$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: DcV8/mKSq/lR6xgDgi0AU95B98kb3nn6v7YNDTy4fNA= Subject key identifier: 79:A4:70:DA:89:E0:22:32:9A:61:82:23:7A:12:EC:38:43:92:22:87 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 36EA719463D754ABACBE04E4026E4393AED438EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: 91 Signing time: Sun 29 Jun 2025 01:01:52 +0000 Manifest this update: Sun 29 Jun 2025 00:56:52 +0000 Manifest next update: Wed 02 Jul 2025 09:07:52 +0000 Files and hashes: 1: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: 6s8YmLJmkWvN6U8sKbwt6h+ERKEvYwXS0So42Cq/QSs=) 2: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=) 3: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY=) 4: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: WAJ22gxcIZsLrG3fwFj6LAYpg0sHhVFWhpG6gRBIpI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 09:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ea:71:94:63:d7:54:ab:ac:be:04:e4:02:6e:43:93:ae:d4:38:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Jun 29 00:56:52 2025 GMT Not After : Jul 2 09:07:52 2025 GMT Subject: CN=79A470DA89E022329A6182237A12EC3843922287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:d0:d3:e9:72:87:15:33:f5:ef:59:04:2d: 8b:ec:1e:bb:fc:42:e3:cb:26:ee:bb:28:72:b8:b6: 79:00:e6:c9:65:b0:be:86:93:9a:cc:e1:0a:1c:72: 4e:5c:47:d2:24:5b:83:1b:50:07:7d:ea:e3:f2:69: be:2c:43:4c:10:c9:26:b5:23:ff:1d:0e:f7:c7:65: 37:54:1d:5b:39:28:3c:42:ff:47:35:f5:98:a5:98: c4:93:93:ec:c2:31:1a:7d:b9:5e:44:5e:eb:8f:37: 7e:77:1a:c2:75:44:44:e8:8f:cb:40:81:a9:12:0e: 66:40:f0:3a:38:64:16:e1:a0:43:13:18:56:4c:b3: 93:cb:65:b0:6e:b4:0a:1f:e8:2a:f9:71:ea:01:fc: 70:ba:b3:90:cf:d7:45:01:f3:90:7c:25:4c:eb:14: 2a:02:dc:34:db:55:d6:ef:a8:de:3c:69:b7:e9:71: d4:3e:c0:99:21:d5:40:3e:74:bc:4b:35:57:47:bf: 30:2a:b1:82:49:8b:08:a2:9e:f7:57:dc:3a:65:0d: 7d:cd:eb:8f:3c:b1:64:3c:de:bd:c9:7c:50:32:b5: 76:eb:db:e4:8d:ed:5f:d3:7e:cc:7f:72:0b:f5:8d: 95:69:ac:88:32:d3:b2:86:44:9d:08:ab:17:c0:c8: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A4:70:DA:89:E0:22:32:9A:61:82:23:7A:12:EC:38:43:92:22:87 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:19:a4:9d:b4:ee:8b:03:29:9b:1c:43:94:38:64:c2:f8:e7: ca:7e:4d:fd:1c:8c:20:bb:bb:4f:73:8c:34:d6:a2:07:ca:71: 0b:85:bf:40:7a:27:df:ce:d5:06:41:fb:29:d3:7c:0d:01:4f: bd:e8:0d:3c:8c:08:64:5b:dc:75:bf:a0:9c:e3:5e:06:d1:ff: 6f:23:09:e1:74:2a:5e:fa:dd:25:6a:17:43:97:2a:48:88:ac: 8e:30:25:bd:c9:b9:67:8c:50:5b:64:0d:09:54:d1:6c:d4:79: c6:aa:52:b1:1e:a9:f2:99:c8:82:cf:e3:37:d7:a6:7d:21:1e: 53:79:96:62:7b:9d:b2:0a:24:73:2c:fc:a1:9f:3f:61:7c:a0: 4b:0b:5c:9b:e9:39:4b:7c:c9:48:a1:25:3d:04:a7:c0:68:c4: b9:db:fe:65:af:3b:32:3b:b2:2d:6d:bd:de:f3:5f:98:4e:20: 9e:f2:b5:23:c5:ba:c1:79:68:c2:f9:7c:dc:10:4a:79:77:89: 7f:a2:91:97:5f:23:1d:c7:91:7c:47:97:6d:fb:3c:8d:0b:43: 40:bb:ea:c9:fa:f4:87:f4:30:0d:25:f3:4b:9c:a0:02:5e:ad: 07:94:7a:9d:a1:a0:d0:6b:c6:50:55:ff:b0:c2:f4:0b:1a:1e: d2:7e:6e:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNupxlGPXVKusvgTkAm5Dk67UOOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTA2MjkwMDU2NTJaFw0yNTA3MDIwOTA3NTJaMDMxMTAvBgNV BAMTKDc5QTQ3MERBODlFMDIyMzI5QTYxODIyMzdBMTJFQzM4NDM5MjIyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqtDT6XKHFTP171kELYvsHrv8 QuPLJu67KHK4tnkA5sllsL6Gk5rM4Qocck5cR9IkW4MbUAd96uPyab4sQ0wQySa1 I/8dDvfHZTdUHVs5KDxC/0c19ZilmMSTk+zCMRp9uV5EXuuPN353GsJ1REToj8tA gakSDmZA8Do4ZBbhoEMTGFZMs5PLZbButAof6Cr5ceoB/HC6s5DP10UB85B8JUzr FCoC3DTbVdbvqN48abfpcdQ+wJkh1UA+dLxLNVdHvzAqsYJJiwiinvdX3DplDX3N 6488sWQ83r3JfFAytXbr2+SN7V/Tfsx/cgv1jZVprIgy07KGRJ0IqxfAyP3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeaRw2ongIjKaYYIjehLsOEOSIocwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0ZpJ207osDKZscQ5Q4ZML458p+Tf0cjCC7 u09zjDTWogfKcQuFv0B6J9/O1QZB+ynTfA0BT73oDTyMCGRb3HW/oJzjXgbR/28j CeF0Kl763SVqF0OXKkiIrI4wJb3JuWeMUFtkDQlU0WzUecaqUrEeqfKZyILP4zfX pn0hHlN5lmJ7nbIKJHMs/KGfP2F8oEsLXJvpOUt8yUihJT0Ep8BoxLnb/mWvOzI7 si1tvd7zX5hOIJ7ytSPFusF5aML5fNwQSnl3iX+ikZdfIx3HkXxHl237PI0LQ0C7 6sn69If0MA0l80ucoAJerQeUep2hoNBrxlBV/7DC9AsaHtJ+bpk= -----END CERTIFICATE-----Generated at Mon Jun 30 19:12:13 2025 by rpki-client