$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft File: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft (raw, json) Hash identifier: +haHFEaq0tk/8+JDQKOkPgOOhGFBaWT8E6ycpmiR4ZE= Subject key identifier: 06:14:BB:42:62:BD:82:FD:B9:05:29:6D:DB:19:F2:F2:A0:F5:DE:FA Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 55E60C34355E44E28C40AC11C27D911139FDCFBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft Manifest number: 0170 Signing time: Mon 02 Jun 2025 12:31:25 +0000 Manifest this update: Mon 02 Jun 2025 12:26:25 +0000 Manifest next update: Thu 05 Jun 2025 18:03:25 +0000 Files and hashes: 1: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl (hash: MIk5IjuW8V9KOfNGPocrNLussDHJJLP3XO7g+v2uBC8=) 2: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: ZdMkDOnx4hNOB8b2y8v2461HT/U2gmm0V9h3DP50AsM=) 3: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: RbJkotiAtcGAz/X/4fMxCRReBEYK6ZI39CQ4Uu7mC8E=) 4: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: woqtXJ7tvZtaqT4bT+mvntSsCYpQhJCgghI0AwY59dM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 18:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e6:0c:34:35:5e:44:e2:8c:40:ac:11:c2:7d:91:11:39:fd:cf:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Jun 2 12:26:25 2025 GMT Not After : Jun 5 18:03:25 2025 GMT Subject: CN=0614BB4262BD82FDB905296DDB19F2F2A0F5DEFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:ee:17:95:2d:8b:41:7d:15:c6:c3:27:d5: f7:a6:1d:99:6c:55:bb:52:d3:85:ec:40:50:66:d3: a5:66:32:2a:aa:a6:39:11:65:4f:74:fc:7a:b3:da: af:d3:47:70:72:06:2e:0b:3b:e2:41:f8:6a:57:f5: 84:b8:f1:e0:70:9c:91:d4:c8:af:e8:ad:56:28:70: 6a:e0:7b:f9:2e:ee:9f:89:47:16:1d:25:41:c5:8c: 09:6d:12:71:e4:46:5a:55:2b:81:7e:4e:98:6d:1f: dd:cd:e5:25:6e:35:47:18:eb:fb:9e:8b:9b:f4:e9: 91:5f:0c:ee:4c:ea:34:28:e0:75:ce:a9:79:e8:16: af:50:d2:de:67:21:61:e9:5c:dd:c1:8a:c8:6e:5b: b3:4a:f5:46:ec:e4:bb:a0:1a:01:7a:b7:a7:0b:01: a7:1b:58:c8:3f:f4:e6:62:0c:7a:4c:5f:85:25:d2: fa:e6:ed:74:ac:b8:6f:c9:77:3a:6d:be:31:47:6a: 6c:83:98:fb:92:a7:06:82:9f:f6:83:f2:e2:48:58: 46:e4:19:f8:45:d4:bd:c2:ca:11:f9:d7:9b:e8:ce: 01:16:0d:d7:1f:24:11:01:d4:06:3d:e2:49:42:e6: 03:16:b5:95:6d:91:bb:3b:a5:5f:d2:09:b2:16:46: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:14:BB:42:62:BD:82:FD:B9:05:29:6D:DB:19:F2:F2:A0:F5:DE:FA X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:50:f0:ea:04:d5:c6:16:48:c5:9d:b1:c5:35:b2:ee:a5:43: 67:05:76:bc:1b:e8:26:58:f4:ed:d8:75:05:36:a7:c7:91:bc: d0:fb:c9:ac:c1:6e:e8:31:3a:f5:7e:94:03:75:51:61:55:9e: 52:3e:0e:36:df:3c:02:22:97:ff:24:a0:3c:e1:ad:09:d0:f6: e0:14:e9:c8:7d:96:7d:da:68:e6:b0:00:7a:d3:03:21:e8:bb: e5:1e:2b:cb:0f:f6:e4:1c:92:7b:ea:3e:14:ff:c8:f1:7c:8e: 3a:fa:0d:c7:33:b8:ce:76:09:2d:6e:8d:31:ce:9e:b3:fa:61: 21:c6:57:54:c4:20:5f:0a:6c:44:a9:d5:61:35:cf:63:01:8c: a6:41:fb:81:01:cf:83:f2:9c:38:5f:c7:52:6d:aa:16:a0:62: a1:5c:6c:6e:6d:2b:31:b6:56:27:94:5c:f1:46:97:69:fb:23: 15:aa:aa:21:60:d8:ea:5e:0c:8f:e6:04:0e:1e:f6:69:18:cd: 28:c4:f2:34:e1:8a:34:42:cc:51:10:8d:9c:ad:44:ea:4d:5d: 7a:b2:26:6d:20:ac:94:e6:bb:6d:51:82:e3:b4:24:5f:7d:fe: 4a:89:69:a0:f7:60:60:4c:69:b4:af:4e:0f:92:cd:a7:7c:47: 47:72:a8:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVeYMNDVeROKMQKwRwn2RETn9z7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTA2MDIxMjI2MjVaFw0yNTA2MDUxODAzMjVaMDMxMTAvBgNV BAMTKDA2MTRCQjQyNjJCRDgyRkRCOTA1Mjk2RERCMTlGMkYyQTBGNURFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0e4XlS2LQX0VxsMn1femHZls VbtS04XsQFBm06VmMiqqpjkRZU90/Hqz2q/TR3ByBi4LO+JB+GpX9YS48eBwnJHU yK/orVYocGrge/ku7p+JRxYdJUHFjAltEnHkRlpVK4F+TphtH93N5SVuNUcY6/ue i5v06ZFfDO5M6jQo4HXOqXnoFq9Q0t5nIWHpXN3BishuW7NK9Ubs5LugGgF6t6cL AacbWMg/9OZiDHpMX4Ul0vrm7XSsuG/JdzptvjFHamyDmPuSpwaCn/aD8uJIWEbk GfhF1L3CyhH515vozgEWDdcfJBEB1AY94klC5gMWtZVtkbs7pV/SCbIWRkuNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBhS7QmK9gv25BSlt2xny8qD13vowHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2 QkM2ODY3QkY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtQ8OoE1cYWSMWdscU1su6lQ2cFdrwb6CZY 9O3YdQU2p8eRvND7yazBbugxOvV+lAN1UWFVnlI+DjbfPAIil/8koDzhrQnQ9uAU 6ch9ln3aaOawAHrTAyHou+UeK8sP9uQcknvqPhT/yPF8jjr6DcczuM52CS1ujTHO nrP6YSHGV1TEIF8KbESp1WE1z2MBjKZB+4EBz4PynDhfx1JtqhagYqFcbG5tKzG2 VieUXPFGl2n7IxWqqiFg2OpeDI/mBA4e9mkYzSjE8jThijRCzFEQjZytROpNXXqy Jm0grJTmu21RguO0JF99/kqJaaD3YGBMabSvTg+Szad8R0dyqDs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:05 2025 by rpki-client