$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: F+bMl0Bwz5fl1KV1vxZKqRwCVVec4VVwaBBcDE7cRk8= Subject key identifier: 0A:82:5D:27:44:27:F2:95:B2:89:1D:10:AA:5A:08:82:D3:6E:7F:0D Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 6ACDD74A6A056389A09187D9E9235D9905BE8203 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 0156 Signing time: Tue 29 Apr 2025 14:31:01 +0000 Manifest this update: Tue 29 Apr 2025 14:26:01 +0000 Manifest next update: Fri 02 May 2025 15:57:01 +0000 Files and hashes: 1: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: Vhd5fKf8/QarP3avcyjfXXb5T9NSCEb+1dKkMlgjBZw=) 2: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) 3: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) 4: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 15:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:cd:d7:4a:6a:05:63:89:a0:91:87:d9:e9:23:5d:99:05:be:82:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Apr 29 14:26:01 2025 GMT Not After : May 2 15:57:01 2025 GMT Subject: CN=0A825D274427F295B2891D10AA5A0882D36E7F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:14:09:19:3d:c5:be:70:ce:9f:13:70:a7:b4: 71:50:fd:b0:ae:a4:38:6e:a6:37:85:27:95:ab:47: 99:a3:cf:31:ce:8e:a5:8c:1f:d0:46:5d:d9:0f:6b: 1b:06:fe:52:43:95:df:a7:97:c8:9b:19:55:f5:8c: f2:7c:38:28:69:b1:3d:03:60:f5:90:b2:a7:a0:23: df:0a:a1:bc:32:6c:cb:96:d9:f3:d0:47:80:39:14: 2b:b9:60:a4:71:51:eb:53:f4:49:3a:d7:e9:91:30: bf:c9:95:a6:80:2a:24:8a:0c:9b:35:97:3f:b5:49: 0c:3c:3d:62:83:2a:73:d2:0c:d5:6c:14:24:67:7b: 49:14:93:d1:ee:31:e5:a5:7d:ef:8e:b0:c0:3a:1a: 13:fd:80:e4:ae:73:dc:d5:95:01:cc:26:1a:db:53: 25:48:95:63:a5:18:5e:75:eb:bc:f7:a8:9b:d1:e9: 7e:d6:a4:a0:69:b8:63:11:b7:d2:f5:e4:d3:af:6a: 55:a6:7f:3f:45:a7:86:79:f5:93:a1:36:ec:6e:99: 1b:11:9a:0b:de:1b:f7:b9:cc:86:bc:7a:b4:14:64: 89:ff:f3:b0:af:72:1e:27:85:af:fa:13:81:2b:f8: d1:bb:46:d3:80:37:31:54:2c:1a:7d:3f:31:b7:7a: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:82:5D:27:44:27:F2:95:B2:89:1D:10:AA:5A:08:82:D3:6E:7F:0D X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1f:b9:17:a5:2d:61:d5:38:9d:cd:43:0d:64:87:12:af:ce: 32:e6:9d:c9:65:f0:fe:08:43:9e:ae:91:75:3b:b0:6b:50:b3: 13:47:65:a0:79:44:43:c4:78:ce:0d:97:77:ab:af:73:cc:ed: 52:a2:7c:e3:be:39:2d:93:8e:b8:e4:5b:28:e8:dd:ac:76:19: d3:97:94:ce:40:d7:d9:0d:ba:09:15:a1:fe:94:99:10:24:3f: 37:4b:9d:19:c9:a2:38:75:c4:09:f6:df:ab:21:8f:9d:26:1d: b2:79:d4:56:6d:3d:11:ad:85:e1:ee:67:03:af:97:4e:1e:89: cc:20:bf:c6:6a:65:cd:6d:20:d2:da:64:7f:c7:14:d2:3f:2e: 4f:3e:15:54:cd:b9:55:8e:38:11:58:51:1f:c7:c6:ef:4e:20: bf:b7:3b:6b:46:53:90:97:d9:b6:43:84:21:84:3e:12:22:c8: ea:91:8f:fe:8c:c8:dc:da:28:13:1d:cb:0e:1b:5f:c9:ec:1c: a9:5b:9b:47:37:7d:98:bd:92:80:d8:af:c4:8f:58:ae:ca:cc: 04:c5:25:80:33:fe:57:91:08:41:da:86:95:82:fb:b8:5c:65: cc:f6:67:81:ee:00:43:c8:ba:d1:58:f7:77:46:3d:0b:fd:fa: 5f:c9:c1:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUas3XSmoFY4mgkYfZ6SNdmQW+ggMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTA0MjkxNDI2MDFaFw0yNTA1MDIxNTU3MDFaMDMxMTAvBgNV BAMTKDBBODI1RDI3NDQyN0YyOTVCMjg5MUQxMEFBNUEwODgyRDM2RTdGMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFAkZPcW+cM6fE3CntHFQ/bCu pDhupjeFJ5WrR5mjzzHOjqWMH9BGXdkPaxsG/lJDld+nl8ibGVX1jPJ8OChpsT0D YPWQsqegI98KobwybMuW2fPQR4A5FCu5YKRxUetT9Ek61+mRML/JlaaAKiSKDJs1 lz+1SQw8PWKDKnPSDNVsFCRne0kUk9HuMeWlfe+OsMA6GhP9gOSuc9zVlQHMJhrb UyVIlWOlGF5167z3qJvR6X7WpKBpuGMRt9L15NOvalWmfz9Fp4Z59ZOhNuxumRsR mgveG/e5zIa8erQUZIn/87Cvch4nha/6E4Er+NG7RtOANzFULBp9PzG3etlLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCoJdJ0Qn8pWyiR0QqloIgtNufw0wHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIofuRelLWHVOJ3NQw1khxKvzjLmncll8P4I Q56ukXU7sGtQsxNHZaB5REPEeM4Nl3err3PM7VKifOO+OS2TjrjkWyjo3ax2GdOX lM5A19kNugkVof6UmRAkPzdLnRnJojh1xAn236shj50mHbJ51FZtPRGtheHuZwOv l04eicwgv8ZqZc1tINLaZH/HFNI/Lk8+FVTNuVWOOBFYUR/Hxu9OIL+3O2tGU5CX 2bZDhCGEPhIiyOqRj/6MyNzaKBMdyw4bX8nsHKlbm0c3fZi9koDYr8SPWK7KzATF JYAz/leRCEHahpWC+7hcZcz2Z4HuAEPIutFY93dGPQv9+l/Jwbg= -----END CERTIFICATE-----Generated at Wed Apr 30 01:50:46 2025 by rpki-client