$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: rXNm6LQfFEt+Y+p4wY2q23Ac5Mfhy+ZDTHnVLauzNrc= Subject key identifier: 85:10:68:42:21:61:58:23:E8:BB:DF:C8:00:E7:83:59:C6:61:81:3C Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 1EA3BB123F8EE65746AEB1966FD7CFBF73A377DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 01E8 Signing time: Fri 22 Aug 2025 16:10:40 +0000 Manifest this update: Fri 22 Aug 2025 16:05:40 +0000 Manifest next update: Tue 26 Aug 2025 01:01:40 +0000 Files and hashes: 1: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: dmT6hvL5+jpa+0wfMdSSYCSe8J7ONrucUz46H5YDcSc=) 2: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 3: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 4: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 5: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 6: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 7: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a3:bb:12:3f:8e:e6:57:46:ae:b1:96:6f:d7:cf:bf:73:a3:77:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Aug 22 16:05:40 2025 GMT Not After : Aug 26 01:01:40 2025 GMT Subject: CN=8510684221615823E8BBDFC800E78359C661813C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:05:f2:22:fb:2b:ed:e9:01:dc:13:89:3d:c4: 51:ef:69:87:6a:05:f8:0e:cb:27:f7:3e:cf:16:27: 3b:c1:5e:3c:50:17:79:5c:fe:f0:37:17:44:e0:ad: 25:5d:07:21:07:9b:04:38:05:67:a2:73:77:06:5a: 87:16:ac:57:e8:43:72:c8:23:f2:9a:ad:c4:5f:d7: 05:94:91:48:2f:2f:8d:66:6d:9a:c1:cf:c3:8a:29: a2:4d:0f:dc:d5:bb:6a:e5:75:59:5b:5c:54:42:da: 64:37:cf:d8:45:2b:37:05:41:ce:93:cf:79:6f:dd: 99:ef:e3:51:13:2f:da:4f:8b:89:28:d3:82:07:14: fe:f7:71:62:68:c2:53:4d:ee:e4:b5:d5:1b:a9:a6: 85:fc:a5:bf:d7:bf:b1:1c:1a:94:22:37:4e:a0:12: a3:12:a4:bb:59:9c:eb:d1:72:92:d3:db:1b:f1:72: 4c:7a:1d:60:25:d8:21:b0:f1:25:4d:b4:49:0f:e6: 71:82:13:81:e7:b4:02:ce:d8:b8:2d:f7:40:9a:41: 3e:7a:66:83:f9:c0:72:89:30:c2:1d:7d:b3:f3:fb: 17:d0:9e:85:f4:ce:4b:5c:e6:4a:8d:54:c7:d3:00: 56:07:b6:30:f5:bc:29:e5:94:26:4c:d8:0d:f4:f5: 73:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:10:68:42:21:61:58:23:E8:BB:DF:C8:00:E7:83:59:C6:61:81:3C X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8e:95:45:46:1f:82:a2:f3:b5:b8:57:60:fa:b2:cc:6b:a1: 1b:99:a1:19:43:cd:db:23:39:5a:7e:46:29:64:de:9b:05:da: 6a:31:02:a7:3a:8e:a0:ff:99:91:6c:49:2c:2d:c0:2a:62:e0: e1:85:e1:e1:c7:e4:0c:86:1f:57:0d:dd:69:37:f1:09:30:80: 01:c1:3e:3a:a7:1a:34:87:2e:43:75:96:ae:94:3a:1d:0c:88: 26:ca:d9:3e:36:0b:f4:e0:9f:6c:85:6f:a7:56:4f:9f:b6:0c: 59:f4:4a:e6:22:04:94:cf:0b:0a:71:3b:49:91:fc:0e:ec:12: d4:3b:3f:b5:e7:c2:bb:4f:98:e8:d6:a5:c2:e0:ea:53:89:53: 38:12:e8:b8:8b:5c:29:0b:e1:86:3d:11:2e:80:27:d2:bd:ae: 10:a1:56:a4:80:3e:f3:9a:6f:fd:be:59:ca:71:68:53:55:92: ac:58:02:ef:29:35:2c:a0:24:9d:19:88:a9:5a:73:91:64:d1: dc:40:c4:35:51:f1:08:1a:66:2d:51:c7:da:b3:91:3e:3e:0b: 71:91:66:c6:e7:a5:dd:81:39:ea:96:5d:66:22:e6:e3:a7:4d: d5:bc:59:7c:b8:81:f2:e7:50:94:ae:4a:7b:7e:83:c2:71:24: 34:13:21:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqO7Ej+O5ldGrrGWb9fPv3Ojd98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTA4MjIxNjA1NDBaFw0yNTA4MjYwMTAxNDBaMDMxMTAvBgNV BAMTKDg1MTA2ODQyMjE2MTU4MjNFOEJCREZDODAwRTc4MzU5QzY2MTgxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZBfIi+yvt6QHcE4k9xFHvaYdq BfgOyyf3Ps8WJzvBXjxQF3lc/vA3F0TgrSVdByEHmwQ4BWeic3cGWocWrFfoQ3LI I/KarcRf1wWUkUgvL41mbZrBz8OKKaJND9zVu2rldVlbXFRC2mQ3z9hFKzcFQc6T z3lv3Znv41ETL9pPi4ko04IHFP73cWJowlNN7uS11RuppoX8pb/Xv7EcGpQiN06g EqMSpLtZnOvRcpLT2xvxckx6HWAl2CGw8SVNtEkP5nGCE4HntALO2Lgt90CaQT56 ZoP5wHKJMMIdfbPz+xfQnoX0zktc5kqNVMfTAFYHtjD1vCnllCZM2A309XOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhRBoQiFhWCPou9/IAOeDWcZhgTwwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2OlUVGH4Ki87W4V2D6ssxroRuZoRlDzdsj OVp+Rilk3psF2moxAqc6jqD/mZFsSSwtwCpi4OGF4eHH5AyGH1cN3Wk38QkwgAHB PjqnGjSHLkN1lq6UOh0MiCbK2T42C/Tgn2yFb6dWT5+2DFn0SuYiBJTPCwpxO0mR /A7sEtQ7P7XnwrtPmOjWpcLg6lOJUzgS6LiLXCkL4YY9ES6AJ9K9rhChVqSAPvOa b/2+WcpxaFNVkqxYAu8pNSygJJ0ZiKlac5Fk0dxAxDVR8QgaZi1Rx9qzkT4+C3GR Zsbnpd2BOeqWXWYi5uOnTdW8WXy4gfLnUJSuSnt+g8JxJDQTIb8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:22 2025 by rpki-client