$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: 9jv/+5opB2BsYYMDiOlsVSLnIxdLxxkNdDDCIUsdWoE= Subject key identifier: B2:83:13:C7:0D:E0:6E:19:92:C2:A5:AF:68:36:50:31:74:ED:52:56 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 7B7471D2304F96D6E938281082A5310FF93E7F54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 01C3 Signing time: Mon 02 Jun 2025 06:20:38 +0000 Manifest this update: Mon 02 Jun 2025 06:15:38 +0000 Manifest next update: Thu 05 Jun 2025 07:39:38 +0000 Files and hashes: 1: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: gcxKUq3yIl36IXgdhmdk6TAl/m5XxeArZ0//uLTgiHM=) 2: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 3: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 4: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 5: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: PCFuSY6vHi4ANYB303HHqD6gYf4ko92hphaMAgvtLjs=) 6: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: nB+Bfi526s7F0pX/cJ3vKUq8RaU1aMQ8MOXDrQGipJ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 07:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:74:71:d2:30:4f:96:d6:e9:38:28:10:82:a5:31:0f:f9:3e:7f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Jun 2 06:15:38 2025 GMT Not After : Jun 5 07:39:38 2025 GMT Subject: CN=B28313C70DE06E1992C2A5AF6836503174ED5256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:50:31:29:1d:f0:ee:c0:3e:25:39:da:a9: 52:23:2f:aa:6d:d6:4f:5d:08:7d:39:0c:d9:9b:13: a8:66:22:da:b5:4a:91:a1:c0:1d:5f:a3:7f:fa:ad: 7a:63:46:53:bc:5c:54:c0:b1:92:55:f9:b8:60:54: 63:b3:dd:31:39:9b:8c:3c:e3:d3:6e:17:9e:c5:ea: af:6e:7a:eb:f2:5d:c2:9e:70:1f:51:7f:e8:bd:07: 83:8a:3e:44:f4:ad:ca:0f:5f:82:66:bc:7f:30:ba: 14:fd:53:78:d7:da:a4:7b:58:46:ab:bb:46:3e:00: 46:44:70:64:d4:b1:f3:78:a8:65:d8:a5:eb:1d:be: 6a:94:61:99:6f:22:0f:17:d4:bb:09:d3:44:30:8f: 21:d3:0e:ff:6c:25:17:85:54:f9:7b:77:58:a3:9c: 75:4c:0e:8a:65:e7:f2:75:4a:b9:ac:6b:65:bf:38: 30:ae:61:5d:fd:eb:2f:6a:0c:86:de:d0:1c:08:70: b0:8d:90:ea:d5:e5:b7:22:9d:00:ea:91:58:1e:3c: 3e:0e:18:84:0d:4b:87:c8:a8:71:b2:a3:4c:8a:04: 66:48:d0:6f:14:20:ff:fd:53:0e:ac:55:b9:0a:cd: 15:55:07:e3:db:4a:91:8b:bd:cf:cf:c2:2a:8f:65: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:83:13:C7:0D:E0:6E:19:92:C2:A5:AF:68:36:50:31:74:ED:52:56 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:89:1f:f2:51:d3:4f:95:4d:10:16:e3:6e:a1:e5:cb:28:8c: 9b:10:58:23:de:79:6c:09:94:4b:e9:16:ce:15:80:1a:c4:ed: fa:5d:5b:3d:86:bf:89:b1:5c:2a:64:ae:a0:b2:55:f6:a8:c4: 4b:0d:67:d7:39:6f:57:4e:67:5e:57:3a:12:75:86:40:a1:86: 12:30:2c:57:ed:53:dc:b5:3c:d9:29:e2:fa:4f:ac:cb:35:78: 4c:8b:c7:fc:a2:8f:be:b5:7f:c1:fc:90:48:2e:f1:58:9a:ca: c5:f8:1e:f9:7c:1e:d8:a5:b3:e3:be:b6:95:b4:cc:0d:26:b3: 55:9b:c2:de:eb:c7:b5:17:a6:b2:d4:07:d5:c4:40:78:bb:62: 7f:f2:e0:fc:df:02:14:57:87:33:f8:2c:57:16:ad:be:5c:18: 9e:6b:11:fc:03:64:79:af:2c:fd:dc:4a:57:fa:3f:84:24:c1: 5f:ed:99:fb:20:5f:43:40:8f:9f:3d:a7:7b:f5:6e:c0:68:d9: ad:e3:e4:24:2e:b0:8d:f2:4b:88:cc:76:ca:84:10:dc:d9:d3: 3b:57:67:15:08:e5:f8:69:bf:c6:68:12:07:27:cf:39:9c:72: f3:d0:85:b4:5f:ab:06:a8:10:7e:b1:5a:c1:34:ba:25:f8:fe: 16:cb:d8:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3Rx0jBPltbpOCgQgqUxD/k+f1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTA2MDIwNjE1MzhaFw0yNTA2MDUwNzM5MzhaMDMxMTAvBgNV BAMTKEIyODMxM0M3MERFMDZFMTk5MkMyQTVBRjY4MzY1MDMxNzRFRDUyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuB1AxKR3w7sA+JTnaqVIjL6pt 1k9dCH05DNmbE6hmItq1SpGhwB1fo3/6rXpjRlO8XFTAsZJV+bhgVGOz3TE5m4w8 49NuF57F6q9ueuvyXcKecB9Rf+i9B4OKPkT0rcoPX4JmvH8wuhT9U3jX2qR7WEar u0Y+AEZEcGTUsfN4qGXYpesdvmqUYZlvIg8X1LsJ00QwjyHTDv9sJReFVPl7d1ij nHVMDopl5/J1Srmsa2W/ODCuYV396y9qDIbe0BwIcLCNkOrV5bcinQDqkVgePD4O GIQNS4fIqHGyo0yKBGZI0G8UIP/9Uw6sVbkKzRVVB+PbSpGLvc/PwiqPZXEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsoMTxw3gbhmSwqWvaDZQMXTtUlYwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOJH/JR00+VTRAW426h5csojJsQWCPeeWwJ lEvpFs4VgBrE7fpdWz2Gv4mxXCpkrqCyVfaoxEsNZ9c5b1dOZ15XOhJ1hkChhhIw LFftU9y1PNkp4vpPrMs1eEyLx/yij761f8H8kEgu8ViaysX4Hvl8Htils+O+tpW0 zA0ms1Wbwt7rx7UXprLUB9XEQHi7Yn/y4PzfAhRXhzP4LFcWrb5cGJ5rEfwDZHmv LP3cSlf6P4QkwV/tmfsgX0NAj589p3v1bsBo2a3j5CQusI3yS4jMdsqEENzZ0ztX ZxUI5fhpv8ZoEgcnzzmccvPQhbRfqwaoEH6xWsE0uiX4/hbL2J8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:52 2025 by rpki-client