$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft File: A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft (raw, json) Hash identifier: jpUhZK8VZs1tHVkJd+JM4V4DfndaQgQzcgo5r1HcO2s= Subject key identifier: EC:0C:E5:0E:7F:66:9D:24:97:69:FA:2E:2B:4E:14:C3:82:BD:6B:AD Authority key identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 Certificate issuer: /CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Certificate serial: 0F56F62D4E4FD5759C23363E26759BA70BC74769 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft Manifest number: 31 Signing time: Fri 13 Jun 2025 21:01:16 +0000 Manifest this update: Fri 13 Jun 2025 20:56:16 +0000 Manifest next update: Tue 17 Jun 2025 02:34:16 +0000 Files and hashes: 1: A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl (hash: EPE2im4rZ2TXdeZt0UJKL9H4ns/durl+7ql73Kbs6GI=) 2: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: fAL9MfqpRcilmiK6cDbN2CreeawZppTYa6tvP1zgN7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 02:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:56:f6:2d:4e:4f:d5:75:9c:23:36:3e:26:75:9b:a7:0b:c7:47:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Validity Not Before: Jun 13 20:56:16 2025 GMT Not After : Jun 17 02:34:16 2025 GMT Subject: CN=EC0CE50E7F669D249769FA2E2B4E14C382BD6BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:bd:36:48:2e:3b:8d:44:9b:72:13:02:e1: 50:c4:37:3a:a2:52:a1:17:63:f9:a8:be:cb:ac:c4: 6c:40:ee:f8:7a:2d:33:88:1d:1a:04:fb:a1:ea:a9: 0d:f6:d5:40:24:d1:ed:f0:9b:bf:34:b8:cd:1e:f8: db:20:2d:db:00:65:0a:4c:6e:b1:40:6a:a4:3c:ec: fd:ff:01:b7:4b:c9:a3:c0:ed:aa:7e:0b:cf:46:a8: fb:8a:13:6b:f9:7d:f4:60:2b:ca:1b:6d:16:90:54: 2f:3f:72:d5:5a:ac:f7:ba:7e:66:ca:37:00:f7:f4: c4:9f:7c:d2:96:e8:e7:b1:52:80:d4:a4:56:56:29: cf:0b:04:0c:c5:59:da:6a:8d:5c:b5:66:98:9b:3e: 40:2f:93:53:1b:a8:6c:85:26:2e:77:b5:a4:f4:61: aa:ac:69:e9:81:e2:2c:95:c5:48:ff:07:89:1d:dd: 63:9f:dd:04:8d:a6:fe:9c:0e:5c:ee:81:dc:a8:f7: 8f:b8:b9:39:d8:be:a0:13:25:71:90:25:c2:aa:9c: 85:20:cf:6e:c3:af:93:f0:f5:af:5d:72:92:ea:c0: ec:f9:d0:c9:6a:a3:48:7b:d8:2f:b6:cc:b7:e1:53: 42:a2:1f:8d:b9:2b:9e:6d:67:13:c6:24:35:5f:a2: fc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0C:E5:0E:7F:66:9D:24:97:69:FA:2E:2B:4E:14:C3:82:BD:6B:AD X509v3 Authority Key Identifier: keyid:A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:bc:07:60:3e:29:40:a2:46:14:6c:23:69:ae:b9:d4:a8:7f: 70:13:f6:ee:f9:da:af:15:5c:95:bc:ad:91:57:9b:25:f9:6f: 6f:4c:09:ff:d0:b5:95:23:49:1c:35:e7:53:39:55:ba:0b:0a: 1c:b1:10:78:5b:84:22:6f:28:33:1b:54:22:8f:98:3d:14:8d: 6f:b8:7c:0e:12:f2:30:b0:bf:25:4e:f8:73:2d:60:5a:7e:ee: 49:b7:82:92:3e:58:58:0c:fb:24:35:b4:2d:e2:77:70:df:f9: d8:6a:ff:06:b5:c1:10:83:77:f2:fd:78:53:57:1a:0b:59:43: 87:33:72:85:08:65:19:40:8a:79:88:1f:f0:9c:1b:70:0e:1e: c4:b6:95:3a:c7:40:e4:c4:b8:b0:99:da:d1:e8:ca:f1:0c:00: 5d:48:2e:a8:97:0a:aa:06:ca:36:c5:9f:05:0b:14:41:c5:0c: 10:57:91:79:af:e6:f6:bc:77:18:36:01:61:08:30:7a:fb:48: 58:1c:cb:b0:f1:aa:6e:5a:21:02:3b:e2:97:68:7e:61:0b:bb: 97:5c:4d:e8:4f:0f:83:69:bc:c6:b6:7a:a3:e5:6a:9f:21:53: 64:bf:bb:f3:1a:fc:7e:a1:a1:03:c2:62:ae:8f:6c:c9:b8:91: 1e:9d:96:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1b2LU5P1XWcIzY+JnWbpwvHR2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1 NzBFRDNBNDAeFw0yNTA2MTMyMDU2MTZaFw0yNTA2MTcwMjM0MTZaMDMxMTAvBgNV BAMTKEVDMENFNTBFN0Y2NjlEMjQ5NzY5RkEyRTJCNEUxNEMzODJCRDZCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJr702SC47jUSbchMC4VDENzqi UqEXY/movsusxGxA7vh6LTOIHRoE+6HqqQ321UAk0e3wm780uM0e+NsgLdsAZQpM brFAaqQ87P3/AbdLyaPA7ap+C89GqPuKE2v5ffRgK8obbRaQVC8/ctVarPe6fmbK NwD39MSffNKW6OexUoDUpFZWKc8LBAzFWdpqjVy1ZpibPkAvk1MbqGyFJi53taT0 YaqsaemB4iyVxUj/B4kd3WOf3QSNpv6cDlzugdyo94+4uTnYvqATJXGQJcKqnIUg z27Dr5Pw9a9dcpLqwOz50Mlqo0h72C+2zLfhU0KiH425K55tZxPGJDVfovyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7AzlDn9mnSSXafouK04Uw4K9a60wHwYDVR0j BBgwFoAUohunDfjuRw/npgOFtmU4QlcO06QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMS9BMjFCQTcwREY4 RUU0NzBGRTdBNjAzODVCNjY1Mzg0MjU3MEVEM0E0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1NzBF RDNBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4 NDI1NzBFRDNBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK8B2A+KUCiRhRsI2muudSof3AT9u752q8V XJW8rZFXmyX5b29MCf/QtZUjSRw151M5VboLChyxEHhbhCJvKDMbVCKPmD0UjW+4 fA4S8jCwvyVO+HMtYFp+7km3gpI+WFgM+yQ1tC3id3Df+dhq/wa1wRCDd/L9eFNX GgtZQ4czcoUIZRlAinmIH/CcG3AOHsS2lTrHQOTEuLCZ2tHoyvEMAF1ILqiXCqoG yjbFnwULFEHFDBBXkXmv5va8dxg2AWEIMHr7SFgcy7Dxqm5aIQI74pdofmELu5dc TehPD4NpvMa2eqPlap8hU2S/u/Ma/H6hoQPCYq6PbMm4kR6dlmc= -----END CERTIFICATE-----Generated at Mon Jun 16 02:13:12 2025 by rpki-client