$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft File: 821049BBD22C335A50850F16AB159C0C6BCC28E5.mft (raw, json) Hash identifier: ry7aEdBHgtoI5oCxDLw+QKPT20saXfAtlcUspX98mzw= Subject key identifier: 1A:66:D7:8C:CC:2D:38:6E:87:0E:C9:7E:D0:58:B1:D4:40:19:ED:48 Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Certificate serial: 0550FAB43C34D02CDD7BCC601AC81803D8D0F9B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft Manifest number: 020F Signing time: Tue 03 Jun 2025 12:23:30 +0000 Manifest this update: Tue 03 Jun 2025 12:18:30 +0000 Manifest next update: Fri 06 Jun 2025 21:45:30 +0000 Files and hashes: 1: 821049BBD22C335A50850F16AB159C0C6BCC28E5.crl (hash: jw1tp3VfALBOguWobhFmI4MywsqSottSAkqbR8n1xdU=) 2: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: gJZ1sW5BxaKi4OlH0Ko1+AD9dXMVkojyx6OKsnKZ2JU=) 3: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: YF6vJXMVtUVK6CmNTZeLfmthP1D0nB1ofgHbuXDKxvI=) 4: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: ncuNmuDMRCz7XEGjG+8p/qjKUpvp2YtlNc4JXvP3iGg=) 5: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: O6mcNqFGUKoXPAXAaTNGJf2XpVfyBv0t3Gtn3V+6lKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:50:fa:b4:3c:34:d0:2c:dd:7b:cc:60:1a:c8:18:03:d8:d0:f9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Validity Not Before: Jun 3 12:18:30 2025 GMT Not After : Jun 6 21:45:30 2025 GMT Subject: CN=1A66D78CCC2D386E870EC97ED058B1D44019ED48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:1e:b7:39:1b:87:c8:af:d9:40:35:86:8f: 02:f6:a7:21:a6:01:7b:4d:d1:0b:05:33:c5:9c:6e: 6e:64:a0:ac:fa:7f:28:73:9e:32:38:6c:5e:be:ec: 59:71:ec:57:5d:d7:a4:ab:7b:51:b5:83:a9:1e:11: 26:0c:b3:49:e6:ba:33:4f:f5:9f:3f:a1:c4:e6:68: 23:7e:07:b4:7f:be:c4:8c:a8:91:8a:2e:38:1a:d0: f8:93:91:c9:40:66:86:c6:9a:2e:da:a6:48:04:16: 5f:d4:34:14:fc:c0:26:a4:da:00:2f:93:15:9a:0e: 5b:21:d8:ef:b9:53:de:29:fb:df:da:45:06:ce:9d: fa:36:58:ec:72:4d:cc:d2:37:48:80:4a:3d:3d:03: ae:27:8c:76:bd:13:19:38:d2:a0:e3:59:fa:13:a4: 8e:dd:b6:de:2a:0d:ff:63:6d:c7:f4:b9:53:13:35: 9f:b1:45:b2:74:06:f4:67:df:91:69:fa:83:e9:ad: 5d:3c:87:4f:8e:52:fc:63:f2:be:ee:d8:ba:b5:a7: b1:42:ca:4e:7a:47:7a:0d:32:12:e0:9e:42:b9:14: 5f:13:cb:66:41:63:5c:e2:09:fe:da:12:67:3e:1f: 7f:bc:36:fc:2a:ee:df:d2:b6:9e:92:9a:44:6b:e2: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:66:D7:8C:CC:2D:38:6E:87:0E:C9:7E:D0:58:B1:D4:40:19:ED:48 X509v3 Authority