$ rpki-client -vvf repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft File: 21AC220B77A77D0516BC73B4C29C8363DD00911B.mft (raw, json) Hash identifier: oDdHQDf4LtlIcuO/FdiDV2D71QF+FjQ7vGIuyZq0RQk= Subject key identifier: 8C:25:B0:48:20:0F:F2:7F:56:0F:85:FB:A0:A1:BF:4A:C7:E8:3C:79 Authority key identifier: 21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B Certificate issuer: /CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Certificate serial: 6ED8A3E04ECDAD894DADAEF90327D8DBABFAF944 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft Manifest number: 04C2 Signing time: Sun 07 Sep 2025 21:20:58 +0000 Manifest this update: Sun 07 Sep 2025 21:15:58 +0000 Manifest next update: Wed 10 Sep 2025 21:24:58 +0000 Files and hashes: 1: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: J7Eqzk0rLCECjOwGjEdw1vCeBneDceSExg8FEmGDsVA=) 2: 21AC220B77A77D0516BC73B4C29C8363DD00911B.crl (hash: 7O2O7guOaZ88TBjffaeDAaBboaBW+Oy/8w9lOyRY0UA=) 3: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: FqumLAE5ExkmaatbD11ff744L2iTMEhUHWhZUQWOtLU=) 4: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: p7znIjGrzIeqiJgSyw1Go9JzIhUPDTiZx2kzEBcMX+M=) 5: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: IywsBHZCpESzPvpzBYMa3aM5xr+uzQrgr/hs4zyGEfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 21:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d8:a3:e0:4e:cd:ad:89:4d:ad:ae:f9:03:27:d8:db:ab:fa:f9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Validity Not Before: Sep 7 21:15:58 2025 GMT Not After : Sep 10 21:24:58 2025 GMT Subject: CN=8C25B048200FF27F560F85FBA0A1BF4AC7E83C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:45:0a:68:e9:20:48:11:70:40:76:32:a5: ee:f8:93:2b:40:02:9b:e6:a7:3d:25:67:00:f0:2b: f4:69:53:ff:5d:64:52:36:3c:c8:ed:74:36:dd:25: d0:5d:1d:e1:0d:8c:71:3c:f0:ae:a1:41:a7:63:06: 20:cd:bc:a7:39:d7:ad:55:90:ef:c2:0a:3d:6a:75: a2:89:a8:6c:5e:0d:94:7b:57:6f:25:6c:eb:8e:28: b0:4c:90:a4:a1:85:4d:64:2a:51:9f:ab:6e:d0:34: 19:78:18:37:bf:7a:d6:c4:67:49:08:47:0b:29:6d: ed:71:cc:8d:3a:87:b2:07:fa:fb:1e:4a:e6:bf:b4: 0f:d0:80:bb:92:0e:f8:36:f3:d0:51:10:80:61:1d: bd:46:8b:38:79:eb:fa:d8:2a:82:18:d0:dd:69:ef: 97:25:f8:6b:52:82:02:77:a8:4b:46:d4:cc:98:7a: 33:77:6f:d4:35:a6:c6:3c:2a:bd:3b:a6:51:52:12: 6e:78:e2:39:f5:29:ea:71:87:29:e7:81:9c:38:04: 9e:47:6f:65:41:ad:71:a1:68:8e:55:19:ee:ea:48: cf:78:7c:06:1a:2b:d4:9f:90:f2:32:dd:cd:cb:96: 39:39:e4:86:5a:50:63:64:8c:73:c5:de:81:d3:f7: