$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: MiU7p2Q2WZexCcuScAe4ZvTrYC+rHUhGz11zc/H1zoI= Subject key identifier: 37:9D:85:7E:E6:E0:60:69:CF:93:5D:6F:99:D2:2A:EC:0C:C7:23:1C Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 13AD332D032B9D7760BFA8FD2964D9A19DE92534 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 0135 Signing time: Sun 11 May 2025 02:31:44 +0000 Manifest this update: Sun 11 May 2025 02:26:44 +0000 Manifest next update: Wed 14 May 2025 08:04:44 +0000 Files and hashes: 1: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=) 2: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: KzCq3EbAGDckzeJXg3noJh2kgU/FrdL9nLh38JQyKqQ=) 3: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=) 4: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ad:33:2d:03:2b:9d:77:60:bf:a8:fd:29:64:d9:a1:9d:e9:25:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: May 11 02:26:44 2025 GMT Not After : May 14 08:04:44 2025 GMT Subject: CN=379D857EE6E06069CF935D6F99D22AEC0CC7231C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:af:3e:91:37:0f:71:e1:e9:07:04:ab:54: af:8b:78:47:dc:1c:cf:aa:66:a0:66:f5:c7:df:e0: 0d:75:76:a4:38:19:00:34:e9:5b:be:56:bd:ca:54: 2a:c3:d7:70:e8:24:b6:fe:7a:b2:a4:e3:64:9b:ed: 91:37:a5:84:70:bc:90:c3:f0:cb:ab:9b:dd:e7:ac: 0b:6a:d1:90:12:55:e9:cb:c5:c2:40:9f:b4:4b:c5: ee:ed:fc:27:42:a2:51:6a:56:06:34:45:fb:06:ea: 31:21:0a:a0:fa:c0:c4:e0:39:c9:43:53:a9:a0:9a: 03:65:31:33:47:99:e2:fb:ce:41:78:e1:4a:38:d0: 2d:b2:46:63:3f:1d:ba:b5:12:b9:a2:e6:b8:c6:b7: ed:3e:3f:b6:01:65:3b:89:45:b5:cd:ae:de:12:90: a5:f5:f1:45:4e:fb:fd:7d:dc:da:7e:ef:dc:a4:d4: c8:3c:4d:e4:3c:87:a2:c0:63:77:25:f8:a6:60:cb: 30:91:cc:c2:56:37:ce:a0:fc:8c:53:27:d7:fd:09: 1c:db:3e:b4:4f:7c:36:61:1d:ae:5e:36:62:56:c0: d0:5b:84:8d:d8:bd:32:fe:9e:9f:95:9d:ed:a9:ef: bf:ff:5b:69:93:cd:91:44:67:c2:5d:3b:7e:b7:2e: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9D:85:7E:E6:E0:60:69:CF:93:5D:6F:99:D2:2A:EC:0C:C7:23:1C X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3d:81:05:bc:23:0e:82:1d:95:4e:bb:45:3c:de:2c:40:35: 2b:69:2f:bf:c0:be:9d:9f:40:de:2e:2e:20:38:6c:2f:b0:8d: 11:6b:8e:03:1b:0a:92:a2:e3:c9:76:5e:f7:2e:d8:a6:c0:d0: 1a:12:d0:7d:e4:17:91:db:a4:9f:30:48:06:74:75:02:a7:16: 5a:2c:fa:c2:8b:c3:48:41:02:5b:f3:d3:39:9c:b8:d9:0d:f4: 00:29:35:5c:ae:db:70:f4:98:5c:57:a9:a8:fd:76:5a:71:12: 32:9e:7d:6a:14:73:6b:81:46:99:48:ff:d6:72:a1:d7:b5:ef: dc:7e:1b:7c:a9:0a:5e:08:bf:b7:bb:9a:66:c8:8c:38:61:ad: d9:b1:fb:55:b5:7d:f0:49:99:d3:e8:6a:03:a3:eb:2e:2b:29: 0b:75:97:15:3c:d5:bf:c9:8e:89:0d:0a:63:56:51:2b:2c:ce: bd:6d:ca:dd:90:15:68:57:76:d6:7b:74:75:b6:8d:95:5e:1d: db:04:48:68:d9:8b:e6:36:f1:cf:35:d9:b7:f7:62:89:3a:0a: 2d:d2:46:13:4a:50:38:eb:a2:0d:33:32:d9:6f:49:a1:66:5d: 35:08:d7:db:b9:f1:15:20:9a:0c:c2:e1:05:b4:37:73:dd:68: f6:ad:56:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE60zLQMrnXdgv6j9KWTZoZ3pJTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNTA1MTEwMjI2NDRaFw0yNTA1MTQwODA0NDRaMDMxMTAvBgNV BAMTKDM3OUQ4NTdFRTZFMDYwNjlDRjkzNUQ2Rjk5RDIyQUVDMENDNzIzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDa8+kTcPceHpBwSrVK+LeEfc HM+qZqBm9cff4A11dqQ4GQA06Vu+Vr3KVCrD13DoJLb+erKk42Sb7ZE3pYRwvJDD 8Murm93nrAtq0ZASVenLxcJAn7RLxe7t/CdColFqVgY0RfsG6jEhCqD6wMTgOclD U6mgmgNlMTNHmeL7zkF44Uo40C2yRmM/Hbq1Ermi5rjGt+0+P7YBZTuJRbXNrt4S kKX18UVO+/193Np+79yk1Mg8TeQ8h6LAY3cl+KZgyzCRzMJWN86g/IxTJ9f9CRzb PrRPfDZhHa5eNmJWwNBbhI3YvTL+np+Vne2p77//W2mTzZFEZ8JdO363LmNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN52FfubgYGnPk11vmdIq7AzHIxwwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw9gQW8Iw6CHZVOu0U83ixANStpL7/Avp2f QN4uLiA4bC+wjRFrjgMbCpKi48l2Xvcu2KbA0BoS0H3kF5HbpJ8wSAZ0dQKnFlos +sKLw0hBAlvz0zmcuNkN9AApNVyu23D0mFxXqaj9dlpxEjKefWoUc2uBRplI/9Zy ode179x+G3ypCl4Iv7e7mmbIjDhhrdmx+1W1ffBJmdPoagOj6y4rKQt1lxU81b/J jokNCmNWUSsszr1tyt2QFWhXdtZ7dHW2jZVeHdsESGjZi+Y28c812bf3Yok6Ci3S RhNKUDjrog0zMtlvSaFmXTUI19u58RUgmgzC4QW0N3PdaPatVnE= -----END CERTIFICATE-----Generated at Sun May 11 05:28:08 2025 by rpki-client