$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft File: 821049BBD22C335A50850F16AB159C0C6BCC28E5.mft (raw, json) Hash identifier: ePyxQPAVf5cZMEp2YAoqMYdHSXLE0nXljoby+U7MoX4= Subject key identifier: 25:9D:AB:B8:F9:50:D7:2A:52:65:E5:C1:9C:83:F2:B2:4C:66:7F:85 Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Certificate serial: 7CCFB1125964B744F1DE48BA2EFE7DC0AE649C21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft Manifest number: 0224 Signing time: Sun 20 Jul 2025 17:21:38 +0000 Manifest this update: Sun 20 Jul 2025 17:16:38 +0000 Manifest next update: Wed 23 Jul 2025 21:41:38 +0000 Files and hashes: 1: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: YF6vJXMVtUVK6CmNTZeLfmthP1D0nB1ofgHbuXDKxvI=) 2: 821049BBD22C335A50850F16AB159C0C6BCC28E5.crl (hash: eeSB5HvM9ubLy9DfNlyi6nqej3AezY2YlWpSre2wxSY=) 3: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: O6mcNqFGUKoXPAXAaTNGJf2XpVfyBv0t3Gtn3V+6lKE=) 4: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: ncuNmuDMRCz7XEGjG+8p/qjKUpvp2YtlNc4JXvP3iGg=) 5: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: gJZ1sW5BxaKi4OlH0Ko1+AD9dXMVkojyx6OKsnKZ2JU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cf:b1:12:59:64:b7:44:f1:de:48:ba:2e:fe:7d:c0:ae:64:9c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Validity Not Before: Jul 20 17:16:38 2025 GMT Not After : Jul 23 21:41:38 2025 GMT Subject: CN=259DABB8F950D72A5265E5C19C83F2B24C667F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e6:e3:d4:8f:e4:c9:c6:08:38:8a:07:07:2b: 0b:a2:5b:bb:e6:ee:24:43:d0:13:31:eb:27:31:bb: fe:35:df:00:c9:1f:f4:92:b8:12:6c:36:a8:21:fc: 4f:c6:c9:1b:65:e9:c8:6a:00:14:2d:a2:a3:f0:73: 45:4d:6d:aa:52:ac:ae:b5:32:9c:55:eb:02:53:1a: fe:55:9b:0c:5e:cf:7e:1a:fb:c5:8b:7b:0f:ef:15: 01:30:85:f4:48:40:44:12:ed:32:85:e4:20:25:bd: af:50:f6:f2:2b:bf:21:55:02:1f:c4:a2:6f:ca:fd: 58:d6:07:62:b2:1a:17:f3:d9:87:c0:e0:c5:18:d9: 87:03:dd:6a:f8:44:e8:03:6d:07:ec:01:f3:9d:0b: ca:29:b3:0d:9d:0e:ed:e8:a1:fe:69:08:d0:22:f7: 98:de:a8:b6:dd:41:14:7b:9a:d6:7b:1b:b4:5d:4c: b7:69:2f:6c:ff:96:26:1b:e4:79:d0:0c:88:fe:6d: f9:53:77:dc:a9:e9:66:12:d8:fc:b5:e9:87:65:33: bb:bb:62:b0:e8:2e:2e:04:45:5d:75:9d:ec:af:31: 48:67:bd:62:f1:ea:3a:c1:d7:0b:84:f6:0e:0b:eb: c2:57:0d:28:ec:4b:53:b9:ac:bc:4b:e0:20:db:73: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9D:AB:B8:F9:50:D7:2A:52:65:E5:C1:9C:83:F2:B2:4C:66:7F:85 X509v3 Authority