$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: D7sHNrl6X3NRSGjjJJBow9RE/p4dsxd86UqJdrqEJPE= Subject key identifier: 56:C9:7F:D4:22:80:AC:43:38:65:78:59:0C:DA:7B:C9:EF:8F:FD:E6 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 6EB55AB2E532D0B60F95661346D87AFCB4710008 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 0346 Signing time: Sun 06 Apr 2025 03:40:59 +0000 Manifest this update: Sun 06 Apr 2025 03:35:59 +0000 Manifest next update: Wed 09 Apr 2025 08:49:59 +0000 Files and hashes: 1: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) 2: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: Xa8cjmzRfHv/N4k3bWwtaOB2aQfUj9AoqGzulVVL0s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 08:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b5:5a:b2:e5:32:d0:b6:0f:95:66:13:46:d8:7a:fc:b4:71:00:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Apr 6 03:35:59 2025 GMT Not After : Apr 9 08:49:59 2025 GMT Subject: CN=56C97FD42280AC43386578590CDA7BC9EF8FFDE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:2b:bf:b3:e3:a7:f1:4a:5f:d2:ca:7b:64: 40:a3:32:bb:af:7e:30:d4:33:c0:00:c5:fc:ea:56: 02:76:52:98:4d:7b:c9:5b:93:04:6b:9c:54:71:df: 12:4d:b8:ff:97:2c:8b:4f:a4:e7:22:b1:64:66:6b: e8:26:a6:b4:34:eb:aa:6a:b6:4d:84:9e:f7:71:e9: d0:cb:62:56:d1:73:4e:46:31:b8:14:b5:1c:66:3c: b0:d6:a9:e4:20:bd:aa:e3:49:9c:b0:02:0c:1c:ee: 05:b5:d8:d4:8f:9e:66:be:5f:35:b0:3f:e3:b5:25: 15:46:8d:a0:c7:2b:a0:79:da:06:55:84:80:0e:a0: 46:d4:d2:ce:95:4b:f2:30:88:49:4a:52:0c:a8:1d: a9:f4:29:45:2b:17:f6:d0:0c:35:96:60:70:32:e3: 84:d9:53:4f:aa:aa:0b:59:2c:d6:5f:07:a3:5b:fd: 9d:14:1a:68:1e:03:4f:e3:23:44:93:c1:cd:b1:4e: 59:c7:01:7f:87:69:3e:dd:f5:c2:d2:47:bd:f8:b1: af:da:5a:b1:9d:b6:bb:76:23:f7:68:4b:6a:4a:c1: fd:b3:52:9b:b7:a1:9a:44:f1:79:f2:da:23:b2:64: d9:2d:a8:2a:08:71:21:87:9c:dd:e8:45:25:14:58: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C9:7F:D4:22:80:AC:43:38:65:78:59:0C:DA:7B:C9:EF:8F:FD:E6 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:85:db:18:f2:41:30:9e:49:49:f8:93:98:56:b7:2c:f7:9a: f1:69:10:7d:24:19:ce:82:1c:eb:02:50:ea:c6:0c:60:be:59: d3:5c:28:43:9e:4a:18:df:b8:73:57:e6:27:a3:9e:8e:3d:48: c9:e8:e9:89:e0:98:52:84:da:6e:e2:3a:c3:5a:26:5b:42:be: 36:29:6f:4f:68:2d:65:a7:79:d1:5b:fc:7f:5c:dc:3b:de:e8: ab:19:73:58:40:37:8f:15:59:15:6a:cb:b6:df:b1:2b:cc:2a: 87:be:7a:47:7e:70:36:77:2e:80:8b:28:24:ac:ce:c5:b1:3f: 85:c2:72:bd:84:13:ba:37:56:fa:f3:0c:d1:20:4e:96:f9:52: 1c:4f:43:79:03:41:06:e9:dc:08:ec:26:ab:51:da:0c:e7:e5: 2e:02:f7:78:bc:33:0c:ef:1f:8b:56:6c:a1:5d:65:27:1e:4c: 06:cb:10:cf:db:77:ff:b2:46:de:e4:89:4b:bc:01:f9:42:4c: 96:62:4e:b0:ed:3e:5a:22:bb:43:70:f4:27:05:06:55:2a:bc: 80:77:c1:bf:f1:65:f6:a2:1a:86:d9:52:71:e1:61:c3:87:8f: b8:10:bb:71:7e:13:61:f1:b2:41:e8:29:41:bf:68:84:72:4a: 70:56:c0:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrVasuUy0LYPlWYTRth6/LRxAAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTA0MDYwMzM1NTlaFw0yNTA0MDkwODQ5NTlaMDMxMTAvBgNV BAMTKDU2Qzk3RkQ0MjI4MEFDNDMzODY1Nzg1OTBDREE3QkM5RUY4RkZERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgjiu/s+On8Upf0sp7ZECjMruv fjDUM8AAxfzqVgJ2UphNe8lbkwRrnFRx3xJNuP+XLItPpOcisWRma+gmprQ066pq tk2Envdx6dDLYlbRc05GMbgUtRxmPLDWqeQgvarjSZywAgwc7gW12NSPnma+XzWw P+O1JRVGjaDHK6B52gZVhIAOoEbU0s6VS/IwiElKUgyoHan0KUUrF/bQDDWWYHAy 44TZU0+qqgtZLNZfB6Nb/Z0UGmgeA0/jI0STwc2xTlnHAX+HaT7d9cLSR734sa/a WrGdtrt2I/doS2pKwf2zUpu3oZpE8Xny2iOyZNktqCoIcSGHnN3oRSUUWP/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVsl/1CKArEM4ZXhZDNp7ye+P/eYwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCF2xjyQTCeSUn4k5hWtyz3mvFpEH0kGc6C HOsCUOrGDGC+WdNcKEOeShjfuHNX5iejno49SMno6YngmFKE2m7iOsNaJltCvjYp b09oLWWnedFb/H9c3Dve6KsZc1hAN48VWRVqy7bfsSvMKoe+ekd+cDZ3LoCLKCSs zsWxP4XCcr2EE7o3VvrzDNEgTpb5UhxPQ3kDQQbp3AjsJqtR2gzn5S4C93i8Mwzv H4tWbKFdZSceTAbLEM/bd/+yRt7kiUu8AflCTJZiTrDtPloiu0Nw9CcFBlUqvIB3 wb/xZfaiGobZUnHhYcOHj7gQu3F+E2HxskHoKUG/aIRySnBWwOw= -----END CERTIFICATE-----Generated at Mon Apr 7 16:16:58 2025 by rpki-client