$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: 9zDNOp/QlI/pTxCu84K4P8zEEZJojlAbTqBt/PxgrzQ= Subject key identifier: C1:2C:E0:D9:9F:44:27:E5:67:FC:60:13:38:26:F0:ED:45:73:87:C6 Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 6C3C73100DC421C77E0EAD2709F51EC47921A1D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: 68 Signing time: Wed 04 Jun 2025 15:41:51 +0000 Manifest this update: Wed 04 Jun 2025 15:36:51 +0000 Manifest next update: Sat 07 Jun 2025 20:45:51 +0000 Files and hashes: 1: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: iziNbMfSG5lJ/Wc6NMmyz4JELED2OvK44piqUsCFc7c=) 2: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: Ldn05o/ptXjM1UexJ2/FccY/XEgiLQG0cb+88vNvito=) 3: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: +JichmiRgdBO5Ls93QqucE3C6EV+z6Am+M+Wk0rjli0=) 4: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: rou4lQQn7ojgWvv4wv09Ssy99ZSAyWazNJbw+IJaxNs=) 5: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: 2GYoGVGasxR8uDpvI7BrmDmU9LmzA4rGOfrvv4FSPFU=) 6: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: FSBT4Cl2oIA3FZ2v8CwqLAvZnqhyh2xxPvGzfautFn8=) 7: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: eJ9GbsoPpuqjf9GV+xkr8k7F5h0W8otETbBjey1b6zQ=) 8: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: cL7ZL6RvGqaM5lLXVnNe5p70LEzT1elnw9tJI0VweII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3c:73:10:0d:c4:21:c7:7e:0e:ad:27:09:f5:1e:c4:79:21:a1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Jun 4 15:36:51 2025 GMT Not After : Jun 7 20:45:51 2025 GMT Subject: CN=C12CE0D99F4427E567FC60133826F0ED457387C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:19:33:81:13:a9:96:d7:a8:32:80:f8:f1: 3a:78:da:0a:e5:4f:73:b9:91:19:4d:f9:55:5f:a9: 71:20:50:e3:6c:8e:00:c4:fe:84:5f:be:29:63:da: 1d:70:db:39:cd:1b:b8:a5:e4:b9:2a:e3:3b:7e:e0: 9b:e1:02:ef:6d:16:70:db:20:89:68:4e:b6:1e:0d: 0c:a4:d7:16:3a:d9:ad:2c:c3:72:1e:3c:02:e3:3d: e3:2d:d9:78:1a:b1:56:09:c9:bf:0e:ad:d7:7f:30: 70:19:cb:5f:4e:e9:16:2c:0d:2a:71:2e:a1:83:43: 46:e6:a9:6e:d7:80:1f:62:4a:eb:a7:f9:23:9c:0e: d6:ae:19:89:dd:51:92:1b:66:cf:29:b8:5e:69:fb: b8:78:06:6c:62:92:b1:c6:fe:85:52:d2:d7:4f:10: f9:43:60:73:2b:ca:66:ae:c0:3c:85:46:08:88:65: b9:95:4c:e0:97:01:1a:c4:e1:9f:28:bf:d2:38:b1: 32:67:b8:fd:65:da:5c:c9:66:af:18:30:f6:c9:da: 95:51:62:5e:3a:d0:2a:22:b6:d0:13:e6:b6:30:d2: 32:2f:4e:f1:c1:17:0b:ae:22:a7:50:77:a3:63:54: e5:97:d7:72:a4:5f:4e:a8:b9:3a:01:cd:89:42:e6: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2C:E0:D9:9F:44:27:E5:67:FC:60:13:38:26:F0:ED:45:73:87:C6 X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c9:16:32:7e:fe:fe:23:0e:3b:96:37:68:8a:27:be:d7:a0: 87:ee:f6:cd:ba:07:e1:25:ac:e0:8b:db:81:17:d0:ed:12:8a: a1:39:28:3e:17:aa:78:d8:fb:34:ff:b5:3a:2f:77:a4:84:59: 80:f3:6f:8a:db:3a:d5:5d:c8:9f:37:33:6b:4d:6a:92:c8:7d: d4:86:10:a5:59:45:7c:b9:5d:0f:67:48:4f:b4:2f:c8:b3:36: 7f:4b:9a:21:39:cf:dc:0f:41:76:88:3a:ca:49:ce:1b:28:72: 89:6f:48:f6:fe:fe:ee:4c:76:a3:51:44:ff:b6:10:c4:ce:f0: d7:67:e4:b4:63:a5:bf:58:c0:a9:de:7b:ce:d8:63:9d:c0:37: dc:a5:98:8d:ad:03:66:4b:98:50:d7:40:7d:94:de:85:5f:5a: e8:37:a8:46:d0:6c:a9:96:af:41:d3:52:3d:10:40:f1:a0:b1: 0d:7a:2f:45:9b:ea:c3:37:83:63:b0:15:12:32:fc:31:6f:9b: 0b:b3:9d:24:94:36:86:8b:fd:94:05:ca:25:ca:5d:96:84:a1: 6e:af:aa:81:28:8f:f6:5d:37:af:5b:d4:8d:77:d8:20:95:da: f3:81:a4:77:66:b7:a0:d8:e7:2c:ba:31:e4:0e:aa:08:ba:85: 66:de:82:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbDxzEA3EIcd+Dq0nCfUexHkhodgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNTA2MDQxNTM2NTFaFw0yNTA2MDcyMDQ1NTFaMDMxMTAvBgNV BAMTKEMxMkNFMEQ5OUY0NDI3RTU2N0ZDNjAxMzM4MjZGMEVENDU3Mzg3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiOBkzgROplteoMoD48Tp42grl T3O5kRlN+VVfqXEgUONsjgDE/oRfvilj2h1w2znNG7il5Lkq4zt+4JvhAu9tFnDb IIloTrYeDQyk1xY62a0sw3IePALjPeMt2XgasVYJyb8Ordd/MHAZy19O6RYsDSpx LqGDQ0bmqW7XgB9iSuun+SOcDtauGYndUZIbZs8puF5p+7h4BmxikrHG/oVS0tdP EPlDYHMrymauwDyFRgiIZbmVTOCXARrE4Z8ov9I4sTJnuP1l2lzJZq8YMPbJ2pVR Yl460CoittAT5rYw0jIvTvHBFwuuIqdQd6NjVOWX13KkX06ouToBzYlC5sa1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwSzg2Z9EJ+Vn/GATOCbw7UVzh8YwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITJFjJ+/v4jDjuWN2iKJ77XoIfu9s26B+El rOCL24EX0O0SiqE5KD4XqnjY+zT/tTovd6SEWYDzb4rbOtVdyJ83M2tNapLIfdSG EKVZRXy5XQ9nSE+0L8izNn9LmiE5z9wPQXaIOspJzhsocolvSPb+/u5MdqNRRP+2 EMTO8Ndn5LRjpb9YwKnee87YY53AN9ylmI2tA2ZLmFDXQH2U3oVfWug3qEbQbKmW r0HTUj0QQPGgsQ16L0Wb6sM3g2OwFRIy/DFvmwuznSSUNoaL/ZQFyiXKXZaEoW6v qoEoj/ZdN69b1I132CCV2vOBpHdmt6DY5yy6MeQOqgi6hWbego0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:31 2025 by rpki-client