$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: 7hvHiE2OMwdHM7j/v2w4Gd46qghPt+oO5PYAUbLxU0A= Subject key identifier: 33:D4:FD:D5:B9:6B:B4:6E:43:A8:96:E0:37:82:07:A3:F8:86:17:BC Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 6B616D26E8E356022D57060EFB1598C5B508F12D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: 7C Signing time: Sat 19 Jul 2025 09:21:49 +0000 Manifest this update: Sat 19 Jul 2025 09:16:49 +0000 Manifest next update: Tue 22 Jul 2025 14:19:49 +0000 Files and hashes: 1: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: cL7ZL6RvGqaM5lLXVnNe5p70LEzT1elnw9tJI0VweII=) 2: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: FSBT4Cl2oIA3FZ2v8CwqLAvZnqhyh2xxPvGzfautFn8=) 3: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: iziNbMfSG5lJ/Wc6NMmyz4JELED2OvK44piqUsCFc7c=) 4: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: +JichmiRgdBO5Ls93QqucE3C6EV+z6Am+M+Wk0rjli0=) 5: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: rou4lQQn7ojgWvv4wv09Ssy99ZSAyWazNJbw+IJaxNs=) 6: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: eJ9GbsoPpuqjf9GV+xkr8k7F5h0W8otETbBjey1b6zQ=) 7: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: 2GYoGVGasxR8uDpvI7BrmDmU9LmzA4rGOfrvv4FSPFU=) 8: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: lsPa4PHTaFW7/WYO9jL9elKT08+vKQu36LTtPFEtLWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:61:6d:26:e8:e3:56:02:2d:57:06:0e:fb:15:98:c5:b5:08:f1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Jul 19 09:16:49 2025 GMT Not After : Jul 22 14:19:49 2025 GMT Subject: CN=33D4FDD5B96BB46E43A896E0378207A3F88617BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:27:be:f2:cb:eb:97:6b:34:bf:eb:52:58:7b: 84:1c:bb:d9:5c:d3:2f:7b:8b:d3:14:53:84:32:e7: c1:56:1a:dc:9e:aa:b3:ec:d6:b4:bc:43:4b:49:80: 87:b6:d7:44:65:78:03:6b:9b:86:8c:e7:3c:b7:3d: 08:72:51:28:44:6a:26:4f:e4:3c:d1:c4:16:80:52: 0d:19:cb:f7:ae:fd:c3:9c:22:40:77:9a:a7:03:97: bc:e2:df:b1:47:fb:69:d9:de:2e:c1:73:f1:33:86: 12:60:b3:d1:8d:0b:7b:60:73:e3:95:70:18:7a:11: 2d:d1:66:71:09:e8:20:87:9c:31:29:fb:e7:22:8d: 32:13:95:56:c0:e9:94:4d:be:8f:5b:72:0c:6d:8c: dd:59:25:78:2f:0e:b7:fb:e2:06:b6:66:8b:77:9b: 3c:3b:77:90:b7:69:f1:85:10:57:ed:47:a9:8e:2f: 86:e5:ad:95:4b:1e:ce:da:b0:70:c4:6d:14:eb:ef: c6:ae:43:bf:0b:f8:72:78:63:37:f3:c2:18:45:ff: 06:9e:2f:02:55:08:54:c0:ac:5f:14:a7:ad:6a:27: 01:00:c1:90:38:a3:6f:47:43:0c:7f:ba:2c:88:27: 94:72:dd:dd:e9:c9:8e:32:07:02:fa:e4:8a:30:8c: 32:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D4:FD:D5:B9:6B:B4:6E:43:A8:96:E0:37:82:07:A3:F8:86:17:BC X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:64:e6:44:01:f6:14:00:99:6f:2c:61:0e:52:84:21:88:8d: 3b:1d:f2:df:f3:80:7d:ae:9d:cc:e6:af:56:0e:22:dd:35:93: 3c:25:e7:00:3a:cc:8a:a9:33:eb:10:42:bd:59:70:dc:81:de: 8a:aa:a5:fb:30:c2:04:26:0c:66:50:1b:ef:66:96:6a:1d:3b: 84:74:19:b9:2a:98:b4:91:58:89:b8:2e:70:c2:a5:d4:61:01: 55:39:41:bf:0a:86:c7:5e:52:64:06:97:64:6c:c6:35:e1:0b: 0a:68:d4:9d:a6:64:72:00:a6:76:0c:42:b1:b4:df:b2:97:21: 89:6b:4f:44:9d:5b:27:97:69:ca:ab:7b:9f:f3:4c:97:dc:fe: d3:0b:2f:e7:c9:78:f3:d0:c0:d0:c7:3b:a2:33:ff:7c:76:8a: 9c:8b:1f:a0:27:22:ec:3f:a7:d3:d8:bb:50:e5:68:0b:28:b1: 9e:54:02:c4:f7:9d:6f:e5:fb:0e:5b:69:16:aa:64:01:f8:81: e1:e4:20:59:fa:8c:8f:76:36:85:ea:7d:9d:c2:d6:df:53:a3: 84:1d:4c:6d:e5:03:b7:0d:05:73:f5:ba:eb:69:d0:19:b0:57: 89:1c:93:f9:75:4e:bc:94:f8:6e:d0:3e:4f:fb:9e:d5:39:4b: dd:53:37:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2FtJujjVgItVwYO+xWYxbUI8S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNTA3MTkwOTE2NDlaFw0yNTA3MjIxNDE5NDlaMDMxMTAvBgNV BAMTKDMzRDRGREQ1Qjk2QkI0NkU0M0E4OTZFMDM3ODIwN0EzRjg4NjE3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJ77yy+uXazS/61JYe4Qcu9lc 0y97i9MUU4Qy58FWGtyeqrPs1rS8Q0tJgIe210RleANrm4aM5zy3PQhyUShEaiZP 5DzRxBaAUg0Zy/eu/cOcIkB3mqcDl7zi37FH+2nZ3i7Bc/EzhhJgs9GNC3tgc+OV cBh6ES3RZnEJ6CCHnDEp++cijTITlVbA6ZRNvo9bcgxtjN1ZJXgvDrf74ga2Zot3 mzw7d5C3afGFEFftR6mOL4blrZVLHs7asHDEbRTr78auQ78L+HJ4YzfzwhhF/wae LwJVCFTArF8Up61qJwEAwZA4o29HQwx/uiyIJ5Ry3d3pyY4yBwL65IowjDLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM9T91blrtG5DqJbgN4IHo/iGF7wwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZk5kQB9hQAmW8sYQ5ShCGIjTsd8t/zgH2u nczmr1YOIt01kzwl5wA6zIqpM+sQQr1ZcNyB3oqqpfswwgQmDGZQG+9mlmodO4R0 GbkqmLSRWIm4LnDCpdRhAVU5Qb8KhsdeUmQGl2RsxjXhCwpo1J2mZHIApnYMQrG0 37KXIYlrT0SdWyeXacqre5/zTJfc/tMLL+fJePPQwNDHO6Iz/3x2ipyLH6AnIuw/ p9PYu1DlaAsosZ5UAsT3nW/l+w5baRaqZAH4geHkIFn6jI92NoXqfZ3C1t9To4Qd TG3lA7cNBXP1uutp0BmwV4kck/l1TryU+G7QPk/7ntU5S91TN3Q= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:51 2025 by rpki-client