$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: G6bf4xDn9r7X1SJcMs0lJ9JHN8NzDXgubyqhjGrOt4Y= Subject key identifier: C8:01:F6:EF:7A:28:40:0A:ED:9A:31:31:31:2E:A7:1C:15:5D:C7:72 Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 34C79E4BE4F39ADC9990F28D0CB0E61A46CE68E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 0155 Signing time: Mon 21 Jul 2025 00:31:48 +0000 Manifest this update: Mon 21 Jul 2025 00:26:48 +0000 Manifest next update: Thu 24 Jul 2025 00:48:48 +0000 Files and hashes: 1: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=) 2: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=) 3: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: Fa+TiAFBEjHe5YGxJV8P5Bbm3NYsWz1uLxUriraRewg=) 4: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c7:9e:4b:e4:f3:9a:dc:99:90:f2:8d:0c:b0:e6:1a:46:ce:68:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Jul 21 00:26:48 2025 GMT Not After : Jul 24 00:48:48 2025 GMT Subject: CN=C801F6EF7A28400AED9A3131312EA71C155DC772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:71:ec:30:3f:5b:e3:a7:6f:a1:ca:26:df: 3f:3b:9f:cf:14:18:06:43:36:47:69:14:8a:84:57: 50:52:4f:e4:43:5b:42:d0:9d:0b:91:be:5b:46:09: 75:b6:21:50:23:0d:00:cf:0a:36:ae:bf:fa:df:d3: c8:f6:f9:a3:c6:02:f4:d4:f6:e1:5d:86:b8:e1:7c: 56:c2:c8:73:3e:3d:6a:13:3a:9e:3d:57:09:d1:4f: 25:56:7f:a7:ec:25:d9:54:05:c8:7d:3a:44:f1:11: 80:ac:c6:82:11:84:22:21:8a:d6:19:66:1b:4f:9c: ae:3a:7d:56:05:dd:14:12:31:f3:7c:2c:3e:ee:df: 74:9d:ad:56:d4:36:c6:d2:e6:67:8f:4f:9f:53:25: 45:be:65:74:19:28:61:5a:2b:9b:f5:42:f8:03:4b: 15:d5:73:fb:0a:04:33:79:58:ef:a9:1d:78:a9:72: 91:23:fd:c6:4b:4c:90:9a:5b:f5:a1:3e:51:6f:13: bd:b2:73:65:d5:38:4c:8d:27:2e:db:50:1d:37:59: 1f:fe:30:8b:39:cc:e1:f3:af:d5:12:12:70:ab:b8: d3:b2:6b:7a:af:37:58:92:a7:2e:a5:6c:38:45:a2: 51:06:4a:da:33:c0:bc:83:72:69:aa:95:39:6b:4e: 99:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:01:F6:EF:7A:28:40:0A:ED:9A:31:31:31:2E:A7:1C:15:5D:C7:72 X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:77:e3:56:82:0e:75:a1:e2:6a:91:b6:33:19:28:84:28:cf: 35:c4:d1:63:ee:f2:69:c4:6d:8d:67:2f:15:a5:9b:4f:d5:35: 0d:a3:cf:eb:c3:97:90:e0:70:f7:0d:c1:a9:3c:80:cd:f8:78: c8:d2:28:8d:26:f0:7e:ba:f9:f3:92:fc:85:d7:10:8f:5c:af: d0:cb:12:7a:4e:dc:1d:5b:62:82:c7:92:77:07:b2:e5:ae:1c: c8:c5:48:2e:98:92:5c:ac:3c:53:6d:af:f3:93:50:c9:c1:97: 43:e5:c9:0c:69:6e:4d:a2:b2:50:43:04:4d:4b:6e:e4:b5:4f: 37:a6:bd:04:88:bc:cb:3d:a5:c2:60:91:7e:52:54:91:a2:0f: 77:9c:8c:53:66:70:b0:20:84:95:5b:1e:7a:86:aa:11:ac:a2: 26:fc:de:8c:34:82:0b:97:a7:19:f3:18:5d:60:bd:9b:dd:ab: 68:75:77:e4:dc:4e:65:6a:18:38:89:e7:95:18:00:97:a5:81: f4:35:ca:8c:7a:10:fc:c7:87:6a:47:ff:1b:9b:ed:46:55:d5: 0a:01:79:5f:fb:8a:ea:a8:86:b1:35:9c:a5:2a:ac:c0:d4:44: e4:7b:03:16:2d:0d:da:83:d3:cb:8d:30:20:f5:b3:c1:f0:06: f8:fc:c3:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMeeS+TzmtyZkPKNDLDmGkbOaOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNTA3MjEwMDI2NDhaFw0yNTA3MjQwMDQ4NDhaMDMxMTAvBgNV BAMTKEM4MDFGNkVGN0EyODQwMEFFRDlBMzEzMTMxMkVBNzFDMTU1REM3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzXHsMD9b46dvocom3z87n88U GAZDNkdpFIqEV1BST+RDW0LQnQuRvltGCXW2IVAjDQDPCjauv/rf08j2+aPGAvTU 9uFdhrjhfFbCyHM+PWoTOp49VwnRTyVWf6fsJdlUBch9OkTxEYCsxoIRhCIhitYZ ZhtPnK46fVYF3RQSMfN8LD7u33SdrVbUNsbS5mePT59TJUW+ZXQZKGFaK5v1QvgD SxXVc/sKBDN5WO+pHXipcpEj/cZLTJCaW/WhPlFvE72yc2XVOEyNJy7bUB03WR/+ MIs5zOHzr9USEnCruNOya3qvN1iSpy6lbDhFolEGStozwLyDcmmqlTlrTpllAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyAH273ooQArtmjExMS6nHBVdx3IwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt341aCDnWh4mqRtjMZKIQozzXE0WPu8mnE bY1nLxWlm0/VNQ2jz+vDl5DgcPcNwak8gM34eMjSKI0m8H66+fOS/IXXEI9cr9DL EnpO3B1bYoLHkncHsuWuHMjFSC6YklysPFNtr/OTUMnBl0PlyQxpbk2islBDBE1L buS1TzemvQSIvMs9pcJgkX5SVJGiD3ecjFNmcLAghJVbHnqGqhGsoib83ow0gguX pxnzGF1gvZvdq2h1d+TcTmVqGDiJ55UYAJelgfQ1yox6EPzHh2pH/xub7UZV1QoB eV/7iuqohrE1nKUqrMDUROR7AxYtDdqD08uNMCD1s8HwBvj8w84= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:04 2025 by rpki-client