$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: 0e6b5+7GHkccBeAIuqyZwAbNF/FAUkKNHd6wC8xnoYc= Subject key identifier: 16:B5:DB:27:D7:60:E4:B9:A3:70:DC:77:AD:6A:06:AB:8D:75:27:90 Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 5F84C3FCD98DE69BA2F3B06475BA5CA02DB161B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 0167 Signing time: Fri 06 Jun 2025 02:31:01 +0000 Manifest this update: Fri 06 Jun 2025 02:26:01 +0000 Manifest next update: Mon 09 Jun 2025 08:29:01 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) 2: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: mSrMLIMWS9iI5edBBoCtz8vpNKQyRHrPmLmgOLHZwxQ=) 3: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) 4: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 08:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:84:c3:fc:d9:8d:e6:9b:a2:f3:b0:64:75:ba:5c:a0:2d:b1:61:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Jun 6 02:26:01 2025 GMT Not After : Jun 9 08:29:01 2025 GMT Subject: CN=16B5DB27D760E4B9A370DC77AD6A06AB8D752790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:e0:55:cf:99:d2:a6:c5:4d:e3:91:18:7c: 5f:ad:11:d5:be:85:a5:7c:c1:97:53:3e:7c:cc:01: fe:89:b4:99:93:ef:df:81:b6:ef:9a:b4:31:f4:06: c5:18:e8:43:43:9a:7d:2c:22:24:bc:a6:2d:6b:9d: 15:94:11:47:d4:5a:5f:b0:37:fe:7d:17:90:7f:20: c2:b7:b7:7a:39:27:fd:b8:4c:68:13:7e:d5:15:46: e0:70:2f:19:a2:08:5b:4e:85:4c:59:46:c3:87:03: bb:57:f5:c2:54:9c:d2:98:b6:07:8f:1b:10:7b:a4: a4:e1:92:54:43:74:f2:ea:2b:e7:9e:fa:c9:de:53: c5:4a:34:b6:a9:cd:e0:94:6d:cf:bf:61:a7:44:a5: 60:60:99:2b:47:64:32:e9:2b:be:66:3c:40:3f:78: 2f:76:3b:f8:88:3e:21:62:da:70:76:70:e8:6d:20: 8f:2c:64:7a:d1:08:37:89:07:3c:21:f7:0d:9d:93: 9e:a4:42:3d:4e:ed:31:4e:c6:4e:f6:09:d6:c3:c6: ac:9a:00:53:0e:75:f2:00:03:91:b9:da:92:3a:bc: 71:43:c1:b8:50:86:bf:00:cf:35:94:d4:33:45:cb: 56:cb:53:be:68:dc:a5:d6:6b:b9:7a:35:62:f4:f8: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B5:DB:27:D7:60:E4:B9:A3:70:DC:77:AD:6A:06:AB:8D:75:27:90 X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ad:38:3a:ed:8d:03:d9:c6:ab:c5:43:ac:55:c9:91:49:17: 63:f5:ef:b8:30:ac:48:82:da:d2:1d:9d:0f:02:40:c1:b8:bc: 14:3c:1a:6e:4d:e1:d1:34:1b:4d:5c:46:1f:bc:57:e0:ec:7e: 9e:97:eb:8d:6e:35:5d:38:68:f9:ff:9d:5f:7c:57:0a:ec:f7: e4:fa:28:fe:60:44:ea:e6:1a:02:f5:a8:be:63:01:48:17:fe: 42:ad:6c:8c:16:66:df:1b:b4:b2:94:6c:61:ad:86:55:ef:04: f3:79:10:7b:f0:e9:e6:8d:3f:2c:90:1b:3a:1a:5d:3f:56:a2: cb:35:34:1e:ef:42:33:2b:22:cf:fe:09:e0:58:55:b9:98:8f: f1:93:ca:5c:ff:92:a0:0c:fe:61:df:f4:97:3b:ee:0f:d9:a4: 39:96:bb:a1:8d:1f:aa:ce:57:43:1f:06:69:8f:fc:34:94:f3: 44:00:4d:88:88:51:4b:37:c6:dc:35:9e:49:c7:27:6f:e3:53: 1a:46:b7:6a:b7:ab:7b:c8:13:ca:3e:a1:73:38:fc:8e:6a:f6: a5:1c:5b:e0:63:8a:5d:e2:5e:d6:1b:ea:df:c2:06:14:3f:a2: 74:67:80:4b:03:de:1d:49:90:57:8e:c7:00:47:24:81:aa:c0: a2:ad:00:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4TD/NmN5pui87BkdbpcoC2xYbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTA2MDYwMjI2MDFaFw0yNTA2MDkwODI5MDFaMDMxMTAvBgNV BAMTKDE2QjVEQjI3RDc2MEU0QjlBMzcwREM3N0FENkEwNkFCOEQ3NTI3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXIeBVz5nSpsVN45EYfF+tEdW+ haV8wZdTPnzMAf6JtJmT79+Btu+atDH0BsUY6ENDmn0sIiS8pi1rnRWUEUfUWl+w N/59F5B/IMK3t3o5J/24TGgTftUVRuBwLxmiCFtOhUxZRsOHA7tX9cJUnNKYtgeP GxB7pKThklRDdPLqK+ee+sneU8VKNLapzeCUbc+/YadEpWBgmStHZDLpK75mPEA/ eC92O/iIPiFi2nB2cOhtII8sZHrRCDeJBzwh9w2dk56kQj1O7TFOxk72CdbDxqya AFMOdfIAA5G52pI6vHFDwbhQhr8AzzWU1DNFy1bLU75o3KXWa7l6NWL0+CoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFrXbJ9dg5LmjcNx3rWoGq411J5AwHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGtODrtjQPZxqvFQ6xVyZFJF2P177gwrEiC 2tIdnQ8CQMG4vBQ8Gm5N4dE0G01cRh+8V+Dsfp6X641uNV04aPn/nV98Vwrs9+T6 KP5gROrmGgL1qL5jAUgX/kKtbIwWZt8btLKUbGGthlXvBPN5EHvw6eaNPyyQGzoa XT9Woss1NB7vQjMrIs/+CeBYVbmYj/GTylz/kqAM/mHf9Jc77g/ZpDmWu6GNH6rO V0MfBmmP/DSU80QATYiIUUs3xtw1nknHJ2/jUxpGt2q3q3vIE8o+oXM4/I5q9qUc W+Bjil3iXtYb6t/CBhQ/onRngEsD3h1JkFeOxwBHJIGqwKKtAM8= -----END CERTIFICATE-----Generated at Sun Jun 8 05:59:30 2025 by rpki-client