$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: fJyYtqZSe15ZGj4C6eUE4yPm9jEFFKn3m36I3R7cc9Q= Subject key identifier: 47:72:C7:4B:C5:AD:C5:DB:1D:26:B6:43:4C:D5:38:EC:A1:38:94:14 Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 060CF6C0EC8464760BA4D39B4909E08C0D076F5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 01D0 Signing time: Mon 04 Aug 2025 22:01:54 +0000 Manifest this update: Mon 04 Aug 2025 21:56:54 +0000 Manifest next update: Fri 08 Aug 2025 07:31:54 +0000 Files and hashes: 1: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=) 2: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: 8WXaH8qUC0dGWhGef8tXzg977SIWB96Axf5u43bN/ok=) 3: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: vs5RIVJc80gvdbMwYUf3UH5oDO3pPFbrNK7pJMccNgE=) 4: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: GtkgNmJXl7nxDiRttWokSpJjVQu0Ps6kMb8tIC7Cyu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 07:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0c:f6:c0:ec:84:64:76:0b:a4:d3:9b:49:09:e0:8c:0d:07:6f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: Aug 4 21:56:54 2025 GMT Not After : Aug 8 07:31:54 2025 GMT Subject: CN=4772C74BC5ADC5DB1D26B6434CD538ECA1389414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:ce:e4:1b:e5:12:52:2a:94:c4:c7:55:35: b8:ba:9c:a5:f4:52:8d:31:7d:60:b8:35:1e:98:50: b9:ba:61:ae:f8:d4:89:3c:3e:3d:4b:ff:3e:6a:b7: 65:4c:32:a1:08:26:4d:4d:01:c7:98:d1:b3:e1:80: aa:5c:b4:46:92:c5:a2:49:e7:e1:6f:25:79:76:01: 18:10:55:22:69:a0:b7:c5:33:a0:4a:6d:08:57:2f: 25:45:4d:d0:fb:d5:cb:93:6f:b4:f5:ca:7a:b2:69: c4:62:08:fe:2e:c5:3d:69:f2:3f:f8:d1:85:ea:d2: 28:37:e6:72:0f:ec:59:62:39:6c:27:88:3c:6a:1e: bc:e5:51:8b:cf:08:22:6d:87:57:ae:17:cc:9f:2f: 30:96:58:88:86:bf:7e:8d:e9:f4:a1:ca:bc:47:07: 61:80:db:57:38:05:79:1b:63:b0:bd:53:9d:d9:b1: 59:52:b8:6c:6b:af:c6:36:ad:67:ed:2b:af:29:8f: 53:9c:a9:7a:07:f8:c4:d4:b1:d2:37:84:b7:55:cd: dc:5a:e9:94:98:7d:b5:8d:d0:7b:17:1b:88:d0:9f: 4e:b6:c2:5e:1d:35:d2:23:c3:3e:31:33:c4:4d:30: a1:5a:21:5c:34:64:e9:33:1a:4f:d6:71:08:e7:83: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:72:C7:4B:C5:AD:C5:DB:1D:26:B6:43:4C:D5:38:EC:A1:38:94:14 X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:00:5f:ea:ef:6d:8d:97:f2:40:1f:33:93:75:97:a6:6e:33: b8:8c:8e:69:ad:66:29:8b:3c:69:c9:57:f0:b0:d4:d9:bf:4e: 19:de:50:d7:9f:ca:b5:bc:9a:4d:3a:03:65:c2:74:28:6f:68: b7:99:65:a1:2b:32:b5:37:ca:17:ff:ba:d0:b4:49:cc:3b:89: 27:aa:50:6f:3b:18:0f:bb:8a:99:b4:e5:1c:42:78:ec:87:86: 67:ca:e7:ab:26:15:78:e4:42:76:f3:27:4b:6c:d1:6e:74:7d: 86:7d:7b:fb:f7:c4:09:e9:4d:d0:cf:7d:0e:d8:2e:92:bb:de: 88:04:ed:8f:5d:bb:8b:03:c5:c9:58:90:25:ca:b1:52:bd:26: 35:23:44:48:02:a4:ba:4a:29:a6:2f:02:79:17:5d:0c:e9:b6: b4:0d:6d:ce:73:82:a7:b2:ad:19:41:06:52:cb:b1:f1:2a:4b: 64:a7:8e:81:f5:14:ad:3e:bb:63:9e:1e:ef:24:8f:25:41:8f: 3d:a0:cf:16:74:09:e7:26:57:b8:d3:a8:25:f9:12:ee:8d:c0: 25:c2:15:f4:f7:00:71:20:82:68:5a:8e:be:08:72:14:06:e7: 00:12:0d:42:c6:61:01:d3:4e:96:7f:79:99:e1:d0:c7:c3:40: 75:c2:8e:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgz2wOyEZHYLpNObSQngjA0Hb18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNTA4MDQyMTU2NTRaFw0yNTA4MDgwNzMxNTRaMDMxMTAvBgNV BAMTKDQ3NzJDNzRCQzVBREM1REIxRDI2QjY0MzRDRDUzOEVDQTEzODk0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsM7kG+USUiqUxMdVNbi6nKX0 Uo0xfWC4NR6YULm6Ya741Ik8Pj1L/z5qt2VMMqEIJk1NAceY0bPhgKpctEaSxaJJ 5+FvJXl2ARgQVSJpoLfFM6BKbQhXLyVFTdD71cuTb7T1ynqyacRiCP4uxT1p8j/4 0YXq0ig35nIP7FliOWwniDxqHrzlUYvPCCJth1euF8yfLzCWWIiGv36N6fShyrxH B2GA21c4BXkbY7C9U53ZsVlSuGxrr8Y2rWftK68pj1OcqXoH+MTUsdI3hLdVzdxa 6ZSYfbWN0HsXG4jQn062wl4dNdIjwz4xM8RNMKFaIVw0ZOkzGk/WcQjng9D9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR3LHS8WtxdsdJrZDTNU47KE4lBQwHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANUAX+rvbY2X8kAfM5N1l6ZuM7iMjmmtZimL PGnJV/Cw1Nm/ThneUNefyrW8mk06A2XCdChvaLeZZaErMrU3yhf/utC0Scw7iSeq UG87GA+7ipm05RxCeOyHhmfK56smFXjkQnbzJ0ts0W50fYZ9e/v3xAnpTdDPfQ7Y LpK73ogE7Y9du4sDxclYkCXKsVK9JjUjREgCpLpKKaYvAnkXXQzptrQNbc5zgqey rRlBBlLLsfEqS2SnjoH1FK0+u2OeHu8kjyVBjz2gzxZ0CecmV7jTqCX5Eu6NwCXC FfT3AHEggmhajr4IchQG5wASDULGYQHTTpZ/eZnh0MfDQHXCjvk= -----END CERTIFICATE-----Generated at Wed Aug 6 12:29:54 2025 by rpki-client