6:ca:a1: a3:fb:11:b2:8b:8c:9c:70:c6:e0:eb:8d:80:2d:3b: e6:2d:8b:b8:b1:71:30:c5:c9:60:5a:15:2b:c8:02: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6C:67:52:3D:BC:B8:E5:9F:A9:0D:5B:05:93:04:2E:EB:A2:7B:68 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e5:e0:f8:84:c0:b9:ad:1f:09:de:33:2a:4d:b9:97:29:4a: 45:57:31:9d:ec:80:35:4a:1c:02:81:21:a7:54:c9:4a:50:91: 8d:7b:86:9f:99:7a:2d:9e:26:bd:64:0e:5b:31:20:34:60:ef: 31:a4:7f:33:17:3f:1d:89:b2:90:b3:c8:f6:bb:1a:6c:02:7c: 9d:9e:10:8b:7e:85:fa:a0:59:7d:f6:04:01:ec:3c:86:2f:22: 51:5e:58:c7:3a:af:9b:7e:91:97:ed:a9:9b:ef:a1:39:24:0f: ef:f6:11:92:13:97:51:9d:59:c3:d6:1d:8a:2e:e4:67:2c:3d: 5d:9b:41:e9:1b:6d:2d:43:df:fc:27:e2:0c:ba:c4:17:45:5c: 0a:49:33:b4:8b:8b:89:88:38:dd:c4:35:3d:e9:b3:71:3e:90: f2:f8:95:6d:e2:ed:a7:18:d0:61:43:ca:18:40:82:6f:6a:00: 97:ab:83:f1:cb:af:b0:7c:19:8e:3c:ab:b7:88:15:09:2c:c7: cf:d1:31:4c:d7:24:fb:6a:81:e8:ab:42:fe:b7:0c:60:a5:54: 32:9a:09:e9:e7:5e:6c:03:e4:2b:96:66:7e:23:21:02:5b:e1: 2c:b9:12:56:51:2c:33:a0:e2:1e:8e:bb:24:21:e7:c0:69:c0: 20:1b:17:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeH0wYV7moiLJtQAWV0KHdrd8IAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTA5MDYyMjQ2MDFaFw0yNTA5MTAwMTU0MDFaMDMxMTAvBgNV BAMTKEI5NkM2NzUyM0RCQ0I4RTU5RkE5MEQ1QjA1OTMwNDJFRUJBMjdCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfaBhEpI6eVEcT71+E76q01smA IyovQKwRJ4hEelteGKjuXhcdectjXQ9esrbXZUKY3M6FnDxh9pu4/2M+KukBTWLU sH2XuatvUZB+o07ji/nfPZX0v2Z5Yz74QpuFcKeWJzKmwjziaymPL6BneIcvI/RK bu18NZQUFL8JsqWgaI6r13sEfus4mZpE2L+zRnH7TgbgAFB+r/bLcIqyc0zWPPY0 AsvXA/sj1sLs1G8NQg5j+bqekah4K6cKu4iFBB2mLhMt3iJ9UsrDY26aU8A+qkGR 9BUlE3J9EWcziMbKoaP7EbKLjJxwxuDrjYAtO+Yti7ixcTDFyWBaFSvIAqYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWxnUj28uOWfqQ1bBZMELuuie2gwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3l4PiEwLmtHwneMypNuZcpSkVXMZ3sgDVK HAKBIadUyUpQkY17hp+Zei2eJr1kDlsxIDRg7zGkfzMXPx2JspCzyPa7GmwCfJ2e EIt+hfqgWX32BAHsPIYvIlFeWMc6r5t+kZftqZvvoTkkD+/2EZITl1GdWcPWHYou 5GcsPV2bQekbbS1D3/wn4gy6xBdFXApJM7SLi4mION3ENT3ps3E+kPL4lW3i7acY 0GFDyhhAgm9qAJerg/HLr7B8GY48q7eIFQksx8/RMUzXJPtqgeirQv63DGClVDKa CennXmwD5CuWZn4jIQJb4Sy5ElZRLDOg4h6OuyQh58BpwCAbF8I= -----END CERTIFICATE-----Generated at Tue Sep 9 02:07:29 2025 by rpki-client