$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: b+H2uyMm+crVcHTxsPeIWZwLC1KaRKk6S52Iz6kMO4g= Subject key identifier: 5B:29:93:38:D7:A9:26:5E:0D:01:85:D1:14:A2:4A:C4:E4:D8:56:EE Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 7B9DD462C5F4DE1A249C3E31DD12A936606584EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 015B Signing time: Sat 10 May 2025 10:01:01 +0000 Manifest this update: Sat 10 May 2025 09:56:01 +0000 Manifest next update: Tue 13 May 2025 18:06:01 +0000 Files and hashes: 1: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) 2: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) 3: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) 4: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: 8Rr8+/UoFLSXiLA9PsPo3vWfbH+owsO5jUU2vDFb3Gs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9d:d4:62:c5:f4:de:1a:24:9c:3e:31:dd:12:a9:36:60:65:84:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: May 10 09:56:01 2025 GMT Not After : May 13 18:06:01 2025 GMT Subject: CN=5B299338D7A9265E0D0185D114A24AC4E4D856EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:f7:6a:e4:29:6d:b2:75:ad:2d:e8:ed:4a: ea:6f:d5:ff:ff:0a:0f:d0:00:f1:d6:10:cf:ea:48: 19:09:98:a1:bd:36:ee:81:09:11:98:6c:0a:e9:c3: d5:f6:d9:a2:d0:7d:65:79:fd:00:1f:ba:8d:ee:13: 79:02:b2:cb:df:90:6c:49:f0:a4:97:5a:1e:db:11: 4d:0a:99:d5:f9:f9:8c:90:55:5f:79:4d:5e:6f:e5: fd:e6:d8:c7:b5:43:14:54:2a:6b:f4:e3:5c:67:d3: 63:77:66:e8:e5:d3:3e:3a:4a:d4:32:ca:29:54:e5: d8:c4:56:11:d5:60:91:f9:71:95:bc:44:92:e4:86: f4:a9:05:13:a0:d5:b3:1b:90:47:9e:89:39:f5:25: 58:48:ae:20:1b:bf:71:d7:37:01:c4:c6:c8:6a:5d: 9a:d3:1d:c1:87:40:74:51:15:2d:49:b2:6b:f7:76: a5:c5:bc:91:72:f7:a6:82:9e:44:95:57:ae:37:50: a4:76:ce:44:7c:e5:82:0f:2d:10:22:3b:a4:7c:c8: 0f:a5:25:7c:ef:5e:41:0a:a2:01:86:5e:03:5f:c8: 06:cc:1d:ef:f6:cc:d1:df:17:7c:23:73:f6:75:7a: 0a:f8:85:17:06:f8:6d:2b:ce:4d:a4:f7:74:af:2e: 41:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:29:93:38:D7:A9:26:5E:0D:01:85:D1:14:A2:4A:C4:E4:D8:56:EE X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1d:b5:4d:f3:f0:64:dd:db:7d:66:6d:21:ac:18:67:1a:7e: 58:e7:4d:ce:c8:d9:71:09:25:77:15:0c:2a:34:57:59:c5:82: 9a:fe:a9:1f:9e:d7:4b:b6:52:df:7f:c6:31:1c:65:1e:a9:47: 26:b5:61:c0:63:9c:68:d9:5e:08:98:8b:28:9d:31:5d:91:06: 88:df:6f:6d:e1:dd:02:25:c4:c7:ec:2e:e5:e0:10:d4:ca:d4: 49:1d:14:04:02:9c:f5:47:97:03:87:97:0b:a3:71:74:52:cd: ee:85:71:ee:23:eb:94:71:21:7c:35:bf:73:d8:bb:39:cc:89: 78:4a:b0:51:f4:e7:a6:8e:cc:45:fa:ba:93:68:6f:c8:7c:c1: e3:22:ca:92:c3:2e:ac:bb:7b:a9:6c:6c:36:09:31:96:84:ce: 6d:33:0a:36:fd:f8:a3:0e:6a:1e:6b:c4:8a:05:c5:82:35:14: 7a:60:da:27:4d:66:2a:2f:89:52:ce:91:c5:0a:88:e1:bf:17: b7:1b:ff:4f:14:9c:08:3f:69:40:d3:97:4e:12:ad:1c:96:55: 77:21:73:e3:64:65:a2:9f:23:74:5d:0b:46:ff:8e:55:9a:44: 2f:1f:71:49:13:83:e9:03:88:fd:bb:c2:a6:26:75:29:85:2e: 2b:d7:0d:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe53UYsX03hoknD4x3RKpNmBlhOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTA1MTAwOTU2MDFaFw0yNTA1MTMxODA2MDFaMDMxMTAvBgNV BAMTKDVCMjk5MzM4RDdBOTI2NUUwRDAxODVEMTE0QTI0QUM0RTREODU2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pPdq5CltsnWtLejtSupv1f// Cg/QAPHWEM/qSBkJmKG9Nu6BCRGYbArpw9X22aLQfWV5/QAfuo3uE3kCssvfkGxJ 8KSXWh7bEU0KmdX5+YyQVV95TV5v5f3m2Me1QxRUKmv041xn02N3Zujl0z46StQy yilU5djEVhHVYJH5cZW8RJLkhvSpBROg1bMbkEeeiTn1JVhIriAbv3HXNwHExshq XZrTHcGHQHRRFS1Jsmv3dqXFvJFy96aCnkSVV643UKR2zkR85YIPLRAiO6R8yA+l JXzvXkEKogGGXgNfyAbMHe/2zNHfF3wjc/Z1egr4hRcG+G0rzk2k93SvLkFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWymTONepJl4NAYXRFKJKxOTYVu4wHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8dtU3z8GTd231mbSGsGGcafljnTc7I2XEJ JXcVDCo0V1nFgpr+qR+e10u2Ut9/xjEcZR6pRya1YcBjnGjZXgiYiyidMV2RBojf b23h3QIlxMfsLuXgENTK1EkdFAQCnPVHlwOHlwujcXRSze6Fce4j65RxIXw1v3PY uznMiXhKsFH056aOzEX6upNob8h8weMiypLDLqy7e6lsbDYJMZaEzm0zCjb9+KMO ah5rxIoFxYI1FHpg2idNZioviVLOkcUKiOG/F7cb/08UnAg/aUDTl04SrRyWVXch c+NkZaKfI3RdC0b/jlWaRC8fcUkTg+kDiP27wqYmdSmFLivXDbE= -----END CERTIFICATE-----Generated at Sat May 10 15:07:52 2025 by rpki-client