$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: DOMfsM8kcbyOU+NWedQcbnnNLLmaKXYAmQqLfUd0SrU= Subject key identifier: 88:91:7A:43:E9:A2:4A:21:F9:53:9B:1D:83:66:A6:D4:6E:1C:1F:24 Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 1112D77F59B675BC2503890563D83D3F8050C48A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 0184 Signing time: Fri 08 Aug 2025 16:51:03 +0000 Manifest this update: Fri 08 Aug 2025 16:46:03 +0000 Manifest next update: Mon 11 Aug 2025 23:35:03 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) 2: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) 3: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: UjEv/k3ipPb6OCJfwsdKG5OlyboeA0WY3Z0Hhix5BGc=) 4: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 23:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:12:d7:7f:59:b6:75:bc:25:03:89:05:63:d8:3d:3f:80:50:c4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Aug 8 16:46:03 2025 GMT Not After : Aug 11 23:35:03 2025 GMT Subject: CN=88917A43E9A24A21F9539B1D8366A6D46E1C1F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9f:b2:51:09:73:fa:ab:47:de:6f:6d:17:2a: 4f:b8:a1:07:32:b3:50:76:62:20:be:fd:00:41:08: ac:4b:eb:c0:47:06:c6:c7:6f:ac:96:c3:df:f7:d1: 83:1a:85:3c:6b:a3:b6:01:7d:f4:e5:d3:99:70:07: cd:a8:d9:20:8d:e4:73:e9:d4:6c:ff:b1:47:c2:bc: 37:78:79:0e:41:f9:2a:d3:b9:a7:5a:9c:2b:d5:5c: c7:73:83:6e:5f:5d:20:6e:f7:73:a4:94:c1:cf:e0: 69:4c:63:10:2a:c7:36:5e:5d:71:06:52:91:2d:8d: 5e:9e:28:62:0e:e5:07:6b:c2:cb:46:53:93:1d:39: 56:d0:95:50:e9:f9:5b:b9:88:64:91:a3:c9:10:51: 84:7f:7f:aa:85:4c:cf:b3:82:83:ea:df:e5:fa:c3: 4f:54:d9:dd:4e:45:04:3c:cc:9d:f5:a1:aa:a1:69: ed:eb:52:95:7f:62:e5:b4:7a:8c:ca:ef:71:cb:4e: 60:88:31:29:37:a0:40:6a:19:6c:82:7a:68:c7:51: d9:0d:94:fe:de:5e:ee:82:9c:27:cb:86:78:6e:a7: 63:aa:a6:12:80:27:11:9f:57:55:10:ac:7c:3c:33: c7:3a:eb:33:52:bc:0f:8a:a7:3c:cb:2d:95:a0:72: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:91:7A:43:E9:A2:4A:21:F9:53:9B:1D:83:66:A6:D4:6E:1C:1F:24 X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:92:f1:80:07:ae:6d:d3:8c:b6:e5:2d:a6:42:19:81:93:83: c3:e9:62:33:3b:aa:83:34:58:8f:11:d1:d4:ff:db:72:83:c8: 8a:82:a6:54:e8:ce:5c:5a:cb:e0:b6:c3:74:76:f2:1f:84:f8: ab:cf:18:63:6b:e1:5c:4f:11:15:3e:42:b4:0d:9a:cd:ab:8d: 87:15:d9:6d:4c:9d:2d:41:36:e6:3e:db:a4:d0:1d:d2:1b:c8: 09:fe:85:e1:73:e1:c6:98:01:1a:69:89:8b:a7:33:a5:82:20: c9:9c:34:b6:51:9c:2e:51:0d:b8:49:4b:59:89:1c:d1:d2:0e: 40:6e:a6:a0:79:a8:ab:22:39:96:23:0f:4b:3b:76:41:98:ec: e8:4d:e4:5a:d9:e9:3f:10:15:93:e9:40:40:b4:02:fd:40:3f: a9:c8:ab:ba:3b:e8:c0:02:52:5d:e3:66:18:75:d0:d0:6f:f1: 15:05:d1:fd:9d:c4:62:b5:4b:5b:dd:5a:35:c5:1b:ca:06:1c: aa:e9:90:0e:59:0b:4b:9b:fa:c4:76:fb:69:29:c1:38:6f:2f: 39:d9:aa:84:fa:46:f7:3b:e7:b0:34:e9:14:29:67:89:8a:e6: 25:a6:ce:50:ec:a3:15:e7:10:52:b3:6f:28:cb:df:b5:7e:1f: 85:df:12:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERLXf1m2dbwlA4kFY9g9P4BQxIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTA4MDgxNjQ2MDNaFw0yNTA4MTEyMzM1MDNaMDMxMTAvBgNV BAMTKDg4OTE3QTQzRTlBMjRBMjFGOTUzOUIxRDgzNjZBNkQ0NkUxQzFGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDln7JRCXP6q0feb20XKk+4oQcy s1B2YiC+/QBBCKxL68BHBsbHb6yWw9/30YMahTxro7YBffTl05lwB82o2SCN5HPp 1Gz/sUfCvDd4eQ5B+SrTuadanCvVXMdzg25fXSBu93OklMHP4GlMYxAqxzZeXXEG UpEtjV6eKGIO5QdrwstGU5MdOVbQlVDp+Vu5iGSRo8kQUYR/f6qFTM+zgoPq3+X6 w09U2d1ORQQ8zJ31oaqhae3rUpV/YuW0eozK73HLTmCIMSk3oEBqGWyCemjHUdkN lP7eXu6CnCfLhnhup2OqphKAJxGfV1UQrHw8M8c66zNSvA+KpzzLLZWgcrEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiJF6Q+miSiH5U5sdg2am1G4cHyQwHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCS8YAHrm3TjLblLaZCGYGTg8PpYjM7qoM0 WI8R0dT/23KDyIqCplTozlxay+C2w3R28h+E+KvPGGNr4VxPERU+QrQNms2rjYcV 2W1MnS1BNuY+26TQHdIbyAn+heFz4caYARppiYunM6WCIMmcNLZRnC5RDbhJS1mJ HNHSDkBupqB5qKsiOZYjD0s7dkGY7OhN5FrZ6T8QFZPpQEC0Av1AP6nIq7o76MAC Ul3jZhh10NBv8RUF0f2dxGK1S1vdWjXFG8oGHKrpkA5ZC0ub+sR2+2kpwThvLznZ qoT6Rvc757A06RQpZ4mK5iWmzlDsoxXnEFKzbyjL37V+H4XfEo0= -----END CERTIFICATE-----Generated at Sat Aug 9 22:37:16 2025 by rpki-client