$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: T8Iypjr03c1bn5ixgHecKmkUvRA5Df61jxfL85T2RUk= Subject key identifier: 8D:20:6D:FA:95:DE:03:CE:8A:0A:E7:F3:E9:F1:2E:41:FB:07:EE:1A Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 5E90CA3DCDBB2B09244C4A858C6EF3194901E1C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: 37 Signing time: Sat 15 Feb 2025 06:21:50 +0000 Manifest this update: Sat 15 Feb 2025 06:16:50 +0000 Manifest next update: Tue 18 Feb 2025 16:36:50 +0000 Files and hashes: 1: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: +JichmiRgdBO5Ls93QqucE3C6EV+z6Am+M+Wk0rjli0=) 2: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: eJ9GbsoPpuqjf9GV+xkr8k7F5h0W8otETbBjey1b6zQ=) 3: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: FSBT4Cl2oIA3FZ2v8CwqLAvZnqhyh2xxPvGzfautFn8=) 4: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: 2GYoGVGasxR8uDpvI7BrmDmU9LmzA4rGOfrvv4FSPFU=) 5: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: iziNbMfSG5lJ/Wc6NMmyz4JELED2OvK44piqUsCFc7c=) 6: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: cL7ZL6RvGqaM5lLXVnNe5p70LEzT1elnw9tJI0VweII=) 7: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: rou4lQQn7ojgWvv4wv09Ssy99ZSAyWazNJbw+IJaxNs=) 8: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: 0j8Xu2l7UYBZ/g+fhWO332b0tx0SFW7WDq723r5A8G0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 16:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:90:ca:3d:cd:bb:2b:09:24:4c:4a:85:8c:6e:f3:19:49:01:e1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Feb 15 06:16:50 2025 GMT Not After : Feb 18 16:36:50 2025 GMT Subject: CN=8D206DFA95DE03CE8A0AE7F3E9F12E41FB07EE1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:e0:66:aa:42:63:d8:cf:4c:e5:4f:a3:2e: 13:81:20:1b:9d:cb:3f:e9:5c:e9:ec:81:66:51:b2: 0b:14:96:0b:ac:ef:f6:c0:df:f8:e6:95:fb:64:65: bd:b7:b5:91:c8:34:ae:6d:12:05:a2:14:f5:2b:0f: a2:4b:e1:2d:a4:ad:98:c7:f7:a4:5a:69:f5:1b:f0: 1b:b0:74:cd:01:4a:2f:c4:fc:e9:b2:61:a2:0f:bb: 71:fb:a8:e1:77:5c:03:ff:c5:d8:c9:81:98:08:fa: 64:6c:be:6d:7e:15:c6:2a:eb:21:2f:c7:ae:f9:6c: 66:43:0c:3c:d0:05:c5:1f:ee:c7:4b:34:08:90:d4: 43:2d:12:67:da:e2:65:05:46:b3:07:67:dd:1e:e3: 35:00:53:0b:ea:ed:4a:c7:13:83:61:ad:e0:35:cf: 55:0e:56:6e:12:2d:1e:31:1c:7a:11:18:a8:91:88: 63:e9:b7:07:d4:25:f2:cf:23:57:80:3b:c0:ea:95: 3c:30:2c:e8:c7:e7:1f:47:08:07:d2:5f:28:5d:f7: a2:b0:6f:e3:b1:d8:1b:0f:29:5f:78:a9:66:a9:c2: ae:f8:58:e7:a2:10:77:a1:28:4f:69:a6:d2:df:b3: b3:06:ac:77:b2:19:4c:94:91:4e:a7:b5:21:2d:fa: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:20:6D:FA:95:DE:03:CE:8A:0A:E7:F3:E9:F1:2E:41:FB:07:EE:1A X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b8:32:b9:58:52:ca:6d:f1:55:b1:fd:8b:ce:4f:9a:09:d6: 62:a8:70:99:c9:27:3d:1d:ce:3f:cf:8b:30:5b:32:aa:89:45: 2b:38:11:d9:d7:50:f4:e8:9b:9c:2e:bc:6e:00:d4:41:0e:a9: c0:45:27:81:e2:5b:31:44:d0:99:82:d0:bd:7f:f0:ca:b3:58: 67:0c:bb:ec:a0:e2:c4:a7:52:68:d6:1f:c6:1a:29:eb:68:3d: 54:33:9e:3d:21:02:12:b9:51:7b:32:34:9a:69:83:70:d1:ea: 93:83:e9:c3:37:b2:8b:84:7f:fb:77:5d:d6:ec:9a:a1:50:a5: 74:a1:b2:ea:c1:22:83:44:37:61:32:35:06:86:9d:45:d3:c6: 35:a7:bd:00:58:b5:af:1d:89:7f:0c:ff:5d:85:a3:e8:52:40: 55:73:e5:f9:7b:b1:40:83:e3:2a:5a:53:a0:47:3f:6d:de:e1: 32:79:67:22:ee:9c:3a:0d:12:5a:f1:d5:55:ce:ee:06:82:9c: 78:5c:31:a9:5d:6e:d4:13:9b:4d:c5:62:ad:fa:8e:65:70:2e: 4f:24:4a:27:07:0b:b4:ac:a2:52:5b:7a:83:fd:e0:06:fc:26: 8b:c0:6f:a3:7a:79:bc:5e:6d:97:39:b1:a4:e4:71:3d:db:e3: ec:e0:5e:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpDKPc27KwkkTEqFjG7zGUkB4cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNTAyMTUwNjE2NTBaFw0yNTAyMTgxNjM2NTBaMDMxMTAvBgNV BAMTKDhEMjA2REZBOTVERTAzQ0U4QTBBRTdGM0U5RjEyRTQxRkIwN0VFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/uBmqkJj2M9M5U+jLhOBIBud yz/pXOnsgWZRsgsUlgus7/bA3/jmlftkZb23tZHINK5tEgWiFPUrD6JL4S2krZjH 96RaafUb8BuwdM0BSi/E/OmyYaIPu3H7qOF3XAP/xdjJgZgI+mRsvm1+FcYq6yEv x675bGZDDDzQBcUf7sdLNAiQ1EMtEmfa4mUFRrMHZ90e4zUAUwvq7UrHE4NhreA1 z1UOVm4SLR4xHHoRGKiRiGPptwfUJfLPI1eAO8DqlTwwLOjH5x9HCAfSXyhd96Kw b+Ox2BsPKV94qWapwq74WOeiEHehKE9pptLfs7MGrHeyGUyUkU6ntSEt+o21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjSBt+pXeA86KCufz6fEuQfsH7howHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD64MrlYUspt8VWx/YvOT5oJ1mKocJnJJz0d zj/PizBbMqqJRSs4EdnXUPTom5wuvG4A1EEOqcBFJ4HiWzFE0JmC0L1/8MqzWGcM u+yg4sSnUmjWH8YaKetoPVQznj0hAhK5UXsyNJppg3DR6pOD6cM3souEf/t3Xdbs mqFQpXShsurBIoNEN2EyNQaGnUXTxjWnvQBYta8diX8M/12Fo+hSQFVz5fl7sUCD 4ypaU6BHP23e4TJ5ZyLunDoNElrx1VXO7gaCnHhcMaldbtQTm03FYq36jmVwLk8k SicHC7SsolJbeoP94Ab8JovAb6N6ebxebZc5saTkcT3b4+zgXkI= -----END CERTIFICATE-----Generated at Mon Feb 17 07:39:27 2025 by rpki-client