$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: Hza/SA7Wjc3HcKtON8ETmkMfnsL53O8mjpo72EAKXnM= Subject key identifier: F5:BC:A9:A7:55:A2:64:71:2D:3B:E6:53:84:44:A6:11:9B:23:71:28 Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 4D4399DA232650C6D1A83FD0F81A032CF1DB4B38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: 58 Signing time: Wed 30 Apr 2025 14:51:50 +0000 Manifest this update: Wed 30 Apr 2025 14:46:50 +0000 Manifest next update: Sun 04 May 2025 01:46:50 +0000 Files and hashes: 1: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: c7XXpCch/xYTobCIDedAvNvdZA8EsqTr8zEL3ObCt2s=) 2: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: rou4lQQn7ojgWvv4wv09Ssy99ZSAyWazNJbw+IJaxNs=) 3: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: 2GYoGVGasxR8uDpvI7BrmDmU9LmzA4rGOfrvv4FSPFU=) 4: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: eJ9GbsoPpuqjf9GV+xkr8k7F5h0W8otETbBjey1b6zQ=) 5: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: iziNbMfSG5lJ/Wc6NMmyz4JELED2OvK44piqUsCFc7c=) 6: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: cL7ZL6RvGqaM5lLXVnNe5p70LEzT1elnw9tJI0VweII=) 7: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: +JichmiRgdBO5Ls93QqucE3C6EV+z6Am+M+Wk0rjli0=) 8: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: FSBT4Cl2oIA3FZ2v8CwqLAvZnqhyh2xxPvGzfautFn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:43:99:da:23:26:50:c6:d1:a8:3f:d0:f8:1a:03:2c:f1:db:4b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Apr 30 14:46:50 2025 GMT Not After : May 4 01:46:50 2025 GMT Subject: CN=F5BCA9A755A264712D3BE6538444A6119B237128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:00:cc:ba:2d:74:e6:69:ee:78:f1:bd:28: 23:e0:f6:f1:ab:a1:3c:d4:07:00:9c:c9:d4:b3:df: 5f:3d:06:45:37:58:33:bc:dd:c8:12:7b:1c:8d:31: 25:55:a3:9b:16:e2:0f:ae:11:d0:77:05:44:38:1f: c2:1f:10:0f:c0:a5:27:92:e3:2e:1c:80:b9:f8:8c: d5:30:26:bb:c3:22:af:d5:72:53:d1:76:b8:ad:fa: a0:0e:8f:0d:02:b4:73:95:35:2f:04:a9:cc:c8:0e: da:b0:5c:7b:56:42:46:df:87:58:6f:53:ef:c0:72: 71:34:6b:09:ae:d8:f5:a4:e1:6d:18:e0:55:75:70: ee:86:f2:ca:bc:dc:da:88:3b:f0:72:d5:0d:ab:50: 0f:75:8f:1b:49:01:e2:c6:09:f4:57:ae:5a:7e:4f: ff:12:10:8e:ab:c0:f4:3d:ac:e7:8e:a9:d1:00:63: e1:fc:cf:33:77:bb:07:32:cd:06:88:51:86:29:c6: 05:a2:4d:7a:c1:71:3b:e4:ee:a8:df:df:08:1f:6e: e3:f2:a3:0b:d9:fe:4d:a0:55:8e:35:78:55:64:7f: 93:39:68:4c:f6:2d:c0:9f:77:7e:37:e3:16:48:2c: 74:20:a3:00:51:e1:92:9d:ce:8b:ea:a8:1c:e3:88: 5b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BC:A9:A7:55:A2:64:71:2D:3B:E6:53:84:44:A6:11:9B:23:71:28 X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:46:22:80:b4:7f:41:01:a3:96:7f:5a:98:70:58:03:b4:36: be:c3:64:7a:12:ec:22:a7:2c:da:9b:24:af:35:4d:de:db:24: 19:ac:0f:f3:2b:01:22:7a:93:cf:1d:01:a0:ea:d5:c6:44:b3: b0:c6:c1:2f:fd:46:15:6d:14:1e:6d:55:75:04:fa:e7:a4:91: 47:0f:cf:7d:fb:57:be:37:78:87:02:41:95:c8:bf:79:01:a9: 85:ac:67:ff:f3:87:d3:a8:51:a7:0e:d8:37:3e:2e:c6:cd:82: 8b:a7:38:f6:b1:34:e5:c4:97:63:17:3f:67:5d:dd:1b:4a:a8: 84:b3:74:fd:53:87:7c:a8:a3:4b:06:95:33:ff:58:8d:46:96: fc:dc:ce:f2:07:37:96:6e:b5:e1:58:81:65:0b:fb:12:0b:bb: 8c:45:53:e9:eb:a1:25:52:b4:d2:61:a7:4e:62:1b:a1:ad:1e: b2:8a:c4:65:5a:86:bc:9a:a7:cc:66:b0:bc:b4:19:01:66:bf: 3b:40:f9:3e:61:3e:fd:d7:d0:70:0b:0f:5d:64:47:dc:77:52: 85:54:48:9d:d1:e7:22:7a:40:98:fd:05:e3:23:03:d9:86:10: d8:76:f7:1f:10:1e:8f:b1:20:8f:f7:c7:ff:58:d2:fc:11:5d: 45:74:62:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUOZ2iMmUMbRqD/Q+BoDLPHbSzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNTA0MzAxNDQ2NTBaFw0yNTA1MDQwMTQ2NTBaMDMxMTAvBgNV BAMTKEY1QkNBOUE3NTVBMjY0NzEyRDNCRTY1Mzg0NDRBNjExOUIyMzcxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEQDMui105mnuePG9KCPg9vGr oTzUBwCcydSz3189BkU3WDO83cgSexyNMSVVo5sW4g+uEdB3BUQ4H8IfEA/ApSeS 4y4cgLn4jNUwJrvDIq/VclPRdrit+qAOjw0CtHOVNS8EqczIDtqwXHtWQkbfh1hv U+/AcnE0awmu2PWk4W0Y4FV1cO6G8sq83NqIO/By1Q2rUA91jxtJAeLGCfRXrlp+ T/8SEI6rwPQ9rOeOqdEAY+H8zzN3uwcyzQaIUYYpxgWiTXrBcTvk7qjf3wgfbuPy owvZ/k2gVY41eFVkf5M5aEz2LcCfd3434xZILHQgowBR4ZKdzovqqBzjiFtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9bypp1WiZHEtO+ZThESmEZsjcSgwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJGIoC0f0EBo5Z/WphwWAO0Nr7DZHoS7CKn LNqbJK81Td7bJBmsD/MrASJ6k88dAaDq1cZEs7DGwS/9RhVtFB5tVXUE+uekkUcP z337V743eIcCQZXIv3kBqYWsZ//zh9OoUacO2Dc+LsbNgounOPaxNOXEl2MXP2dd 3RtKqISzdP1Th3yoo0sGlTP/WI1GlvzczvIHN5ZuteFYgWUL+xILu4xFU+nroSVS tNJhp05iG6GtHrKKxGVahryap8xmsLy0GQFmvztA+T5hPv3X0HALD11kR9x3UoVU SJ3R5yJ6QJj9BeMjA9mGENh29x8QHo+xII/3x/9Y0vwRXUV0Yog= -----END CERTIFICATE-----Generated at Fri May 2 14:59:57 2025 by rpki-client