$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: 7DvTqMaM5w0kJjIbi/+A0l5K2P4xCueFfku9qvVmLfc= Subject key identifier: 21:80:F2:B0:ED:A2:DA:80:50:05:12:9B:F3:BA:A8:09:C7:2A:4D:51 Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 5C83A74C0636A2B002478DA45A66A27B778D2314 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 014B Signing time: Sat 28 Jun 2025 19:51:54 +0000 Manifest this update: Sat 28 Jun 2025 19:46:54 +0000 Manifest next update: Tue 01 Jul 2025 21:39:54 +0000 Files and hashes: 1: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=) 2: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=) 3: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: 0Bo2BzrwoZvXzX//DWMQLMCIGWSgcAllNirmkn28uHs=) 4: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:83:a7:4c:06:36:a2:b0:02:47:8d:a4:5a:66:a2:7b:77:8d:23:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Jun 28 19:46:54 2025 GMT Not After : Jul 1 21:39:54 2025 GMT Subject: CN=2180F2B0EDA2DA805005129BF3BAA809C72A4D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:ff:98:23:c9:a7:75:79:b9:92:9d:1a:b1: be:40:a6:fc:ad:e1:18:bc:23:2f:57:a4:09:43:40: be:8b:36:3a:25:dc:2c:4e:0a:ad:6f:5c:f9:cc:de: d8:d8:17:2e:dd:48:22:4a:e5:eb:41:e2:43:25:52: a0:1c:6a:f8:fe:2f:84:ec:d9:ed:94:9c:a3:53:00: c9:9c:5a:dd:6b:8c:b7:55:04:f4:79:86:c9:79:a9: cd:0d:ef:5c:8e:41:fe:5e:0e:cb:0f:ca:05:eb:df: 36:3c:4f:6e:bd:6e:8b:31:78:51:cc:f3:a7:9c:88: 48:53:4b:1a:c2:d3:cd:2b:47:75:84:24:9c:c6:77: 38:0a:d8:2d:04:50:aa:fa:0e:95:1b:fd:88:9e:cc: 73:10:e8:b9:25:c6:86:c0:89:64:8c:b2:11:4b:02: 1f:69:da:48:d1:51:3d:8b:21:2f:1d:03:e9:dd:f8: 87:1b:b9:99:0f:6f:0a:47:59:49:dc:df:a6:f1:50: d5:ec:98:50:d7:6d:af:f9:83:58:70:59:44:09:13: e9:6b:c6:51:b1:87:34:7b:58:f5:a7:95:4f:3e:39: 50:30:0d:08:22:1a:72:e6:5c:25:2e:96:22:d6:9c: 25:82:8a:cd:4e:d3:4f:f0:f5:2e:4b:66:af:12:56: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:80:F2:B0:ED:A2:DA:80:50:05:12:9B:F3:BA:A8:09:C7:2A:4D:51 X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:19:9c:7f:13:d5:34:ac:22:e5:1c:05:ee:3e:94:72:2d:7d: 8e:3e:d9:ec:43:94:15:1b:07:d3:f2:29:c1:62:43:4d:b7:eb: ca:de:17:e5:dc:57:2e:03:d5:77:df:71:a5:6a:af:2e:26:f8: 4c:4b:30:47:f2:50:f8:37:c9:74:1d:77:5d:be:5f:42:c2:6e: d0:fe:52:90:ec:46:3a:66:b6:88:85:b5:d9:62:99:d6:91:c3: c1:38:09:0e:85:8c:ad:12:f7:05:49:7a:97:14:9a:59:4e:78: 27:ed:68:cb:a0:e1:6e:1a:3d:28:cc:07:d0:4a:c4:27:4f:66: b4:34:73:04:a1:71:4f:52:60:9d:2b:e0:da:8f:3a:1a:b0:07: 8e:6a:bf:55:b9:2b:72:8c:75:d2:18:e7:2b:1a:2a:e6:2f:7d: d9:ff:45:18:d7:97:7d:64:51:94:70:e9:79:4c:0d:1b:bc:2b: c6:15:f4:0f:5f:d2:3c:f5:2e:23:75:3d:fc:dd:76:f4:80:75: a2:9f:57:01:bd:26:9f:92:c1:c5:08:ca:50:5a:5d:99:42:ea: 33:27:93:39:38:67:7e:36:62:92:ba:f8:84:29:63:98:61:b4: dd:ef:82:f4:e6:8a:ed:db:a3:d2:83:d6:d7:05:6b:1c:d5:f5: c5:7b:9d:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIOnTAY2orACR42kWmaie3eNIxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNTA2MjgxOTQ2NTRaFw0yNTA3MDEyMTM5NTRaMDMxMTAvBgNV BAMTKDIxODBGMkIwRURBMkRBODA1MDA1MTI5QkYzQkFBODA5QzcyQTRENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YP+YI8mndXm5kp0asb5Apvyt 4Ri8Iy9XpAlDQL6LNjol3CxOCq1vXPnM3tjYFy7dSCJK5etB4kMlUqAcavj+L4Ts 2e2UnKNTAMmcWt1rjLdVBPR5hsl5qc0N71yOQf5eDssPygXr3zY8T269bosxeFHM 86eciEhTSxrC080rR3WEJJzGdzgK2C0EUKr6DpUb/YiezHMQ6LklxobAiWSMshFL Ah9p2kjRUT2LIS8dA+nd+IcbuZkPbwpHWUnc36bxUNXsmFDXba/5g1hwWUQJE+lr xlGxhzR7WPWnlU8+OVAwDQgiGnLmXCUuliLWnCWCis1O00/w9S5LZq8SVlPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIYDysO2i2oBQBRKb87qoCccqTVEwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUZnH8T1TSsIuUcBe4+lHItfY4+2exDlBUb B9PyKcFiQ02368reF+XcVy4D1XffcaVqry4m+ExLMEfyUPg3yXQdd12+X0LCbtD+ UpDsRjpmtoiFtdlimdaRw8E4CQ6FjK0S9wVJepcUmllOeCftaMug4W4aPSjMB9BK xCdPZrQ0cwShcU9SYJ0r4NqPOhqwB45qv1W5K3KMddIY5ysaKuYvfdn/RRjXl31k UZRw6XlMDRu8K8YV9A9f0jz1LiN1PfzddvSAdaKfVwG9Jp+SwcUIylBaXZlC6jMn kzk4Z342YpK6+IQpY5hhtN3vgvTmiu3bo9KD1tcFaxzV9cV7nbY= -----END CERTIFICATE-----Generated at Mon Jun 30 01:30:48 2025 by rpki-client