$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: sLnh6SMa+NI5jEafJxnZMOMMufekX2dHUPHHY04J3Cw= Subject key identifier: 89:17:AB:98:1D:1A:2D:54:5E:DA:15:D6:2C:38:58:EF:7E:26:2A:71 Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 2A612ED5148BAE5B50340AB342E3A6D54B70CB60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 0151 Signing time: Fri 18 Apr 2025 23:31:00 +0000 Manifest this update: Fri 18 Apr 2025 23:26:00 +0000 Manifest next update: Tue 22 Apr 2025 05:07:00 +0000 Files and hashes: 1: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: wtThJllk8Ybu7j0iGXoLb7/puTsswGIHAYFHHQUKnmw=) 2: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) 3: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) 4: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 05:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:61:2e:d5:14:8b:ae:5b:50:34:0a:b3:42:e3:a6:d5:4b:70:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Apr 18 23:26:00 2025 GMT Not After : Apr 22 05:07:00 2025 GMT Subject: CN=8917AB981D1A2D545EDA15D62C3858EF7E262A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f7:af:8d:ea:4d:d0:c9:ed:e1:65:64:68:86: 7e:9d:d4:a2:eb:07:aa:cd:4f:d3:15:19:fc:a0:94: d4:af:18:3d:27:98:bd:d2:a6:5c:43:97:8f:25:df: 73:1e:1e:27:85:86:0e:bb:ee:c9:1d:6c:77:3c:c3: d4:14:57:03:3d:0d:12:7b:67:72:6a:d5:4d:e6:94: b0:db:83:73:c1:d4:ef:67:73:90:57:70:50:81:10: 0b:6d:5b:22:c2:fb:6b:f5:f0:a4:60:a1:c1:52:36: 44:2e:83:6f:00:d3:f0:d8:f1:bc:14:7f:a0:cf:ad: 73:49:66:1c:83:f9:7f:f4:0e:c6:34:5a:f4:c1:69: 84:c7:1d:41:c9:24:d6:6d:f8:ff:39:c6:c4:c3:89: dd:d0:b0:af:63:0e:d9:56:33:ba:cc:e9:d4:f8:9c: 21:38:3f:25:f8:7d:1c:50:2a:5a:c1:9e:d4:c7:7a: cb:cd:cf:db:81:76:62:29:43:b4:fc:92:86:76:b3: cf:94:b0:32:44:14:d8:c4:c1:da:34:29:42:a0:f9: 4c:29:e2:07:9c:a0:78:7c:ec:f5:57:0c:bf:51:1d: 3b:71:45:fd:e1:f7:ea:ab:e8:0e:9b:6e:de:e6:19: 21:f4:6c:76:82:c7:1d:c4:36:f9:2d:bb:03:07:d7: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:17:AB:98:1D:1A:2D:54:5E:DA:15:D6:2C:38:58:EF:7E:26:2A:71 X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:d5:fc:d9:be:7e:d9:03:51:dc:b9:46:70:24:95:f2:e4:0a: 4d:fe:e7:80:7f:6e:12:50:27:09:27:a9:b4:c0:96:b6:59:e4: 47:51:d5:4e:d4:bd:73:61:e7:2f:da:c4:c9:50:36:f0:50:01: 07:92:8f:23:66:b2:6d:6f:b5:ba:29:4a:47:b7:e1:01:02:0d: ef:f5:3c:9e:a8:ec:44:6e:00:e5:78:e8:b5:b8:ab:b9:5f:ba: 58:a8:1b:73:7d:4a:21:8f:79:4f:cc:c4:01:cb:e3:5f:40:9a: c3:d4:c0:d5:e9:8f:b0:76:83:7b:8f:8b:cb:ee:c2:05:27:c2: 1d:ff:9c:d7:0b:b3:0d:92:25:99:b9:04:f0:09:75:03:07:76: 63:52:65:50:6c:9a:56:e7:06:83:81:4c:62:fa:2c:c7:6c:da: 24:41:cc:a6:b5:41:db:32:73:3f:02:da:95:16:c8:55:ae:8b: a7:de:57:5f:95:ca:36:6c:88:c4:ab:32:dd:88:1f:93:65:c1: 5b:b0:f9:b1:21:91:93:7c:be:19:7a:5d:c7:56:13:49:f8:05: 6b:3b:11:6c:85:98:a3:aa:bd:75:f7:fe:0f:4f:2b:cc:25:e4: bb:18:d5:35:b7:34:44:89:83:d0:7c:51:46:41:3e:1a:6c:c2: c8:4a:55:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmEu1RSLrltQNAqzQuOm1Utwy2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTA0MTgyMzI2MDBaFw0yNTA0MjIwNTA3MDBaMDMxMTAvBgNV BAMTKDg5MTdBQjk4MUQxQTJENTQ1RURBMTVENjJDMzg1OEVGN0UyNjJBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg96+N6k3Qye3hZWRohn6d1KLr B6rNT9MVGfyglNSvGD0nmL3SplxDl48l33MeHieFhg677skdbHc8w9QUVwM9DRJ7 Z3Jq1U3mlLDbg3PB1O9nc5BXcFCBEAttWyLC+2v18KRgocFSNkQug28A0/DY8bwU f6DPrXNJZhyD+X/0DsY0WvTBaYTHHUHJJNZt+P85xsTDid3QsK9jDtlWM7rM6dT4 nCE4PyX4fRxQKlrBntTHesvNz9uBdmIpQ7T8koZ2s8+UsDJEFNjEwdo0KUKg+Uwp 4gecoHh87PVXDL9RHTtxRf3h9+qr6A6bbt7mGSH0bHaCxx3ENvktuwMH13fDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiRermB0aLVRe2hXWLDhY734mKnEwHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDV/Nm+ftkDUdy5RnAklfLkCk3+54B/bhJQ JwknqbTAlrZZ5EdR1U7UvXNh5y/axMlQNvBQAQeSjyNmsm1vtbopSke34QECDe/1 PJ6o7ERuAOV46LW4q7lfulioG3N9SiGPeU/MxAHL419AmsPUwNXpj7B2g3uPi8vu wgUnwh3/nNcLsw2SJZm5BPAJdQMHdmNSZVBsmlbnBoOBTGL6LMds2iRBzKa1Qdsy cz8C2pUWyFWui6feV1+VyjZsiMSrMt2IH5NlwVuw+bEhkZN8vhl6XcdWE0n4BWs7 EWyFmKOqvXX3/g9PK8wl5LsY1TW3NESJg9B8UUZBPhpswshKVaw= -----END CERTIFICATE-----Generated at Sun Apr 20 03:29:50 2025 by rpki-client