$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: kd5hx9BM/78zn7h+kEQy56+udtGS9XhAwLCi1cic++4= Subject key identifier: 79:8A:06:61:46:C0:79:23:15:6E:AD:82:D4:3C:32:20:D6:F8:D9:95 Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 75F6210181923D2667E054A5C2402F2B8576DFDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 01FF Signing time: Thu 07 Aug 2025 01:01:47 +0000 Manifest this update: Thu 07 Aug 2025 00:56:47 +0000 Manifest next update: Sun 10 Aug 2025 10:15:47 +0000 Files and hashes: 1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: T3xqyCmwZhZH0mYA6Gycjtgi64YdENOJjEkaeXWYn+0=) 2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: FXE5GAFeqGpeEgNYhdu+NiOVWPi7nwVOKlyxLEU4cy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f6:21:01:81:92:3d:26:67:e0:54:a5:c2:40:2f:2b:85:76:df:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Aug 7 00:56:47 2025 GMT Not After : Aug 10 10:15:47 2025 GMT Subject: CN=798A066146C07923156EAD82D43C3220D6F8D995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7f:dd:c4:bc:a9:86:e9:1a:d6:00:cd:25:fe: 3b:d9:33:9f:14:f1:a5:6f:63:6c:10:57:14:70:c9: a5:2c:e6:a8:e9:02:03:6e:90:7c:80:5e:cc:b2:c7: b2:25:28:ec:bd:12:b9:bc:d0:01:37:3a:99:a4:6a: 1b:d4:b1:2d:d4:33:34:88:a9:e1:1a:5d:e6:a7:1b: 0d:a8:bc:1f:2d:4b:e4:bc:63:bc:fc:6b:0b:6e:fd: 0f:02:42:aa:21:2f:a6:a7:ee:c0:16:59:82:16:c2: 12:aa:10:d5:b5:11:49:ed:b0:dd:9c:96:e6:81:0e: ba:c9:a3:31:11:0a:23:7c:3f:8e:a0:43:03:d6:6f: d7:e3:3b:f2:04:45:99:be:06:e1:69:bd:f6:30:74: 14:02:8c:50:c3:0c:bd:36:bc:44:0f:c9:b6:7e:e2: 96:03:6d:31:91:d0:2f:3e:24:07:f8:e6:12:3d:ad: 92:fa:57:d0:d7:e5:6a:87:db:39:dc:1f:fd:30:c0: 11:e2:44:bd:94:12:9a:2e:ad:90:76:d4:3f:d1:65: 7a:63:b1:60:90:4a:c1:3f:40:67:47:53:dc:42:23: 4d:4d:b1:95:9f:98:c9:db:15:3c:78:5d:74:1e:82: eb:88:8a:34:35:4b:a6:cd:3c:c5:05:29:07:3f:d7: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:06:61:46:C0:79:23:15:6E:AD:82:D4:3C:32:20:D6:F8:D9:95 X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:53:ea:10:2a:e1:64:33:4f:e0:f1:9a:f9:0a:05:56:5d:e6: ce:4d:1c:3a:7a:1a:6a:9e:1c:a8:2b:2f:9f:7a:68:cc:c3:4d: ce:35:11:6c:29:6b:c5:9c:eb:33:18:ea:cc:55:71:3a:de:57: 62:a6:30:40:97:7e:f8:ca:f4:85:e6:f9:af:3f:4a:59:b8:e2: a7:d3:2c:1f:72:6e:72:3f:0a:44:24:7f:25:99:26:fc:76:9e: 06:c4:53:6e:71:87:d3:11:4f:af:0f:99:c0:ca:5b:55:9a:ca: 49:35:5d:e5:18:4f:63:f1:be:44:f5:78:1a:6c:9b:5c:73:05: 26:a2:b0:c5:95:9f:13:02:da:07:7c:1a:6f:52:56:0b:4c:27: b5:41:22:26:00:2e:ac:26:9c:9c:c6:99:93:24:aa:2b:aa:09: 63:40:cf:27:89:18:d0:86:e2:f0:fc:69:b6:60:86:ae:fd:8d: 66:04:62:29:3c:73:45:5d:7b:fe:65:fe:cd:12:ea:65:f6:ed: 96:9e:59:8d:39:37:39:44:66:cd:c0:75:9d:5b:50:6a:f8:cd: f9:34:d9:d8:8c:7d:8b:a3:08:d6:f6:92:1f:19:2f:57:62:50: 56:67:1e:1d:68:37:d9:b0:7a:bd:2e:65:8a:15:3a:85:41:f8: eb:3b:5f:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdfYhAYGSPSZn4FSlwkAvK4V239swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNTA4MDcwMDU2NDdaFw0yNTA4MTAxMDE1NDdaMDMxMTAvBgNV BAMTKDc5OEEwNjYxNDZDMDc5MjMxNTZFQUQ4MkQ0M0MzMjIwRDZGOEQ5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDif93EvKmG6RrWAM0l/jvZM58U 8aVvY2wQVxRwyaUs5qjpAgNukHyAXsyyx7IlKOy9Erm80AE3OpmkahvUsS3UMzSI qeEaXeanGw2ovB8tS+S8Y7z8awtu/Q8CQqohL6an7sAWWYIWwhKqENW1EUntsN2c luaBDrrJozERCiN8P46gQwPWb9fjO/IERZm+BuFpvfYwdBQCjFDDDL02vEQPybZ+ 4pYDbTGR0C8+JAf45hI9rZL6V9DX5WqH2zncH/0wwBHiRL2UEpourZB21D/RZXpj sWCQSsE/QGdHU9xCI01NsZWfmMnbFTx4XXQeguuIijQ1S6bNPMUFKQc/1yoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeYoGYUbAeSMVbq2C1DwyINb42ZUwHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhT6hAq4WQzT+DxmvkKBVZd5s5NHDp6Gmqe HKgrL596aMzDTc41EWwpa8Wc6zMY6sxVcTreV2KmMECXfvjK9IXm+a8/Slm44qfT LB9ybnI/CkQkfyWZJvx2ngbEU25xh9MRT68PmcDKW1Waykk1XeUYT2PxvkT1eBps m1xzBSaisMWVnxMC2gd8Gm9SVgtMJ7VBIiYALqwmnJzGmZMkqiuqCWNAzyeJGNCG 4vD8abZghq79jWYEYik8c0Vde/5l/s0S6mX27ZaeWY05NzlEZs3AdZ1bUGr4zfk0 2diMfYujCNb2kh8ZL1diUFZnHh1oN9mwer0uZYoVOoVB+Os7XzA= -----END CERTIFICATE-----Generated at Thu Aug 7 03:25:40 2025 by rpki-client