$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft File: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft (raw, json) Hash identifier: 9zjiRYlJxYZd6/whMFwS1Ax7w5rXFPUUGv8UxZ91rg0= Subject key identifier: 90:5A:D6:40:6E:95:56:20:9E:12:10:D0:E3:DB:CC:54:63:83:44:D3 Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Certificate serial: 5994A495CBDF2B8F3A45C2B4BC335F3ECCA2658E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft Manifest number: 04CC Signing time: Mon 28 Apr 2025 22:01:13 +0000 Manifest this update: Mon 28 Apr 2025 21:56:13 +0000 Manifest next update: Fri 02 May 2025 04:33:13 +0000 Files and hashes: 1: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: 7Y6qCTa63vPiuGKVBW20e/ioBfU8xWNmqBl6jRZtq+c=) 2: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: yblUfrf5SIh1ilGvgnHlCA4piWC1NnXyvHb/63k5VZg=) 3: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl (hash: zEFqaiKPvJrJZDKnCjRdRj0xD6Ams62x4lG+JqUxYqE=) 4: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: TFhZKwNR/B40CI6MIhTrGqXdafQxmGh3I/WIFrNxEC0=) 5: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: E70nlSvwN/YRzt3ipt5eUpiof5ZiDppc9oAiJGHFIb4=) 6: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: ZWhy/wolBT2qTHnDdCH6juzwqEsIwsR+xgtIVGxTfs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:94:a4:95:cb:df:2b:8f:3a:45:c2:b4:bc:33:5f:3e:cc:a2:65:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Validity Not Before: Apr 28 21:56:13 2025 GMT Not After : May 2 04:33:13 2025 GMT Subject: CN=905AD6406E9556209E1210D0E3DBCC54638344D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:00:40:c8:d3:07:7c:48:ba:36:b6:35:fc: d6:a8:3c:55:b1:cf:1d:46:4c:f8:3c:54:65:5f:9e: ce:67:62:d5:0e:3e:8c:b5:33:5b:9f:1e:f5:fd:a0: d2:00:fc:61:21:fe:62:32:28:72:77:36:0a:69:84: f0:13:72:dd:34:2b:52:0c:01:0a:af:f4:a0:b9:0d: e4:c2:bf:dc:72:02:35:6e:82:89:71:0d:0f:10:d1: 35:f0:30:ca:dd:cd:0d:0a:da:2c:61:cc:7a:68:18: e8:92:c3:46:4e:91:63:8b:6d:4f:78:b8:4b:dc:a9: 4b:a2:12:6c:03:3b:d0:c6:fb:e1:a9:10:ae:b5:3f: e0:54:3b:68:33:e3:a5:50:ae:25:51:8f:08:44:35: c3:9d:60:57:e5:15:9c:3c:2a:63:fc:f7:17:3e:51: 84:79:2c:1a:47:40:32:31:42:9e:42:a9:7d:d7:fd: 5b:fb:da:95:c6:a0:d6:94:23:a6:e3:c1:f2:c6:f5: 59:0e:38:af:40:2e:be:c0:92:3a:8f:d1:59:f1:0b: c9:1e:90:20:cc:3b:b9:15:e0:2c:24:cf:d7:38:d1: fb:b5:90:67:a0:e7:5e:53:98:43:cd:9d:5c:86:bd: 20:9d:91:f4:cf:8b:e5:32:92:76:ae:75:62:35:eb: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5A:D6:40:6E:95:56:20:9E:12:10:D0:E3:DB:CC:54:63:83:44:D3 X509v3 Authority Key Identifier: keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d2:73:16:8f:f5:8d:be:8a:a3:7f:37:aa:a9:03:c7:6a:4d: fd:8c:dd:58:d4:5c:fc:d7:69:8b:78:41:ed:70:fd:28:5f:9e: a1:36:6d:ca:7c:6f:73:f0:bb:3c:14:52:c0:14:2c:3b:3f:b4: 6e:7f:26:7f:6b:1d:c4:39:17:f2:03:d5:ce:ed:22:ab:d4:e1: 77:6e:dd:ef:64:76:da:29:2c:4e:13:93:e6:66:68:d9:d3:57: 00:de:1a:36:d5:57:aa:03:87:47:94:4f:dd:07:48:b4:f3:75: 2a:58:5a:92:f5:64:6c:f1:db:8e:af:55:1d:18:c5:d4:1e:15: 2e:b5:a2:46:86:3b:4f:8b:a2:4c:4a:3a:38:03:ba:66:dc:33: ac:44:b2:38:05:2c:fb:e8:80:5a:f3:a3:99:48:ea:be:bc:44: 2c:5b:99:7d:ef:2d:e8:c4:6f:56:2a:a7:bd:9a:2e:f7:a2:4f: 94:8c:4b:ea:3d:a8:14:b5:67:05:a8:c8:f6:be:7a:01:9b:1e: 77:10:bf:18:68:50:fb:fd:c2:73:b3:ed:81:38:6f:3c:f4:7a: d3:88:a7:58:c9:1e:7b:85:ea:92:7b:71:80:f4:8f:02:e8:e6: cc:e2:84:e2:10:7c:1f:42:f3:4e:bf:2b:0c:d5:ca:0a:b2:21: cd:b2:38:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZSklcvfK486RcK0vDNfPsyiZY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB OUMwQjZBMDAeFw0yNTA0MjgyMTU2MTNaFw0yNTA1MDIwNDMzMTNaMDMxMTAvBgNV BAMTKDkwNUFENjQwNkU5NTU2MjA5RTEyMTBEMEUzREJDQzU0NjM4MzQ0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeqgBAyNMHfEi6NrY1/NaoPFWx zx1GTPg8VGVfns5nYtUOPoy1M1ufHvX9oNIA/GEh/mIyKHJ3NgpphPATct00K1IM AQqv9KC5DeTCv9xyAjVugolxDQ8Q0TXwMMrdzQ0K2ixhzHpoGOiSw0ZOkWOLbU94 uEvcqUuiEmwDO9DG++GpEK61P+BUO2gz46VQriVRjwhENcOdYFflFZw8KmP89xc+ UYR5LBpHQDIxQp5CqX3X/Vv72pXGoNaUI6bjwfLG9VkOOK9ALr7AkjqP0VnxC8ke kCDMO7kV4Cwkz9c40fu1kGeg515TmEPNnVyGvSCdkfTPi+UyknaudWI1685lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkFrWQG6VViCeEhDQ49vMVGODRNMwHwYDVR0j BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw QjZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIw NTNBOUMwQjZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHScxaP9Y2+iqN/N6qpA8dqTf2M3VjUXPzX aYt4Qe1w/ShfnqE2bcp8b3PwuzwUUsAULDs/tG5/Jn9rHcQ5F/ID1c7tIqvU4Xdu 3e9kdtopLE4Tk+ZmaNnTVwDeGjbVV6oDh0eUT90HSLTzdSpYWpL1ZGzx246vVR0Y xdQeFS61okaGO0+LokxKOjgDumbcM6xEsjgFLPvogFrzo5lI6r68RCxbmX3vLejE b1Yqp72aLveiT5SMS+o9qBS1ZwWoyPa+egGbHncQvxhoUPv9wnOz7YE4bzz0etOI p1jJHnuF6pJ7cYD0jwLo5szihOIQfB9C806/KwzVygqyIc2yOBg= -----END CERTIFICATE-----Generated at Wed Apr 30 03:33:02 2025 by rpki-client