$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: oETjnPM5MEkCsXGqsnJgCAPAt1rfevKwph0TkRUKD1Q= Subject key identifier: 63:05:FB:43:E1:C6:80:B2:1D:C9:D7:CB:F6:AC:A4:D8:5C:17:06:91 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 242D337E32F24179DAB8A66998FCAB909E36AF79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 01EE Signing time: Fri 05 Sep 2025 08:50:39 +0000 Manifest this update: Fri 05 Sep 2025 08:45:39 +0000 Manifest next update: Mon 08 Sep 2025 16:47:39 +0000 Files and hashes: 1: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 2: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: 529ZdSwudqtaEAostZx9OMBT1Vx+4jDKbH9KYNKHqQU=) 3: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 4: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 5: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 6: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 7: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:2d:33:7e:32:f2:41:79:da:b8:a6:69:98:fc:ab:90:9e:36:af:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Sep 5 08:45:39 2025 GMT Not After : Sep 8 16:47:39 2025 GMT Subject: CN=6305FB43E1C680B21DC9D7CBF6ACA4D85C170691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:ba:0a:f7:03:02:c8:ca:94:16:47:cf:41: 58:9f:20:6c:ac:bf:6d:71:2d:e9:28:d7:45:1a:14: 20:51:93:2a:83:f2:f9:60:14:59:10:f0:9f:26:1a: 6d:c5:0b:31:de:e2:d8:61:53:da:ff:6b:f5:88:9d: 73:e3:dd:00:dc:fe:c0:67:40:f1:09:ff:c8:f8:b0: b6:16:ea:4a:36:94:8d:95:10:4b:82:6d:bf:f7:7f: 53:32:93:06:38:4f:ae:ec:fb:0c:ac:e4:1b:53:51: ff:6d:ba:d1:9e:ce:77:9d:48:8f:04:d2:1a:c4:bd: 7c:3d:8d:1d:e5:b3:91:44:29:48:1e:c3:67:f1:4f: 93:19:01:3c:cb:e5:b5:8e:f7:9d:74:09:9d:ab:21: 3c:ae:f5:22:57:31:cc:8f:ea:fd:e2:b9:78:72:f4: 2c:76:de:a1:48:53:cf:80:58:81:95:f1:8f:97:c4: 46:6f:32:89:2a:88:ef:1d:b5:b9:ed:09:7a:44:15: 0b:6c:2e:ab:c6:d6:6b:17:cb:32:c0:b1:bc:e8:fd: 85:1d:12:c1:45:64:0d:05:4d:cd:09:f4:1c:4a:8f: b9:20:09:f1:fb:7d:94:4f:e1:b7:93:e7:dc:41:42: 0f:38:7c:48:c2:bd:39:ad:da:80:89:38:04:42:35: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:05:FB:43:E1:C6:80:B2:1D:C9:D7:CB:F6:AC:A4:D8:5C:17:06:91 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6f:6a:66:42:9e:9e:43:99:d2:64:4d:f7:8b:66:04:94:5e: 1f:7b:2f:02:d6:30:ff:a9:21:7f:31:cb:71:0f:50:40:6b:0c: 3a:ca:00:d9:f1:cc:59:c3:34:a4:bc:7d:e3:80:41:6f:c4:94: f0:8c:c6:2b:31:c6:06:6c:91:34:84:75:03:59:e4:6c:dc:60: 77:0b:9d:7b:c8:d6:26:7f:7b:52:6c:68:cb:a7:2c:9a:0f:3f: 65:92:5d:a9:c6:40:09:91:63:a3:e0:a4:dc:f2:3c:3f:15:07: 57:d1:27:6f:15:5d:cb:bf:e5:4c:7f:43:8b:3a:5d:0a:15:76: ff:57:20:a5:89:a0:e0:37:db:04:74:aa:56:72:87:23:b3:38: dd:d0:8f:7d:01:1b:df:ef:da:9c:7b:46:0d:c9:b6:b5:6a:c2: fd:ad:d5:d5:0d:da:92:ee:ac:0d:55:4f:e0:a4:d7:72:50:24: 39:02:a4:33:d5:fb:89:c7:2f:6a:6d:29:b6:ea:e2:46:5c:f6: 72:88:81:03:fe:74:2c:2f:72:f3:f0:cb:4a:cc:10:06:a3:42: 0f:51:b0:8b:65:3c:a1:46:16:79:ef:ab:d9:65:36:da:06:03: c0:c3:b0:93:62:84:27:bd:49:a3:fa:22:34:25:2c:a9:13:18: eb:33:5e:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJC0zfjLyQXnauKZpmPyrkJ42r3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTA5MDUwODQ1MzlaFw0yNTA5MDgxNjQ3MzlaMDMxMTAvBgNV BAMTKDYzMDVGQjQzRTFDNjgwQjIxREM5RDdDQkY2QUNBNEQ4NUMxNzA2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCroK9wMCyMqUFkfPQVifIGys v21xLeko10UaFCBRkyqD8vlgFFkQ8J8mGm3FCzHe4thhU9r/a/WInXPj3QDc/sBn QPEJ/8j4sLYW6ko2lI2VEEuCbb/3f1MykwY4T67s+wys5BtTUf9tutGeznedSI8E 0hrEvXw9jR3ls5FEKUgew2fxT5MZATzL5bWO9510CZ2rITyu9SJXMcyP6v3iuXhy 9Cx23qFIU8+AWIGV8Y+XxEZvMokqiO8dtbntCXpEFQtsLqvG1msXyzLAsbzo/YUd EsFFZA0FTc0J9BxKj7kgCfH7fZRP4beT59xBQg84fEjCvTmt2oCJOARCNfIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYwX7Q+HGgLIdydfL9qyk2FwXBpEwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxvamZCnp5DmdJkTfeLZgSUXh97LwLWMP+p IX8xy3EPUEBrDDrKANnxzFnDNKS8feOAQW/ElPCMxisxxgZskTSEdQNZ5GzcYHcL nXvI1iZ/e1JsaMunLJoPP2WSXanGQAmRY6PgpNzyPD8VB1fRJ28VXcu/5Ux/Q4s6 XQoVdv9XIKWJoOA32wR0qlZyhyOzON3Qj30BG9/v2px7Rg3JtrVqwv2t1dUN2pLu rA1VT+Ck13JQJDkCpDPV+4nHL2ptKbbq4kZc9nKIgQP+dCwvcvPwy0rMEAajQg9R sItlPKFGFnnvq9llNtoGA8DDsJNihCe9SaP6IjQlLKkTGOszXoY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:10:24 2025 by rpki-client