$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: 4tcYA8XijaCOksf0swPpU48JYzglY19LnN0q83xEi2o= Subject key identifier: 84:EC:3E:24:EB:FB:60:76:4E:85:29:42:66:B7:20:C7:1C:6B:12:F8 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 284AC2A9EBA78E951B400295349970EBEA39EF1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: A9 Signing time: Fri 22 Aug 2025 00:11:54 +0000 Manifest this update: Fri 22 Aug 2025 00:06:54 +0000 Manifest next update: Mon 25 Aug 2025 03:38:54 +0000 Files and hashes: 1: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: WAJ22gxcIZsLrG3fwFj6LAYpg0sHhVFWhpG6gRBIpI8=) 2: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: Gt3tls3h2pDgG81RjXgXdbdJvjTQhpbKdMCe97VNzUE=) 3: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY=) 4: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4a:c2:a9:eb:a7:8e:95:1b:40:02:95:34:99:70:eb:ea:39:ef:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Aug 22 00:06:54 2025 GMT Not After : Aug 25 03:38:54 2025 GMT Subject: CN=84EC3E24EBFB60764E85294266B720C71C6B12F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:03:13:17:da:f6:11:5e:a9:aa:91:76:4e:58: 0d:b8:b1:b2:06:a4:2a:a3:a8:c2:f6:64:25:eb:54: 33:e2:e0:49:6b:5c:01:74:98:bf:df:3e:35:8b:b2: 37:35:93:91:3e:2c:64:06:8a:e1:4d:0b:57:f1:26: aa:a3:4b:38:a5:e7:49:ab:a6:00:fa:83:f7:99:de: bc:49:d7:53:6e:ab:4d:28:c9:33:5b:31:00:ed:83: b8:a2:cb:d9:82:1b:47:d8:d9:57:cc:4b:01:19:12: 61:11:14:5f:85:54:f7:50:98:b2:26:c1:05:6f:0e: 03:92:4e:b0:d6:9f:17:83:2d:31:cf:ab:48:18:bd: cb:86:4b:5a:61:ec:3a:cb:79:d7:b3:1c:19:6c:ed: 9b:7e:ad:39:3a:8b:49:5c:65:7b:f1:54:75:02:1e: 3b:ff:8e:52:49:6f:3c:65:35:f1:4c:19:6f:37:65: 90:21:16:4f:18:1b:82:d8:cb:1c:39:64:0c:86:dd: f2:ac:d4:2d:ee:5e:4a:8e:8e:48:f7:f5:ef:d1:1f: c2:79:b3:41:06:4a:74:2d:41:e2:4a:7c:35:af:91: 07:18:4f:86:26:e4:db:b6:35:89:8e:6f:28:27:63: ac:f5:a5:55:24:24:61:50:a4:46:63:69:bf:49:9a: 8d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EC:3E:24:EB:FB:60:76:4E:85:29:42:66:B7:20:C7:1C:6B:12:F8 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bd:2d:6e:3a:11:57:60:59:b7:25:08:38:e4:94:f8:97:a3: 21:b2:da:02:dc:c3:7b:de:8e:3b:ac:09:fe:92:23:7f:a5:a1: 49:ee:1a:0c:24:51:63:2f:c1:8a:bd:7f:83:bf:22:54:36:ed: 92:d2:4d:9c:15:8c:22:2d:58:92:01:71:f1:9a:22:bd:26:33: 97:fa:67:3e:8d:5b:ba:ff:c8:68:d0:1b:e5:eb:1c:22:c0:24: 9b:b1:f0:52:0c:39:49:45:a1:86:5f:c9:07:3f:11:e9:61:c5: d6:a0:4a:91:4d:bf:4d:cb:f7:2d:8e:ab:14:0c:64:30:9d:d9: a4:c9:f0:8d:65:90:7a:b6:4d:3b:c8:d9:b1:73:35:62:5a:66: 94:13:41:f2:4f:34:d2:2b:c8:85:34:34:ea:f0:2f:45:64:e8: 71:ef:6a:7a:f0:c7:a3:16:57:04:6c:54:36:94:0b:7f:44:6b: c8:39:ae:80:24:15:b1:01:82:2b:f5:52:5b:20:55:3c:a4:7c: 0c:95:7c:ee:08:0e:b8:be:60:14:e8:bb:70:d4:72:db:a7:0d: 35:07:c9:0e:77:78:da:65:b0:b5:e1:e2:48:11:15:f1:76:06: d3:6c:ba:28:8b:a3:7d:af:67:95:b2:7b:49:21:61:b4:07:6b: d6:5f:ac:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKErCqeunjpUbQAKVNJlw6+o57x0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTA4MjIwMDA2NTRaFw0yNTA4MjUwMzM4NTRaMDMxMTAvBgNV BAMTKDg0RUMzRTI0RUJGQjYwNzY0RTg1Mjk0MjY2QjcyMEM3MUM2QjEyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyAxMX2vYRXqmqkXZOWA24sbIG pCqjqML2ZCXrVDPi4ElrXAF0mL/fPjWLsjc1k5E+LGQGiuFNC1fxJqqjSzil50mr pgD6g/eZ3rxJ11Nuq00oyTNbMQDtg7iiy9mCG0fY2VfMSwEZEmERFF+FVPdQmLIm wQVvDgOSTrDWnxeDLTHPq0gYvcuGS1ph7DrLedezHBls7Zt+rTk6i0lcZXvxVHUC Hjv/jlJJbzxlNfFMGW83ZZAhFk8YG4LYyxw5ZAyG3fKs1C3uXkqOjkj39e/RH8J5 s0EGSnQtQeJKfDWvkQcYT4Ym5Nu2NYmObygnY6z1pVUkJGFQpEZjab9Jmo03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhOw+JOv7YHZOhSlCZrcgxxxrEvgwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADe9LW46EVdgWbclCDjklPiXoyGy2gLcw3ve jjusCf6SI3+loUnuGgwkUWMvwYq9f4O/IlQ27ZLSTZwVjCItWJIBcfGaIr0mM5f6 Zz6NW7r/yGjQG+XrHCLAJJux8FIMOUlFoYZfyQc/EelhxdagSpFNv03L9y2OqxQM ZDCd2aTJ8I1lkHq2TTvI2bFzNWJaZpQTQfJPNNIryIU0NOrwL0Vk6HHvanrwx6MW VwRsVDaUC39Ea8g5roAkFbEBgiv1UlsgVTykfAyVfO4IDri+YBTou3DUctunDTUH yQ53eNplsLXh4kgRFfF2BtNsuiiLo32vZ5Wye0khYbQHa9ZfrKc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:33 2025 by rpki-client