$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: Tc3DJ2Ujy+muLdt0WT07GE8i4vdg+2b2mUO/H2kuoXY= Subject key identifier: 4F:0F:FF:C9:D4:52:89:A0:41:8B:0D:36:B1:06:7C:EB:34:F6:2B:B2 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 3D180F1A778E4999456307707B0E1F8373C52439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 01D0 Signing time: Sun 29 Jun 2025 20:20:39 +0000 Manifest this update: Sun 29 Jun 2025 20:15:39 +0000 Manifest next update: Wed 02 Jul 2025 20:41:39 +0000 Files and hashes: 1: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: TmXopg57MFIryWHv0JCjAxPHYxXriTAIakTFIyxnKWw=) 2: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 3: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 4: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 5: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 6: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 7: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:18:0f:1a:77:8e:49:99:45:63:07:70:7b:0e:1f:83:73:c5:24:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Jun 29 20:15:39 2025 GMT Not After : Jul 2 20:41:39 2025 GMT Subject: CN=4F0FFFC9D45289A0418B0D36B1067CEB34F62BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:38:9f:3e:0e:50:ee:4f:f6:10:bb:c3:64: ae:df:07:b3:78:f9:ba:f1:56:91:26:04:5a:0e:4d: af:30:9d:93:18:fa:bc:4b:eb:9a:20:e0:bb:21:c5: 96:a6:79:fd:3c:27:bf:d2:7c:a5:c8:89:3e:3e:1d: 52:07:a8:14:f9:8f:8a:6a:59:e9:84:96:0e:26:6c: a8:55:fc:18:01:02:dd:3e:9a:07:71:73:b9:0e:c0: 6e:54:7d:3b:b0:90:9b:c4:13:10:e2:a9:7e:6d:a6: 9b:26:1a:a3:8b:fe:75:74:31:6d:d7:d0:d8:9f:17: 92:61:80:af:3c:22:a5:2e:3c:ac:c6:ba:d3:d1:5b: 95:fa:65:7d:de:f0:91:b9:5f:66:ed:55:6e:42:a1: a2:ba:e6:40:f2:d6:08:23:b8:c1:a1:8d:b0:04:1b: 37:d0:0f:7c:c4:3c:51:04:81:30:9b:93:f0:07:a8: f6:cd:8b:1a:e9:37:9f:81:9e:df:72:34:e4:43:fb: 6d:f8:bb:61:f1:36:46:7e:7b:cf:0e:7c:87:ff:99: 13:c1:13:e8:e3:b1:7f:a0:66:c9:9c:d4:a7:dd:6d: a4:f1:9f:a2:66:da:95:e8:ed:ca:39:0b:68:2f:94: 68:c0:24:12:3d:a6:d6:6e:af:87:3e:42:d9:04:fc: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0F:FF:C9:D4:52:89:A0:41:8B:0D:36:B1:06:7C:EB:34:F6:2B:B2 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b4:98:2a:bc:16:5b:eb:29:27:76:99:d0:3a:47:6f:ed:99: 51:0e:a9:22:1a:75:d6:7c:f7:cf:58:80:a9:04:27:2e:69:8c: f8:76:b2:09:7f:d6:14:94:0c:ee:80:d9:c0:3c:2b:9b:50:c7: 95:c6:27:cb:87:62:55:8a:11:8a:ee:9f:65:5f:9f:51:14:56: 02:4c:3e:10:44:74:62:d6:f5:e4:c9:82:e9:bb:30:ae:f2:e6: 45:fb:b2:f6:eb:95:0d:83:df:11:0c:8e:9e:79:6b:40:86:ee: 05:01:d5:81:19:ce:16:09:d5:5b:2d:5a:46:8d:50:54:b1:fd: 6f:ad:b2:41:e4:f5:80:8f:09:df:87:f7:a8:79:74:57:4c:1c: c8:8c:61:3d:7d:d7:a4:6f:61:cf:11:37:1c:e2:25:d9:e0:3f: 3d:48:1d:7f:89:f5:1b:84:6f:6c:db:a9:74:12:b0:02:08:84: c1:60:98:bc:07:3d:3f:b2:12:11:46:54:20:41:ae:2a:60:a0: a8:d0:a4:6c:ff:d4:09:0e:dd:26:39:53:96:93:67:1a:1a:e3: eb:fe:2b:76:a8:cb:77:58:f5:32:52:1a:b6:06:08:0b:31:b4: 66:ab:5f:6b:44:da:d6:38:f3:5c:2e:fd:4b:21:c4:d6:6a:9d: e8:d1:2a:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRgPGneOSZlFYwdwew4fg3PFJDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTA2MjkyMDE1MzlaFw0yNTA3MDIyMDQxMzlaMDMxMTAvBgNV BAMTKDRGMEZGRkM5RDQ1Mjg5QTA0MThCMEQzNkIxMDY3Q0VCMzRGNjJCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyjifPg5Q7k/2ELvDZK7fB7N4 +brxVpEmBFoOTa8wnZMY+rxL65og4LshxZamef08J7/SfKXIiT4+HVIHqBT5j4pq WemElg4mbKhV/BgBAt0+mgdxc7kOwG5UfTuwkJvEExDiqX5tppsmGqOL/nV0MW3X 0NifF5JhgK88IqUuPKzGutPRW5X6ZX3e8JG5X2btVW5CoaK65kDy1ggjuMGhjbAE GzfQD3zEPFEEgTCbk/AHqPbNixrpN5+Bnt9yNORD+234u2HxNkZ+e88OfIf/mRPB E+jjsX+gZsmc1KfdbaTxn6Jm2pXo7co5C2gvlGjAJBI9ptZur4c+QtkE/KCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTw//ydRSiaBBiw02sQZ86zT2K7IwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD60mCq8FlvrKSd2mdA6R2/tmVEOqSIaddZ8 989YgKkEJy5pjPh2sgl/1hSUDO6A2cA8K5tQx5XGJ8uHYlWKEYrun2Vfn1EUVgJM PhBEdGLW9eTJgum7MK7y5kX7svbrlQ2D3xEMjp55a0CG7gUB1YEZzhYJ1VstWkaN UFSx/W+tskHk9YCPCd+H96h5dFdMHMiMYT1916RvYc8RNxziJdngPz1IHX+J9RuE b2zbqXQSsAIIhMFgmLwHPT+yEhFGVCBBripgoKjQpGz/1AkO3SY5U5aTZxoa4+v+ K3aoy3dY9TJSGrYGCAsxtGarX2tE2tY481wu/UshxNZqnejRKpY= -----END CERTIFICATE-----Generated at Mon Jun 30 18:51:48 2025 by rpki-client