$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: Mn8hM5dWCiJHuQhRlPn0vwKdHXpnffZp8lsGwzjHh94= Subject key identifier: 73:0D:CB:3A:AF:F5:73:E6:B5:03:92:C9:E3:26:D9:3C:38:10:6A:04 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 2E11099F5029EACBDB4B644D18358C07F85FE14D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: 6E Signing time: Wed 09 Apr 2025 09:21:51 +0000 Manifest this update: Wed 09 Apr 2025 09:16:51 +0000 Manifest next update: Sat 12 Apr 2025 18:01:51 +0000 Files and hashes: 1: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: B11e0ekjfzZ4Ptw56QkrSbmoVfYwnE+9ylLBj/MTnbk=) 2: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY=) 3: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: WAJ22gxcIZsLrG3fwFj6LAYpg0sHhVFWhpG6gRBIpI8=) 4: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 18:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:11:09:9f:50:29:ea:cb:db:4b:64:4d:18:35:8c:07:f8:5f:e1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Apr 9 09:16:51 2025 GMT Not After : Apr 12 18:01:51 2025 GMT Subject: CN=730DCB3AAFF573E6B50392C9E326D93C38106A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:75:2a:c5:1f:07:93:e6:fa:a2:25:de:ee: a1:47:bd:c6:f1:aa:eb:9c:61:31:fa:5f:8f:0d:b4: 4b:94:c8:51:dc:9a:44:c1:7b:a4:e1:7e:d8:6d:0e: 49:b9:fc:ef:72:c1:7f:c7:be:e1:ff:09:ca:42:5e: 69:a0:05:c9:22:0f:1b:e8:7a:61:ef:cb:1d:a1:88: 93:f2:7b:66:a5:bf:54:01:aa:b4:ad:71:2b:0c:a0: cc:32:00:46:a3:52:93:83:b6:2f:e7:77:9b:4e:8a: c1:5f:0d:d8:00:46:f2:71:30:92:4a:41:6b:0d:5c: d0:d2:2e:4b:22:5b:0c:0b:a6:3c:4c:70:f0:0a:de: 7e:f3:90:30:e8:b0:45:d2:a7:6d:1e:0e:d7:2c:86: 50:1b:f3:7d:24:d1:c4:ea:3e:d1:aa:61:3a:d6:28: f7:2d:10:ea:02:1f:3a:f5:37:11:62:05:17:ba:79: 78:f4:b4:e0:3b:6c:65:28:85:f4:6d:bf:d3:06:96: 5e:7e:77:e0:94:24:ba:69:b4:8a:09:26:01:61:9c: a1:85:60:5a:a7:f1:6f:fa:1d:93:d6:16:92:59:65: 32:b4:59:bd:4e:10:91:f3:6d:d7:cd:b2:ac:34:02: 58:bc:fd:2a:99:05:45:e5:f0:75:5a:de:72:a2:24: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0D:CB:3A:AF:F5:73:E6:B5:03:92:C9:E3:26:D9:3C:38:10:6A:04 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:d6:5b:c8:6f:cd:1b:4a:a6:3b:bb:a0:1b:7c:42:64:03:8a: 5b:19:95:ec:7a:3d:2e:cc:03:3a:8d:7f:af:28:9b:f3:8c:d1: b7:12:57:4f:2a:8b:74:b7:ee:36:12:22:76:ac:e3:9a:5f:c4: 5e:50:ed:2e:81:e2:e1:b1:f2:14:3d:61:54:03:ae:e8:e9:7e: 02:c2:f2:1f:64:2f:00:29:7a:55:6d:88:91:e6:d6:a3:7c:84: a6:fd:04:d8:06:0b:b1:65:be:a6:ef:b0:cc:60:e9:1e:8a:84: 6a:38:26:2a:ff:17:82:0f:01:29:42:e6:1c:66:0d:04:22:8f: 9a:81:f3:c3:eb:3d:3e:94:d1:92:6c:b1:32:91:fc:8f:e2:83: 4f:e1:46:e9:df:7c:8e:ef:65:90:7d:fe:fc:4c:08:10:72:cd: c3:e6:c6:4f:22:43:d9:55:3c:79:ae:93:8f:80:75:50:3d:64: c7:98:e3:57:f3:10:20:ef:bc:a5:ab:72:51:15:72:06:40:d9: 20:52:db:ef:b0:b7:48:7d:2b:97:db:bf:2e:ca:cf:3c:df:4d: b1:44:cb:4f:b5:91:31:bc:53:99:a5:bd:e4:b6:1b:3a:82:78: 4d:a5:fb:f0:86:ff:92:cf:95:44:13:f8:ea:dc:41:5e:51:05: d8:b4:86:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhEJn1Ap6svbS2RNGDWMB/hf4U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTA0MDkwOTE2NTFaFw0yNTA0MTIxODAxNTFaMDMxMTAvBgNV BAMTKDczMERDQjNBQUZGNTczRTZCNTAzOTJDOUUzMjZEOTNDMzgxMDZBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgnUqxR8Hk+b6oiXe7qFHvcbx quucYTH6X48NtEuUyFHcmkTBe6ThfthtDkm5/O9ywX/HvuH/CcpCXmmgBckiDxvo emHvyx2hiJPye2alv1QBqrStcSsMoMwyAEajUpODti/nd5tOisFfDdgARvJxMJJK QWsNXNDSLksiWwwLpjxMcPAK3n7zkDDosEXSp20eDtcshlAb830k0cTqPtGqYTrW KPctEOoCHzr1NxFiBRe6eXj0tOA7bGUohfRtv9MGll5+d+CUJLpptIoJJgFhnKGF YFqn8W/6HZPWFpJZZTK0Wb1OEJHzbdfNsqw0Ali8/SqZBUXl8HVa3nKiJD1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcw3LOq/1c+a1A5LJ4ybZPDgQagQwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHWW8hvzRtKpju7oBt8QmQDilsZlex6PS7M AzqNf68om/OM0bcSV08qi3S37jYSInas45pfxF5Q7S6B4uGx8hQ9YVQDrujpfgLC 8h9kLwApelVtiJHm1qN8hKb9BNgGC7FlvqbvsMxg6R6KhGo4Jir/F4IPASlC5hxm DQQij5qB88PrPT6U0ZJssTKR/I/ig0/hRunffI7vZZB9/vxMCBByzcPmxk8iQ9lV PHmuk4+AdVA9ZMeY41fzECDvvKWrclEVcgZA2SBS2++wt0h9K5fbvy7KzzzfTbFE y0+1kTG8U5mlveS2GzqCeE2l+/CG/5LPlUQT+OrcQV5RBdi0hnU= -----END CERTIFICATE-----Generated at Wed Apr 9 22:06:31 2025 by rpki-client