$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: tMRG3fCUUeVEnPnGiyh+kCvhKg8/x7PDoHwylBRpp6Q= Subject key identifier: E3:39:89:57:09:B9:C4:79:91:1B:E4:A0:31:B0:77:D2:4A:9B:65:34 Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 1FD7D5C188FEDE0E41B25D259DC0CF82398AD630 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: 84 Signing time: Wed 06 Aug 2025 04:41:55 +0000 Manifest this update: Wed 06 Aug 2025 04:36:55 +0000 Manifest next update: Sat 09 Aug 2025 09:25:55 +0000 Files and hashes: 1: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: rou4lQQn7ojgWvv4wv09Ssy99ZSAyWazNJbw+IJaxNs=) 2: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: eJ9GbsoPpuqjf9GV+xkr8k7F5h0W8otETbBjey1b6zQ=) 3: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: cL7ZL6RvGqaM5lLXVnNe5p70LEzT1elnw9tJI0VweII=) 4: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: iziNbMfSG5lJ/Wc6NMmyz4JELED2OvK44piqUsCFc7c=) 5: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: FSBT4Cl2oIA3FZ2v8CwqLAvZnqhyh2xxPvGzfautFn8=) 6: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: 2GYoGVGasxR8uDpvI7BrmDmU9LmzA4rGOfrvv4FSPFU=) 7: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: uZUaRmxRzulhsKQF6M9NRBk5UecRjKVZlbliZtVgzOA=) 8: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: +JichmiRgdBO5Ls93QqucE3C6EV+z6Am+M+Wk0rjli0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d7:d5:c1:88:fe:de:0e:41:b2:5d:25:9d:c0:cf:82:39:8a:d6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Aug 6 04:36:55 2025 GMT Not After : Aug 9 09:25:55 2025 GMT Subject: CN=E339895709B9C479911BE4A031B077D24A9B6534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:39:21:c3:ca:c9:7a:c6:3e:24:28:bb:7b: 1b:3a:fa:bd:06:f9:37:2d:e2:4d:58:0f:48:82:b3: b3:84:93:bc:d4:24:26:a7:c2:b0:43:07:05:a3:99: fa:1b:49:38:90:a6:48:96:de:d6:03:0e:ca:48:e3: 6a:58:c9:65:46:31:58:87:ae:fe:e5:e0:a2:42:e7: 87:45:23:d6:f2:5d:76:68:0c:e1:93:68:a8:91:89: ad:d4:14:7e:1e:1d:1a:d9:69:5e:a2:df:50:33:cd: 1e:a6:80:52:31:d7:ea:12:87:0f:fb:18:9d:e0:a8: 50:9a:df:47:d5:7a:b0:69:0d:55:fe:0b:7f:be:46: b6:3d:b9:23:17:04:03:dd:03:5f:3a:db:c4:9d:9a: 5c:d6:ef:c7:8e:ef:fe:2c:9d:26:cf:69:82:0b:e4: e3:30:4d:96:62:d6:07:82:95:f3:cc:51:47:e1:bb: f3:df:f2:06:9a:27:24:ab:7a:71:04:dd:82:90:b0: 46:ce:2c:89:dd:27:6b:5a:6c:9d:c5:f1:51:5d:de: e9:55:c6:f7:29:d7:38:b1:c1:9e:58:af:eb:f1:73: c9:26:ae:e8:3a:4f:07:2c:86:7e:33:57:4d:37:0f: 53:19:eb:84:2b:8b:58:01:46:cb:d0:d8:18:75:ca: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:39:89:57:09:B9:C4:79:91:1B:E4:A0:31:B0:77:D2:4A:9B:65:34 X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:27:01:06:85:06:c7:ab:60:62:cf:35:b8:b1:14:02:32:ec: 26:c9:5a:aa:39:63:cb:aa:87:89:ee:dc:eb:8c:59:e2:d8:57: dd:17:04:37:06:34:0b:59:66:62:36:70:a1:fa:4a:34:cb:47: 64:22:44:de:e7:53:a6:d0:25:00:6c:8f:d0:d4:66:62:78:ea: 7d:ce:14:78:12:29:46:67:02:de:07:94:bc:d3:a1:37:1e:f9: dc:cb:3f:21:40:ed:29:9a:f3:b0:22:66:6a:e7:51:83:21:da: 34:0d:3b:0b:15:3a:d5:8a:bf:fb:ad:ca:8c:d5:8b:ca:5d:63: 8c:e3:c0:14:39:db:8e:80:8c:00:9b:98:46:d5:99:6e:7b:b8: ab:32:94:3b:f5:6a:93:b3:68:40:87:23:c7:22:42:04:cb:c6: dc:66:76:97:c2:3b:a9:c8:0c:e8:26:05:96:8e:2a:b3:31:ff: 61:7a:78:f4:81:c3:f8:aa:12:72:66:7a:db:d6:c1:25:ca:d0: c3:58:84:1f:b8:62:5f:f8:46:3c:a3:4b:ee:b9:ec:58:87:1e: 20:aa:1b:b3:e3:b6:81:5b:93:b2:49:0b:c5:a1:90:60:ae:5f: a0:86:90:38:6c:3e:db:6d:1b:54:1c:4c:a4:70:63:8b:6c:34: f9:bc:4a:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9fVwYj+3g5Bsl0lncDPgjmK1jAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNTA4MDYwNDM2NTVaFw0yNTA4MDkwOTI1NTVaMDMxMTAvBgNV BAMTKEUzMzk4OTU3MDlCOUM0Nzk5MTFCRTRBMDMxQjA3N0QyNEE5QjY1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Kzkhw8rJesY+JCi7exs6+r0G +Tct4k1YD0iCs7OEk7zUJCanwrBDBwWjmfobSTiQpkiW3tYDDspI42pYyWVGMViH rv7l4KJC54dFI9byXXZoDOGTaKiRia3UFH4eHRrZaV6i31AzzR6mgFIx1+oShw/7 GJ3gqFCa30fVerBpDVX+C3++RrY9uSMXBAPdA18628SdmlzW78eO7/4snSbPaYIL 5OMwTZZi1geClfPMUUfhu/Pf8gaaJySrenEE3YKQsEbOLIndJ2tabJ3F8VFd3ulV xvcp1zixwZ5Yr+vxc8kmrug6Twcshn4zV003D1MZ64Qri1gBRsvQ2Bh1yhnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4zmJVwm5xHmRG+SgMbB30kqbZTQwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADknAQaFBserYGLPNbixFAIy7CbJWqo5Y8uq h4nu3OuMWeLYV90XBDcGNAtZZmI2cKH6SjTLR2QiRN7nU6bQJQBsj9DUZmJ46n3O FHgSKUZnAt4HlLzToTce+dzLPyFA7Sma87AiZmrnUYMh2jQNOwsVOtWKv/utyozV i8pdY4zjwBQ5246AjACbmEbVmW57uKsylDv1apOzaECHI8ciQgTLxtxmdpfCO6nI DOgmBZaOKrMx/2F6ePSBw/iqEnJmetvWwSXK0MNYhB+4Yl/4RjyjS+657FiHHiCq G7PjtoFbk7JJC8WhkGCuX6CGkDhsPtttG1QcTKRwY4tsNPm8SiQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:19 2025 by rpki-client