$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: kF+CV/+lpX4Fh3rymw/aAWO+b0FimF1gR0zZcOtoEZA= Subject key identifier: 2D:20:65:4E:FD:8A:2D:E0:DB:69:43:86:07:DF:01:16:14:A2:D3:AF Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 789EB8BA8DA3122DE08EDDFB52EC8714AE8FF98B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 01D1 Signing time: Thu 24 Apr 2025 00:41:41 +0000 Manifest this update: Thu 24 Apr 2025 00:36:41 +0000 Manifest next update: Sun 27 Apr 2025 01:09:41 +0000 Files and hashes: 1: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: FXE5GAFeqGpeEgNYhdu+NiOVWPi7nwVOKlyxLEU4cy8=) 2: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: VPumbKcWDR9VgzN0fNW4EuhzIRNcBRwFxfvkecOM0Uc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 01:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9e:b8:ba:8d:a3:12:2d:e0:8e:dd:fb:52:ec:87:14:ae:8f:f9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Apr 24 00:36:41 2025 GMT Not After : Apr 27 01:09:41 2025 GMT Subject: CN=2D20654EFD8A2DE0DB69438607DF011614A2D3AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:f7:89:78:45:d0:f4:22:74:ed:02:e4:4e: 6e:c5:cf:fb:86:cd:1d:56:c1:4c:ca:8b:95:5c:58: 7b:29:8e:c6:02:b6:b2:19:7c:f9:28:91:06:e3:74: 83:66:67:6c:79:39:79:e3:f1:a6:4f:3c:71:ae:2b: cb:7b:65:b7:33:87:29:f8:aa:69:b6:58:87:7a:13: 44:ac:f9:5e:b1:2f:b4:57:c1:c2:d9:6c:3e:f2:d1: 27:fc:70:5d:0e:e4:07:d7:25:c0:da:5f:ca:ce:f0: 65:56:56:c0:ec:b8:c9:9d:88:b3:be:45:19:e7:22: da:63:cb:07:7a:fc:33:ee:d0:c1:28:60:29:f8:26: 80:45:47:17:aa:38:b7:e4:cb:0f:1b:9b:f8:77:1e: 7c:af:2b:a6:3e:23:4d:95:3a:b1:05:73:cb:cc:68: 9f:36:13:84:95:5b:36:b0:27:39:44:4e:0d:61:a9: e3:7c:d9:95:eb:3d:42:b1:54:4d:3a:1d:19:39:45: 22:a6:a6:c0:7f:62:42:4d:f3:c4:5e:ae:05:fd:e2: d3:17:6a:df:9b:d4:55:f3:c5:16:57:e1:03:fa:e5: 1f:44:1c:0f:7e:a8:0e:1e:85:9c:89:00:a6:c4:8c: 9c:e7:f7:9c:6e:b1:b2:96:79:32:39:57:ac:62:e4: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:20:65:4E:FD:8A:2D:E0:DB:69:43:86:07:DF:01:16:14:A2:D3:AF X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c4:63:6b:86:e2:af:5f:b0:9c:20:f7:ec:3b:a2:0f:8a:85: a8:cb:f0:c5:5c:7d:17:68:6f:bc:24:88:b2:32:37:b0:71:30: a7:9d:e7:77:6d:db:19:87:8c:11:e1:68:22:2d:82:a0:d1:fa: c4:a2:dc:69:83:73:35:0a:fe:6a:f0:bf:9b:fd:b0:56:7c:76: 19:5b:76:50:0d:bd:bd:60:bb:0b:b0:7f:57:80:bf:96:8b:0e: 75:e5:d0:95:64:31:bf:51:de:b8:04:9e:a8:c2:54:80:e5:2d: e5:b7:ec:8a:53:ba:fe:30:77:aa:6d:7a:8a:7a:ef:57:b6:8b: b2:79:c8:d2:db:7c:b7:54:35:69:1b:7c:cf:7d:fb:5f:82:19: 94:14:56:73:4f:ea:d9:3f:08:80:04:f3:a5:18:7a:34:79:77: 2e:5b:47:1b:75:ac:64:78:14:39:24:c3:84:8b:86:74:be:60: 4e:86:cb:8b:29:83:a2:36:bd:5e:1f:8b:48:62:eb:fc:25:dd: 16:55:5c:50:75:0c:77:7c:de:ba:ac:0f:6f:28:a5:f4:f3:6c: ed:92:3a:bd:a3:c8:7b:05:25:f4:fe:b2:7e:64:18:c7:e6:25: d4:cf:09:89:9c:b0:af:40:31:a5:9e:1d:63:f5:86:a7:5f:7a: 0d:4c:3c:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJ64uo2jEi3gjt37UuyHFK6P+YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNTA0MjQwMDM2NDFaFw0yNTA0MjcwMTA5NDFaMDMxMTAvBgNV BAMTKDJEMjA2NTRFRkQ4QTJERTBEQjY5NDM4NjA3REYwMTE2MTRBMkQzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwfeJeEXQ9CJ07QLkTm7Fz/uG zR1WwUzKi5VcWHspjsYCtrIZfPkokQbjdINmZ2x5OXnj8aZPPHGuK8t7Zbczhyn4 qmm2WId6E0Ss+V6xL7RXwcLZbD7y0Sf8cF0O5AfXJcDaX8rO8GVWVsDsuMmdiLO+ RRnnItpjywd6/DPu0MEoYCn4JoBFRxeqOLfkyw8bm/h3HnyvK6Y+I02VOrEFc8vM aJ82E4SVWzawJzlETg1hqeN82ZXrPUKxVE06HRk5RSKmpsB/YkJN88RergX94tMX at+b1FXzxRZX4QP65R9EHA9+qA4ehZyJAKbEjJzn95xusbKWeTI5V6xi5N8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULSBlTv2KLeDbaUOGB98BFhSi068wHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXEY2uG4q9fsJwg9+w7og+KhajL8MVcfRdo b7wkiLIyN7BxMKed53dt2xmHjBHhaCItgqDR+sSi3GmDczUK/mrwv5v9sFZ8dhlb dlANvb1guwuwf1eAv5aLDnXl0JVkMb9R3rgEnqjCVIDlLeW37IpTuv4wd6pteop6 71e2i7J5yNLbfLdUNWkbfM99+1+CGZQUVnNP6tk/CIAE86UYejR5dy5bRxt1rGR4 FDkkw4SLhnS+YE6Gy4spg6I2vV4fi0hi6/wl3RZVXFB1DHd83rqsD28opfTzbO2S Or2jyHsFJfT+sn5kGMfmJdTPCYmcsK9AMaWeHWP1hqdfeg1MPOM= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net