$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: NOvkbX+pENqCeZgAJg4BUVXmDGSkEU+UG0w21OtlliI= Subject key identifier: FF:28:B5:50:1B:93:28:4D:B8:1B:CA:65:78:D1:DE:CE:FE:DD:AA:F5 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 122869B3735087A60B8F15E6195EC34CBE990A8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 01B1 Signing time: Wed 23 Apr 2025 14:20:36 +0000 Manifest this update: Wed 23 Apr 2025 14:15:36 +0000 Manifest next update: Sat 26 Apr 2025 21:09:36 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: nB+Bfi526s7F0pX/cJ3vKUq8RaU1aMQ8MOXDrQGipJ8=) 2: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 3: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: gcxKUq3yIl36IXgdhmdk6TAl/m5XxeArZ0//uLTgiHM=) 4: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: d/nV5TiTQGjwLBAvmxVUInwpVwxnF9xZjnsBQckQckM=) 5: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: 9Taelh2F7bDhcgv1/FnDY41aJDANqsWoA+/ggvnfkB0=) 6: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:28:69:b3:73:50:87:a6:0b:8f:15:e6:19:5e:c3:4c:be:99:0a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Apr 23 14:15:36 2025 GMT Not After : Apr 26 21:09:36 2025 GMT Subject: CN=FF28B5501B93284DB81BCA6578D1DECEFEDDAAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:89:be:ea:35:69:01:bb:a1:09:91:a5:32: e3:99:e6:c4:95:8c:b4:90:e3:10:b3:f4:13:82:88: a8:64:74:ab:a8:5c:0d:ae:25:48:36:df:fc:76:f8: f0:06:a4:3f:8a:b3:c4:46:49:54:4c:e8:05:99:d6: 30:b6:e7:f5:98:e6:95:b7:39:bc:78:f8:6b:e8:60: 58:98:7c:67:72:6e:4d:3c:5c:50:96:df:cb:17:36: 51:c6:77:35:97:90:5a:2b:20:6d:a4:4f:ec:3d:ae: 49:cd:53:a7:54:42:e6:6f:3f:4b:90:21:e0:4a:b0: 87:48:13:96:13:cc:98:f4:09:e3:6a:65:92:23:2f: 70:31:49:83:5f:a1:70:e8:fe:95:8d:5b:6c:fc:2e: 10:c6:f7:2e:24:a2:d9:80:d3:ae:92:e7:fd:87:4a: 87:69:96:c2:c4:40:79:2a:19:1f:2b:e7:b1:a4:83: cd:86:fb:4e:12:98:5e:51:50:e8:23:39:a7:5c:13: df:d1:bd:db:8f:37:2f:d9:34:68:f9:4b:d9:a6:b2: 22:ce:a2:fe:1f:fe:7b:1e:b9:70:23:55:32:ef:bf: 71:d4:a6:29:e5:65:00:18:e9:4f:bd:ba:f7:b6:fc: 06:a4:f7:e3:30:6e:6f:c9:f4:0d:0d:6e:fd:3c:ce: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:28:B5:50:1B:93:28:4D:B8:1B:CA:65:78:D1:DE:CE:FE:DD:AA:F5 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2b:10:d5:b7:49:e1:e9:9c:41:8d:b8:51:48:77:e2:d4:da: 85:c6:14:dd:4c:ab:2d:d1:ea:d0:b6:e0:c4:f1:b6:96:2b:18: cd:5a:ab:26:2b:b7:d8:84:15:cd:bc:9b:39:de:06:81:2e:ba: ec:92:f6:a0:16:03:ca:34:5f:c7:cd:95:e5:55:70:d5:ef:c8: d8:11:f9:60:35:ea:cd:dd:38:95:2d:72:a5:25:f2:83:6e:e4: e3:af:69:47:c9:15:1c:d1:72:81:e7:b7:e3:31:d0:24:8f:0b: b4:92:e9:39:0e:7e:a4:f4:34:c3:38:ae:00:1d:ab:9d:00:1f: c6:40:af:92:c8:15:7e:7d:50:56:a9:8e:ec:70:af:b0:4c:e8: b8:fc:50:fc:37:54:09:75:b6:66:13:a7:98:90:cd:f5:0f:10: 3c:47:fd:62:00:af:a9:5f:db:a0:ba:20:01:20:33:77:33:54: d8:a7:87:03:d6:b4:7d:2a:e6:2d:81:a6:b5:2c:96:a6:da:4d: 6b:cf:87:8c:5c:c6:c2:ec:54:ca:07:58:fc:81:dd:98:26:19: 64:b1:06:2c:6a:81:6c:76:a6:0d:7d:61:01:c1:8d:e2:56:21: 6b:10:c1:23:ec:d2:1a:28:db:9d:5d:31:39:c3:49:5e:64:25: 41:aa:3b:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEihps3NQh6YLjxXmGV7DTL6ZCo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTA0MjMxNDE1MzZaFw0yNTA0MjYyMTA5MzZaMDMxMTAvBgNV BAMTKEZGMjhCNTUwMUI5MzI4NERCODFCQ0E2NTc4RDFERUNFRkVEREFBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUEYm+6jVpAbuhCZGlMuOZ5sSV jLSQ4xCz9BOCiKhkdKuoXA2uJUg23/x2+PAGpD+Ks8RGSVRM6AWZ1jC25/WY5pW3 Obx4+GvoYFiYfGdybk08XFCW38sXNlHGdzWXkForIG2kT+w9rknNU6dUQuZvP0uQ IeBKsIdIE5YTzJj0CeNqZZIjL3AxSYNfoXDo/pWNW2z8LhDG9y4kotmA066S5/2H SodplsLEQHkqGR8r57Gkg82G+04SmF5RUOgjOadcE9/RvduPNy/ZNGj5S9mmsiLO ov4f/nseuXAjVTLvv3HUpinlZQAY6U+9uve2/Aak9+Mwbm/J9A0Nbv08zo5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/yi1UBuTKE24G8pleNHezv7dqvUwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgrENW3SeHpnEGNuFFId+LU2oXGFN1Mqy3R 6tC24MTxtpYrGM1aqyYrt9iEFc28mzneBoEuuuyS9qAWA8o0X8fNleVVcNXvyNgR +WA16s3dOJUtcqUl8oNu5OOvaUfJFRzRcoHnt+Mx0CSPC7SS6TkOfqT0NMM4rgAd q50AH8ZAr5LIFX59UFapjuxwr7BM6Lj8UPw3VAl1tmYTp5iQzfUPEDxH/WIAr6lf 26C6IAEgM3czVNinhwPWtH0q5i2BprUslqbaTWvPh4xcxsLsVMoHWPyB3ZgmGWSx BixqgWx2pg19YQHBjeJWIWsQwSPs0hoo251dMTnDSV5kJUGqOzE= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:31 2025 by rpki-client on console.sobornost.net