$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: YKx6lAoaL1Qn2m79IHVoTV8f1MdlOqAS2Zmui+DK4Kc= Subject key identifier: 48:94:88:BD:E5:CC:40:6D:5F:98:A9:68:C5:3C:49:94:64:FE:F0:66 Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 5BC653AFD2AC5CD9CC3D9DF7790422271BF6E0AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 018A Signing time: Fri 08 Aug 2025 05:03:17 +0000 Manifest this update: Fri 08 Aug 2025 04:58:17 +0000 Manifest next update: Mon 11 Aug 2025 06:28:17 +0000 Files and hashes: 1: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: 1O+3dZYhF39qVGAAK+O+VDcBuU/y04ElWeoRvMN5VXc=) 2: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: 2Aghezf2z7P1qZlnkDBkv3wvvtG5c1l4SMgNAsKv8N0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 06:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c6:53:af:d2:ac:5c:d9:cc:3d:9d:f7:79:04:22:27:1b:f6:e0:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Aug 8 04:58:17 2025 GMT Not After : Aug 11 06:28:17 2025 GMT Subject: CN=489488BDE5CC406D5F98A968C53C499464FEF066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:ce:05:f1:60:32:16:13:37:c2:b7:5e:4c: 5c:d0:35:8c:20:91:71:91:ab:34:19:1e:d8:eb:67: f6:fa:a8:68:93:ef:72:8a:3d:7e:7d:39:11:bc:eb: 33:4b:95:16:ef:71:9f:77:42:03:be:b8:c5:dc:dd: 81:b5:d4:ce:e6:15:94:6b:2e:25:6a:35:c6:9e:02: 39:af:38:10:e3:9a:41:a2:e5:88:0c:64:0e:06:8a: 7a:06:22:1b:44:77:82:6b:38:4f:9b:08:aa:ba:5b: 90:9a:52:d7:9b:cc:1f:7a:d5:bd:94:8f:66:53:7a: ee:9d:af:61:58:7d:10:eb:3d:f2:f2:50:be:a4:3d: 95:89:ce:14:a2:b4:18:36:df:9e:87:e3:30:93:c7: 04:e9:5c:e1:0e:e9:e2:03:1a:30:41:12:94:49:8b: fe:fd:f5:f8:72:18:fa:d3:ea:24:1e:83:eb:4a:50: 84:c1:e2:e2:38:d1:15:e4:98:d5:e1:26:5f:ff:41: fd:6b:a4:68:6c:d8:7b:17:50:18:bd:4f:a6:67:04: 4e:10:80:79:dd:49:24:2f:7e:d0:74:5c:d7:b5:2d: 77:43:68:a3:ab:6b:4b:eb:cb:e9:22:a0:2a:fd:ac: 5d:62:3f:11:b7:29:df:3e:fe:20:6c:4c:20:cd:2b: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:94:88:BD:E5:CC:40:6D:5F:98:A9:68:C5:3C:49:94:64:FE:F0:66 X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:84:96:2c:53:a3:86:15:28:ef:24:46:37:67:6f:da:85:ff: 69:b9:6d:99:db:75:85:e3:19:14:4f:6b:f7:e4:80:22:35:0b: ed:c4:16:80:96:62:12:ee:fc:09:cc:c7:6e:0b:68:ca:6f:5a: 33:9d:6f:94:1a:aa:14:60:00:bc:89:d9:e9:6e:4d:13:59:b3: cd:6e:a1:cf:60:20:b1:2d:dc:26:87:6d:b4:8e:e2:9b:fc:90: 2f:f5:ed:41:c0:2d:e7:cf:4e:c4:df:ed:e7:4b:39:6c:4a:d5: de:57:b1:3e:65:6f:91:e7:f5:b7:51:77:67:08:4f:dc:37:b8: ee:98:1b:1b:ed:22:9a:09:9c:1d:5d:36:4b:cb:f3:e0:b3:5a: 10:37:33:20:9d:05:4d:cb:0f:9f:fe:06:f7:61:d7:50:54:ad: 40:fd:9a:ef:c2:05:08:b8:e4:93:ec:44:3d:15:0d:17:f5:c8: 58:96:af:3a:c9:16:d8:3c:cc:19:b5:0f:00:fc:ff:bf:52:36: e4:7e:12:d9:c1:2f:83:3b:cf:f6:34:0a:3b:28:4c:91:2d:77: d6:06:a2:91:a6:96:a2:8b:37:48:b9:d7:86:0c:68:48:cd:b9: 08:c4:fa:eb:3d:10:e0:76:84:60:e7:3f:35:bd:64:db:40:b2: 2f:2c:c8:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8ZTr9KsXNnMPZ33eQQiJxv24KswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNTA4MDgwNDU4MTdaFw0yNTA4MTEwNjI4MTdaMDMxMTAvBgNV BAMTKDQ4OTQ4OEJERTVDQzQwNkQ1Rjk4QTk2OEM1M0M0OTk0NjRGRUYwNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxM4F8WAyFhM3wrdeTFzQNYwg kXGRqzQZHtjrZ/b6qGiT73KKPX59ORG86zNLlRbvcZ93QgO+uMXc3YG11M7mFZRr LiVqNcaeAjmvOBDjmkGi5YgMZA4GinoGIhtEd4JrOE+bCKq6W5CaUtebzB961b2U j2ZTeu6dr2FYfRDrPfLyUL6kPZWJzhSitBg2356H4zCTxwTpXOEO6eIDGjBBEpRJ i/799fhyGPrT6iQeg+tKUITB4uI40RXkmNXhJl//Qf1rpGhs2HsXUBi9T6ZnBE4Q gHndSSQvftB0XNe1LXdDaKOra0vry+kioCr9rF1iPxG3Kd8+/iBsTCDNK/BNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJSIveXMQG1fmKloxTxJlGT+8GYwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKElixTo4YVKO8kRjdnb9qF/2m5bZnbdYXj GRRPa/fkgCI1C+3EFoCWYhLu/AnMx24LaMpvWjOdb5QaqhRgALyJ2eluTRNZs81u oc9gILEt3CaHbbSO4pv8kC/17UHALefPTsTf7edLOWxK1d5XsT5lb5Hn9bdRd2cI T9w3uO6YGxvtIpoJnB1dNkvL8+CzWhA3MyCdBU3LD5/+Bvdh11BUrUD9mu/CBQi4 5JPsRD0VDRf1yFiWrzrJFtg8zBm1DwD8/79SNuR+EtnBL4M7z/Y0CjsoTJEtd9YG opGmlqKLN0i514YMaEjNuQjE+us9EOB2hGDnPzW9ZNtAsi8syLc= -----END CERTIFICATE-----Generated at Sat Aug 9 05:52:27 2025 by rpki-client