$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: IJCzsYVYVKooD3xX4Wlzsv6XuTNLswrdt929sZO2S0I= Subject key identifier: B8:75:B8:E9:66:7F:0E:BC:35:73:42:E8:FB:23:E5:F0:2B:C3:7A:C1 Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 107D258562B109B60A7C7AD10E19793E9B9637B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 0145 Signing time: Sun 15 Jun 2025 08:31:44 +0000 Manifest this update: Sun 15 Jun 2025 08:26:44 +0000 Manifest next update: Wed 18 Jun 2025 10:26:44 +0000 Files and hashes: 1: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=) 2: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: 8ggTxoaMD0hIugv+8/z6DcjClWaqTcQJQ/9NqnDh0nU=) 3: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=) 4: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7d:25:85:62:b1:09:b6:0a:7c:7a:d1:0e:19:79:3e:9b:96:37:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Jun 15 08:26:44 2025 GMT Not After : Jun 18 10:26:44 2025 GMT Subject: CN=B875B8E9667F0EBC357342E8FB23E5F02BC37AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:8b:27:9e:cb:2b:26:0a:c4:46:9b:56:68: 03:d6:ab:8a:f3:1e:80:f3:f5:12:e6:14:d3:17:09: fa:e7:86:42:d4:73:c3:ce:4a:19:fa:04:08:86:e6: 31:8b:88:91:25:bb:02:87:0b:44:65:d2:9b:1e:ca: 45:7b:f4:cb:b4:f6:74:cf:a4:87:10:2e:7c:65:93: 36:f1:b6:09:a7:cd:a3:85:cd:ff:b0:06:fa:fd:76: db:1f:57:f5:cb:e6:24:46:80:24:cb:de:8b:49:5b: e9:f3:8e:c8:64:b3:b6:e7:db:81:b2:ec:b4:52:02: 64:f7:64:1e:81:e6:08:9b:b8:5d:29:bf:21:ef:84: ff:f8:9c:fd:86:4c:4c:48:2e:20:a8:fa:4b:55:52: 9a:26:be:cf:d0:06:f1:ad:81:21:2a:99:e1:da:ae: 1a:a6:5f:f6:16:84:36:b6:2f:d0:26:9f:cb:64:30: 67:8f:19:49:19:62:79:91:e8:8c:7e:df:a3:dc:72: 10:8b:08:44:5e:90:cd:5a:1b:e7:a4:a9:6c:20:1a: 92:36:19:ee:e5:8d:c5:3e:27:f1:25:2e:89:71:aa: a8:3b:c1:37:4d:8b:b1:c6:f3:75:32:62:3f:d3:54: 7b:fc:3c:a1:0c:66:c7:75:04:87:45:c8:df:c3:9c: 06:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:75:B8:E9:66:7F:0E:BC:35:73:42:E8:FB:23:E5:F0:2B:C3:7A:C1 X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9c:d3:1f:c5:36:d7:79:4d:4f:59:f8:86:57:59:f9:04:36: 23:38:b6:92:59:14:99:6b:bb:37:53:b3:6a:a4:7e:5d:84:4b: 19:49:38:01:64:81:07:71:5a:de:6e:c5:e0:7f:ef:e1:87:a7: c7:3f:c9:85:44:f8:38:4d:ff:ca:2a:6f:3a:e0:95:ab:f2:54: 5e:bb:23:70:1b:38:6f:53:35:76:7c:75:c0:ea:93:48:c9:47: c6:8a:76:ac:ad:6f:4a:f2:d3:7d:97:6e:f8:e6:7a:e1:cc:0e: 0d:24:39:db:3f:1b:15:9d:98:3b:90:56:2b:42:4d:b2:cd:18: 09:f1:d2:ef:bb:51:90:8c:3b:45:82:43:c5:5b:96:26:09:d1: 58:93:05:f4:4c:11:a2:5a:ca:ca:7b:b1:84:48:36:c7:35:1e: 56:f4:f6:6d:1a:7a:80:bc:6b:6b:1e:ab:c1:4f:cc:05:ee:10: 89:8a:ff:97:17:f4:b6:c6:b1:57:0e:66:34:9c:ba:98:94:88: cc:ca:6c:32:31:be:d8:0d:e6:86:5b:88:42:84:bf:34:ae:7e: 94:a8:22:fc:7b:80:54:2e:ae:03:ed:1a:8f:1f:4b:12:87:66: df:37:72:e5:76:1d:3c:39:9a:bb:6d:85:78:2e:0d:6d:54:f6: bc:cc:9f:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEH0lhWKxCbYKfHrRDhl5PpuWN7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNTA2MTUwODI2NDRaFw0yNTA2MTgxMDI2NDRaMDMxMTAvBgNV BAMTKEI4NzVCOEU5NjY3RjBFQkMzNTczNDJFOEZCMjNFNUYwMkJDMzdBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuIsnnssrJgrERptWaAPWq4rz HoDz9RLmFNMXCfrnhkLUc8POShn6BAiG5jGLiJEluwKHC0Rl0pseykV79Mu09nTP pIcQLnxlkzbxtgmnzaOFzf+wBvr9dtsfV/XL5iRGgCTL3otJW+nzjshks7bn24Gy 7LRSAmT3ZB6B5gibuF0pvyHvhP/4nP2GTExILiCo+ktVUpomvs/QBvGtgSEqmeHa rhqmX/YWhDa2L9Amn8tkMGePGUkZYnmR6Ix+36PcchCLCERekM1aG+ekqWwgGpI2 Ge7ljcU+J/ElLolxqqg7wTdNi7HG83UyYj/TVHv8PKEMZsd1BIdFyN/DnAbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuHW46WZ/Drw1c0Lo+yPl8CvDesEwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqc0x/FNtd5TU9Z+IZXWfkENiM4tpJZFJlr uzdTs2qkfl2ESxlJOAFkgQdxWt5uxeB/7+GHp8c/yYVE+DhN/8oqbzrglavyVF67 I3AbOG9TNXZ8dcDqk0jJR8aKdqytb0ry032XbvjmeuHMDg0kOds/GxWdmDuQVitC TbLNGAnx0u+7UZCMO0WCQ8VbliYJ0ViTBfRMEaJaysp7sYRINsc1Hlb09m0aeoC8 a2seq8FPzAXuEImK/5cX9LbGsVcOZjScupiUiMzKbDIxvtgN5oZbiEKEvzSufpSo Ivx7gFQurgPtGo8fSxKHZt83cuV2HTw5mrtthXguDW1U9rzMn6w= -----END CERTIFICATE-----Generated at Mon Jun 16 12:29:56 2025 by rpki-client