$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: Da78yBoctn2n/OWZctKFFiviCf14n22PgJgPiTZpRY4= Subject key identifier: 45:C0:35:4C:45:3E:F8:22:47:07:59:1D:6E:43:98:25:D3:42:71:AB Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 2A47A403E8637B27C3836E794EBCD4C4DAD100EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 01B4 Signing time: Tue 29 Apr 2025 12:10:37 +0000 Manifest this update: Tue 29 Apr 2025 12:05:37 +0000 Manifest next update: Fri 02 May 2025 23:50:37 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 2: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 3: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: gcxKUq3yIl36IXgdhmdk6TAl/m5XxeArZ0//uLTgiHM=) 4: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 5: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: WlMPPqqgL7S+6NZezck4512z7w7ynC6Pn76kaB68KqU=) 6: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: nB+Bfi526s7F0pX/cJ3vKUq8RaU1aMQ8MOXDrQGipJ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:47:a4:03:e8:63:7b:27:c3:83:6e:79:4e:bc:d4:c4:da:d1:00:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Apr 29 12:05:37 2025 GMT Not After : May 2 23:50:37 2025 GMT Subject: CN=45C0354C453EF8224707591D6E439825D34271AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:e5:2d:7a:79:27:51:94:db:25:de:e7:4a: ef:7d:d4:6b:ea:2f:09:74:a2:95:68:18:67:3b:1d: 65:ba:a4:3e:9f:2c:22:87:ec:a7:0a:6b:e7:ad:9c: 2e:e1:15:89:e2:25:d6:44:37:f3:42:8d:ef:7f:a0: 7e:3c:2c:37:53:eb:fb:79:9e:79:f9:d8:b1:a4:ef: c6:5c:d1:1d:9a:10:31:d9:ad:47:61:38:68:f9:ec: 6b:96:4d:76:bf:e6:b6:34:23:61:c5:30:56:03:6c: aa:bb:56:ed:07:22:29:26:66:a4:29:39:b7:ff:e5: da:87:90:f7:cd:b1:93:38:f2:28:a9:74:7a:c6:c8: 45:ff:48:03:37:fb:8d:44:a3:dd:9a:01:f5:5c:7d: a2:25:b2:b4:e6:43:a9:dd:d5:69:8a:62:8f:36:a7: 83:22:39:2a:45:70:8d:db:0f:32:08:a3:13:db:a6: d8:4d:fe:17:b8:89:80:70:05:88:ed:b4:f2:98:da: 47:59:95:96:f1:22:8f:8c:fb:f3:91:21:3a:97:df: ab:b1:d7:36:ea:dc:ea:5f:e2:86:54:28:8c:f9:fa: f7:90:af:3a:d6:4a:f9:c5:b0:0c:b5:f8:0e:5d:fc: a3:47:74:25:e8:ee:ee:09:bf:7a:2c:ed:40:a1:69: ad:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C0:35:4C:45:3E:F8:22:47:07:59:1D:6E:43:98:25:D3:42:71:AB X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c2:71:52:f8:51:2e:a6:56:2b:b5:00:9a:78:8f:00:d4:38: 87:d0:6b:d4:91:a7:f1:23:5d:95:b2:b2:2c:c2:26:f2:4f:e1: 01:0f:9c:3f:5b:ed:84:67:6f:fb:ae:e8:5e:5d:a3:45:32:3c: aa:98:6e:b0:58:c9:19:81:2c:1d:8a:e3:45:31:56:23:0e:32: 5f:1c:06:89:42:ec:a1:a4:de:f9:f3:bb:70:08:1c:68:cf:bd: ea:3b:b7:ba:79:62:4d:2f:29:a1:90:de:44:52:bf:c9:8e:28: 3c:17:3e:05:1a:27:e1:cd:78:41:9b:27:9c:da:ab:94:c3:16: 96:f7:9d:78:dc:db:91:19:03:e7:1b:c6:7a:c7:ca:64:7f:74: a8:bc:d2:c0:91:2f:3e:45:31:80:bf:1f:ea:de:98:20:da:01: 3b:51:18:bb:5b:23:4e:e2:f9:92:a3:a8:6d:9f:3d:74:8a:bc: 72:44:21:1d:93:52:4e:0a:05:67:e6:2e:b7:91:92:b9:26:b4: 46:0c:6a:6a:4d:8c:f4:e8:ff:41:b3:0a:db:d1:a3:f8:8d:32: fb:f1:ce:c5:64:cb:20:a2:7d:11:38:02:e0:c5:c7:0c:54:4c: 5e:36:a5:e2:26:2f:01:60:98:6c:fd:40:6e:a8:16:c3:d2:df: 66:47:6b:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkekA+hjeyfDg255TrzUxNrRAOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTA0MjkxMjA1MzdaFw0yNTA1MDIyMzUwMzdaMDMxMTAvBgNV BAMTKDQ1QzAzNTRDNDUzRUY4MjI0NzA3NTkxRDZFNDM5ODI1RDM0MjcxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUOUtenknUZTbJd7nSu991Gvq Lwl0opVoGGc7HWW6pD6fLCKH7KcKa+etnC7hFYniJdZEN/NCje9/oH48LDdT6/t5 nnn52LGk78Zc0R2aEDHZrUdhOGj57GuWTXa/5rY0I2HFMFYDbKq7Vu0HIikmZqQp Obf/5dqHkPfNsZM48iipdHrGyEX/SAM3+41Eo92aAfVcfaIlsrTmQ6nd1WmKYo82 p4MiOSpFcI3bDzIIoxPbpthN/he4iYBwBYjttPKY2kdZlZbxIo+M+/ORITqX36ux 1zbq3Opf4oZUKIz5+veQrzrWSvnFsAy1+A5d/KNHdCXo7u4Jv3os7UChaa3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURcA1TEU++CJHB1kdbkOYJdNCcaswHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDCcVL4US6mViu1AJp4jwDUOIfQa9SRp/Ej XZWysizCJvJP4QEPnD9b7YRnb/uu6F5do0UyPKqYbrBYyRmBLB2K40UxViMOMl8c BolC7KGk3vnzu3AIHGjPveo7t7p5Yk0vKaGQ3kRSv8mOKDwXPgUaJ+HNeEGbJ5za q5TDFpb3nXjc25EZA+cbxnrHymR/dKi80sCRLz5FMYC/H+remCDaATtRGLtbI07i +ZKjqG2fPXSKvHJEIR2TUk4KBWfmLreRkrkmtEYMampNjPTo/0GzCtvRo/iNMvvx zsVkyyCifRE4AuDFxwxUTF42peImLwFgmGz9QG6oFsPS32ZHa0c= -----END CERTIFICATE-----Generated at Wed Apr 30 03:35:15 2025 by rpki-client