Key Identifier: keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:22:01:4e:28:05:32:3c:34:9a:15:97:01:18:46:b5:75:31: af:e6:86:a4:a0:dd:ee:5d:59:1b:4a:9b:cf:d2:7f:e1:75:08: 35:50:42:2f:cf:9b:2c:8d:65:a4:b7:c9:d1:90:d1:d3:71:88: 39:53:77:71:8e:bf:39:0c:b6:2e:4e:86:00:49:fd:91:d1:aa: cf:7b:0c:00:31:b0:a1:a1:60:f0:a6:c2:37:2e:f2:10:a8:7a: aa:c0:c4:f4:2b:7a:d2:a3:e9:51:10:42:67:2a:e5:03:59:24: 7b:a9:3f:46:8f:44:21:ad:31:9e:26:d2:ef:e6:23:c4:6d:11: 90:99:ce:e6:84:2f:6e:58:55:52:bf:79:45:95:65:11:e2:87: e9:51:06:b4:73:fe:07:d5:95:aa:4b:56:a1:4a:1b:aa:d5:a8: a1:c8:be:76:84:90:10:b6:fb:a7:ea:61:60:d0:f2:d8:9b:95: 6e:11:36:25:88:f4:54:b3:cb:0d:4a:74:f0:7d:6c:ac:df:8f: 4e:79:6c:1b:af:1d:53:0c:9e:66:38:2c:49:e2:ab:83:8a:39: 96:a1:3d:2a:63:09:8a:a6:aa:17:d2:05:81:ba:a4:c8:44:2f: 05:66:84:5b:ac:f8:9e:1e:11:f2:e2:6c:40:9a:6a:e5:8a:b3: 31:c6:b8:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfM+xEllkt0Tx3ki6Lv59wK5knCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2 QkNDMjhFNTAeFw0yNTA3MjAxNzE2MzhaFw0yNTA3MjMyMTQxMzhaMDMxMTAvBgNV BAMTKDI1OURBQkI4Rjk1MEQ3MkE1MjY1RTVDMTlDODNGMkIyNEM2NjdGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5uPUj+TJxgg4igcHKwuiW7vm 7iRD0BMx6ycxu/413wDJH/SSuBJsNqgh/E/GyRtl6chqABQtoqPwc0VNbapSrK61 MpxV6wJTGv5Vmwxez34a+8WLew/vFQEwhfRIQEQS7TKF5CAlva9Q9vIrvyFVAh/E om/K/VjWB2KyGhfz2YfA4MUY2YcD3Wr4ROgDbQfsAfOdC8opsw2dDu3oof5pCNAi 95jeqLbdQRR7mtZ7G7RdTLdpL2z/liYb5HnQDIj+bflTd9yp6WYS2Py16YdlM7u7 YrDoLi4ERV11neyvMUhnvWLx6jrB1wuE9g4L68JXDSjsS1O5rLxL4CDbcx5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJZ2ruPlQ1ypSZeXBnIPyskxmf4UwHwYDVR0j BBgwFoAUghBJu9IsM1pQhQ8WqxWcDGvMKOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4ZTE4ZC1hMDQ3LTQ1OTAtOWU1Ni00NjRhNzNlMjNjNmMvMC84MjEwNDlCQkQy MkMzMzVBNTA4NTBGMTZBQjE1OUMwQzZCQ0MyOEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2QkND MjhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlD MEM2QkNDMjhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQiAU4oBTI8NJoVlwEYRrV1Ma/mhqSg3e5d WRtKm8/Sf+F1CDVQQi/PmyyNZaS3ydGQ0dNxiDlTd3GOvzkMti5OhgBJ/ZHRqs97 DAAxsKGhYPCmwjcu8hCoeqrAxPQretKj6VEQQmcq5QNZJHupP0aPRCGtMZ4m0u/m I8RtEZCZzuaEL25YVVK/eUWVZRHih+lRBrRz/gfVlapLVqFKG6rVqKHIvnaEkBC2 +6fqYWDQ8tiblW4RNiWI9FSzyw1KdPB9bKzfj055bBuvHVMMnmY4LEniq4OKOZah PSpjCYqmqhfSBYG6pMhELwVmhFus+J4eEfLibECaauWKszHGuFI= -----END CERTIFICATE-----Generated at Mon Jul 21 19:04:42 2025 by rpki-client