$ rpki-client -vvf repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft File: 21AC220B77A77D0516BC73B4C29C8363DD00911B.mft (raw, json) Hash identifier: cxunZMXA433xX9aGH2PzjdiSruGl3UqP4Cy7c6bFxXs= Subject key identifier: DA:D9:79:C6:49:BF:14:9A:39:CB:BF:C9:34:A8:7F:A7:D5:98:AE:C5 Authority key identifier: 21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B Certificate issuer: /CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Certificate serial: 55227E516E4326B809EDDA97E92D37C84147E1EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft Manifest number: 0496 Signing time: Sun 01 Jun 2025 10:40:58 +0000 Manifest this update: Sun 01 Jun 2025 10:35:58 +0000 Manifest next update: Wed 04 Jun 2025 20:04:58 +0000 Files and hashes: 1: 21AC220B77A77D0516BC73B4C29C8363DD00911B.crl (hash: 7OzXGFhTnAV5Oh1/bMJlYj+npJDAAwKDNPblHhKY4cA=) 2: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: RhfOeKNZ4j1KvALyW4SxaRw/kBv+Dgu0smuwmiknx1Y=) 3: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: Smb7HmzUf0UyLsjEJtoRvm3jALFW5SuffGaYfUAtD2s=) 4: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: 7blkTXyq3RKCIws921Czw5yMKl/tVjEFOw3lq63q9I8=) 5: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: OnBB+AVgOO2yluvkbnT8cnywdpmmnyLp0O1UDMPsJsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 20:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:22:7e:51:6e:43:26:b8:09:ed:da:97:e9:2d:37:c8:41:47:e1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Validity Not Before: Jun 1 10:35:58 2025 GMT Not After : Jun 4 20:04:58 2025 GMT Subject: CN=DAD979C649BF149A39CBBFC934A87FA7D598AEC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:93:1c:05:e9:b3:7b:a1:bb:6e:44:a1:34: a0:8a:71:6a:f1:51:28:f1:2f:33:57:91:1e:d5:da: a4:36:4b:aa:9b:b8:1d:2a:a4:3d:b5:f8:ab:a1:38: 75:49:97:bb:fb:e0:52:8c:ea:11:76:0e:cd:64:98: 47:09:25:0c:49:2a:d0:7f:e4:74:74:37:21:04:ec: 92:87:15:b1:f8:fa:7e:8a:7b:fd:73:8d:48:60:9c: d2:66:2d:16:bd:6c:2f:d9:44:32:31:fe:6c:4e:ae: c5:f6:04:9a:50:0d:08:ee:d3:2d:5f:30:57:74:70: b5:68:8f:37:6f:b4:4c:d3:48:85:a3:bb:17:71:f8: ac:50:1e:8e:fe:2d:cb:c4:a0:fa:d3:5b:96:92:2e: 62:a4:e5:9e:92:b0:24:7d:72:42:36:b4:5d:73:9d: 4e:fc:48:05:7b:c5:d2:f3:65:11:28:1b:75:d7:2f: cf:71:57:78:62:f1:89:fc:37:07:b5:b5:1d:89:d3: 84:87:94:25:0c:d3:27:27:a1:59:8b:77:ef:86:fa: 4f:61:63:fd:b3:1e:8d:ba:af:ab:6a:c2:aa:09:95: 83:4b:99:67:b5:a3:49:0a:6f:7e:71:96:37:f2:00: 51:fd:1d:a5:e7:eb:14:85:90:c6:06:03:d8:43:5c: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D9:79:C6:49:BF:14:9A:39:CB:BF:C9:34:A8:7F:A7:D5:98:AE:C5 