$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: g9/clje/4obNUi7oLnIl2sryfMPTdA4b2UuUq+IXBWI= Subject key identifier: C6:E3:17:34:92:4A:37:A5:18:98:4A:1C:62:BE:BB:E7:4A:7B:2A:57 Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 5CC70DA38A3658AC58AF35897D700808CAE9A272 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 018A Signing time: Fri 22 Aug 2025 02:51:03 +0000 Manifest this update: Fri 22 Aug 2025 02:46:03 +0000 Manifest next update: Mon 25 Aug 2025 03:16:03 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) 2: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) 3: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) 4: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: xqqart1IFzCYaXk0TecISv48oCAzJGM2uiUKkTalvFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c7:0d:a3:8a:36:58:ac:58:af:35:89:7d:70:08:08:ca:e9:a2:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Aug 22 02:46:03 2025 GMT Not After : Aug 25 03:16:03 2025 GMT Subject: CN=C6E31734924A37A518984A1C62BEBBE74A7B2A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:05:a0:b4:7d:30:4b:55:8c:4c:d5:2a:95: 42:18:ba:a2:5f:f7:c0:db:c9:06:e6:b5:ac:e7:08: 2a:11:23:1c:39:fa:5a:98:47:57:ec:34:6b:2f:c0: 2b:c4:81:d8:26:8a:20:88:b6:c0:2e:62:f1:eb:e8: 00:24:44:f4:c2:5b:1e:7a:5d:a4:b9:a6:bf:00:bc: 66:1e:98:6e:67:7b:ef:46:6d:1b:e9:57:86:e7:3c: 54:09:56:7e:fb:43:6c:1a:41:3e:f0:4d:21:f8:2b: 5a:e7:78:22:6f:c3:0c:57:78:53:21:d0:e4:23:83: 2c:ee:c6:88:6e:97:d4:40:23:2e:23:23:42:be:2a: 86:14:4a:4a:e5:ef:b7:ba:43:a4:d0:b8:60:ee:c2: 1b:01:cb:86:71:ed:f7:1f:af:12:6d:fa:89:24:01: 60:5c:7e:02:a1:d1:88:94:5d:27:13:14:5c:a0:1c: 38:84:3d:16:d0:e3:65:c3:50:b8:d5:ab:e2:36:e3: d9:13:29:5e:bd:a5:a5:f4:b1:07:ef:69:85:03:50: 09:0b:cd:a1:7b:cc:01:5e:71:f8:c3:5a:75:ff:d7: 02:e5:86:9f:c9:02:c9:84:76:d7:0d:48:5b:a7:74: 02:2c:ec:8b:f5:94:60:94:f5:de:a6:27:c6:d1:a6: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E3:17:34:92:4A:37:A5:18:98:4A:1C:62:BE:BB:E7:4A:7B:2A:57 X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a9:9f:4d:e7:23:fc:40:1f:21:ac:25:44:ce:a1:ac:3f:f5: a6:b9:5e:5a:a4:12:99:a0:40:d3:a9:a1:7e:c9:51:dc:66:c0: 46:be:d1:cb:03:6c:42:35:69:23:4c:d7:4e:44:1f:45:c9:ec: 18:02:7b:c5:83:0e:90:b7:58:94:32:b6:e3:fa:1c:3d:f7:c1: 48:94:9f:de:3d:4d:c7:f7:fd:4d:82:50:81:de:21:94:14:1f: 3c:f9:05:0d:85:ac:6c:c4:19:0e:7e:8b:c2:97:72:fd:24:43: 9c:32:53:8d:35:88:04:b2:cc:c6:f6:3a:70:6f:ab:09:ce:3a: e2:4b:c7:88:e0:4d:8c:80:b2:17:9d:39:83:e8:3f:75:d8:df: 6d:9c:10:08:d3:0d:6d:f9:52:ca:9a:6f:a3:79:d2:f1:8a:5b: 37:e9:89:1f:23:00:1b:f4:ef:27:6a:0d:19:d7:1b:f6:ea:ca: f9:c5:2d:a4:68:13:01:3b:dd:90:6a:27:0a:a5:c3:84:dd:19: cf:75:52:55:a0:d4:a7:ef:95:f3:71:ec:74:2d:62:c9:dc:88: 90:fb:b2:97:af:8b:11:df:04:20:1d:40:d5:0c:e6:a2:7a:1b: e8:31:e8:66:56:9e:dd:9d:c4:e6:eb:bf:18:fc:5c:3a:fd:93: ed:29:37:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMcNo4o2WKxYrzWJfXAICMrponIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTA4MjIwMjQ2MDNaFw0yNTA4MjUwMzE2MDNaMDMxMTAvBgNV BAMTKEM2RTMxNzM0OTI0QTM3QTUxODk4NEExQzYyQkVCQkU3NEE3QjJBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLAWgtH0wS1WMTNUqlUIYuqJf 98DbyQbmtaznCCoRIxw5+lqYR1fsNGsvwCvEgdgmiiCItsAuYvHr6AAkRPTCWx56 XaS5pr8AvGYemG5ne+9GbRvpV4bnPFQJVn77Q2waQT7wTSH4K1rneCJvwwxXeFMh 0OQjgyzuxohul9RAIy4jI0K+KoYUSkrl77e6Q6TQuGDuwhsBy4Zx7fcfrxJt+okk AWBcfgKh0YiUXScTFFygHDiEPRbQ42XDULjVq+I249kTKV69paX0sQfvaYUDUAkL zaF7zAFecfjDWnX/1wLlhp/JAsmEdtcNSFundAIs7Iv1lGCU9d6mJ8bRpmHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxuMXNJJKN6UYmEocYr6750p7KlcwHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIipn03nI/xAHyGsJUTOoaw/9aa5XlqkEpmg QNOpoX7JUdxmwEa+0csDbEI1aSNM105EH0XJ7BgCe8WDDpC3WJQytuP6HD33wUiU n949Tcf3/U2CUIHeIZQUHzz5BQ2FrGzEGQ5+i8KXcv0kQ5wyU401iASyzMb2OnBv qwnOOuJLx4jgTYyAshedOYPoP3XY322cEAjTDW35Usqab6N50vGKWzfpiR8jABv0 7ydqDRnXG/bqyvnFLaRoEwE73ZBqJwqlw4TdGc91UlWg1KfvlfNx7HQtYsnciJD7 spevixHfBCAdQNUM5qJ6G+gx6GZWnt2dxObrvxj8XDr9k+0pN3k= -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:43 2025 by rpki-client