$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: jhfO0wA5Ch7q+WghyEvo9BPcZCq5674KM/7OkndVfeQ= Subject key identifier: 03:29:34:0B:FA:32:9C:99:7E:B3:C5:AD:7E:4B:E4:88:ED:74:16:72 Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 791C2E14AF6F8C49546FB3A4370C776266FB53CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 01EE Signing time: Sun 29 Jun 2025 08:41:42 +0000 Manifest this update: Sun 29 Jun 2025 08:36:42 +0000 Manifest next update: Wed 02 Jul 2025 19:35:42 +0000 Files and hashes: 1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: cysF7ssXze2g0YAyOU8mDCHZNs5tuem9nxXU/tWzjMI=) 2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: FXE5GAFeqGpeEgNYhdu+NiOVWPi7nwVOKlyxLEU4cy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1c:2e:14:af:6f:8c:49:54:6f:b3:a4:37:0c:77:62:66:fb:53:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Jun 29 08:36:42 2025 GMT Not After : Jul 2 19:35:42 2025 GMT Subject: CN=0329340BFA329C997EB3C5AD7E4BE488ED741672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:ca:56:5a:c6:8e:e0:e8:5a:3f:34:eb:ee: ed:c8:90:bc:ef:07:82:5f:6b:33:c9:a0:bf:4d:28: ec:ac:52:67:9b:2a:de:0b:2b:8c:59:dd:79:6c:36: dc:55:10:49:c1:3d:6b:94:83:a3:74:49:6e:ce:b7: 3a:75:70:f1:21:20:af:53:0c:9f:ce:b5:9a:8b:0d: 0c:de:8e:21:4b:57:39:7a:09:e0:b1:6f:f4:76:35: bc:79:6f:dd:df:6c:bb:94:c4:ef:37:76:5e:87:25: be:1a:9a:fa:15:78:8c:af:6c:54:e3:b8:3a:59:5f: da:5b:09:2f:05:a1:f3:f8:d7:7b:3a:67:bf:37:ac: 7c:a7:a3:c5:4f:9a:27:8c:36:01:8a:17:61:32:64: de:7c:5a:28:36:6d:79:91:e4:7e:e9:a9:8e:41:78: a4:97:80:49:ae:91:6d:6e:06:ff:75:ad:b3:91:cb: 3c:25:a8:2f:be:02:2f:96:5b:df:5f:60:60:35:f4: 9e:45:b5:44:3a:79:bb:63:ac:08:7c:af:fd:e3:d2: fb:3c:dd:15:0c:da:7c:74:69:e6:53:85:19:75:f6: bd:9a:45:8e:1d:fa:f4:4e:ca:60:c6:8f:57:77:a4: 46:34:e7:18:ef:7a:cc:10:9b:2a:da:b2:68:d5:4d: ec:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:29:34:0B:FA:32:9C:99:7E:B3:C5:AD:7E:4B:E4:88:ED:74:16:72 X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:bd:2f:9d:4f:9b:65:de:91:13:f5:67:c6:7c:37:b0:25:4c: 13:29:3d:8c:fc:9a:96:42:67:4b:72:e3:14:68:c0:0f:31:95: 58:79:c5:49:81:49:8f:56:0f:8a:8d:82:08:0f:9f:fd:d2:8e: 50:d9:08:86:eb:a8:39:e4:4d:82:a1:1b:ad:25:5d:00:db:49: 0d:f3:5d:b5:fc:9d:3a:9e:fa:1f:66:7b:94:00:40:9c:cf:a9: cd:f2:cb:cc:f0:85:65:ec:83:10:de:ae:6c:4b:b4:42:d9:ad: 0a:0f:69:21:56:d5:75:cd:7a:92:2f:62:b1:65:18:b8:21:3c: db:38:31:84:52:75:64:53:f5:e1:72:ec:74:62:63:b5:2a:29: 92:cc:ce:d0:23:ef:73:09:e3:d6:80:6a:e9:e3:9d:d9:b9:5b: 8f:44:af:05:08:46:ac:9d:40:eb:76:74:a3:e9:53:16:f4:40: f3:d1:cf:90:f3:9e:eb:f3:b8:66:b6:d2:eb:71:6e:5c:a0:fc: 1c:c7:21:dd:da:0c:b0:ec:c8:09:10:92:3c:31:1e:9c:4f:3d: 5c:e5:4d:3d:9f:fb:51:e0:06:de:cf:04:6a:8b:34:bb:60:77: db:cd:cc:e9:19:f9:23:e4:bb:d3:24:d3:b8:08:6d:28:54:0b: cb:f0:95:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeRwuFK9vjElUb7OkNwx3Ymb7U8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNTA2MjkwODM2NDJaFw0yNTA3MDIxOTM1NDJaMDMxMTAvBgNV BAMTKDAzMjkzNDBCRkEzMjlDOTk3RUIzQzVBRDdFNEJFNDg4RUQ3NDE2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxcpWWsaO4OhaPzTr7u3IkLzv B4JfazPJoL9NKOysUmebKt4LK4xZ3XlsNtxVEEnBPWuUg6N0SW7Otzp1cPEhIK9T DJ/OtZqLDQzejiFLVzl6CeCxb/R2Nbx5b93fbLuUxO83dl6HJb4amvoVeIyvbFTj uDpZX9pbCS8FofP413s6Z783rHyno8VPmieMNgGKF2EyZN58Wig2bXmR5H7pqY5B eKSXgEmukW1uBv91rbORyzwlqC++Ai+WW99fYGA19J5FtUQ6ebtjrAh8r/3j0vs8 3RUM2nx0aeZThRl19r2aRY4d+vROymDGj1d3pEY05xjveswQmyrasmjVTeyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAyk0C/oynJl+s8WtfkvkiO10FnIwHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALG9L51Pm2XekRP1Z8Z8N7AlTBMpPYz8mpZC Z0ty4xRowA8xlVh5xUmBSY9WD4qNgggPn/3SjlDZCIbrqDnkTYKhG60lXQDbSQ3z XbX8nTqe+h9me5QAQJzPqc3yy8zwhWXsgxDermxLtELZrQoPaSFW1XXNepIvYrFl GLghPNs4MYRSdWRT9eFy7HRiY7UqKZLMztAj73MJ49aAaunjndm5W49ErwUIRqyd QOt2dKPpUxb0QPPRz5DznuvzuGa20utxblyg/BzHId3aDLDsyAkQkjwxHpxPPVzl TT2f+1HgBt7PBGqLNLtgd9vNzOkZ+SPku9Mk07gIbShUC8vwla4= -----END CERTIFICATE-----Generated at Mon Jun 30 17:10:54 2025 by rpki-client