d4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:25:B0:48:20:0F:F2:7F:56:0F:85:FB:A0:A1:BF:4A:C7:E8:3C:79 X509v3 Authority Key Identifier: keyid:21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8e:d3:ba:37:50:a0:64:55:ee:ed:d6:18:f4:ab:60:c4:ce: c9:74:a1:a1:7d:c6:a8:45:69:66:91:7c:2b:21:40:12:1f:23: d6:94:73:9a:9e:02:cf:ea:ca:d5:49:62:e3:f4:d9:c4:17:2c: df:0b:00:77:36:d4:cb:62:b3:5a:f6:5b:a5:5f:27:ea:3e:ae: 3b:52:1d:93:f9:49:28:57:57:33:17:75:1c:10:ba:03:da:e4: 97:e1:21:88:55:f9:22:ad:1a:fc:79:84:7d:2e:da:2c:fb:89: 66:bf:aa:48:65:fb:3c:e4:a9:fa:eb:47:72:75:bc:54:af:ca: b8:db:af:6a:b7:07:44:f2:c4:99:bf:64:1d:39:5e:42:aa:fb: 8b:52:77:9d:a5:ef:8b:b0:32:80:64:c1:0a:b5:18:7f:7b:ca: 03:17:59:5a:9a:65:07:21:3d:f1:ec:83:71:22:98:45:2e:a3: 6f:20:77:c6:19:f0:d6:01:0a:84:12:bc:fd:05:0a:e5:ca:51: c7:b0:d8:1d:49:c2:c0:cd:4e:47:eb:ec:11:bf:67:f7:3e:ae: fe:90:fd:a7:13:68:ce:48:32:d3:88:70:7d:19:f4:1d:d8:57: d1:9d:f1:d4:8d:94:78:cc:92:ca:90:cf:3f:33:68:60:a4:10: b9:d2:7d:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtij4E7NrYlNra75AyfY26v6+UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNE RDAwOTExQjAeFw0yNTA5MDcyMTE1NThaFw0yNTA5MTAyMTI0NThaMDMxMTAvBgNV BAMTKDhDMjVCMDQ4MjAwRkYyN0Y1NjBGODVGQkEwQTFCRjRBQzdFODNDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCawkUKaOkgSBFwQHYype74kytA Apvmpz0lZwDwK/RpU/9dZFI2PMjtdDbdJdBdHeENjHE88K6hQadjBiDNvKc5161V kO/CCj1qdaKJqGxeDZR7V28lbOuOKLBMkKShhU1kKlGfq27QNBl4GDe/etbEZ0kI Rwspbe1xzI06h7IH+vseSua/tA/QgLuSDvg289BREIBhHb1Gizh56/rYKoIY0N1p 75cl+GtSggJ3qEtG1MyYejN3b9Q1psY8Kr07plFSEm544jn1KepxhynngZw4BJ5H b2VBrXGhaI5VGe7qSM94fAYaK9SfkPIy3c3Lljk55IZaUGNkjHPF3oHT99TJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjCWwSCAP8n9WD4X7oKG/SsfoPHkwHwYDVR0j BBgwFoAUIawiC3enfQUWvHO0wpyDY90AkRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGFiYzBiYS05MjIyLTRjNDUtODM0Mi1lYjg2NDNjNDk2N2QvMC8yMUFDMjIwQjc3 QTc3RDA1MTZCQzczQjRDMjlDODM2M0REMDA5MTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNERDAw OTExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5Qzgz NjNERDAwOTExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6O07o3UKBkVe7t1hj0q2DEzsl0oaF9xqhF aWaRfCshQBIfI9aUc5qeAs/qytVJYuP02cQXLN8LAHc21Mtis1r2W6VfJ+o+rjtS HZP5SShXVzMXdRwQugPa5JfhIYhV+SKtGvx5hH0u2iz7iWa/qkhl+zzkqfrrR3J1 vFSvyrjbr2q3B0TyxJm/ZB05XkKq+4tSd52l74uwMoBkwQq1GH97ygMXWVqaZQch PfHsg3EimEUuo28gd8YZ8NYBCoQSvP0FCuXKUcew2B1JwsDNTkfr7BG/Z/c+rv6Q /acTaM5IMtOIcH0Z9B3YV9Gd8dSNlHjMksqQzz8zaGCkELnSfTk= -----END CERTIFICATE-----Generated at Mon Sep 8 13:55:46 2025 by rpki-client