$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft File: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft (raw, json) Hash identifier: l65o+VR77HcIvHsn7tC8EdMft62+nRZNr/QqIU/VM0Y= Subject key identifier: 57:5C:7B:22:84:80:EC:0B:E2:22:C4:5A:B0:03:2E:F7:53:D3:7B:32 Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 7106C92AB516FB30E48B62FB0DC952C45C1ED947 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft Manifest number: 0193 Signing time: Thu 21 Aug 2025 16:21:25 +0000 Manifest this update: Thu 21 Aug 2025 16:16:25 +0000 Manifest next update: Sun 24 Aug 2025 23:04:25 +0000 Files and hashes: 1: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: RbJkotiAtcGAz/X/4fMxCRReBEYK6ZI39CQ4Uu7mC8E=) 2: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: woqtXJ7tvZtaqT4bT+mvntSsCYpQhJCgghI0AwY59dM=) 3: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: ZdMkDOnx4hNOB8b2y8v2461HT/U2gmm0V9h3DP50AsM=) 4: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl (hash: 95YlD+Xxrm7JrXo3h6zzG/ug98CMBNETXH9D1+uNKGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:06:c9:2a:b5:16:fb:30:e4:8b:62:fb:0d:c9:52:c4:5c:1e:d9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Aug 21 16:16:25 2025 GMT Not After : Aug 24 23:04:25 2025 GMT Subject: CN=575C7B228480EC0BE222C45AB0032EF753D37B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0e:ce:dc:76:d8:e1:8b:e3:99:30:45:4a:b1: 60:3f:68:c5:41:f4:36:af:49:cf:18:3f:55:7c:2f: ba:2d:ee:15:50:22:02:26:34:0b:9e:8e:40:11:9f: 14:2e:c3:35:78:c7:80:19:3a:c9:78:2e:f9:de:66: 58:12:b1:bb:82:12:25:39:e8:89:50:03:73:4b:64: 67:5d:d3:60:8a:59:f0:60:fa:3a:21:6f:2e:da:aa: 61:4f:a2:28:dd:2c:25:09:1e:23:9f:e5:0b:35:ce: 5d:8f:17:9d:b6:fd:0b:39:cb:86:88:db:30:21:d5: 48:9e:4a:b4:fc:43:34:6c:14:06:47:cb:8f:1e:e2: ec:f4:70:93:57:1f:81:34:85:c2:ea:f7:89:01:19: 71:c9:33:ea:f7:ef:d0:b4:f4:ba:61:bf:ab:08:28: b6:6a:2e:7e:c6:d1:51:d7:38:90:85:55:f5:82:dc: 04:04:d8:fe:7b:53:98:97:a5:47:1d:d7:83:73:7e: 8d:22:43:83:cc:23:20:3b:c1:3f:3b:e8:99:75:66: aa:7b:5a:09:dc:db:c0:4b:fe:a3:3e:94:39:01:da: be:27:b2:90:50:3b:42:08:1f:fa:7a:a8:6f:fa:27: c3:8c:8a:ce:06:1c:9b:0e:0b:dd:97:c5:8c:0c:8a: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5C:7B:22:84:80:EC:0B:E2:22:C4:5A:B0:03:2E:F7:53:D3:7B:32 X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:75:f5:be:27:be:e7:2b:a5:eb:6e:e6:9b:0a:e3:9b:1e:6d: b3:30:b5:2c:b9:ab:92:a5:56:83:c7:9a:b6:7b:9c:58:0e:6d: 05:f4:88:5d:44:e8:87:b2:84:fb:eb:3e:29:90:d0:62:1c:d4: 7f:55:da:89:70:de:da:94:76:24:76:4b:46:73:78:8b:72:c7: 38:ae:a0:f1:f1:df:75:e7:80:83:3e:1a:3b:a5:01:07:8c:56: f8:26:cc:30:27:2a:a5:29:ee:f6:e8:0d:47:1a:49:09:4f:79: f5:ba:04:8e:40:df:b1:1d:6e:73:7f:35:4c:82:16:a3:7b:04: 5a:8a:a9:26:ef:2c:fe:54:14:d0:08:72:dd:92:21:f6:1a:a3: 12:01:25:08:a3:38:49:91:19:fb:28:78:76:15:f8:ac:6e:8b: 09:a3:ec:af:6e:ed:f1:75:03:92:a9:49:1d:1a:c7:20:d5:04: 65:03:4d:59:a3:7a:0d:52:40:f7:1c:ae:49:98:08:da:c9:27: 89:75:70:6e:f4:dc:42:50:08:af:6a:54:7c:2e:30:df:28:65: 32:be:12:73:79:57:60:e0:3f:3e:5d:95:b6:ef:f8:20:d4:e5: 8f:77:4b:2b:6d:13:b1:e1:0e:55:04:f4:b2:ff:98:54:06:e6: 0b:f3:73:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQbJKrUW+zDki2L7DclSxFwe2UcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTA4MjExNjE2MjVaFw0yNTA4MjQyMzA0MjVaMDMxMTAvBgNV BAMTKDU3NUM3QjIyODQ4MEVDMEJFMjIyQzQ1QUIwMDMyRUY3NTNEMzdCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDs7cdtjhi+OZMEVKsWA/aMVB 9DavSc8YP1V8L7ot7hVQIgImNAuejkARnxQuwzV4x4AZOsl4LvneZlgSsbuCEiU5 6IlQA3NLZGdd02CKWfBg+johby7aqmFPoijdLCUJHiOf5Qs1zl2PF522/Qs5y4aI 2zAh1UieSrT8QzRsFAZHy48e4uz0cJNXH4E0hcLq94kBGXHJM+r379C09Lphv6sI KLZqLn7G0VHXOJCFVfWC3AQE2P57U5iXpUcd14Nzfo0iQ4PMIyA7wT876Jl1Zqp7 Wgnc28BL/qM+lDkB2r4nspBQO0IIH/p6qG/6J8OMis4GHJsOC92XxYwMio7zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV1x7IoSA7AviIsRasAMu91PTezIwHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2 QkM2ODY3QkY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJV19b4nvucrpetu5psK45sebbMwtSy5q5Kl VoPHmrZ7nFgObQX0iF1E6IeyhPvrPimQ0GIc1H9V2olw3tqUdiR2S0ZzeItyxziu oPHx33XngIM+GjulAQeMVvgmzDAnKqUp7vboDUcaSQlPefW6BI5A37EdbnN/NUyC FqN7BFqKqSbvLP5UFNAIct2SIfYaoxIBJQijOEmRGfsoeHYV+Kxuiwmj7K9u7fF1 A5KpSR0axyDVBGUDTVmjeg1SQPccrkmYCNrJJ4l1cG703EJQCK9qVHwuMN8oZTK+ EnN5V2DgPz5dlbbv+CDU5Y93SyttE7HhDlUE9LL/mFQG5gvzc/I= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:01 2025 by rpki-client