$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: OUk6PfGHBZ/HpLNlTnq5FPY8vk2y1/5vI/xql4k0ABk= Subject key identifier: 43:51:8F:0B:38:E1:49:0C:E2:7B:A7:27:6C:7C:26:B6:E5:81:8C:7E Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 3FC1C5C5E69CD74EC95065BDE3701BC5226C95DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 01E1 Signing time: Thu 07 Aug 2025 23:20:39 +0000 Manifest this update: Thu 07 Aug 2025 23:15:39 +0000 Manifest next update: Mon 11 Aug 2025 03:56:39 +0000 Files and hashes: 1: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 2: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 3: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 4: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 5: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: lX5yUe5g2HRdTZM+ju5jYceqryXhfGO6UNMR0905tWI=) 6: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 7: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 03:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c1:c5:c5:e6:9c:d7:4e:c9:50:65:bd:e3:70:1b:c5:22:6c:95:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Aug 7 23:15:39 2025 GMT Not After : Aug 11 03:56:39 2025 GMT Subject: CN=43518F0B38E1490CE27BA7276C7C26B6E5818C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:90:38:45:02:1f:92:3e:8a:8d:b3:3b:53: 7c:14:b9:b5:8b:b9:c2:06:ed:02:83:c7:67:00:11: 35:e1:8c:fe:37:59:86:2b:ca:a6:52:07:db:60:ea: ef:1e:28:da:70:23:38:85:b1:5e:e9:27:41:be:89: 17:f3:63:0d:65:2b:86:45:bf:8a:35:bc:19:ac:b5: 92:c8:6f:40:af:e7:f2:8a:f0:60:5a:bb:55:70:46: 36:65:c8:4c:70:b5:09:9f:8b:d3:34:df:e7:83:c4: d8:b8:49:be:85:2c:ab:d7:e4:a7:a6:34:5f:e3:28: 49:ad:e3:64:1b:91:e0:0d:6a:dc:82:8e:65:f4:63: 50:4b:ef:a8:ce:57:f1:82:f5:c2:b5:20:bb:27:30: 14:39:4f:28:8e:e6:38:51:19:64:37:c4:94:89:ba: a8:ea:dc:99:61:68:b3:fa:76:89:65:0e:c6:a3:db: 0f:ea:ed:ad:9a:84:0b:05:89:8e:9c:c0:43:ae:98: 07:f4:88:07:19:c6:b6:29:1a:98:b3:5a:7d:7f:13: 70:f7:14:02:54:0b:cd:72:83:f8:dc:38:21:d0:5d: db:49:19:03:25:7c:f6:fe:3d:4e:3b:30:85:a8:6f: 6c:53:e1:fe:35:2b:f8:18:90:42:d2:cf:f1:09:e0: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:8F:0B:38:E1:49:0C:E2:7B:A7:27:6C:7C:26:B6:E5:81:8C:7E X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2e:2b:78:68:bb:7e:e2:52:09:b1:0e:30:20:88:d0:bf:1a: bf:4d:a8:a5:9a:3f:b7:7f:c6:ab:31:fc:ce:72:e4:fb:be:b4: 98:c5:a1:34:a7:79:fd:61:c2:7a:cd:2d:40:6a:3f:60:1f:0f: ae:45:e2:8e:d0:d6:e5:09:e3:d8:d6:6f:fd:7e:3d:07:ee:ff: ba:50:96:56:91:51:65:86:fa:c9:da:75:a6:ac:72:28:24:d5: e7:52:e1:c1:a2:80:e2:89:68:55:84:40:e6:c8:bf:4e:22:c8: 21:a0:f3:dd:dc:06:d4:6a:06:01:0c:05:1e:3b:06:60:7c:04: d0:fd:9f:00:eb:c2:08:99:7a:98:c9:3c:31:30:bb:9c:ba:12: 06:9c:b0:44:79:e5:39:90:88:2a:dc:c2:d4:1c:8f:21:10:a6: 5b:99:9d:b7:d5:b4:c9:65:3f:f8:c6:85:83:c8:e6:a8:1d:83: fc:9e:77:95:5c:e5:c5:b9:48:aa:9e:c7:a7:10:5f:8a:f1:85: 73:26:13:a9:cc:48:a5:31:8b:eb:df:e1:8b:5e:c3:47:09:d9: d4:b3:80:67:e2:85:6c:b1:64:97:17:3e:33:42:6f:02:79:7d: 0c:69:bd:bd:c5:0a:9b:f6:50:1b:9a:cb:50:cf:63:85:b7:84: 0c:c5:f7:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8HFxeac107JUGW943AbxSJsldswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTA4MDcyMzE1MzlaFw0yNTA4MTEwMzU2MzlaMDMxMTAvBgNV BAMTKDQzNTE4RjBCMzhFMTQ5MENFMjdCQTcyNzZDN0MyNkI2RTU4MThDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPpA4RQIfkj6KjbM7U3wUubWL ucIG7QKDx2cAETXhjP43WYYryqZSB9tg6u8eKNpwIziFsV7pJ0G+iRfzYw1lK4ZF v4o1vBmstZLIb0Cv5/KK8GBau1VwRjZlyExwtQmfi9M03+eDxNi4Sb6FLKvX5Kem NF/jKEmt42QbkeANatyCjmX0Y1BL76jOV/GC9cK1ILsnMBQ5TyiO5jhRGWQ3xJSJ uqjq3JlhaLP6dollDsaj2w/q7a2ahAsFiY6cwEOumAf0iAcZxrYpGpizWn1/E3D3 FAJUC81yg/jcOCHQXdtJGQMlfPb+PU47MIWob2xT4f41K/gYkELSz/EJ4Jb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ1GPCzjhSQzie6cnbHwmtuWBjH4wHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAouK3hou37iUgmxDjAgiNC/Gr9NqKWaP7d/ xqsx/M5y5Pu+tJjFoTSnef1hwnrNLUBqP2AfD65F4o7Q1uUJ49jWb/1+PQfu/7pQ llaRUWWG+snadaascigk1edS4cGigOKJaFWEQObIv04iyCGg893cBtRqBgEMBR47 BmB8BND9nwDrwgiZepjJPDEwu5y6EgacsER55TmQiCrcwtQcjyEQpluZnbfVtMll P/jGhYPI5qgdg/yed5Vc5cW5SKqex6cQX4rxhXMmE6nMSKUxi+vf4Ytew0cJ2dSz gGfihWyxZJcXPjNCbwJ5fQxpvb3FCpv2UBuay1DPY4W3hAzF9xY= -----END CERTIFICATE-----Generated at Sat Aug 9 20:46:12 2025 by rpki-client