$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: /I6NDnZE+/IAtSUP7IlyIr3DVOouGgKXogchMtKYL8c= Subject key identifier: 3E:81:02:C3:4C:19:61:CC:C0:B3:4E:65:6C:E9:52:C2:09:B8:2A:04 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 472BE77E8856521C2B3E26227195AB14EA05A30D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 01FF Signing time: Wed 23 Apr 2025 05:41:45 +0000 Manifest this update: Wed 23 Apr 2025 05:36:45 +0000 Manifest next update: Sat 26 Apr 2025 15:45:45 +0000 Files and hashes: 1: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: sexqXYVW8ieC6sdlJt/dGasLBkG6h3AUR692knSaF1U=) 2: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: M9Zppi2MH5+ph1ElUfaRZ3RDqJj8ObEL++Wmh03d1Vo=) 3: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: sDxRXCQp0YhA4EUoYPlhgRc1l3DUG/A3owlHLie+cQg=) 4: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: vQcGVK6JhkO4JP+rgl0UnF9Tyyv/ls7fzCiRnSShb9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2b:e7:7e:88:56:52:1c:2b:3e:26:22:71:95:ab:14:ea:05:a3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Apr 23 05:36:45 2025 GMT Not After : Apr 26 15:45:45 2025 GMT Subject: CN=3E8102C34C1961CCC0B34E656CE952C209B82A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:98:90:84:5a:1e:28:c6:6d:ca:e9:21:e1: 85:47:9a:3a:6c:b6:59:d6:26:a7:17:46:1a:37:3a: e8:55:03:03:b8:d9:d6:5f:98:c3:89:bd:36:a5:c8: 91:2c:ea:ee:59:ef:85:6b:b0:43:9f:5d:7a:60:e9: 39:32:3b:7c:c1:d8:ac:ab:ae:e1:4d:bc:06:13:d7: f2:ce:d8:6e:f1:2c:e7:5b:33:bb:ab:f5:64:af:80: dd:a3:ab:2c:6a:f4:86:23:8a:40:9e:2c:ed:54:64: 60:7f:31:f8:24:34:e7:5b:24:6a:e5:95:16:13:58: 86:56:75:57:c3:20:03:ba:bf:c2:44:e0:ee:d4:e0: d5:0b:1a:1e:42:e0:1d:8d:47:01:be:3b:3d:53:b0: c3:f7:e8:2e:05:33:43:75:7a:87:67:c2:29:8f:8e: 52:ce:6f:13:af:05:77:b3:eb:50:b8:21:6f:fd:37: 66:94:15:59:b2:84:2d:8d:6e:ab:09:a2:f1:e8:6b: 9a:c6:f5:93:7d:9f:67:24:42:0c:42:11:70:53:a0: e5:6c:40:fa:83:b5:94:f1:90:56:16:91:d2:b3:32: 0a:c1:15:3c:41:5b:45:9e:40:eb:88:a2:c0:68:53: e8:26:f7:19:c2:45:4c:e6:3e:3b:13:16:d9:4a:fc: 72:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:02:C3:4C:19:61:CC:C0:B3:4E:65:6C:E9:52:C2:09:B8:2A:04 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c8:36:57:be:72:ec:e1:2e:18:50:e2:65:3d:47:e6:80:f1: 68:cf:e2:48:44:d8:7b:4f:01:fe:fa:0d:66:22:ca:db:dc:51: 13:a4:7f:c1:ca:5b:33:3d:97:a3:95:38:d3:5c:63:a5:8f:6c: da:90:5f:d9:b2:f9:cf:2a:ef:f5:08:fd:b3:04:d6:ef:c4:89: 04:bf:c8:80:d0:83:61:50:32:48:6b:f0:80:b8:5a:af:e3:1a: 7a:bd:48:41:a9:12:41:d9:fb:8c:d5:ff:33:d8:be:f6:8d:95: a0:87:42:d4:0c:85:6e:5f:b7:dd:38:23:c6:da:f3:9d:78:90: c9:3e:3a:9b:22:4c:6f:b9:7b:6b:40:ff:61:0d:0e:68:da:f8: 83:4d:80:e8:35:f4:ff:54:5f:e8:fb:53:f5:4a:f0:f4:85:48: 8f:3e:bf:04:e7:21:a1:f3:83:e7:9f:f4:bf:f6:fc:94:55:6e: 08:ad:77:e6:6a:8a:8e:ce:d5:d4:4e:f7:8a:35:a3:95:a8:2d: d5:8a:cf:fe:fa:fa:97:db:06:3e:0b:5c:be:c8:65:51:ef:00: f8:79:a8:0c:48:43:a1:e9:91:1d:e8:c8:1d:b1:2f:b8:6e:86: 46:53:82:ef:c7:bc:1a:56:95:b4:c8:90:67:87:d1:6f:c2:3b: ca:24:ca:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyvnfohWUhwrPiYicZWrFOoFow0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTA0MjMwNTM2NDVaFw0yNTA0MjYxNTQ1NDVaMDMxMTAvBgNV BAMTKDNFODEwMkMzNEMxOTYxQ0NDMEIzNEU2NTZDRTk1MkMyMDlCODJBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyZiQhFoeKMZtyukh4YVHmjps tlnWJqcXRho3OuhVAwO42dZfmMOJvTalyJEs6u5Z74VrsEOfXXpg6TkyO3zB2Kyr ruFNvAYT1/LO2G7xLOdbM7ur9WSvgN2jqyxq9IYjikCeLO1UZGB/MfgkNOdbJGrl lRYTWIZWdVfDIAO6v8JE4O7U4NULGh5C4B2NRwG+Oz1TsMP36C4FM0N1eodnwimP jlLObxOvBXez61C4IW/9N2aUFVmyhC2NbqsJovHoa5rG9ZN9n2ckQgxCEXBToOVs QPqDtZTxkFYWkdKzMgrBFTxBW0WeQOuIosBoU+gm9xnCRUzmPjsTFtlK/HKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPoECw0wZYczAs05lbOlSwgm4KgQwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3INle+cuzhLhhQ4mU9R+aA8WjP4khE2HtP Af76DWYiytvcUROkf8HKWzM9l6OVONNcY6WPbNqQX9my+c8q7/UI/bME1u/EiQS/ yIDQg2FQMkhr8IC4Wq/jGnq9SEGpEkHZ+4zV/zPYvvaNlaCHQtQMhW5ft904I8ba 8514kMk+OpsiTG+5e2tA/2ENDmja+INNgOg19P9UX+j7U/VK8PSFSI8+vwTnIaHz g+ef9L/2/JRVbgitd+Zqio7O1dRO94o1o5WoLdWKz/76+pfbBj4LXL7IZVHvAPh5 qAxIQ6HpkR3oyB2xL7huhkZTgu/HvBpWlbTIkGeH0W/CO8okyrc= -----END CERTIFICATE-----Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net