$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft File: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft (raw, json) Hash identifier: EkFlR3Rom/69Br1AQk1IDY1LW5ecUpc/aaddv+IMrns= Subject key identifier: 8A:E9:FE:1C:56:4B:67:7D:EB:88:B8:22:48:45:04:09:96:9E:70:F9 Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 6C68823FA423C8F6C10C96EFABAB2BD66C553F2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft Manifest number: 0165 Signing time: Thu 08 May 2025 10:21:51 +0000 Manifest this update: Thu 08 May 2025 10:16:51 +0000 Manifest next update: Sun 11 May 2025 11:54:51 +0000 Files and hashes: 1: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: RbJkotiAtcGAz/X/4fMxCRReBEYK6ZI39CQ4Uu7mC8E=) 2: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl (hash: K8nmO6twGqFlxiryJkgdRM5iU98n53loYbX75PWDr7k=) 3: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: woqtXJ7tvZtaqT4bT+mvntSsCYpQhJCgghI0AwY59dM=) 4: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: ZdMkDOnx4hNOB8b2y8v2461HT/U2gmm0V9h3DP50AsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 11:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:68:82:3f:a4:23:c8:f6:c1:0c:96:ef:ab:ab:2b:d6:6c:55:3f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: May 8 10:16:51 2025 GMT Not After : May 11 11:54:51 2025 GMT Subject: CN=8AE9FE1C564B677DEB88B82248450409969E70F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:6a:61:89:6c:89:cc:21:b4:3c:68:24:e1: 77:83:52:74:81:33:23:be:0e:d8:e3:8b:6c:4d:c7: b0:94:93:ab:ea:8b:bb:49:cd:b5:c5:d2:a6:7a:7a: 28:b2:24:25:bf:b4:6f:d4:03:1f:db:ce:68:5b:0b: 19:6d:b2:e1:ba:ce:12:d8:85:f8:3b:b9:30:b3:5b: 00:27:0a:5e:86:03:fb:29:d4:c8:c8:8f:d4:26:12: 00:e4:18:63:79:c1:e9:6f:2d:3f:7f:9d:4d:8b:d3: a8:5d:41:84:bb:2c:bf:9d:db:70:41:a0:32:81:4a: aa:ed:bd:5a:6a:8b:ba:44:90:6a:26:fb:8c:1d:56: c6:83:bf:96:65:a5:34:e0:05:95:c7:ae:c5:0e:2d: 90:c4:3a:d2:9d:88:7c:81:eb:b3:0c:09:09:c3:83: 01:50:eb:cf:2a:df:bb:1e:ee:c7:5a:c5:93:cd:8e: f4:a7:b8:c3:6a:6d:62:0d:83:a0:6f:dd:4e:d7:35: a8:7e:d3:82:1d:81:a0:3b:ac:33:5d:52:9c:07:b1: af:c7:98:0f:7a:e1:a1:4c:9e:ed:1b:f3:32:c2:a5: 22:11:9d:4d:4d:9e:60:68:7c:d4:86:50:8f:dd:e6: 15:e4:aa:98:18:2c:c5:45:86:f7:f0:78:28:5a:a6: 83:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:FE:1C:56:4B:67:7D:EB:88:B8:22:48:45:04:09:96:9E:70:F9 X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:cb:b7:1d:91:f3:c3:6f:c0:f6:97:72:de:d3:de:d2:30:f5: 62:72:50:33:be:08:e5:d1:b4:59:73:54:e5:99:02:c4:68:a2: 76:a3:bc:cb:d2:17:aa:5e:ff:18:58:49:b9:7c:1c:3d:d7:21: df:20:67:d3:db:bd:1f:c6:75:d0:40:6d:1e:db:ec:fc:c7:1d: a2:54:31:91:60:ce:df:b0:c9:50:b2:80:95:3d:4f:d8:f9:09: 27:5e:7c:ec:1e:48:21:26:81:ea:c5:dc:6c:49:0c:aa:40:6c: a7:3d:dd:17:61:1b:99:3c:ed:48:1a:62:73:b9:79:52:4a:99: 67:ac:35:dc:97:12:e2:f8:5c:b4:61:aa:26:bb:90:99:50:50: 99:9f:ad:0c:2b:29:62:89:9d:2a:87:2c:8a:52:e3:97:ab:f6: b0:88:4b:75:90:4a:15:0c:a2:4c:5e:2f:3f:10:c8:33:01:ef: 14:cf:86:8c:77:4d:33:d4:cd:a7:4b:a3:9d:50:89:7f:69:97: cf:49:b6:20:9e:0d:aa:e2:b5:d9:1f:2b:84:2e:bb:19:95:06: 0d:b4:38:ff:c2:46:c1:cc:bf:fd:14:dc:f7:f5:21:5f:72:1f: 8c:c3:21:5f:76:a9:f2:92:b8:0c:4d:b5:d6:aa:b7:89:c7:d9: be:89:22:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGiCP6QjyPbBDJbvq6sr1mxVPy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTA1MDgxMDE2NTFaFw0yNTA1MTExMTU0NTFaMDMxMTAvBgNV BAMTKDhBRTlGRTFDNTY0QjY3N0RFQjg4QjgyMjQ4NDUwNDA5OTY5RTcwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsmphiWyJzCG0PGgk4XeDUnSB MyO+Dtjji2xNx7CUk6vqi7tJzbXF0qZ6eiiyJCW/tG/UAx/bzmhbCxltsuG6zhLY hfg7uTCzWwAnCl6GA/sp1MjIj9QmEgDkGGN5welvLT9/nU2L06hdQYS7LL+d23BB oDKBSqrtvVpqi7pEkGom+4wdVsaDv5ZlpTTgBZXHrsUOLZDEOtKdiHyB67MMCQnD gwFQ688q37se7sdaxZPNjvSnuMNqbWINg6Bv3U7XNah+04IdgaA7rDNdUpwHsa/H mA964aFMnu0b8zLCpSIRnU1NnmBofNSGUI/d5hXkqpgYLMVFhvfweChapoPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiun+HFZLZ33riLgiSEUECZaecPkwHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2 QkM2ODY3QkY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLLtx2R88NvwPaXct7T3tIw9WJyUDO+COXR tFlzVOWZAsRoonajvMvSF6pe/xhYSbl8HD3XId8gZ9PbvR/GddBAbR7b7PzHHaJU MZFgzt+wyVCygJU9T9j5CSdefOweSCEmgerF3GxJDKpAbKc93RdhG5k87UgaYnO5 eVJKmWesNdyXEuL4XLRhqia7kJlQUJmfrQwrKWKJnSqHLIpS45er9rCIS3WQShUM okxeLz8QyDMB7xTPhox3TTPUzadLo51QiX9pl89JtiCeDaritdkfK4QuuxmVBg20 OP/CRsHMv/0U3Pf1IV9yH4zDIV92qfKSuAxNtdaqt4nH2b6JIt8= -----END CERTIFICATE-----Generated at Sat May 10 13:09:45 2025 by rpki-client