X509v3 Authority Key Identifier: keyid:21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c7:52:cb:ae:fe:d0:b1:26:87:3d:5f:d0:89:d7:4e:7b:b9: 4a:b2:53:bb:d2:8a:b1:29:20:48:97:96:77:d8:fc:74:e6:87: d8:5b:75:c2:e1:d0:d5:7f:4a:ef:0b:f6:d1:c4:5f:51:53:95: a8:c6:11:6a:3d:5b:d0:a9:11:2e:d5:bb:ea:07:d6:a5:ef:db: b0:9b:b4:5a:9b:03:f8:7e:86:a6:34:e6:bd:7d:44:9d:85:a9: d9:e4:1d:10:83:9f:4a:e9:73:3c:ea:ac:78:68:84:26:a8:50: 1a:20:86:c9:3f:6f:50:4d:2f:5f:7b:35:fd:0f:ca:d2:9c:74: 06:38:b6:71:49:e7:df:ad:62:bc:f3:d2:5b:e5:7f:8e:8f:41: 2c:29:1e:4e:b0:75:bd:be:d7:15:df:d8:ca:b9:0e:c5:97:34: c3:ca:97:66:55:05:ca:ba:03:63:3d:3e:3c:77:e2:58:48:8b: 4a:53:ec:03:80:ea:7b:f8:54:d8:fc:9c:59:be:a0:61:73:2b: c5:b3:11:7a:0e:da:52:da:e0:0b:49:a1:91:4b:50:83:ec:33: ae:16:7e:24:6e:8c:c5:90:37:e8:2c:29:92:20:08:4b:b9:f5: f3:e0:3e:6b:26:b3:3b:4c:c3:2a:f0:7e:95:0a:7a:29:52:fc: 47:fb:63:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSJ+UW5DJrgJ7dqX6S03yEFH4eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNE RDAwOTExQjAeFw0yNTA2MDExMDM1NThaFw0yNTA2MDQyMDA0NThaMDMxMTAvBgNV BAMTKERBRDk3OUM2NDlCRjE0OUEzOUNCQkZDOTM0QTg3RkE3RDU5OEFFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVpMcBemze6G7bkShNKCKcWrx USjxLzNXkR7V2qQ2S6qbuB0qpD21+KuhOHVJl7v74FKM6hF2Ds1kmEcJJQxJKtB/ 5HR0NyEE7JKHFbH4+n6Ke/1zjUhgnNJmLRa9bC/ZRDIx/mxOrsX2BJpQDQju0y1f MFd0cLVojzdvtEzTSIWjuxdx+KxQHo7+LcvEoPrTW5aSLmKk5Z6SsCR9ckI2tF1z nU78SAV7xdLzZREoG3XXL89xV3hi8Yn8Nwe1tR2J04SHlCUM0ycnoVmLd++G+k9h Y/2zHo26r6tqwqoJlYNLmWe1o0kKb35xljfyAFH9HaXn6xSFkMYGA9hDXCFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2tl5xkm/FJo5y7/JNKh/p9WYrsUwHwYDVR0j BBgwFoAUIawiC3enfQUWvHO0wpyDY90AkRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGFiYzBiYS05MjIyLTRjNDUtODM0Mi1lYjg2NDNjNDk2N2QvMC8yMUFDMjIwQjc3 QTc3RDA1MTZCQzczQjRDMjlDODM2M0REMDA5MTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNERDAw OTExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5Qzgz NjNERDAwOTExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjHUsuu/tCxJoc9X9CJ1057uUqyU7vSirEp IEiXlnfY/HTmh9hbdcLh0NV/Su8L9tHEX1FTlajGEWo9W9CpES7Vu+oH1qXv27Cb tFqbA/h+hqY05r19RJ2FqdnkHRCDn0rpczzqrHhohCaoUBoghsk/b1BNL197Nf0P ytKcdAY4tnFJ59+tYrzz0lvlf46PQSwpHk6wdb2+1xXf2Mq5DsWXNMPKl2ZVBcq6 A2M9Pjx34lhIi0pT7AOA6nv4VNj8nFm+oGFzK8WzEXoO2lLa4AtJoZFLUIPsM64W fiRujMWQN+gsKZIgCEu59fPgPmsmsztMwyrwfpUKeilS/Ef7Y2Y= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:04 2025 by rpki-client