$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: xSVbAy1cAPeSZozFJDHHOORlmZrySo3ZUjv7oYURSck= Subject key identifier: 01:7B:00:01:2C:61:FC:E1:E6:A5:8E:B4:BA:DB:4B:C6:1D:ED:4D:EB Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 5E06D3DC1CD0F3DC6B598C4C219B295DAE29E8A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 01F7 Signing time: Sun 20 Jul 2025 00:51:46 +0000 Manifest this update: Sun 20 Jul 2025 00:46:46 +0000 Manifest next update: Wed 23 Jul 2025 09:52:46 +0000 Files and hashes: 1: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: FXE5GAFeqGpeEgNYhdu+NiOVWPi7nwVOKlyxLEU4cy8=) 2: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: bh1W0XuP1o2rK7C5t7k8RTv/Lt8Q6SBWCy0mhOr5t2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:06:d3:dc:1c:d0:f3:dc:6b:59:8c:4c:21:9b:29:5d:ae:29:e8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Jul 20 00:46:46 2025 GMT Not After : Jul 23 09:52:46 2025 GMT Subject: CN=017B00012C61FCE1E6A58EB4BADB4BC61DED4DEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:36:bc:13:db:8e:50:02:d3:c6:60:8e:b6:92: 37:39:97:90:4a:5a:e3:ab:71:38:ad:ff:97:01:eb: d9:40:5d:76:38:82:b7:84:29:16:72:a5:8c:9f:f6: a0:2d:19:9a:43:ee:3b:67:7f:2c:14:d2:6d:3d:63: 3f:0c:eb:11:7c:71:58:bb:8f:96:0a:e8:18:9d:cc: 94:1b:61:ff:a0:99:22:80:c8:57:c4:c9:2c:0a:e4: 31:78:5b:d8:c3:dd:41:2f:67:9d:f6:98:6f:84:16: 86:b7:81:8f:6e:e2:32:e2:98:64:a0:bb:f4:e6:c5: e7:8b:15:29:ae:80:94:31:5c:81:47:2a:66:ac:c2: ba:9e:22:df:82:45:e6:13:5c:e4:d6:45:c8:6d:8a: 5d:fa:db:fb:57:59:17:4b:e6:9b:01:75:a7:d4:18: 40:3d:43:7d:38:ca:df:b5:aa:8a:57:a3:89:6b:9e: 68:3c:99:0a:82:20:cd:ff:c3:2c:8f:f6:6e:5c:db: 26:10:67:c0:76:24:a5:56:8a:c1:65:6d:e5:68:a8: f9:f8:29:3a:a6:d8:a8:8b:31:d7:6f:91:11:fb:27: 3c:45:08:83:f5:95:a3:c9:02:f4:ae:fb:b1:9a:f3: 7c:78:af:de:6f:de:04:42:90:6c:ec:05:57:31:09: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7B:00:01:2C:61:FC:E1:E6:A5:8E:B4:BA:DB:4B:C6:1D:ED:4D:EB X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7c:4e:28:1f:e2:06:1e:75:96:13:df:5f:a2:c3:92:74:0f: 25:52:3d:d1:8d:af:7d:f6:24:9f:02:ac:8d:c6:10:ec:c1:fe: 05:56:4f:09:8c:f6:d2:92:3a:c1:1b:25:5d:b2:2c:59:77:11: fa:1b:5e:24:d2:f4:c4:9b:f0:dd:7f:f8:b8:e9:8b:7d:63:4b: 8d:a3:12:8b:7a:2c:6a:c9:29:b9:4b:f3:17:3d:43:b7:51:de: 0c:2c:47:9b:93:a9:f4:53:7f:c3:6d:50:49:0d:e9:0b:98:b4: 2f:32:30:2e:2d:4d:9e:c7:0b:4f:60:49:ce:eb:3a:0f:1c:dc: 4e:00:b4:bb:d3:1a:57:19:6f:31:33:f2:ae:78:65:b2:df:6a: c3:57:4c:4d:83:4a:90:04:58:82:1b:66:7a:bb:82:1e:5b:7d: b6:dd:6c:35:07:86:d8:53:58:51:70:2f:37:ee:27:fb:60:c0: c1:4c:49:9b:b7:eb:5e:02:d6:6e:30:01:3d:76:a3:68:04:6f: 46:bc:cb:8b:10:ef:f8:d9:99:b2:40:7f:83:e0:c5:92:32:23: 85:e0:dc:a4:b4:7e:ed:d3:11:fc:70:19:3f:de:c6:ab:b4:f2: a7:26:49:87:99:b7:3d:7e:0d:71:c1:a5:15:53:32:4a:f8:86: 66:c8:03:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgbT3BzQ89xrWYxMIZspXa4p6KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNTA3MjAwMDQ2NDZaFw0yNTA3MjMwOTUyNDZaMDMxMTAvBgNV BAMTKDAxN0IwMDAxMkM2MUZDRTFFNkE1OEVCNEJBREI0QkM2MURFRDRERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzNrwT245QAtPGYI62kjc5l5BK WuOrcTit/5cB69lAXXY4greEKRZypYyf9qAtGZpD7jtnfywU0m09Yz8M6xF8cVi7 j5YK6BidzJQbYf+gmSKAyFfEySwK5DF4W9jD3UEvZ532mG+EFoa3gY9u4jLimGSg u/TmxeeLFSmugJQxXIFHKmaswrqeIt+CReYTXOTWRchtil362/tXWRdL5psBdafU GEA9Q304yt+1qopXo4lrnmg8mQqCIM3/wyyP9m5c2yYQZ8B2JKVWisFlbeVoqPn4 KTqm2KiLMddvkRH7JzxFCIP1laPJAvSu+7Ga83x4r95v3gRCkGzsBVcxCcX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAXsAASxh/OHmpY60uttLxh3tTeswHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF58Tigf4gYedZYT31+iw5J0DyVSPdGNr332 JJ8CrI3GEOzB/gVWTwmM9tKSOsEbJV2yLFl3EfobXiTS9MSb8N1/+Ljpi31jS42j Eot6LGrJKblL8xc9Q7dR3gwsR5uTqfRTf8NtUEkN6QuYtC8yMC4tTZ7HC09gSc7r Og8c3E4AtLvTGlcZbzEz8q54ZbLfasNXTE2DSpAEWIIbZnq7gh5bfbbdbDUHhthT WFFwLzfuJ/tgwMFMSZu3614C1m4wAT12o2gEb0a8y4sQ7/jZmbJAf4PgxZIyI4Xg 3KS0fu3TEfxwGT/exqu08qcmSYeZtz1+DXHBpRVTMkr4hmbIAyc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:29 2025 by rpki-client