$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: YQUAiDtMdpooun9F2I5HmJVE/AslYAipWdqGu5nqoxM= Subject key identifier: 40:FF:25:98:43:19:75:4F:E7:6E:3C:B8:46:7A:0C:4B:06:5D:0C:07 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 4A8303FFCFCE65155FE0C104B23A7A7DCFCA0F12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: B1 Signing time: Mon 08 Sep 2025 05:21:56 +0000 Manifest this update: Mon 08 Sep 2025 05:16:56 +0000 Manifest next update: Thu 11 Sep 2025 14:20:56 +0000 Files and hashes: 1: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY=) 2: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=) 3: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: WAJ22gxcIZsLrG3fwFj6LAYpg0sHhVFWhpG6gRBIpI8=) 4: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: 7Tz9qudfeFqOXEnBZ62xqbCE1NRma51Z2fYNHmvl0Jk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:83:03:ff:cf:ce:65:15:5f:e0:c1:04:b2:3a:7a:7d:cf:ca:0f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Sep 8 05:16:56 2025 GMT Not After : Sep 11 14:20:56 2025 GMT Subject: CN=40FF25984319754FE76E3CB8467A0C4B065D0C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:80:f0:51:5e:76:1d:31:ad:02:d1:ff:da: 09:8b:71:95:46:0f:3d:ef:57:af:4b:5a:eb:52:fa: cb:ac:10:a3:e9:b8:c7:06:4f:cc:bf:8c:d0:bd:84: cc:f2:3c:b9:1e:9d:35:d8:cf:34:ec:99:20:36:1e: 17:16:e9:8e:21:1a:ec:35:b9:e1:02:b3:f4:19:63: 4e:fc:5f:63:e8:95:aa:39:77:dd:fd:f0:da:0b:85: 56:82:e9:10:2e:e5:1b:69:ff:d5:95:a8:a9:2b:ed: 2d:9a:6c:17:4c:e9:95:8c:d4:65:64:ae:46:3d:c8: b0:5e:88:b8:61:d9:ba:a0:72:b0:05:e5:5b:64:df: e9:6e:13:f9:b3:8f:1f:13:59:d5:dc:fd:06:31:ac: f4:8a:c0:b1:1f:84:60:36:7e:b6:23:3b:03:e9:04: 64:0b:af:32:5b:d0:f1:3a:05:f4:0b:76:c1:1c:0b: 33:a4:ef:eb:63:d0:aa:e6:b9:20:47:09:57:46:02: b8:00:7a:3f:a0:4a:df:c2:a7:73:f1:e0:13:68:ab: ea:2c:2c:74:c9:87:b1:9a:40:ed:e2:b4:b2:c1:6d: f0:13:e3:6c:cc:25:ec:dc:f7:8f:7e:57:96:ca:ed: f7:b9:e6:a3:da:57:40:15:f3:de:65:f5:96:65:dd: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FF:25:98:43:19:75:4F:E7:6E:3C:B8:46:7A:0C:4B:06:5D:0C:07 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e5:d7:30:4d:d6:95:f2:08:85:ab:7e:f0:8a:c9:ee:59:50: 38:0a:74:7c:7d:ec:f0:e4:14:45:73:4f:af:d3:31:47:37:04: 8f:ec:b9:74:1d:87:1b:08:27:7f:da:58:21:51:93:91:50:ac: 31:6a:d3:b2:a7:9c:73:dc:0a:f7:28:5a:45:fd:b8:55:02:e0: 19:87:39:6a:8c:ef:f1:63:35:9a:61:82:e3:fe:e1:6e:c6:94: b3:24:7e:78:7d:61:e7:cb:08:df:ed:0e:a6:4a:19:a9:62:69: 96:aa:51:74:b2:d4:b9:39:3d:a7:c5:ed:e6:02:4e:e3:f6:bd: e2:9a:d7:fe:20:c5:eb:e3:4a:23:a8:9a:50:4d:7c:af:d7:4f: c6:3c:f7:ef:34:1e:30:b1:63:42:22:cc:99:2c:f4:18:bc:16: a9:c8:74:12:34:62:27:38:bc:80:f9:b7:03:e6:37:61:9f:92: 1b:85:c1:54:e3:90:3c:35:26:93:28:2a:2f:00:87:e4:c2:f2: 23:1f:81:40:00:63:e3:56:cf:96:b1:90:92:37:12:12:7f:a2: 41:3a:27:00:d6:42:37:0b:66:d4:34:ab:40:ce:cf:e9:b6:e8: cb:23:04:f4:e7:e8:97:97:5f:16:f7:b7:6f:c1:38:2b:fe:b8: 8f:4a:fe:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSoMD/8/OZRVf4MEEsjp6fc/KDxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTA5MDgwNTE2NTZaFw0yNTA5MTExNDIwNTZaMDMxMTAvBgNV BAMTKDQwRkYyNTk4NDMxOTc1NEZFNzZFM0NCODQ2N0EwQzRCMDY1RDBDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcuoDwUV52HTGtAtH/2gmLcZVG Dz3vV69LWutS+susEKPpuMcGT8y/jNC9hMzyPLkenTXYzzTsmSA2HhcW6Y4hGuw1 ueECs/QZY078X2Polao5d9398NoLhVaC6RAu5Rtp/9WVqKkr7S2abBdM6ZWM1GVk rkY9yLBeiLhh2bqgcrAF5Vtk3+luE/mzjx8TWdXc/QYxrPSKwLEfhGA2frYjOwPp BGQLrzJb0PE6BfQLdsEcCzOk7+tj0KrmuSBHCVdGArgAej+gSt/Cp3Px4BNoq+os LHTJh7GaQO3itLLBbfAT42zMJezc949+V5bK7fe55qPaV0AV895l9ZZl3YIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQP8lmEMZdU/nbjy4RnoMSwZdDAcwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDl1zBN1pXyCIWrfvCKye5ZUDgKdHx97PDk FEVzT6/TMUc3BI/suXQdhxsIJ3/aWCFRk5FQrDFq07KnnHPcCvcoWkX9uFUC4BmH OWqM7/FjNZphguP+4W7GlLMkfnh9YefLCN/tDqZKGaliaZaqUXSy1Lk5PafF7eYC TuP2veKa1/4gxevjSiOomlBNfK/XT8Y89+80HjCxY0IizJks9Bi8FqnIdBI0Yic4 vID5twPmN2GfkhuFwVTjkDw1JpMoKi8Ah+TC8iMfgUAAY+NWz5axkJI3EhJ/okE6 JwDWQjcLZtQ0q0DOz+m26MsjBPTn6JeXXxb3t2/BOCv+uI9K/lY= -----END CERTIFICATE-----Generated at Tue Sep 9 10:54:17 2025 by rpki-client