$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: nIgfCFOO83Uz6TYXGA5cwqWwSBDfKFHr1lBsKP5RRm4= Subject key identifier: A5:E9:3F:CB:E9:24:C0:79:00:A8:11:0C:A6:DD:E5:6C:24:53:B8:1E Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 240F78A2CBE49C06BA20873E2B5806302E193B03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 01D9 Signing time: Mon 21 Jul 2025 02:21:28 +0000 Manifest this update: Mon 21 Jul 2025 02:16:28 +0000 Manifest next update: Thu 24 Jul 2025 08:05:28 +0000 Files and hashes: 1: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: 9UCpsoWuLQAl7M7H7I7pvkuYTK1p0LGxPaBtXXBirzg=) 2: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 3: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 4: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 5: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 6: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 7: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0f:78:a2:cb:e4:9c:06:ba:20:87:3e:2b:58:06:30:2e:19:3b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Jul 21 02:16:28 2025 GMT Not After : Jul 24 08:05:28 2025 GMT Subject: CN=A5E93FCBE924C07900A8110CA6DDE56C2453B81E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:df:14:2f:ba:df:de:68:71:de:3b:04:c3: 50:29:0e:7f:a1:8a:33:81:43:f7:32:95:e0:07:11: ea:44:83:8c:3a:e5:1b:87:04:35:b5:bf:05:34:73: df:a7:db:c5:fe:e7:9b:56:36:70:b1:08:88:5c:0f: 1a:31:f6:bd:7d:62:4b:98:7c:ad:69:b0:78:c8:b6: 27:92:94:bd:a1:2a:ea:03:e7:bb:22:64:33:b6:08: 96:8b:17:ae:99:d7:ac:63:d4:c6:47:0f:62:21:5b: 82:07:1e:fa:2c:b4:79:fc:22:c6:a1:45:ce:17:14: 17:f3:d4:7a:fd:1f:13:44:40:6f:ab:f8:cb:a8:0b: 7a:0b:56:6f:5e:1c:a1:95:ec:73:7a:85:30:1b:36: 5f:3c:71:02:a7:f6:d8:b3:3e:ba:ba:3c:9b:e4:34: 19:0b:53:f7:b3:b7:40:aa:54:3b:58:3d:17:5c:84: ea:bf:31:08:d8:b8:01:44:52:93:b7:e0:c9:b0:d1: 96:f9:39:cf:78:ec:97:af:08:66:d7:1d:1d:77:77: 87:66:ed:72:8d:ee:13:f8:cb:ba:94:b6:d5:5f:70: 39:75:2f:d6:94:9e:68:34:03:f2:b5:18:14:0d:06: a2:a1:34:d7:6f:64:5c:df:0a:85:ac:e8:72:8c:13: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E9:3F:CB:E9:24:C0:79:00:A8:11:0C:A6:DD:E5:6C:24:53:B8:1E X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:db:7b:69:8a:ca:b7:5b:91:5d:16:9a:2f:e9:e6:12:6a:6c: 0f:0a:40:6f:5b:f8:b0:5f:8a:0d:4e:32:7b:b7:5c:2e:14:05: e1:29:41:c6:a7:3b:4e:46:67:d7:77:6f:14:07:1d:98:0f:f9: 48:82:28:6a:6b:fd:5d:fb:4a:0e:18:ae:d7:de:5a:ad:af:06: 00:19:01:13:6b:4b:6f:9f:7f:75:4e:9e:30:d4:1e:3b:b6:0e: 4e:ab:eb:2e:77:05:df:7e:b1:59:a3:cb:5e:b0:90:10:5d:d8: d7:53:43:dc:5b:9b:36:b6:95:26:3b:90:14:cd:3c:65:84:70: b3:ad:cc:bb:3a:b8:05:d6:2e:e9:3c:f3:ca:99:7a:5f:e5:8a: bb:bb:c8:31:66:79:28:9d:64:c7:c4:5f:e1:7a:01:d6:79:90: d8:5d:53:ba:24:91:f9:01:ef:62:77:90:c3:6e:36:39:46:12: 98:3a:79:61:e8:81:63:ae:00:74:67:98:3a:4c:df:16:f8:c8: cd:2e:0f:cd:c9:02:4d:fa:bc:b9:37:71:68:14:58:7f:f1:7c: f7:44:d9:9f:ad:fa:33:c2:05:56:8a:ea:c5:76:55:27:7e:9e: 09:00:9b:75:8e:46:0c:e6:bc:37:0e:e2:28:02:d8:d1:5f:55: d6:67:bb:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJA94osvknAa6IIc+K1gGMC4ZOwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTA3MjEwMjE2MjhaFw0yNTA3MjQwODA1MjhaMDMxMTAvBgNV BAMTKEE1RTkzRkNCRTkyNEMwNzkwMEE4MTEwQ0E2RERFNTZDMjQ1M0I4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwS98UL7rf3mhx3jsEw1ApDn+h ijOBQ/cyleAHEepEg4w65RuHBDW1vwU0c9+n28X+55tWNnCxCIhcDxox9r19YkuY fK1psHjItieSlL2hKuoD57siZDO2CJaLF66Z16xj1MZHD2IhW4IHHvostHn8Isah Rc4XFBfz1Hr9HxNEQG+r+MuoC3oLVm9eHKGV7HN6hTAbNl88cQKn9tizPrq6PJvk NBkLU/ezt0CqVDtYPRdchOq/MQjYuAFEUpO34Mmw0Zb5Oc947JevCGbXHR13d4dm 7XKN7hP4y7qUttVfcDl1L9aUnmg0A/K1GBQNBqKhNNdvZFzfCoWs6HKME6ovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpek/y+kkwHkAqBEMpt3lbCRTuB4wHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTbe2mKyrdbkV0Wmi/p5hJqbA8KQG9b+LBf ig1OMnu3XC4UBeEpQcanO05GZ9d3bxQHHZgP+UiCKGpr/V37Sg4YrtfeWq2vBgAZ ARNrS2+ff3VOnjDUHju2Dk6r6y53Bd9+sVmjy16wkBBd2NdTQ9xbmza2lSY7kBTN PGWEcLOtzLs6uAXWLuk888qZel/liru7yDFmeSidZMfEX+F6AdZ5kNhdU7okkfkB 72J3kMNuNjlGEpg6eWHogWOuAHRnmDpM3xb4yM0uD83JAk36vLk3cWgUWH/xfPdE 2Z+t+jPCBVaK6sV2VSd+ngkAm3WORgzmvDcO4igC2NFfVdZnu/o= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:12 2025 by rpki-client