$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: WNQGsDuKEVvdwvhLp/L8//qH28UhutoedC+3bQYxGFo= Subject key identifier: 83:4C:DD:F4:82:04:0D:BB:A5:D1:E0:BE:45:2E:68:43:F6:47:84:C1 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 2746F7E9B0B1287D7D640BF7726047A8E0DDE1E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: 87 Signing time: Fri 06 Jun 2025 06:01:53 +0000 Manifest this update: Fri 06 Jun 2025 05:56:53 +0000 Manifest next update: Mon 09 Jun 2025 06:44:53 +0000 Files and hashes: 1: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY=) 2: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=) 3: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: OY6Id2ua6YF8GWMhp3gJRwhyeMxfB0b5h/4IlUfrNkc=) 4: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: WAJ22gxcIZsLrG3fwFj6LAYpg0sHhVFWhpG6gRBIpI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 06:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:46:f7:e9:b0:b1:28:7d:7d:64:0b:f7:72:60:47:a8:e0:dd:e1:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Jun 6 05:56:53 2025 GMT Not After : Jun 9 06:44:53 2025 GMT Subject: CN=834CDDF482040DBBA5D1E0BE452E6843F64784C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:0c:e0:f2:40:03:1b:f3:92:41:11:10:a8: 7a:bd:73:89:6c:84:02:af:13:03:11:cf:0a:2e:37: f7:04:a4:ba:29:4b:86:3e:0a:94:98:28:b9:a4:5e: 9d:38:15:ac:2f:68:1f:7a:db:d7:cb:4e:a8:76:7d: f1:72:7f:e3:f2:f4:44:27:4a:bd:bc:91:2e:d7:2f: fd:5d:d7:e7:d1:72:c5:f4:61:84:1c:56:2e:7d:f3: b5:cc:ce:4a:a4:35:38:83:4e:af:44:2c:b6:89:f4: f7:f6:20:3d:93:88:44:29:2f:99:8a:64:3f:67:b5: 63:27:f5:24:31:59:d4:64:3c:97:e0:3b:e2:38:00: 80:d4:27:bd:ab:7e:47:49:19:2e:67:74:40:26:30: 5d:b1:ba:b9:9f:f8:90:3c:ff:ca:7f:70:a3:3f:fb: cd:87:2f:16:38:6c:c6:ec:c8:23:16:27:09:94:b5: 72:c8:b0:bd:ba:94:04:bb:10:b9:66:4e:60:d2:9d: e5:35:5a:ce:10:8a:2d:45:a9:99:b1:07:60:f2:c4: 91:8d:17:2d:bc:6c:4b:22:cd:46:2d:9b:48:0d:33: 40:0a:10:69:42:fb:eb:ef:10:e2:41:17:c6:fb:f6: b5:d3:c7:21:d8:13:06:7d:d2:d6:cc:01:ca:cd:f1: 8f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4C:DD:F4:82:04:0D:BB:A5:D1:E0:BE:45:2E:68:43:F6:47:84:C1 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c0:33:3b:89:8f:9d:34:f3:cb:61:fb:e6:90:7e:f3:1e:83: 3a:5a:50:c8:81:bf:20:25:f3:9e:b7:5a:0b:e3:8d:65:15:f1: 83:a8:3e:4c:30:6f:9b:16:ab:ea:d1:8b:55:e3:0f:2b:6b:10: 63:10:64:97:e1:ef:54:2e:8a:43:21:8c:4a:c6:67:8d:3b:26: f1:94:e7:5c:0c:f5:d0:aa:f8:8f:ea:b5:74:b0:6b:c7:2f:7d: d3:c2:8f:6d:1f:67:23:b2:17:f5:3e:eb:0f:77:ea:9d:b6:8e: 22:87:f8:b3:2d:d9:02:a2:da:e6:9a:54:e6:f2:91:03:fa:8b: 6d:23:6c:3d:8c:97:da:f7:d0:e1:e7:14:89:9d:87:19:ee:02: 41:62:70:cc:cd:08:d7:e3:ac:7d:33:48:d5:02:12:bf:c7:58: 45:cb:0d:85:92:2f:cc:1a:f2:66:ef:b9:bc:da:3e:f7:3a:24: 00:9e:41:40:e7:13:4c:d2:fd:7f:60:bb:1d:10:5a:b7:0d:77: dd:41:20:c6:17:aa:1e:f8:95:89:34:b0:f8:9c:98:e4:83:68: c9:28:22:4b:2c:ca:7f:37:a0:e1:9f:c8:a2:83:5e:91:44:77: e4:cb:c7:b4:2f:de:87:53:d4:ec:d2:3a:11:a5:d2:34:61:6f: 29:f2:43:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0b36bCxKH19ZAv3cmBHqODd4eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTA2MDYwNTU2NTNaFw0yNTA2MDkwNjQ0NTNaMDMxMTAvBgNV BAMTKDgzNENEREY0ODIwNDBEQkJBNUQxRTBCRTQ1MkU2ODQzRjY0Nzg0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27Azg8kADG/OSQREQqHq9c4ls hAKvEwMRzwouN/cEpLopS4Y+CpSYKLmkXp04FawvaB9629fLTqh2ffFyf+Py9EQn Sr28kS7XL/1d1+fRcsX0YYQcVi5987XMzkqkNTiDTq9ELLaJ9Pf2ID2TiEQpL5mK ZD9ntWMn9SQxWdRkPJfgO+I4AIDUJ72rfkdJGS5ndEAmMF2xurmf+JA8/8p/cKM/ +82HLxY4bMbsyCMWJwmUtXLIsL26lAS7ELlmTmDSneU1Ws4Qii1FqZmxB2DyxJGN Fy28bEsizUYtm0gNM0AKEGlC++vvEOJBF8b79rXTxyHYEwZ90tbMAcrN8Y/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg0zd9IIEDbul0eC+RS5oQ/ZHhMEwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjAMzuJj50088th++aQfvMegzpaUMiBvyAl 8563WgvjjWUV8YOoPkwwb5sWq+rRi1XjDytrEGMQZJfh71QuikMhjErGZ407JvGU 51wM9dCq+I/qtXSwa8cvfdPCj20fZyOyF/U+6w936p22jiKH+LMt2QKi2uaaVOby kQP6i20jbD2Ml9r30OHnFImdhxnuAkFicMzNCNfjrH0zSNUCEr/HWEXLDYWSL8wa 8mbvubzaPvc6JACeQUDnE0zS/X9gux0QWrcNd91BIMYXqh74lYk0sPicmOSDaMko Ikssyn83oOGfyKKDXpFEd+TLx7Qv3odT1OzSOhGl0jRhbynyQ8M= -----END CERTIFICATE-----Generated at Fri Jun 6 16:43:37 2025 by rpki-client