$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: 3t2q0O5HuNSIIIbfO8ZVYeU9zq7gjZs9yUL4wFQrexg= Subject key identifier: 03:3A:FF:98:BE:4D:6B:ED:83:81:93:1C:21:24:F8:A2:04:11:8D:84 Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 17531480F129D1C84152C18E4C8480FDF91B5FE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 0321 Signing time: Mon 16 Jun 2025 18:40:57 +0000 Manifest this update: Mon 16 Jun 2025 18:35:57 +0000 Manifest next update: Fri 20 Jun 2025 03:34:57 +0000 Files and hashes: 1: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: QMPJj1RrZUQ44ziQkVtyJh5XYnMqLovELl94RfSzQu4=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:53:14:80:f1:29:d1:c8:41:52:c1:8e:4c:84:80:fd:f9:1b:5f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Jun 16 18:35:57 2025 GMT Not After : Jun 20 03:34:57 2025 GMT Subject: CN=033AFF98BE4D6BED8381931C2124F8A204118D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:45:56:1c:cd:78:f7:5f:b5:2a:dd:ce:95: df:39:55:bf:37:44:aa:b4:0a:83:c5:d4:dd:02:2c: 3a:21:38:96:e0:6e:f5:46:cd:f0:76:91:c1:d8:d1: aa:d3:b4:b1:9a:4f:6e:3e:23:af:6b:e4:fe:45:84: e7:6c:d4:b1:b4:e2:1d:e8:89:8c:d8:da:b6:d9:eb: 8d:7d:13:48:0d:e7:e2:24:ab:69:b9:bf:20:f4:d2: fd:a8:d5:e7:63:35:1f:26:03:b4:69:4b:ce:17:3d: 20:91:b3:e0:1c:72:dd:12:56:25:73:af:08:61:ff: d7:8d:28:93:83:a5:51:5b:d7:5b:82:d6:3f:7c:91: 31:b5:cd:8a:4d:ee:fe:2f:19:34:cc:98:55:3f:67: 0b:22:f4:c5:f1:cd:d5:bd:5c:65:f3:eb:19:ca:31: 65:2b:30:93:88:c9:74:74:61:58:96:11:8a:80:33: 3a:b7:6f:cb:2a:1c:28:12:06:9a:72:82:7f:ee:17: 19:33:81:84:99:c1:3a:32:66:c4:c4:2d:92:38:e5: c9:3c:48:f1:9d:11:05:ef:c3:19:24:6c:73:65:3c: 56:48:db:1a:73:51:2e:72:ab:81:ec:43:90:28:20: 15:d4:e8:eb:e2:51:ad:c6:dc:57:9c:80:5f:02:82: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3A:FF:98:BE:4D:6B:ED:83:81:93:1C:21:24:F8:A2:04:11:8D:84 X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:12:86:0b:2a:a7:b2:71:67:8f:44:0b:47:d2:be:0a:17:71: 51:c9:2a:34:af:22:01:8a:dd:af:55:d7:66:4f:b9:c2:a5:87: ff:57:5c:9e:a9:92:90:09:7a:40:a0:df:85:0c:1a:3a:7e:af: 74:2d:ba:ba:89:30:c5:57:08:f9:1d:3e:76:86:d6:6b:3a:7c: 5d:3d:22:a9:8d:9e:de:31:f1:25:09:3a:78:03:af:ff:1f:45: 35:bd:fe:03:b8:50:20:af:89:9e:ba:70:cc:ef:59:3f:8c:81: 7c:6a:03:ac:13:52:25:0c:5d:3b:46:16:6a:8b:71:54:d8:78: 7d:0c:78:40:cd:20:b4:12:4e:db:bf:37:f3:64:ef:1f:ed:c1: a3:7c:d0:1c:0c:ee:ce:89:85:99:9e:46:59:10:7d:8e:3c:dd: 06:1f:3b:74:cc:34:ea:c0:4f:38:6b:5d:37:d0:c7:1e:7c:03: 38:55:25:c4:09:ee:06:c0:99:fe:17:5b:c0:93:7c:41:93:03: 97:21:cc:97:8f:58:b7:f2:df:57:14:32:89:80:a8:27:2d:4e: fd:8d:14:06:3a:c3:0a:6f:6b:a2:e2:ba:1c:ce:45:9a:89:13: 73:76:c4:ca:44:a8:52:83:9d:1d:a2:ba:2d:d2:b0:67:ac:47: 2c:1d:be:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1MUgPEp0chBUsGOTISA/fkbX+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNTA2MTYxODM1NTdaFw0yNTA2MjAwMzM0NTdaMDMxMTAvBgNV BAMTKDAzM0FGRjk4QkU0RDZCRUQ4MzgxOTMxQzIxMjRGOEEyMDQxMThEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37UVWHM1491+1Kt3Old85Vb83 RKq0CoPF1N0CLDohOJbgbvVGzfB2kcHY0arTtLGaT24+I69r5P5FhOds1LG04h3o iYzY2rbZ6419E0gN5+Ikq2m5vyD00v2o1edjNR8mA7RpS84XPSCRs+Acct0SViVz rwhh/9eNKJODpVFb11uC1j98kTG1zYpN7v4vGTTMmFU/Zwsi9MXxzdW9XGXz6xnK MWUrMJOIyXR0YViWEYqAMzq3b8sqHCgSBppygn/uFxkzgYSZwToyZsTELZI45ck8 SPGdEQXvwxkkbHNlPFZI2xpzUS5yq4HsQ5AoIBXU6OviUa3G3FecgF8CgrflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzr/mL5Na+2DgZMcIST4ogQRjYQwHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMoShgsqp7JxZ49EC0fSvgoXcVHJKjSvIgGK 3a9V12ZPucKlh/9XXJ6pkpAJekCg34UMGjp+r3QturqJMMVXCPkdPnaG1ms6fF09 IqmNnt4x8SUJOngDr/8fRTW9/gO4UCCviZ66cMzvWT+MgXxqA6wTUiUMXTtGFmqL cVTYeH0MeEDNILQSTtu/N/Nk7x/twaN80BwM7s6JhZmeRlkQfY483QYfO3TMNOrA TzhrXTfQxx58AzhVJcQJ7gbAmf4XW8CTfEGTA5chzJePWLfy31cUMomAqCctTv2N FAY6wwpva6LiuhzORZqJE3N2xMpEqFKDnR2iui3SsGesRywdvhk= -----END CERTIFICATE-----Generated at Tue Jun 17 14:40:52 2025 by rpki-client