$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: pT/O46v3l5p+rb+i77tLHii8NnxeoB6V+bbejRsPdec= Subject key identifier: 68:08:AC:4D:E7:28:56:FF:99:0A:9C:2A:1C:4C:0C:D6:3F:CD:D3:28 Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 6BF1BB8577FF4C2FEE010F38D14D0AC4009A6580 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 0169 Signing time: Wed 03 Sep 2025 08:11:46 +0000 Manifest this update: Wed 03 Sep 2025 08:06:46 +0000 Manifest next update: Sat 06 Sep 2025 17:56:46 +0000 Files and hashes: 1: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: 9VmYE4RRUWyYto3cqK2K0yBfeooYGGX+dAxFBrNPMxY=) 2: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=) 3: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=) 4: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 17:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f1:bb:85:77:ff:4c:2f:ee:01:0f:38:d1:4d:0a:c4:00:9a:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Sep 3 08:06:46 2025 GMT Not After : Sep 6 17:56:46 2025 GMT Subject: CN=6808AC4DE72856FF990A9C2A1C4C0CD63FCDD328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:31:20:56:b5:f6:3c:f5:dd:8a:c6:e6:56: 5e:2a:9e:80:db:72:d9:12:51:d0:00:87:6e:a7:c5: 89:45:b8:7d:87:fc:76:e5:c1:a0:1b:81:e4:4b:0f: ef:0e:fc:21:73:72:18:22:02:cb:01:48:03:ee:ae: 02:06:03:90:b8:60:9b:5d:6e:d7:93:fe:a7:7a:88: d8:71:6c:d6:b8:9d:73:f7:53:24:a8:64:eb:21:a0: 35:66:ab:1c:8e:98:4c:48:6b:16:9c:7c:e7:66:bd: 67:f7:b0:8d:4b:1e:8e:72:eb:d6:6d:b7:b2:5f:c4: 3b:67:19:73:3a:66:7c:81:6f:5a:20:f6:e9:41:07: e6:28:c6:98:0c:a8:77:9a:ca:2a:a3:56:29:6a:b0: 41:2d:9c:7f:f7:fa:cb:a3:22:cd:81:31:ed:08:94: d6:67:56:7a:d0:57:af:b3:19:23:07:0b:5c:fa:3d: aa:ac:25:4b:b7:0b:a8:2d:52:c7:cd:f9:cb:63:30: c3:64:a1:4a:33:cb:03:83:6a:6d:62:d2:5e:27:50: 02:7a:99:39:97:9b:d5:91:a6:6c:c0:ff:de:42:51: 70:b6:e0:40:05:b7:e3:e7:97:56:64:6b:f9:ec:1b: cf:7b:f7:fc:b6:8a:96:fd:6e:e6:75:29:10:5b:a7: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:08:AC:4D:E7:28:56:FF:99:0A:9C:2A:1C:4C:0C:D6:3F:CD:D3:28 X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:71:d7:22:eb:12:f9:30:71:fc:0d:b3:e6:e1:96:c2:61:65: f1:ec:be:94:d0:c2:8b:94:86:cb:26:83:99:04:34:3b:81:5b: e7:8b:6b:e5:be:9e:c2:c3:03:78:fe:45:82:d1:44:d5:1b:6b: 27:67:91:d9:e0:58:77:d7:c6:3c:ac:ca:21:85:5d:7d:de:e2: 8e:5e:a4:13:62:e9:5c:f7:b4:cc:38:58:e8:fa:75:4c:57:c6: 44:5a:10:44:56:b3:d9:bf:07:ab:5f:79:ec:86:fb:b4:97:63: 31:45:9e:54:0f:26:2c:9b:09:fa:0f:7e:c0:df:be:bb:e8:ac: de:86:12:15:c1:7b:56:09:7f:b7:92:36:15:3e:41:87:7f:e8: 95:1b:0e:ef:65:7f:4c:c7:b4:d7:38:83:5e:a3:ac:08:21:4c: f0:49:f9:77:3f:a3:c9:ca:0f:5e:26:21:4d:d5:ac:d9:2d:00: cd:74:50:ab:f9:12:71:26:2f:d4:7c:d6:56:30:a1:bc:d9:9c: 24:0e:51:a9:6b:fc:50:b9:d5:17:91:5c:e6:37:a6:48:61:8f: e3:01:de:38:fd:36:63:c1:1c:c6:04:86:94:98:34:55:dd:78: 1f:79:c1:f2:92:48:53:ed:c5:d0:22:9d:61:f6:2b:28:3e:59: b5:9d:e3:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/G7hXf/TC/uAQ840U0KxACaZYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNTA5MDMwODA2NDZaFw0yNTA5MDYxNzU2NDZaMDMxMTAvBgNV BAMTKDY4MDhBQzRERTcyODU2RkY5OTBBOUMyQTFDNEMwQ0Q2M0ZDREQzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgzEgVrX2PPXdisbmVl4qnoDb ctkSUdAAh26nxYlFuH2H/HblwaAbgeRLD+8O/CFzchgiAssBSAPurgIGA5C4YJtd bteT/qd6iNhxbNa4nXP3UySoZOshoDVmqxyOmExIaxacfOdmvWf3sI1LHo5y69Zt t7JfxDtnGXM6ZnyBb1og9ulBB+YoxpgMqHeayiqjVilqsEEtnH/3+sujIs2BMe0I lNZnVnrQV6+zGSMHC1z6PaqsJUu3C6gtUsfN+ctjMMNkoUozywODam1i0l4nUAJ6 mTmXm9WRpmzA/95CUXC24EAFt+Pnl1Zka/nsG8979/y2ipb9buZ1KRBbp9yTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaAisTecoVv+ZCpwqHEwM1j/N0ygwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBx1yLrEvkwcfwNs+bhlsJhZfHsvpTQwouU hssmg5kENDuBW+eLa+W+nsLDA3j+RYLRRNUbaydnkdngWHfXxjysyiGFXX3e4o5e pBNi6Vz3tMw4WOj6dUxXxkRaEERWs9m/B6tfeeyG+7SXYzFFnlQPJiybCfoPfsDf vrvorN6GEhXBe1YJf7eSNhU+QYd/6JUbDu9lf0zHtNc4g16jrAghTPBJ+Xc/o8nK D14mIU3VrNktAM10UKv5EnEmL9R81lYwobzZnCQOUalr/FC51ReRXOY3pkhhj+MB 3jj9NmPBHMYEhpSYNFXdeB95wfKSSFPtxdAinWH2Kyg+WbWd448= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:11 2025 by rpki-client