$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: xqqOTWcPZt7qpcTZQ0/orQADLG+6Kuv2LWrsswirtHY= Subject key identifier: 08:28:2A:24:E1:35:4F:97:21:42:32:B9:B7:B2:7A:B2:C2:F3:88:4E Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 527E460B1CA6558BEB37218A0E66F80E22BFAFD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: 61 Signing time: Tue 11 Mar 2025 22:31:52 +0000 Manifest this update: Tue 11 Mar 2025 22:26:52 +0000 Manifest next update: Fri 14 Mar 2025 23:25:52 +0000 Files and hashes: 1: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY=) 2: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=) 3: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: WAJ22gxcIZsLrG3fwFj6LAYpg0sHhVFWhpG6gRBIpI8=) 4: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: +gS0leVimVkIe0p7LV/JJSAcNAP5Dy+obxh+G1C7sfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 23:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7e:46:0b:1c:a6:55:8b:eb:37:21:8a:0e:66:f8:0e:22:bf:af:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Mar 11 22:26:52 2025 GMT Not After : Mar 14 23:25:52 2025 GMT Subject: CN=08282A24E1354F97214232B9B7B27AB2C2F3884E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:a7:67:46:22:97:d4:c4:40:96:c6:ca:d9: 45:c0:56:28:04:1c:4c:66:b5:05:18:18:d4:e7:b7: 1a:de:7b:78:f1:a8:e0:e9:26:f2:e0:a4:ed:02:30: 79:a3:64:9d:19:61:44:02:3d:0a:b0:c6:21:54:74: 78:c1:29:86:ca:9f:2b:7e:89:d6:16:1d:04:61:4c: 9f:12:ab:64:ae:78:f4:7f:bf:b2:3e:33:0c:5c:06: bc:c7:00:d1:86:f6:3b:27:86:1e:66:51:a1:7c:0d: e5:ef:69:92:57:96:5c:ac:fb:ba:fc:4c:13:f5:89: 91:61:b4:65:11:88:51:a8:3b:41:c6:75:f5:4c:8a: 79:30:86:d4:fd:ab:5b:c5:b4:07:fe:42:b9:31:79: 4a:87:34:c7:55:d0:a1:b0:6e:47:9a:76:e3:9c:35: f3:56:a0:ae:ba:d6:b9:a0:80:a0:a7:e4:68:aa:c6: d9:db:a3:d6:9f:5a:da:87:f9:11:b0:8b:3d:6a:49: 48:c8:23:01:ac:b5:45:c1:0a:f4:3f:94:68:af:03: e6:2f:5b:6f:4d:b1:9f:c6:83:a6:11:7c:29:70:4c: 4b:5f:1d:0a:f6:33:95:cd:75:de:53:de:c8:48:4b: 40:6b:09:25:12:43:95:bc:da:7d:6c:50:3c:b8:a3: 15:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:28:2A:24:E1:35:4F:97:21:42:32:B9:B7:B2:7A:B2:C2:F3:88:4E X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:fa:d7:6a:3a:67:70:e1:64:cf:f3:26:66:b2:fd:10:e0:45: 8f:c4:04:b1:86:f7:75:1b:9c:1b:62:5d:fd:ee:d5:4c:da:91: be:62:2d:ea:b5:96:75:f6:42:a8:24:39:e2:db:90:4c:e8:a2: 3b:47:af:6e:b8:73:0c:dd:2e:68:ab:31:8e:42:cc:3a:d6:09: 10:e9:c8:19:65:75:9f:14:46:fc:5c:8c:52:77:fc:51:4b:a2: d3:74:08:fa:ad:09:d6:b9:94:fe:d3:12:8e:83:3d:05:b5:96: d9:14:db:ca:39:aa:3f:5e:b9:04:df:d7:20:19:4f:f4:3f:96: ca:21:a6:19:88:8d:2d:4a:88:45:bf:12:4d:11:1c:4d:35:17: 31:61:74:4c:61:82:72:b9:56:10:12:d5:00:48:87:ed:88:ce: 0d:55:65:33:74:79:58:b7:f7:58:76:fe:f0:8e:ed:d5:0c:3a: 24:dc:07:f4:bf:50:af:f1:2d:05:59:52:94:97:3b:67:30:67: d3:44:eb:6c:0f:3f:c4:19:21:4b:08:27:eb:db:cb:45:5d:e4: ed:32:26:cb:8c:db:01:1e:f5:a8:b8:0c:3a:e3:54:89:af:38: 1f:ff:64:9c:09:2f:4c:21:71:20:84:a5:56:9d:7e:54:47:7b: ed:1c:31:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUn5GCxymVYvrNyGKDmb4DiK/r9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTAzMTEyMjI2NTJaFw0yNTAzMTQyMzI1NTJaMDMxMTAvBgNV BAMTKDA4MjgyQTI0RTEzNTRGOTcyMTQyMzJCOUI3QjI3QUIyQzJGMzg4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5qdnRiKX1MRAlsbK2UXAVigE HExmtQUYGNTntxree3jxqODpJvLgpO0CMHmjZJ0ZYUQCPQqwxiFUdHjBKYbKnyt+ idYWHQRhTJ8Sq2SuePR/v7I+MwxcBrzHANGG9jsnhh5mUaF8DeXvaZJXllys+7r8 TBP1iZFhtGURiFGoO0HGdfVMinkwhtT9q1vFtAf+QrkxeUqHNMdV0KGwbkeaduOc NfNWoK661rmggKCn5Giqxtnbo9afWtqH+RGwiz1qSUjIIwGstUXBCvQ/lGivA+Yv W29NsZ/Gg6YRfClwTEtfHQr2M5XNdd5T3shIS0BrCSUSQ5W82n1sUDy4oxXxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCCgqJOE1T5chQjK5t7J6ssLziE4wHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAz612o6Z3DhZM/zJmay/RDgRY/EBLGG93Ub nBtiXf3u1Uzakb5iLeq1lnX2QqgkOeLbkEzoojtHr264cwzdLmirMY5CzDrWCRDp yBlldZ8URvxcjFJ3/FFLotN0CPqtCda5lP7TEo6DPQW1ltkU28o5qj9euQTf1yAZ T/Q/lsohphmIjS1KiEW/Ek0RHE01FzFhdExhgnK5VhAS1QBIh+2Izg1VZTN0eVi3 91h2/vCO7dUMOiTcB/S/UK/xLQVZUpSXO2cwZ9NE62wPP8QZIUsIJ+vby0Vd5O0y JsuM2wEe9ai4DDrjVImvOB//ZJwJL0whcSCEpVadflRHe+0cMV8= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:52 2025 by rpki-client