$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: Ei3vs1X0qbBFo0EpOVdc+VI4GbBPLETYD2VgFUa4qe4= Subject key identifier: 77:6E:0E:AA:CB:20:D5:D4:91:0F:25:88:E1:69:28:59:7B:2F:8C:AD Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 089A403F5856DADE55D7958E180A0D5044E87FF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 019E Signing time: Wed 12 Mar 2025 04:30:36 +0000 Manifest this update: Wed 12 Mar 2025 04:25:36 +0000 Manifest next update: Sat 15 Mar 2025 11:32:36 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: nB+Bfi526s7F0pX/cJ3vKUq8RaU1aMQ8MOXDrQGipJ8=) 2: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: 1DihRDYCIdn0v4sOIbfKySBTb4Sk0Pnd4KOEKnfAU6U=) 3: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: d/nV5TiTQGjwLBAvmxVUInwpVwxnF9xZjnsBQckQckM=) 4: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 5: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 6: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: gcxKUq3yIl36IXgdhmdk6TAl/m5XxeArZ0//uLTgiHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9a:40:3f:58:56:da:de:55:d7:95:8e:18:0a:0d:50:44:e8:7f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Mar 12 04:25:36 2025 GMT Not After : Mar 15 11:32:36 2025 GMT Subject: CN=776E0EAACB20D5D4910F2588E16928597B2F8CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6e:18:16:58:7c:fd:f0:12:87:fb:0a:b5:3e: 7f:58:d1:4b:f4:a5:f3:b7:d5:0e:00:2f:91:9f:c5: d7:c2:b7:4a:61:96:42:02:32:28:30:ba:1d:07:64: 35:c5:9e:8a:9d:4c:b5:e0:48:58:c7:17:b1:6e:40: 68:f2:c0:dd:ec:ee:82:0a:bb:34:b8:56:0a:b8:41: 73:c1:60:5d:4d:82:26:5b:b6:52:f0:d8:ac:45:59: 43:d0:53:9d:d9:bd:7d:b4:e9:6d:ef:dd:1a:d9:de: 11:55:38:57:f8:a8:f2:3c:ba:68:42:7f:d3:96:f7: d8:e3:f6:ee:97:7d:1b:61:2d:e4:32:4d:5d:78:1b: c8:4e:db:c0:05:32:11:3d:21:1f:e0:2e:19:7e:61: f1:9e:25:0e:42:d3:d5:f6:16:8b:f4:2d:20:d4:bf: b3:25:7d:6e:2e:64:69:60:1d:f1:d6:41:0f:a5:29: 7c:48:4b:35:a8:f6:b3:55:d9:82:a6:b6:d1:fa:35: 10:c4:64:26:d1:1c:9b:f7:d1:19:d8:d9:7b:6f:a1: 5d:30:fb:f5:5e:b0:17:b6:26:7f:5f:a8:1a:01:6f: f9:01:82:b7:e0:3f:68:98:24:c0:0f:ca:3b:35:13: 96:0f:52:cc:ad:ff:a8:5e:83:43:d3:f7:8f:1b:c3: 37:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6E:0E:AA:CB:20:D5:D4:91:0F:25:88:E1:69:28:59:7B:2F:8C:AD X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:90:cf:a5:3d:ca:29:91:e5:a2:cd:bd:4d:76:1b:ba:0f:55: 34:37:96:71:b3:f7:27:57:13:40:ba:dc:21:3b:b8:1c:31:90: 0b:a5:85:7c:31:62:7e:df:69:c7:be:6b:2f:c0:46:95:13:b4: 6a:0d:e9:01:29:a0:db:2f:27:bf:e9:0d:8a:d7:1f:63:12:de: a5:60:1b:ac:4c:64:16:aa:bf:f5:64:3d:f5:5d:1d:06:42:c4: 14:05:4c:1d:99:db:07:bb:da:92:61:fd:2d:45:80:f5:10:36: 21:31:35:8a:23:20:a2:e3:80:76:59:96:e8:79:d9:3b:b6:e3: 10:6c:b1:f0:e9:28:0f:b5:f9:27:d6:52:5b:8d:4f:1c:23:d5: a3:aa:d8:13:73:22:3e:36:00:f1:42:b7:7f:4d:cd:75:28:c5: 92:45:17:24:02:8a:fa:41:0d:ed:e9:67:db:fa:b3:5a:70:c0: 0a:b1:15:ee:dd:86:5b:ef:f5:dd:49:ea:67:93:f3:4c:9a:4b: 1d:b8:c4:7a:bc:87:72:76:00:3b:58:ec:b0:84:c9:ab:40:68: 35:94:86:86:65:77:97:0e:fa:49:76:59:8c:df:60:4c:26:c8: 3f:df:1a:af:2d:97:b7:e8:67:1a:b6:d8:dc:a2:c6:c7:90:48: 8d:8e:ec:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJpAP1hW2t5V15WOGAoNUETof/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTAzMTIwNDI1MzZaFw0yNTAzMTUxMTMyMzZaMDMxMTAvBgNV BAMTKDc3NkUwRUFBQ0IyMEQ1RDQ5MTBGMjU4OEUxNjkyODU5N0IyRjhDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrbhgWWHz98BKH+wq1Pn9Y0Uv0 pfO31Q4AL5GfxdfCt0phlkICMigwuh0HZDXFnoqdTLXgSFjHF7FuQGjywN3s7oIK uzS4Vgq4QXPBYF1NgiZbtlLw2KxFWUPQU53ZvX206W3v3RrZ3hFVOFf4qPI8umhC f9OW99jj9u6XfRthLeQyTV14G8hO28AFMhE9IR/gLhl+YfGeJQ5C09X2Fov0LSDU v7MlfW4uZGlgHfHWQQ+lKXxISzWo9rNV2YKmttH6NRDEZCbRHJv30RnY2XtvoV0w +/VesBe2Jn9fqBoBb/kBgrfgP2iYJMAPyjs1E5YPUsyt/6heg0PT948bwzelAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd24Oqssg1dSRDyWI4WkoWXsvjK0wHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASQz6U9yimR5aLNvU12G7oPVTQ3lnGz9ydX E0C63CE7uBwxkAulhXwxYn7face+ay/ARpUTtGoN6QEpoNsvJ7/pDYrXH2MS3qVg G6xMZBaqv/VkPfVdHQZCxBQFTB2Z2we72pJh/S1FgPUQNiExNYojIKLjgHZZluh5 2Tu24xBssfDpKA+1+SfWUluNTxwj1aOq2BNzIj42APFCt39NzXUoxZJFFyQCivpB De3pZ9v6s1pwwAqxFe7dhlvv9d1J6meT80yaSx24xHq8h3J2ADtY7LCEyatAaDWU hoZld5cO+kl2WYzfYEwmyD/fGq8tl7foZxq22NyixseQSI2O7K8= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:45 2025 by rpki-client