Key Identifier: keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0e:2f:ae:7e:26:35:04:0d:b4:e3:b3:c6:e4:61:fc:ab:67: cd:39:56:f6:f8:78:5e:ec:66:e6:65:f2:e6:3e:c6:52:50:e1: d1:68:02:f9:72:62:ef:93:e6:c2:0d:b1:e3:87:d1:f1:72:37: f9:6c:ce:a8:84:5f:c5:b6:26:69:d4:c8:32:88:5d:01:d7:63: 0f:60:7e:49:39:a8:fe:04:b8:a3:73:14:75:41:16:bb:36:a4: 5f:8c:78:e9:b4:fb:b5:79:56:cc:99:7a:12:4d:a7:d1:94:b1: af:f0:8e:87:fa:f7:71:63:4d:4e:6d:e9:99:2d:52:80:ba:aa: 85:59:fc:ed:6c:91:13:9f:ca:13:91:ca:e4:21:94:fc:05:fa: 52:fa:15:69:57:9c:8f:69:03:c8:2e:51:10:bd:64:61:ad:86: 67:64:fa:e8:f2:7f:cf:db:eb:e5:6b:dc:7d:be:6c:80:92:5e: 7c:65:ae:e1:bf:bb:d9:50:f9:f7:2a:89:89:8d:9f:59:ab:5d: 1f:2f:d9:36:64:e8:92:1a:f7:e8:c6:3c:17:1b:05:b7:4f:9a: 9a:7f:0b:a7:42:36:aa:4a:08:ca:1c:ab:f3:ad:91:1c:2e:8f: 87:8d:6c:8a:7c:23:47:55:01:aa:34:7f:a2:3e:e0:2c:90:4b: d0:50:aa:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVD6tDw00Czde8xgGsgYA9jQ+bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2 QkNDMjhFNTAeFw0yNTA2MDMxMjE4MzBaFw0yNTA2MDYyMTQ1MzBaMDMxMTAvBgNV BAMTKDFBNjZENzhDQ0MyRDM4NkU4NzBFQzk3RUQwNThCMUQ0NDAxOUVENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3B63ORuHyK/ZQDWGjwL2pyGm AXtN0QsFM8Wcbm5koKz6fyhznjI4bF6+7Flx7Fdd16Sre1G1g6keESYMs0nmujNP 9Z8/ocTmaCN+B7R/vsSMqJGKLjga0PiTkclAZobGmi7apkgEFl/UNBT8wCak2gAv kxWaDlsh2O+5U94p+9/aRQbOnfo2WOxyTczSN0iASj09A64njHa9Exk40qDjWfoT pI7dtt4qDf9jbcf0uVMTNZ+xRbJ0BvRn35Fp+oPprV08h0+OUvxj8r7u2Lq1p7FC yk56R3oNMhLgnkK5FF8Ty2ZBY1ziCf7aEmc+H3+8Nvwq7t/Stp6SmkRr4gD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGmbXjMwtOG6HDsl+0Fix1EAZ7UgwHwYDVR0j BBgwFoAUghBJu9IsM1pQhQ8WqxWcDGvMKOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4ZTE4ZC1hMDQ3LTQ1OTAtOWU1Ni00NjRhNzNlMjNjNmMvMC84MjEwNDlCQkQy MkMzMzVBNTA4NTBGMTZBQjE1OUMwQzZCQ0MyOEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2QkND MjhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlD MEM2QkNDMjhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8OL65+JjUEDbTjs8bkYfyrZ805Vvb4eF7s ZuZl8uY+xlJQ4dFoAvlyYu+T5sINseOH0fFyN/lszqiEX8W2JmnUyDKIXQHXYw9g fkk5qP4EuKNzFHVBFrs2pF+MeOm0+7V5VsyZehJNp9GUsa/wjof693FjTU5t6Zkt UoC6qoVZ/O1skROfyhORyuQhlPwF+lL6FWlXnI9pA8guURC9ZGGthmdk+ujyf8/b 6+Vr3H2+bICSXnxlruG/u9lQ+fcqiYmNn1mrXR8v2TZk6JIa9+jGPBcbBbdPmpp/ C6dCNqpKCMocq/OtkRwuj4eNbIp8I0dVAao0f6I+4CyQS9BQqh8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:36:36 2025 by rpki-client