$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: T5wS1YRPfIbg0sDlpFEs6JCPD/Me3BJOvbiL4QPTaeQ= Subject key identifier: 29:F0:81:6B:48:1B:4D:F9:99:13:DA:C8:B6:8B:C8:B7:69:BF:3B:75 Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 2B95D53D137161D1B255762ACA93AA9E9894E005 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: 92 Signing time: Fri 05 Sep 2025 14:11:52 +0000 Manifest this update: Fri 05 Sep 2025 14:06:52 +0000 Manifest next update: Mon 08 Sep 2025 22:01:52 +0000 Files and hashes: 1: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: FSBT4Cl2oIA3FZ2v8CwqLAvZnqhyh2xxPvGzfautFn8=) 2: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: vrtfh/FOAwVjbcTw5jhzm3wv8Fwdri/E+juIZ6/XPlY=) 3: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: 2GYoGVGasxR8uDpvI7BrmDmU9LmzA4rGOfrvv4FSPFU=) 4: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: eJ9GbsoPpuqjf9GV+xkr8k7F5h0W8otETbBjey1b6zQ=) 5: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: rou4lQQn7ojgWvv4wv09Ssy99ZSAyWazNJbw+IJaxNs=) 6: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: cL7ZL6RvGqaM5lLXVnNe5p70LEzT1elnw9tJI0VweII=) 7: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: +JichmiRgdBO5Ls93QqucE3C6EV+z6Am+M+Wk0rjli0=) 8: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: iziNbMfSG5lJ/Wc6NMmyz4JELED2OvK44piqUsCFc7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 22:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:95:d5:3d:13:71:61:d1:b2:55:76:2a:ca:93:aa:9e:98:94:e0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Sep 5 14:06:52 2025 GMT Not After : Sep 8 22:01:52 2025 GMT Subject: CN=29F0816B481B4DF99913DAC8B68BC8B769BF3B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:00:7a:f0:e4:df:6c:f1:fa:34:28:d7:13: f1:d8:10:ae:2b:8a:2c:cf:e2:6e:ac:0f:02:4e:1e: 04:3a:f6:93:b1:3a:8a:28:2f:b6:0a:e8:f1:3e:b4: 29:61:e6:a0:e9:0d:8f:c3:7a:5e:b1:bb:00:df:18: 65:73:2b:bb:7d:6f:f2:49:f9:0e:e5:d6:4f:8d:6a: fd:91:69:cb:f1:6d:19:44:e7:94:2e:b6:3a:f4:ea: b5:56:ec:4b:82:51:57:eb:c5:68:9b:6f:b9:ca:61: 95:0b:91:4b:a6:63:cb:79:74:e7:a1:97:ed:2f:29: 7b:f0:01:19:2f:12:1e:db:73:04:e1:c9:65:f8:cb: bc:39:35:78:36:c5:19:21:13:ee:00:87:ad:19:0d: df:af:5d:0f:a7:e4:19:fe:91:a5:b0:e0:b3:f7:17: bf:c0:90:36:d1:b1:0d:fb:94:c8:0d:90:78:2a:a5: 42:a8:a8:b0:3c:26:bf:d5:92:a0:24:a1:3f:18:f4: d4:30:c2:3e:47:c9:09:6f:f8:d9:85:9b:91:32:27: 84:44:22:e9:3e:df:b3:8d:9c:10:e3:0b:c1:3e:59: ec:29:25:09:24:1c:e9:83:a8:b6:fc:3f:be:9c:86: 83:51:06:fb:6a:5a:f7:22:41:19:d3:82:13:68:cd: a1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F0:81:6B:48:1B:4D:F9:99:13:DA:C8:B6:8B:C8:B7:69:BF:3B:75 X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3b:2e:28:e6:e5:45:43:d2:7c:82:a4:e9:9b:f6:dd:4a:11: a8:16:7e:42:86:a8:15:8c:2c:bc:c1:f6:12:52:c2:06:46:c1: db:28:db:20:af:f5:b1:6d:f8:af:e9:2e:cf:84:e8:81:48:19: 0a:6f:df:7f:1d:95:98:2c:20:f3:e5:9c:90:e7:01:74:58:d1: 69:c4:53:a2:fd:32:db:93:56:d7:2e:da:6c:ef:2e:2a:f6:31: a7:26:9c:10:31:c1:c8:9b:11:b0:35:26:7a:b8:c3:0d:a4:c1: 95:43:c0:9d:a3:5e:89:8e:c4:5c:b2:d6:b5:0a:1f:b6:3d:40: ad:0f:cd:92:ef:69:f9:96:d4:b6:00:45:db:0d:15:2e:a0:20: 39:df:f1:c6:bb:2f:05:48:5c:8b:ca:24:30:67:7e:bc:00:63: 5e:0e:75:92:e5:d4:c5:b3:cf:b4:b7:df:0d:17:a5:f3:96:d9: 23:7b:9b:5a:1c:b1:d1:67:d0:4b:d9:74:31:a4:ab:9d:42:ba: a7:4f:84:3a:d7:b3:48:b8:1a:60:c4:95:15:69:b2:4f:bd:9d: a1:50:a6:05:5d:b0:d2:27:4b:23:66:b1:cc:00:46:29:22:d2: ef:e4:bf:62:69:e3:fe:7b:c2:ca:31:06:a2:0f:7a:c5:ee:45: 72:1e:88:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5XVPRNxYdGyVXYqypOqnpiU4AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNTA5MDUxNDA2NTJaFw0yNTA5MDgyMjAxNTJaMDMxMTAvBgNV BAMTKDI5RjA4MTZCNDgxQjRERjk5OTEzREFDOEI2OEJDOEI3NjlCRjNCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfQB68OTfbPH6NCjXE/HYEK4r iizP4m6sDwJOHgQ69pOxOoooL7YK6PE+tClh5qDpDY/Del6xuwDfGGVzK7t9b/JJ +Q7l1k+Nav2RacvxbRlE55Qutjr06rVW7EuCUVfrxWibb7nKYZULkUumY8t5dOeh l+0vKXvwARkvEh7bcwThyWX4y7w5NXg2xRkhE+4Ah60ZDd+vXQ+n5Bn+kaWw4LP3 F7/AkDbRsQ37lMgNkHgqpUKoqLA8Jr/VkqAkoT8Y9NQwwj5HyQlv+NmFm5EyJ4RE Iuk+37ONnBDjC8E+WewpJQkkHOmDqLb8P76choNRBvtqWvciQRnTghNozaGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKfCBa0gbTfmZE9rItovIt2m/O3UwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQ7Lijm5UVD0nyCpOmb9t1KEagWfkKGqBWM LLzB9hJSwgZGwdso2yCv9bFt+K/pLs+E6IFIGQpv338dlZgsIPPlnJDnAXRY0WnE U6L9MtuTVtcu2mzvLir2MacmnBAxwcibEbA1Jnq4ww2kwZVDwJ2jXomOxFyy1rUK H7Y9QK0PzZLvafmW1LYARdsNFS6gIDnf8ca7LwVIXIvKJDBnfrwAY14OdZLl1MWz z7S33w0XpfOW2SN7m1ocsdFn0EvZdDGkq51CuqdPhDrXs0i4GmDElRVpsk+9naFQ pgVdsNInSyNmscwARiki0u/kv2Jp4/57wsoxBqIPesXuRXIeiMk= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:40 2025 by rpki-client