$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: HonKyxLEFGLAxX4lrvsydvneeKugwZV8xm3mpoD0hP0= Subject key identifier: 95:EF:66:66:BE:CF:F7:4F:E4:91:E4:9C:05:83:4B:70:5B:9B:88:35 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 6BBB55ACE2138B5F69702D0FD3C224C56EEEFDE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 01B8 Signing time: Thu 08 May 2025 15:40:38 +0000 Manifest this update: Thu 08 May 2025 15:35:38 +0000 Manifest next update: Sun 11 May 2025 23:47:38 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 2: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: gcxKUq3yIl36IXgdhmdk6TAl/m5XxeArZ0//uLTgiHM=) 3: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 4: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: nB+Bfi526s7F0pX/cJ3vKUq8RaU1aMQ8MOXDrQGipJ8=) 5: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: 4VjgnwK/a182gdINHocArJSvkMuEyPhSu4McFQU+6eo=) 6: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:bb:55:ac:e2:13:8b:5f:69:70:2d:0f:d3:c2:24:c5:6e:ee:fd:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: May 8 15:35:38 2025 GMT Not After : May 11 23:47:38 2025 GMT Subject: CN=95EF6666BECFF74FE491E49C05834B705B9B8835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:5c:7c:f6:73:fb:b9:c0:df:86:fd:6d:e1: 75:af:65:d2:7e:86:03:6b:b5:fb:e1:ce:ac:0e:bb: 65:17:f2:57:7d:82:56:0b:03:6e:10:24:6c:e5:3b: 40:21:63:c7:05:ba:7b:b6:10:91:cd:ae:ac:77:8a: 9d:47:7a:fa:0c:c0:73:85:e8:ef:f1:39:e3:18:23: 87:b4:24:fe:da:d9:ef:e0:21:22:33:0d:44:f7:fb: 01:14:34:b4:03:98:c3:84:48:0c:87:63:8f:5c:64: df:9c:9a:86:3b:4f:9b:e3:8d:d0:9a:88:a6:fe:d9: 1b:0a:7d:00:17:ec:57:84:ca:5b:f6:27:a9:b8:2f: aa:1b:ae:ae:f1:d4:89:be:6e:4d:32:85:e8:c1:90: 12:74:10:00:ec:a1:3d:b0:b9:62:b4:e1:98:35:14: ac:66:7a:5a:47:31:10:bd:31:bf:f5:fe:6f:65:2c: 65:30:59:f0:3f:e2:bc:23:14:4b:b7:f3:5b:12:b3: 05:a4:5c:04:d2:f3:25:55:ad:dd:64:6b:22:41:c1: d5:ae:c5:d9:83:69:48:89:b9:46:49:dc:d5:b0:c5: 5f:51:cd:f1:95:26:12:64:35:48:43:8c:fc:dc:42: c4:d6:3c:56:0e:f3:d6:90:92:c9:cf:2b:38:b0:1d: 44:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EF:66:66:BE:CF:F7:4F:E4:91:E4:9C:05:83:4B:70:5B:9B:88:35 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0f:de:9e:85:59:c8:02:62:9c:9d:cc:d1:a1:d8:5c:b1:59: b6:ed:86:78:e6:68:86:c0:48:3c:5e:44:ee:5d:4e:4b:ef:0f: f6:f8:d4:d3:8e:8c:e7:01:14:9a:d4:86:cf:f1:b4:e1:3b:1a: c9:7a:ae:7e:22:33:15:70:1d:f9:f7:05:b3:3b:0e:38:fa:e1: 96:7b:cd:8b:54:0d:5b:75:2c:3d:35:18:74:8e:46:29:0f:cf: bc:bb:ff:00:c9:94:0b:d7:ad:81:f8:19:a2:c8:90:eb:ff:f0: fb:38:9c:ef:f6:02:8f:ad:3b:dc:e1:ed:b6:42:29:61:42:97: f3:d2:22:23:af:99:ca:34:8d:76:20:e4:35:99:ce:8b:ea:00: 3b:22:90:77:f2:66:6d:b6:35:ef:8d:31:8f:e8:71:49:3e:94: 8b:55:86:0f:13:79:ff:81:b2:9b:3b:52:27:98:3b:08:4a:82: 7d:cc:c9:3e:b4:e5:a7:8e:7b:a0:8e:5c:c2:ba:52:f7:f6:fe: 2f:47:12:9f:da:a1:b5:8f:6f:c1:70:a6:ab:66:4f:bc:2e:b7: 74:a0:3d:ae:70:04:0f:c9:e4:37:81:cd:ec:0c:e9:02:3d:05: b5:6b:a8:9a:d6:54:0d:34:41:08:ef:da:04:e1:8a:ae:a0:d9: 7d:18:8e:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7tVrOITi19pcC0P08IkxW7u/eYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTA1MDgxNTM1MzhaFw0yNTA1MTEyMzQ3MzhaMDMxMTAvBgNV BAMTKDk1RUY2NjY2QkVDRkY3NEZFNDkxRTQ5QzA1ODM0QjcwNUI5Qjg4MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYfVx89nP7ucDfhv1t4XWvZdJ+ hgNrtfvhzqwOu2UX8ld9glYLA24QJGzlO0AhY8cFunu2EJHNrqx3ip1HevoMwHOF 6O/xOeMYI4e0JP7a2e/gISIzDUT3+wEUNLQDmMOESAyHY49cZN+cmoY7T5vjjdCa iKb+2RsKfQAX7FeEylv2J6m4L6obrq7x1Im+bk0yhejBkBJ0EADsoT2wuWK04Zg1 FKxmelpHMRC9Mb/1/m9lLGUwWfA/4rwjFEu381sSswWkXATS8yVVrd1kayJBwdWu xdmDaUiJuUZJ3NWwxV9RzfGVJhJkNUhDjPzcQsTWPFYO89aQksnPKziwHUS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUle9mZr7P90/kkeScBYNLcFubiDUwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUP3p6FWcgCYpydzNGh2FyxWbbthnjmaIbA SDxeRO5dTkvvD/b41NOOjOcBFJrUhs/xtOE7Gsl6rn4iMxVwHfn3BbM7Djj64ZZ7 zYtUDVt1LD01GHSORikPz7y7/wDJlAvXrYH4GaLIkOv/8Ps4nO/2Ao+tO9zh7bZC KWFCl/PSIiOvmco0jXYg5DWZzovqADsikHfyZm22Ne+NMY/ocUk+lItVhg8Tef+B sps7UieYOwhKgn3MyT605aeOe6COXMK6Uvf2/i9HEp/aobWPb8FwpqtmT7wut3Sg Pa5wBA/J5DeBzewM6QI9BbVrqJrWVA00QQjv2gThiq6g2X0YjkQ= -----END CERTIFICATE-----Generated at Sat May 10 00:29:11 2025 by rpki-client