$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: HxbO6jYM7b03XX6L4+CJe96nCzZKMwQLdmtP63REbK8= Subject key identifier: BD:93:66:D3:F5:4C:CF:65:36:77:67:FA:AC:58:12:61:69:F2:7A:9C Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 2C0EB84147B80FA955973BAF419D3EF0D6D03A6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 0310 Signing time: Fri 09 May 2025 08:00:05 +0000 Manifest this update: Fri 09 May 2025 07:55:05 +0000 Manifest next update: Mon 12 May 2025 16:41:05 +0000 Files and hashes: 1: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: cP/iw9sPd2Mt+HF4AWmvbMCrMJGCtYK/2fxjNKYv6hk=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 16:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0e:b8:41:47:b8:0f:a9:55:97:3b:af:41:9d:3e:f0:d6:d0:3a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: May 9 07:55:05 2025 GMT Not After : May 12 16:41:05 2025 GMT Subject: CN=BD9366D3F54CCF65367767FAAC58126169F27A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:56:bf:14:78:a4:92:74:bf:02:25:a2:01:c9: f4:bf:13:6c:48:8f:2c:b7:d2:54:e5:52:ba:4b:ed: ad:7a:d1:bd:d3:a0:74:5a:17:f2:74:31:56:8a:3e: af:2d:5e:b8:3f:92:68:03:78:c0:ad:2f:c8:ab:cb: 6c:ac:cb:65:18:47:db:65:86:75:e9:83:46:9f:63: 01:67:fe:13:a3:03:3f:7c:4c:a3:21:51:f1:58:0f: 72:28:c2:8c:ca:22:e0:c7:f6:06:4d:e5:86:01:c0: a1:6f:a0:71:1b:62:c5:04:6d:04:0b:c7:5c:21:9a: 1d:da:61:02:d1:94:b6:80:1e:6a:e1:6f:14:bd:21: 88:31:86:af:2c:0b:66:25:34:62:5f:2f:f0:74:c0: 1c:fd:23:f0:6c:bc:26:32:05:9b:4d:fb:e4:f7:c6: cf:f1:92:e9:50:41:14:e1:63:69:a6:92:48:76:0e: 28:fb:64:cc:67:99:c1:33:b1:f1:bc:94:fc:92:58: 14:df:6a:fd:c4:79:cd:5f:9d:d7:0e:45:d7:86:5a: 8c:94:7a:09:b6:56:7c:2f:2f:c0:19:b6:d4:cb:87: a6:d0:8e:6c:84:0b:a0:9d:db:66:46:ae:f6:60:2c: f8:df:8f:0a:ee:0f:33:c6:6d:53:51:00:66:4f:f5: 92:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:93:66:D3:F5:4C:CF:65:36:77:67:FA:AC:58:12:61:69:F2:7A:9C X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:f3:cb:b6:9f:c7:d3:7b:67:4a:6e:af:fb:34:e2:1a:48:76: 5b:a0:ca:b9:ad:66:6f:b7:a9:e8:1e:89:12:f3:6f:8b:53:0f: cb:86:50:f3:4e:78:c2:1b:ee:58:30:6e:6c:4d:d8:ea:6a:1f: 2f:1a:b5:dd:88:e6:72:99:b3:2c:c8:e9:a4:3e:c1:d2:fe:52: 6c:8e:b2:71:d8:df:71:38:cc:b0:fd:f1:b0:2d:88:65:14:be: 67:ff:91:78:6e:da:f9:03:4a:7f:04:0f:5a:22:f7:4a:f3:bf: c0:a4:7e:49:e3:39:7c:35:71:ed:3b:91:ac:94:b4:71:37:09: 18:3d:d4:fa:81:7e:b4:56:87:4f:cb:e9:c8:e3:2b:3d:1f:e8: 29:06:f1:1d:6b:8b:7d:65:47:5b:ab:25:b3:b7:b6:9a:66:7f: 68:56:8d:45:a8:a1:88:e0:43:23:06:5c:60:45:cd:cb:7d:ec: 30:5d:c9:59:23:6c:dc:a4:8f:f2:67:d2:40:0b:b2:ce:f0:aa: 68:ba:ce:d2:0e:b2:07:10:86:aa:92:5d:35:b5:e7:3e:99:7e: 5d:bd:92:1b:19:45:66:cd:b6:b3:d8:ee:53:e2:8e:d6:21:cb: 92:d1:93:08:1b:44:8d:7e:b3:7f:95:f9:3f:08:d5:46:a8:49: d7:d6:ea:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULA64QUe4D6lVlzuvQZ0+8NbQOmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNTA1MDkwNzU1MDVaFw0yNTA1MTIxNjQxMDVaMDMxMTAvBgNV BAMTKEJEOTM2NkQzRjU0Q0NGNjUzNjc3NjdGQUFDNTgxMjYxNjlGMjdBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVr8UeKSSdL8CJaIByfS/E2xI jyy30lTlUrpL7a160b3ToHRaF/J0MVaKPq8tXrg/kmgDeMCtL8iry2ysy2UYR9tl hnXpg0afYwFn/hOjAz98TKMhUfFYD3IowozKIuDH9gZN5YYBwKFvoHEbYsUEbQQL x1whmh3aYQLRlLaAHmrhbxS9IYgxhq8sC2YlNGJfL/B0wBz9I/BsvCYyBZtN++T3 xs/xkulQQRThY2mmkkh2Dij7ZMxnmcEzsfG8lPySWBTfav3Eec1fndcORdeGWoyU egm2VnwvL8AZttTLh6bQjmyEC6Cd22ZGrvZgLPjfjwruDzPGbVNRAGZP9ZI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvZNm0/VMz2U2d2f6rFgSYWnyepwwHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjzy7afx9N7Z0pur/s04hpIdlugyrmtZm+3 qegeiRLzb4tTD8uGUPNOeMIb7lgwbmxN2OpqHy8atd2I5nKZsyzI6aQ+wdL+UmyO snHY33E4zLD98bAtiGUUvmf/kXhu2vkDSn8ED1oi90rzv8CkfknjOXw1ce07kayU tHE3CRg91PqBfrRWh0/L6cjjKz0f6CkG8R1ri31lR1urJbO3tppmf2hWjUWooYjg QyMGXGBFzct97DBdyVkjbNykj/Jn0kALss7wqmi6ztIOsgcQhqqSXTW15z6Zfl29 khsZRWbNtrPY7lPijtYhy5LRkwgbRI1+s3+V+T8I1UaoSdfW6ts= -----END CERTIFICATE-----Generated at Sun May 11 09:08:44 2025 by rpki-client