$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: o78Q2d7OkST2FG9dS0Ekp3VL90nurXwbYCKID28c8tU= Subject key identifier: 6C:C2:8D:C6:45:F1:F1:AA:5D:4A:E6:0E:1F:25:B4:DA:3C:14:36:60 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 21F8EB54893EC4A3950F1012BD7C4E670805DAE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: BE Signing time: Wed 02 Jul 2025 13:52:16 +0000 Manifest this update: Wed 02 Jul 2025 13:47:16 +0000 Manifest next update: Sun 06 Jul 2025 01:24:16 +0000 Files and hashes: 1: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: 4KFw4lUAgyE9aVKjFB3aLF4p5DfA4flXzg5WT9vjRb4=) 2: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) 3: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f8:eb:54:89:3e:c4:a3:95:0f:10:12:bd:7c:4e:67:08:05:da:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Jul 2 13:47:16 2025 GMT Not After : Jul 6 01:24:16 2025 GMT Subject: CN=6CC28DC645F1F1AA5D4AE60E1F25B4DA3C143660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:b5:22:ff:5a:19:47:aa:ab:78:47:c7:80: ec:a8:be:67:df:b2:f3:8e:e9:a4:dd:2c:3b:65:f7: 4e:4e:96:87:f2:10:91:6a:08:cc:b0:9e:38:c3:b8: 36:51:be:0b:2c:81:61:a2:7c:75:c9:db:6f:48:1e: 71:b0:e9:8f:7e:42:99:9e:8b:e9:12:2c:05:53:8e: 01:d4:ba:6e:ea:67:b0:fc:41:f4:a5:55:9e:cf:93: d0:37:43:f0:88:40:8d:29:67:c9:f3:48:7e:e5:40: 49:74:91:40:f6:ed:ec:70:ae:4c:b1:d2:83:f7:e1: c8:a8:9a:82:33:6e:6a:ad:10:1e:64:e6:56:b3:89: da:8b:42:91:30:7d:57:10:23:ae:aa:37:f7:38:6e: 58:4b:62:09:3a:6b:24:f3:34:e4:f7:b7:30:98:b7: d4:fc:4e:4c:bd:af:ef:7c:8f:f7:e9:90:d9:50:9f: ba:4b:b3:aa:46:06:e6:8e:15:bd:74:7f:e7:2a:c0: 25:8e:73:0b:88:0c:15:ec:55:80:f1:26:50:75:7e: 97:c7:2b:f0:c1:cd:58:0b:64:0d:ac:07:87:80:b9: e0:71:c3:66:9b:f1:a0:35:8c:e3:e7:5b:b4:3f:55: c4:c6:a1:01:6a:af:8b:5e:f0:31:99:b5:d1:b2:10: 39:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C2:8D:C6:45:F1:F1:AA:5D:4A:E6:0E:1F:25:B4:DA:3C:14:36:60 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f1:db:82:ed:bb:21:86:4e:7c:82:fe:79:61:ee:1b:75:10: 21:1e:96:09:4f:f4:db:7c:09:21:52:9d:b7:43:75:c1:55:40: f5:25:e7:22:fd:63:4e:62:84:a4:b1:b8:4e:19:dc:c5:9f:ae: b5:89:22:21:e5:61:72:63:90:63:4d:cc:b4:da:eb:3c:f6:0d: 9e:88:c5:c6:ee:88:3c:d4:62:6b:24:de:b0:57:61:a1:55:e5: c7:85:17:f0:ca:93:a1:f6:c9:ff:da:bf:e6:7e:0b:3d:10:59: d1:4e:07:cf:43:c7:67:ba:08:a5:c0:60:df:b3:eb:6e:51:e0: e2:fb:5f:81:65:46:1a:82:ad:cc:38:b9:8b:a8:d5:56:70:03: 1f:11:df:07:78:26:dc:f5:f0:12:c0:f4:4e:38:33:13:e8:e1: 5c:6f:27:fb:8e:9a:dd:7c:88:04:c8:59:d0:37:6d:65:b8:ab: 89:8b:4e:ef:fe:43:bf:1e:01:bf:1e:4d:92:a5:4c:78:55:7c: cf:e3:51:5c:75:b4:db:94:55:9d:bc:1b:ff:b1:d7:fd:eb:36: 48:76:1d:bb:4a:97:57:0f:f6:b2:cb:af:97:9b:8d:c1:ea:9f: db:dc:d9:a2:f5:94:41:e9:b5:d3:f1:4a:55:d0:e0:f6:e4:20: 0a:4d:ec:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfjrVIk+xKOVDxASvXxOZwgF2ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTA3MDIxMzQ3MTZaFw0yNTA3MDYwMTI0MTZaMDMxMTAvBgNV BAMTKDZDQzI4REM2NDVGMUYxQUE1RDRBRTYwRTFGMjVCNERBM0MxNDM2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJLUi/1oZR6qreEfHgOyovmff svOO6aTdLDtl905OlofyEJFqCMywnjjDuDZRvgssgWGifHXJ229IHnGw6Y9+Qpme i+kSLAVTjgHUum7qZ7D8QfSlVZ7Pk9A3Q/CIQI0pZ8nzSH7lQEl0kUD27exwrkyx 0oP34ciomoIzbmqtEB5k5lazidqLQpEwfVcQI66qN/c4blhLYgk6ayTzNOT3tzCY t9T8Tky9r+98j/fpkNlQn7pLs6pGBuaOFb10f+cqwCWOcwuIDBXsVYDxJlB1fpfH K/DBzVgLZA2sB4eAueBxw2ab8aA1jOPnW7Q/VcTGoQFqr4te8DGZtdGyEDlhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMKNxkXx8apdSuYOHyW02jwUNmAwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7x24LtuyGGTnyC/nlh7ht1ECEelglP9Nt8 CSFSnbdDdcFVQPUl5yL9Y05ihKSxuE4Z3MWfrrWJIiHlYXJjkGNNzLTa6zz2DZ6I xcbuiDzUYmsk3rBXYaFV5ceFF/DKk6H2yf/av+Z+Cz0QWdFOB89Dx2e6CKXAYN+z 625R4OL7X4FlRhqCrcw4uYuo1VZwAx8R3wd4Jtz18BLA9E44MxPo4VxvJ/uOmt18 iATIWdA3bWW4q4mLTu/+Q78eAb8eTZKlTHhVfM/jUVx1tNuUVZ28G/+x1/3rNkh2 HbtKl1cP9rLLr5ebjcHqn9vc2aL1lEHptdPxSlXQ4PbkIApN7JA= -----END CERTIFICATE-----Generated at Thu Jul 3 03:45:12 2025 by rpki-client