$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: ZYD1XgCYgKvXvJSa0dZRy+EZfF0Xna2UUvJ+b4THcQw= Subject key identifier: CC:F1:2D:9C:8D:CB:21:86:ED:68:80:85:2F:68:63:C0:AA:43:B9:E5 Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 35C2DCF1316CA7A22DD0A48F2E13FC1322573227 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: 6D Signing time: Mon 16 Jun 2025 04:21:49 +0000 Manifest this update: Mon 16 Jun 2025 04:16:49 +0000 Manifest next update: Thu 19 Jun 2025 10:09:49 +0000 Files and hashes: 1: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: +JichmiRgdBO5Ls93QqucE3C6EV+z6Am+M+Wk0rjli0=) 2: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: RNb/ce3DScY64xEECOPcnRXIdXaXmIJAiB3VQCmvewc=) 3: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: iziNbMfSG5lJ/Wc6NMmyz4JELED2OvK44piqUsCFc7c=) 4: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: FSBT4Cl2oIA3FZ2v8CwqLAvZnqhyh2xxPvGzfautFn8=) 5: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: 2GYoGVGasxR8uDpvI7BrmDmU9LmzA4rGOfrvv4FSPFU=) 6: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: eJ9GbsoPpuqjf9GV+xkr8k7F5h0W8otETbBjey1b6zQ=) 7: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: cL7ZL6RvGqaM5lLXVnNe5p70LEzT1elnw9tJI0VweII=) 8: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: rou4lQQn7ojgWvv4wv09Ssy99ZSAyWazNJbw+IJaxNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 10:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c2:dc:f1:31:6c:a7:a2:2d:d0:a4:8f:2e:13:fc:13:22:57:32:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Jun 16 04:16:49 2025 GMT Not After : Jun 19 10:09:49 2025 GMT Subject: CN=CCF12D9C8DCB2186ED6880852F6863C0AA43B9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:81:0a:aa:ec:e5:02:45:be:3a:92:70:33: e5:02:7c:67:9a:ff:2c:87:b2:3f:ff:96:31:6b:da: b0:16:9b:f7:47:08:77:36:e0:b9:5e:91:1d:27:69: ff:c5:73:fa:ed:f8:3b:50:c6:e2:1a:28:b9:c7:46: 5e:23:e5:aa:e3:37:ed:20:41:18:69:8a:7f:3d:aa: 62:72:2c:46:d3:88:19:bb:ad:cc:c8:fb:6c:52:4a: 1d:cd:4b:31:e2:15:80:cb:da:ac:68:c1:c9:5e:c0: 80:33:d7:c5:cb:15:ac:dd:a3:70:d8:78:6f:cc:23: f3:25:16:1b:5b:03:03:13:9b:9e:f2:d7:d5:c5:a2: 08:d7:c6:f9:ad:a3:89:fc:dd:ee:5b:83:8c:b7:1d: 7a:94:c6:2a:f3:66:9f:62:65:d0:9d:4c:ae:cb:f3: 0b:0b:3f:6b:45:9f:b4:9e:5b:c0:b6:98:b9:25:e8: 5e:6d:4b:e7:48:5c:74:74:e3:63:59:0a:69:5e:f5: ff:ed:e6:80:65:47:b9:50:7c:df:92:ba:ca:6b:39: 33:ca:f6:d8:46:f4:d9:ee:de:a4:d7:07:a5:8f:02: f7:b5:71:0b:0f:53:59:e2:e8:1d:46:93:4e:6e:a7: f2:97:2f:8b:61:5e:02:44:45:77:15:06:3f:df:2f: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F1:2D:9C:8D:CB:21:86:ED:68:80:85:2F:68:63:C0:AA:43:B9:E5 X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:78:92:ab:80:9d:a0:2c:2d:9c:e0:9e:21:a8:c3:19:a7:af: 85:b0:ab:69:bb:a4:82:41:74:e6:ed:d5:88:f6:e6:d2:29:90: 89:64:3e:05:b4:72:3a:50:3e:fa:a5:8a:dd:2c:cf:8e:d0:bb: b3:d2:a4:12:01:f8:ad:db:09:bd:de:66:bc:09:eb:d3:8a:5e: 79:da:31:8c:74:31:e5:0e:5a:39:06:6b:b0:54:d2:77:ec:d0: ab:80:65:74:f4:4d:16:15:ed:37:0c:ba:3b:82:b3:29:bf:d4: 40:b6:e0:af:34:80:2f:e3:ff:0b:8d:da:6d:25:6d:38:ff:e5: bf:73:5c:eb:24:87:fe:92:19:d2:1a:90:06:b9:3c:02:c7:c0: e4:32:f8:0f:48:76:c2:52:9d:dd:1b:5a:f3:1a:ff:b3:39:95: 7c:21:9b:26:10:97:22:9f:02:03:85:47:2c:65:42:3d:a9:d7: 76:59:1f:ad:55:2f:61:6b:f5:07:58:51:f9:86:c6:d0:4c:5d: 07:e4:5a:e1:61:e5:4b:ef:1e:1b:07:a1:60:c5:40:90:73:3d: c0:87:98:ae:51:1a:56:d2:61:a9:b8:26:e1:52:cc:7e:03:ec: 77:38:33:73:60:a4:cc:14:1e:45:18:d0:ef:ec:0b:51:c8:f8: c7:60:ad:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcLc8TFsp6It0KSPLhP8EyJXMicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNTA2MTYwNDE2NDlaFw0yNTA2MTkxMDA5NDlaMDMxMTAvBgNV BAMTKENDRjEyRDlDOERDQjIxODZFRDY4ODA4NTJGNjg2M0MwQUE0M0I5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtYEKquzlAkW+OpJwM+UCfGea /yyHsj//ljFr2rAWm/dHCHc24LlekR0naf/Fc/rt+DtQxuIaKLnHRl4j5arjN+0g QRhpin89qmJyLEbTiBm7rczI+2xSSh3NSzHiFYDL2qxowclewIAz18XLFazdo3DY eG/MI/MlFhtbAwMTm57y19XFogjXxvmto4n83e5bg4y3HXqUxirzZp9iZdCdTK7L 8wsLP2tFn7SeW8C2mLkl6F5tS+dIXHR042NZCmle9f/t5oBlR7lQfN+SusprOTPK 9thG9Nnu3qTXB6WPAve1cQsPU1ni6B1Gk05up/KXL4thXgJERXcVBj/fL4ypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzPEtnI3LIYbtaICFL2hjwKpDueUwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB4kquAnaAsLZzgniGowxmnr4Wwq2m7pIJB dObt1Yj25tIpkIlkPgW0cjpQPvqlit0sz47Qu7PSpBIB+K3bCb3eZrwJ69OKXnna MYx0MeUOWjkGa7BU0nfs0KuAZXT0TRYV7TcMujuCsym/1EC24K80gC/j/wuN2m0l bTj/5b9zXOskh/6SGdIakAa5PALHwOQy+A9IdsJSnd0bWvMa/7M5lXwhmyYQlyKf AgOFRyxlQj2p13ZZH61VL2Fr9QdYUfmGxtBMXQfkWuFh5UvvHhsHoWDFQJBzPcCH mK5RGlbSYam4JuFSzH4D7Hc4M3NgpMwUHkUY0O/sC1HI+MdgrVA= -----END CERTIFICATE-----Generated at Tue Jun 17 15:39:18 2025 by rpki-client