$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: +PjJfRfghPjpGtZcB0EqGLWwQ9Vrd1d4wGctBLxTabg= Subject key identifier: 08:E4:9C:34:7D:A4:F6:99:08:22:A8:79:5D:6D:D3:06:A1:84:26:81 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 7F8F2499E71AD7A4BB8C89B5077FBAF8B2D26CDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: B2 Signing time: Thu 05 Jun 2025 02:22:19 +0000 Manifest this update: Thu 05 Jun 2025 02:17:19 +0000 Manifest next update: Sun 08 Jun 2025 08:16:19 +0000 Files and hashes: 1: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) 2: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: t5WKKFcERh0Q2zeyA/i2mdJC1iASLFokaVvS4Zz0Mcw=) 3: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 08:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8f:24:99:e7:1a:d7:a4:bb:8c:89:b5:07:7f:ba:f8:b2:d2:6c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Jun 5 02:17:19 2025 GMT Not After : Jun 8 08:16:19 2025 GMT Subject: CN=08E49C347DA4F6990822A8795D6DD306A1842681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:34:41:ac:d7:1e:12:f8:38:01:00:f6:49: 46:50:d1:f6:63:f0:72:ce:98:6a:3a:47:64:a8:ff: ca:b6:58:f1:c1:ee:45:bc:51:5e:3b:c9:58:56:86: 54:51:d9:25:9f:cb:63:89:2a:1d:60:d8:27:d5:63: 61:3e:1c:0b:f4:b0:a9:b7:49:b3:cc:85:ae:37:5e: c8:4c:27:bf:bf:7d:fe:9f:40:9f:0f:f5:a0:8f:aa: 9d:74:b9:72:6c:3d:9e:d3:54:d3:16:ef:66:52:05: f4:a8:f5:79:0f:58:16:fa:d4:26:e8:6f:70:75:99: 32:59:a8:7e:06:1c:b9:95:1a:63:87:2b:1d:87:ef: da:6f:96:40:6c:56:ae:63:ac:7a:d0:91:52:2b:ec: 7c:6d:27:2e:35:f1:2c:9d:02:1d:f8:44:13:a0:2a: 8a:c2:bc:bd:4a:64:73:3d:4c:f2:8f:33:8b:9b:82: fc:26:46:db:c9:ed:9a:78:12:de:6b:5f:55:70:be: 03:30:21:40:4a:1c:10:19:ca:90:0e:16:a5:de:c9: 09:4d:4e:fc:69:bf:09:e0:2b:9d:8e:34:a6:3e:48: 3f:26:17:7a:a2:f3:43:09:51:7f:7b:04:d4:4a:50: 44:51:aa:c2:e3:b1:cb:1c:e1:04:cb:7c:32:52:e1: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E4:9C:34:7D:A4:F6:99:08:22:A8:79:5D:6D:D3:06:A1:84:26:81 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:53:dd:de:ea:b4:d3:87:87:26:74:2c:21:ec:eb:e5:0b:03: bb:c0:e7:c5:28:b1:12:40:4b:76:7e:10:bb:93:2c:91:47:f2: 7f:65:11:b8:0b:3a:7e:7d:0d:9c:1d:ec:2f:86:c7:5d:62:99: f0:b7:e3:cc:fc:71:56:19:93:a8:df:02:56:1f:63:81:21:cb: 4f:2d:15:5f:93:78:34:15:60:43:6f:93:c5:54:e1:14:af:35: c1:10:80:79:66:da:99:e4:16:ae:cc:17:c2:46:c6:08:e0:2f: a1:0e:0e:3d:c4:1d:e5:48:23:9f:88:2f:a0:2a:9d:6e:95:cf: 5f:40:35:29:9e:d1:16:9c:3b:04:5a:76:e6:1c:61:6f:e9:c0: 3c:e6:15:b4:be:3b:5b:79:82:d5:4d:90:62:08:90:54:77:6b: 8d:94:82:fa:ec:66:9d:9b:47:18:b2:9c:20:71:52:b0:78:b4: 8f:0f:96:04:88:33:5f:13:b1:0a:89:95:ce:cf:61:bc:30:df: 62:13:55:09:e8:eb:82:33:e1:28:a1:4f:1d:86:04:4f:66:9a: fe:f5:ff:98:a1:5d:d4:3a:c5:02:75:3c:89:a3:96:09:6c:33: 8b:7b:d0:7f:d3:c2:a5:4c:30:13:fe:e9:68:91:69:6f:12:8a: 34:ff:1a:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf48kmeca16S7jIm1B3+6+LLSbN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTA2MDUwMjE3MTlaFw0yNTA2MDgwODE2MTlaMDMxMTAvBgNV BAMTKDA4RTQ5QzM0N0RBNEY2OTkwODIyQTg3OTVENkREMzA2QTE4NDI2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVDRBrNceEvg4AQD2SUZQ0fZj 8HLOmGo6R2So/8q2WPHB7kW8UV47yVhWhlRR2SWfy2OJKh1g2CfVY2E+HAv0sKm3 SbPMha43XshMJ7+/ff6fQJ8P9aCPqp10uXJsPZ7TVNMW72ZSBfSo9XkPWBb61Cbo b3B1mTJZqH4GHLmVGmOHKx2H79pvlkBsVq5jrHrQkVIr7HxtJy418SydAh34RBOg KorCvL1KZHM9TPKPM4ubgvwmRtvJ7Zp4Et5rX1VwvgMwIUBKHBAZypAOFqXeyQlN TvxpvwngK52ONKY+SD8mF3qi80MJUX97BNRKUERRqsLjscsc4QTLfDJS4bh9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCOScNH2k9pkIIqh5XW3TBqGEJoEwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9T3d7qtNOHhyZ0LCHs6+ULA7vA58UosRJA S3Z+ELuTLJFH8n9lEbgLOn59DZwd7C+Gx11imfC348z8cVYZk6jfAlYfY4Ehy08t FV+TeDQVYENvk8VU4RSvNcEQgHlm2pnkFq7MF8JGxgjgL6EODj3EHeVII5+IL6Aq nW6Vz19ANSme0RacOwRaduYcYW/pwDzmFbS+O1t5gtVNkGIIkFR3a42UgvrsZp2b RxiynCBxUrB4tI8PlgSIM18TsQqJlc7PYbww32ITVQno64Iz4SihTx2GBE9mmv71 /5ihXdQ6xQJ1PImjlglsM4t70H/TwqVMMBP+6WiRaW8SijT/Gqs= -----END CERTIFICATE-----Generated at Fri Jun 6 17:04:07 2025 by rpki-client