$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft File: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft (raw, json) Hash identifier: iY+9Cfmsc3OpjAk6RDIRvjYno12vYJ1E9qx+2gku6zk= Subject key identifier: F3:92:F0:5B:E9:D8:80:06:80:2D:D6:A3:0C:F3:30:CD:09:C0:B0:DC Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 6E7E208FCD9D3E516D46FFD55263139542873582 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft Manifest number: 017C Signing time: Sun 29 Jun 2025 22:11:26 +0000 Manifest this update: Sun 29 Jun 2025 22:06:26 +0000 Manifest next update: Thu 03 Jul 2025 09:10:26 +0000 Files and hashes: 1: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl (hash: LIXz6iV+V1pt2SR2nz+1998efSqZjnU+9a6nCQkAdqs=) 2: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: woqtXJ7tvZtaqT4bT+mvntSsCYpQhJCgghI0AwY59dM=) 3: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: ZdMkDOnx4hNOB8b2y8v2461HT/U2gmm0V9h3DP50AsM=) 4: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: RbJkotiAtcGAz/X/4fMxCRReBEYK6ZI39CQ4Uu7mC8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7e:20:8f:cd:9d:3e:51:6d:46:ff:d5:52:63:13:95:42:87:35:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Jun 29 22:06:26 2025 GMT Not After : Jul 3 09:10:26 2025 GMT Subject: CN=F392F05BE9D88006802DD6A30CF330CD09C0B0DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:69:99:39:8f:a9:74:7f:c6:fd:36:a7:9a:54: 0f:94:23:88:65:8f:7f:04:f2:24:3a:6b:4f:d9:08: 4c:b1:58:7e:7e:96:62:4f:62:fc:41:98:cb:94:4f: 69:01:bc:68:7c:b9:bb:d1:86:e9:83:65:63:dd:ca: ce:c2:cd:55:3c:bf:3e:f5:12:28:54:35:0a:79:7c: 88:16:7b:fc:37:16:80:6a:8d:8f:a4:20:d5:80:bc: 0c:f7:a9:dc:d7:64:86:6a:e5:e3:6f:17:ca:7c:b0: 69:2b:a3:5a:04:15:8f:8c:72:2b:92:5c:70:bc:a3: 8c:11:56:f4:3e:c3:ff:fc:5b:96:8e:64:e1:a2:69: ef:95:de:a4:92:5d:15:03:7c:86:85:d6:87:88:ad: 69:3c:db:ff:75:f1:99:06:38:12:1c:33:13:fd:14: ea:b4:31:18:c3:d3:15:bd:c6:17:c1:b8:5a:c4:b3: fb:99:dc:3f:00:a6:06:61:4d:a5:85:58:f3:86:28: c8:04:59:ba:92:cc:35:29:9d:23:e4:81:fb:4c:35: 65:aa:3c:87:f4:1e:63:4b:06:ae:d3:ce:75:39:99: f8:06:c7:6c:99:5f:13:37:d6:c0:ef:66:c1:7f:fb: 1f:5f:db:25:3c:09:6e:3a:ea:a5:55:a7:df:25:87: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:92:F0:5B:E9:D8:80:06:80:2D:D6:A3:0C:F3:30:CD:09:C0:B0:DC X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:04:d8:c1:0c:4f:80:c1:81:e8:05:fa:7c:c3:a8:da:f2:7f: a6:13:c5:84:55:8c:a8:a6:ea:62:2d:03:f1:7f:0c:59:58:cd: a6:fd:20:ee:e3:23:2f:c7:82:b7:d4:15:47:61:da:a8:2d:0a: 73:be:d9:b6:2a:58:7f:77:31:4a:c2:2c:85:1f:53:65:3d:49: 0c:8f:88:4d:d5:33:5a:b3:96:f9:70:f4:45:c0:1c:3e:e1:ea: 45:14:ca:6d:17:4a:c8:80:9a:52:26:b5:a0:07:22:95:fe:cb: e2:7e:42:e5:6c:ab:87:e5:2d:8c:5a:68:fc:0f:6a:e3:c3:14: 1a:2a:8f:8f:fa:19:b5:3d:68:27:90:74:f9:2c:92:9a:b5:d4: c9:05:b9:cd:ce:09:d5:8d:67:28:5f:21:df:51:1a:cb:f5:c3: bc:b3:e6:6c:18:f0:41:34:1b:70:4c:cf:5c:ac:d8:4f:27:f8: dc:57:26:22:5b:df:17:b1:e5:33:38:c6:0c:0a:d1:e2:54:5a: 17:85:82:62:39:15:42:29:76:e4:84:75:47:24:5f:72:33:85: 87:9d:b9:91:02:9b:31:54:01:ff:ed:40:ab:0f:c1:e0:f5:46: 79:22:cc:30:8f:31:c9:66:e0:d6:a3:fb:54:1b:a2:43:d7:0f: 66:a2:f1:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbn4gj82dPlFtRv/VUmMTlUKHNYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTA2MjkyMjA2MjZaFw0yNTA3MDMwOTEwMjZaMDMxMTAvBgNV BAMTKEYzOTJGMDVCRTlEODgwMDY4MDJERDZBMzBDRjMzMENEMDlDMEIwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaZk5j6l0f8b9NqeaVA+UI4hl j38E8iQ6a0/ZCEyxWH5+lmJPYvxBmMuUT2kBvGh8ubvRhumDZWPdys7CzVU8vz71 EihUNQp5fIgWe/w3FoBqjY+kINWAvAz3qdzXZIZq5eNvF8p8sGkro1oEFY+MciuS XHC8o4wRVvQ+w//8W5aOZOGiae+V3qSSXRUDfIaF1oeIrWk82/918ZkGOBIcMxP9 FOq0MRjD0xW9xhfBuFrEs/uZ3D8ApgZhTaWFWPOGKMgEWbqSzDUpnSPkgftMNWWq PIf0HmNLBq7TznU5mfgGx2yZXxM31sDvZsF/+x9f2yU8CW466qVVp98lh2f1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU85LwW+nYgAaALdajDPMwzQnAsNwwHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2 QkM2ODY3QkY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEME2MEMT4DBgegF+nzDqNryf6YTxYRVjKim 6mItA/F/DFlYzab9IO7jIy/HgrfUFUdh2qgtCnO+2bYqWH93MUrCLIUfU2U9SQyP iE3VM1qzlvlw9EXAHD7h6kUUym0XSsiAmlImtaAHIpX+y+J+QuVsq4flLYxaaPwP auPDFBoqj4/6GbU9aCeQdPkskpq11MkFuc3OCdWNZyhfId9RGsv1w7yz5mwY8EE0 G3BMz1ys2E8n+NxXJiJb3xex5TM4xgwK0eJUWheFgmI5FUIpduSEdUckX3IzhYed uZECmzFUAf/tQKsPweD1RnkizDCPMclm4Naj+1QbokPXD2ai8as= -----END CERTIFICATE-----Generated at Tue Jul 1 05:32:56 2025 by rpki-client