$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: PWkOMnr/duKl46I5N0K/MW7YIpjGeORxEk0qyTallkM= Subject key identifier: BC:69:9A:05:E6:27:DD:0E:F6:B7:26:33:B4:95:1D:5C:E7:63:2D:76 Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 71A916A4EAB400ED45A0ACFF7E1D698653021649 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 016B Signing time: Sat 14 Jun 2025 13:21:02 +0000 Manifest this update: Sat 14 Jun 2025 13:16:02 +0000 Manifest next update: Tue 17 Jun 2025 19:12:02 +0000 Files and hashes: 1: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: svwFw7D1rjmreCvmIrBkhccd4kOfiSg4GxDthbYy/W0=) 2: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) 3: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) 4: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a9:16:a4:ea:b4:00:ed:45:a0:ac:ff:7e:1d:69:86:53:02:16:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Jun 14 13:16:02 2025 GMT Not After : Jun 17 19:12:02 2025 GMT Subject: CN=BC699A05E627DD0EF6B72633B4951D5CE7632D76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:17:04:b4:8c:43:71:7d:e7:a0:0e:aa:52: f8:80:97:e1:95:f5:84:bf:ea:a4:95:ae:e5:a3:f0: ec:e7:2c:19:ae:47:fc:3f:82:66:76:a3:7b:90:1f: 1a:c5:4d:73:f1:44:e6:b3:aa:80:bc:c5:45:ce:3f: 5e:7b:dd:64:8d:89:cb:ca:1c:d3:69:f9:40:f1:f1: d4:9e:b8:d3:e0:86:e3:fd:9e:5f:83:e2:5f:86:7b: 89:e5:52:5f:87:58:0a:bf:7f:dd:37:a1:d7:bb:62: 2d:35:da:2b:b0:da:ec:1c:66:ea:f0:b3:fa:f2:01: 03:5e:3d:7d:03:3c:6c:2e:63:ce:00:41:21:66:7c: 9d:8f:9d:4f:ec:b6:0d:cc:75:77:7d:bd:05:b1:84: dc:1b:d5:73:f1:09:c1:d3:36:c0:7c:25:04:0c:54: 0a:a9:6e:de:d2:77:d6:53:18:50:71:b8:d5:a4:92: 7f:f3:ee:7f:2d:69:87:9e:aa:cf:35:b2:13:3d:0e: 60:21:c7:0a:dd:82:2b:d7:0c:31:db:f7:2f:c3:de: 21:83:75:78:b5:9a:74:92:9b:dd:4c:05:b2:2d:37: b9:83:d4:2e:36:4e:30:64:c0:2c:e3:71:ec:6e:34: 7c:9a:13:1f:98:e0:61:f4:48:fa:3e:57:f5:41:90: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:69:9A:05:E6:27:DD:0E:F6:B7:26:33:B4:95:1D:5C:E7:63:2D:76 X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:cc:0e:7a:08:9d:d8:1a:ba:55:d9:5c:ad:12:60:3e:4e:12: 2a:bd:58:7f:2a:81:d1:29:ff:94:c1:79:21:ef:33:21:25:d1: 29:c9:95:cf:6e:81:21:04:b9:f1:8b:32:eb:63:3b:f5:16:0d: ea:a7:89:04:fe:bb:7f:32:59:71:74:2e:40:b8:59:d6:db:0c: 18:91:2c:d5:ba:39:65:8a:b3:d2:f2:b8:e4:d8:44:b8:0c:46: be:dd:24:3a:1f:78:df:b3:6b:6e:a1:fe:a3:72:db:1c:4f:0c: 28:c6:ee:07:d5:a4:95:9a:18:31:49:26:d2:7b:0e:72:0e:b9: 34:f8:40:19:b6:51:8a:90:ae:4b:14:6d:2a:a0:b8:50:e0:e5: 51:cc:f6:9f:00:5f:d9:6a:96:6a:80:c0:f0:0e:46:e7:f6:78: 5e:52:91:17:f9:7c:31:31:e3:ae:02:72:42:e4:db:77:6f:84: 98:10:c5:98:65:2d:7c:c2:37:de:4c:bd:06:db:99:fd:e9:01: 5f:c4:9e:65:58:28:61:4e:83:92:9e:d8:53:51:7f:81:4c:4a: 18:8e:7b:91:a6:e5:c7:97:9f:97:7a:25:96:b2:17:ae:1a:31: 5f:8e:d1:fc:3d:68:ea:f0:6b:7e:cc:00:56:85:4e:f0:a5:bd: f5:2a:c5:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcakWpOq0AO1FoKz/fh1phlMCFkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTA2MTQxMzE2MDJaFw0yNTA2MTcxOTEyMDJaMDMxMTAvBgNV BAMTKEJDNjk5QTA1RTYyN0REMEVGNkI3MjYzM0I0OTUxRDVDRTc2MzJENzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56hcEtIxDcX3noA6qUviAl+GV 9YS/6qSVruWj8OznLBmuR/w/gmZ2o3uQHxrFTXPxROazqoC8xUXOP1573WSNicvK HNNp+UDx8dSeuNPghuP9nl+D4l+Ge4nlUl+HWAq/f903ode7Yi012iuw2uwcZurw s/ryAQNePX0DPGwuY84AQSFmfJ2PnU/stg3MdXd9vQWxhNwb1XPxCcHTNsB8JQQM VAqpbt7Sd9ZTGFBxuNWkkn/z7n8taYeeqs81shM9DmAhxwrdgivXDDHb9y/D3iGD dXi1mnSSm91MBbItN7mD1C42TjBkwCzjcexuNHyaEx+Y4GH0SPo+V/VBkAmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvGmaBeYn3Q72tyYztJUdXOdjLXYwHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDMDnoIndgaulXZXK0SYD5OEiq9WH8qgdEp /5TBeSHvMyEl0SnJlc9ugSEEufGLMutjO/UWDeqniQT+u38yWXF0LkC4WdbbDBiR LNW6OWWKs9LyuOTYRLgMRr7dJDofeN+za26h/qNy2xxPDCjG7gfVpJWaGDFJJtJ7 DnIOuTT4QBm2UYqQrksUbSqguFDg5VHM9p8AX9lqlmqAwPAORuf2eF5SkRf5fDEx 464CckLk23dvhJgQxZhlLXzCN95MvQbbmf3pAV/EnmVYKGFOg5Ke2FNRf4FMShiO e5Gm5ceXn5d6JZayF64aMV+O0fw9aOrwa37MAFaFTvClvfUqxag= -----END CERTIFICATE-----Generated at Mon Jun 16 05:29:46 2025 by rpki-client