$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: YU8We9+FvE8oiB2OkRa9LHw5lAsxGL4ZWXayF0IBALs= Subject key identifier: 55:C0:E8:AE:37:C2:48:4A:6F:D1:B5:98:43:18:4B:79:81:EE:0A:E7 Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 2C261976ECD7949AF5A46E939921195A9D8D34D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 031C Signing time: Thu 05 Jun 2025 23:00:57 +0000 Manifest this update: Thu 05 Jun 2025 22:55:57 +0000 Manifest next update: Sun 08 Jun 2025 23:11:57 +0000 Files and hashes: 1: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: LgOFzCH6uDrP74BCpUmFEBQgVqgo+Np8+rhLLAALE78=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 23:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:26:19:76:ec:d7:94:9a:f5:a4:6e:93:99:21:19:5a:9d:8d:34:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Jun 5 22:55:57 2025 GMT Not After : Jun 8 23:11:57 2025 GMT Subject: CN=55C0E8AE37C2484A6FD1B59843184B7981EE0AE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:40:78:de:77:b3:e5:5f:62:64:30:6e:85:f3: 45:d7:45:29:f4:85:e2:9d:ae:00:13:56:7e:b6:a5: 04:b0:9f:04:f1:36:98:3c:5a:52:8f:fa:4a:14:9b: 6c:29:f8:80:c3:0e:5d:53:62:7e:55:5f:35:02:90: 15:bc:f7:13:42:ad:5b:c0:eb:55:80:e8:62:99:71: 0e:ef:51:65:15:f4:ee:1e:49:94:e7:a3:6e:e9:18: ea:00:3c:4b:51:f1:5f:2e:2a:0b:08:91:cd:a1:13: 9c:85:ba:b2:6e:00:1e:94:76:97:97:00:24:24:42: 4c:fe:91:a6:0e:70:f4:67:7e:fe:71:c3:e1:d6:f1: 13:a9:37:24:f5:71:1d:14:c2:12:01:84:cd:6b:10: 23:5b:e4:1c:01:53:c2:d6:b6:bd:e5:a4:75:dc:9c: eb:44:4b:9b:25:da:12:38:70:34:c6:dd:1d:0f:d9: 89:ed:53:e4:87:98:db:74:57:7d:2b:cf:1f:65:16: f0:1c:96:87:5a:76:98:b7:13:3c:59:29:c0:47:b5: 9a:49:77:aa:2e:31:3e:b0:e3:a8:50:9a:b2:c8:9e: 98:f8:12:b2:85:f4:68:80:c1:74:2c:4c:5f:2d:96: 06:9f:5e:16:9e:82:eb:15:c0:29:89:7e:b6:27:ee: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C0:E8:AE:37:C2:48:4A:6F:D1:B5:98:43:18:4B:79:81:EE:0A:E7 X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:42:22:67:5d:d6:ac:76:91:4a:ae:4e:91:26:a5:66:10:10: 68:90:6a:ab:64:bd:fc:d9:9c:be:ed:8e:ef:0e:ed:51:d2:9d: c1:d6:bd:80:9b:2e:41:c5:09:09:5a:67:88:b5:c0:c0:b0:94: 71:c1:e9:e2:1a:76:18:f5:a4:cf:5b:2e:4c:45:71:a7:62:da: 9a:71:7c:04:d8:84:73:d3:43:8b:c4:44:53:31:6f:85:06:a3: c3:31:c8:d8:8d:a9:1e:f2:d3:8b:9f:1a:79:ca:81:c6:a7:65: 05:bf:68:96:14:cd:2d:25:61:a1:7f:96:25:3c:a6:e9:f1:19: 2b:d5:8c:aa:c2:0e:20:0a:0f:76:d1:5b:a4:77:07:0a:89:8c: 35:5d:cf:12:c8:da:4a:16:62:d0:70:12:6c:dd:29:26:16:75: 0b:74:1c:39:ac:c7:11:d1:e0:9d:e2:db:4b:16:3a:e6:84:e0: c6:ea:88:24:c3:dd:bb:90:a2:97:4f:e7:67:64:93:9d:84:0c: 13:cc:26:5f:16:85:c1:0c:23:e0:c0:69:82:d7:79:b9:2c:bb: 0c:a8:0a:6b:13:88:e3:59:fa:65:ae:f1:8e:7d:5e:c8:1b:ec: 3c:33:1d:e7:f5:c8:2c:a7:b3:c8:60:4d:bf:d6:c8:ba:69:98: 43:58:72:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCYZduzXlJr1pG6TmSEZWp2NNNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNTA2MDUyMjU1NTdaFw0yNTA2MDgyMzExNTdaMDMxMTAvBgNV BAMTKDU1QzBFOEFFMzdDMjQ4NEE2RkQxQjU5ODQzMTg0Qjc5ODFFRTBBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmQHjed7PlX2JkMG6F80XXRSn0 heKdrgATVn62pQSwnwTxNpg8WlKP+koUm2wp+IDDDl1TYn5VXzUCkBW89xNCrVvA 61WA6GKZcQ7vUWUV9O4eSZTno27pGOoAPEtR8V8uKgsIkc2hE5yFurJuAB6UdpeX ACQkQkz+kaYOcPRnfv5xw+HW8ROpNyT1cR0UwhIBhM1rECNb5BwBU8LWtr3lpHXc nOtES5sl2hI4cDTG3R0P2YntU+SHmNt0V30rzx9lFvAclodadpi3EzxZKcBHtZpJ d6ouMT6w46hQmrLInpj4ErKF9GiAwXQsTF8tlgafXhaegusVwCmJfrYn7q+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVcDorjfCSEpv0bWYQxhLeYHuCucwHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChCImdd1qx2kUquTpEmpWYQEGiQaqtkvfzZ nL7tju8O7VHSncHWvYCbLkHFCQlaZ4i1wMCwlHHB6eIadhj1pM9bLkxFcadi2ppx fATYhHPTQ4vERFMxb4UGo8MxyNiNqR7y04ufGnnKgcanZQW/aJYUzS0lYaF/liU8 punxGSvVjKrCDiAKD3bRW6R3BwqJjDVdzxLI2koWYtBwEmzdKSYWdQt0HDmsxxHR 4J3i20sWOuaE4MbqiCTD3buQopdP52dkk52EDBPMJl8WhcEMI+DAaYLXebksuwyo CmsTiONZ+mWu8Y59Xsgb7DwzHef1yCyns8hgTb/WyLppmENYcnw= -----END CERTIFICATE-----Generated at Sat Jun 7 05:11:42 2025 by rpki-client