$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: LC1Ac1LXg5RDz6UzS/CPwaFxcQqp0HN6tuSDZedE1Ag= Subject key identifier: 02:8F:A2:7B:98:C5:1E:8D:0C:2B:58:55:CC:61:25:C2:4F:38:DA:95 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 173F04ADB33277AD73511F65D3C4AEFE49061E56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: 9B Signing time: Mon 21 Jul 2025 16:41:53 +0000 Manifest this update: Mon 21 Jul 2025 16:36:53 +0000 Manifest next update: Thu 24 Jul 2025 17:45:53 +0000 Files and hashes: 1: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: lqa4LeDrVcfVCqouvfSxMVUWa/OC3PAHWp6Ogspse8s=) 2: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: WAJ22gxcIZsLrG3fwFj6LAYpg0sHhVFWhpG6gRBIpI8=) 3: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY=) 4: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 17:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3f:04:ad:b3:32:77:ad:73:51:1f:65:d3:c4:ae:fe:49:06:1e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Jul 21 16:36:53 2025 GMT Not After : Jul 24 17:45:53 2025 GMT Subject: CN=028FA27B98C51E8D0C2B5855CC6125C24F38DA95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:45:f5:01:ca:45:c5:18:5e:aa:e6:da:f3: a0:f8:e8:c0:d2:79:4d:78:db:0e:b1:dc:fe:eb:46: f6:96:03:2f:68:c8:4c:2f:c9:07:82:29:d8:2d:7c: c3:9b:5e:25:79:d5:13:2c:51:9e:59:17:a1:31:c3: 6a:ad:38:ce:4a:0a:06:3d:a0:37:d1:15:fa:bc:15: 75:d1:75:f4:61:d9:2c:08:a7:29:18:af:2d:26:8f: 70:0d:f3:92:a5:8f:f6:58:59:33:ca:0c:6c:20:74: 9a:b1:a5:3a:af:f7:7a:e4:91:6f:ef:58:b9:ad:74: 61:e5:d8:a4:a3:a6:bf:ec:6a:f1:4d:a9:69:51:83: a4:fb:99:fe:b6:b0:c1:db:79:66:c9:7a:d6:ff:14: 72:28:10:cd:d9:af:e5:55:37:f7:9f:0b:3e:a5:fd: b8:1e:e1:e9:7e:b0:3f:c0:40:12:89:22:95:91:8a: 07:b4:b0:4d:c7:5a:92:26:3f:2f:35:b3:f3:6d:66: 8e:ea:f2:6d:16:0d:0d:f6:99:c4:46:58:7f:b8:57: 4a:8a:5f:fe:06:dd:ef:5e:6b:4c:92:60:60:43:db: 4a:95:d9:d5:c8:7e:9e:f2:24:c0:85:e8:82:79:d4: 3f:b1:28:fb:77:ce:06:e8:f1:98:70:07:9b:5c:03: fa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8F:A2:7B:98:C5:1E:8D:0C:2B:58:55:CC:61:25:C2:4F:38:DA:95 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:08:e1:2e:b5:ba:b5:c3:58:aa:2a:60:52:28:50:5f:0a:2a: e8:5b:2c:64:51:95:0f:f2:b3:56:e7:3b:72:cb:48:75:c3:4b: bd:b4:c4:30:c9:9a:d1:45:3e:92:41:23:dc:ae:81:c1:36:cb: 77:66:92:11:6e:7b:d6:8b:72:fa:85:db:44:dc:44:a5:b9:b8: c9:66:b5:87:22:df:83:9d:8f:7d:67:1a:19:54:7d:a4:5a:f9: b1:4b:7e:49:39:43:54:30:c4:14:53:9d:07:23:ba:ce:e8:43: a3:d4:72:fc:6e:ef:8a:d5:5c:99:a6:9b:7e:d2:2c:69:b8:09: bc:bb:e8:cf:fe:0c:41:3e:91:e4:54:cd:4a:2f:91:ab:43:25: 0b:8a:f9:55:ed:8e:07:51:95:00:e4:c2:b8:2e:58:bc:98:79: 09:7c:55:6f:de:23:0f:27:be:5e:b4:85:48:40:83:20:b9:94: 62:6d:d2:b1:ce:b1:06:1c:8f:d5:f3:cb:3a:d5:e5:56:8d:28: f5:a6:79:8d:58:40:3d:c1:1c:fc:af:ef:a7:e5:c1:c5:99:42: ff:e7:61:45:9a:84:ef:e8:3b:1a:3e:b0:f3:6c:b7:6c:8e:b0: 69:be:9f:ca:78:1f:e4:7e:f7:be:f8:9f:2d:9a:54:72:b1:3c: 34:16:a9:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFz8ErbMyd61zUR9l08Su/kkGHlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTA3MjExNjM2NTNaFw0yNTA3MjQxNzQ1NTNaMDMxMTAvBgNV BAMTKDAyOEZBMjdCOThDNTFFOEQwQzJCNTg1NUNDNjEyNUMyNEYzOERBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PkX1AcpFxRhequba86D46MDS eU142w6x3P7rRvaWAy9oyEwvyQeCKdgtfMObXiV51RMsUZ5ZF6Exw2qtOM5KCgY9 oDfRFfq8FXXRdfRh2SwIpykYry0mj3AN85Klj/ZYWTPKDGwgdJqxpTqv93rkkW/v WLmtdGHl2KSjpr/savFNqWlRg6T7mf62sMHbeWbJetb/FHIoEM3Zr+VVN/efCz6l /bge4el+sD/AQBKJIpWRige0sE3HWpImPy81s/NtZo7q8m0WDQ32mcRGWH+4V0qK X/4G3e9ea0ySYGBD20qV2dXIfp7yJMCF6IJ51D+xKPt3zgbo8ZhwB5tcA/opAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAo+ie5jFHo0MK1hVzGElwk842pUwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUI4S61urXDWKoqYFIoUF8KKuhbLGRRlQ/y s1bnO3LLSHXDS720xDDJmtFFPpJBI9yugcE2y3dmkhFue9aLcvqF20TcRKW5uMlm tYci34Odj31nGhlUfaRa+bFLfkk5Q1QwxBRTnQcjus7oQ6PUcvxu74rVXJmmm37S LGm4Cby76M/+DEE+keRUzUovkatDJQuK+VXtjgdRlQDkwrguWLyYeQl8VW/eIw8n vl60hUhAgyC5lGJt0rHOsQYcj9XzyzrV5VaNKPWmeY1YQD3BHPyv76flwcWZQv/n YUWahO/oOxo+sPNst2yOsGm+n8p4H+R+9774ny2aVHKxPDQWqdI= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:37 2025 by rpki-client