$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: amXkWBeKu3mRIDqqTyg+5wjW9fERD4y3r/5eK1cQC8M= Subject key identifier: DD:2A:74:46:6B:5D:0F:7B:B9:B0:D8:35:C0:D6:F5:A7:15:0D:D5:8F Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 61F3D1B88C37A119D3A95BAE7E42F486CBE2D2B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 0220 Signing time: Mon 20 Oct 2025 06:31:42 +0000 Manifest this update: Mon 20 Oct 2025 06:26:42 +0000 Manifest next update: Thu 23 Oct 2025 14:28:42 +0000 Files and hashes: 1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: GFeN4zdicdCl8FO0NLOiYHTQ5Yakz4ifqaM8HRx7g1k=) 2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: FXE5GAFeqGpeEgNYhdu+NiOVWPi7nwVOKlyxLEU4cy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f3:d1:b8:8c:37:a1:19:d3:a9:5b:ae:7e:42:f4:86:cb:e2:d2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Oct 20 06:26:42 2025 GMT Not After : Oct 23 14:28:42 2025 GMT Subject: CN=DD2A74466B5D0F7BB9B0D835C0D6F5A7150DD58F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:2e:64:0c:40:60:71:de:a8:9f:6c:e6:c5: dd:e3:1e:46:23:a7:4e:0f:07:02:a1:70:1b:bc:93: 4d:22:a2:d9:53:e1:f3:aa:48:fb:a2:05:93:64:41: 11:27:a1:ca:77:cf:81:4c:7f:3a:7b:de:1f:96:14: 4d:90:d3:3f:bc:f1:2f:f4:d5:c3:ac:92:ac:98:de: b6:11:cd:cb:29:2d:af:3c:83:c2:40:b2:34:07:b2: 96:5a:61:38:d8:d7:37:c4:c1:03:09:61:db:85:b2: 96:91:cf:80:31:37:ca:ae:09:d4:df:09:d4:1f:7b: 15:8b:bd:06:f5:79:d6:17:eb:42:0d:ff:83:56:0a: d0:68:eb:3f:e9:c1:bf:ee:3d:1c:63:83:eb:e1:a9: b8:02:37:d0:fb:96:d8:cc:ea:3f:8b:fb:b5:02:e8: 1a:45:23:71:2f:29:e3:36:ca:cd:16:09:4a:ee:b3: 30:1b:7b:36:77:c6:a7:f3:aa:84:6d:6f:ff:7a:4b: f2:43:6e:75:45:11:bf:b3:73:66:fc:e2:b8:00:0e: 9a:c6:42:ec:70:ef:41:ae:fe:11:43:ba:61:4c:7a: b1:bb:61:53:f9:c8:69:94:bb:7d:2d:a1:09:44:78: 10:61:0a:e4:bb:42:3b:7d:c3:45:18:ff:61:91:85: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2A:74:46:6B:5D:0F:7B:B9:B0:D8:35:C0:D6:F5:A7:15:0D:D5:8F X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cf:1c:35:10:66:80:3c:bd:37:16:df:59:c6:c8:c2:46:c9: 53:88:55:a6:fc:3d:d5:c4:bb:53:42:95:ae:31:3d:98:07:c9: ea:65:bb:72:37:09:43:13:d1:9d:76:d6:5e:fb:e2:0d:51:0a: 50:f9:a0:38:4f:4b:ad:0e:e4:46:b2:8b:fd:84:df:b0:7e:08: 6d:68:00:5d:43:42:a1:fa:74:11:70:d6:04:76:f8:ea:90:dd: 16:1a:af:e8:c1:e5:fe:40:d0:ee:d8:c9:ce:12:09:75:ee:dc: 6b:00:b6:6f:ef:86:52:4e:4f:f4:aa:99:f7:57:ad:2e:fa:98: 28:8d:64:8c:3f:53:a3:23:f4:22:1e:14:ad:8c:bb:ce:1e:62: 4d:41:0d:37:73:41:72:ae:59:7d:cd:6a:40:9f:79:12:f9:6d: 75:f1:de:45:ab:8b:c4:10:f5:b8:6c:a9:9a:12:18:42:fc:f2: 69:ec:79:cd:74:e1:ef:6c:df:a6:b0:24:42:c2:e6:27:22:fc: 54:82:58:57:46:26:e7:d0:91:6e:37:86:12:a8:fe:b7:97:b9: f3:a6:e3:cb:5f:9f:8f:84:4b:4c:1c:18:ed:89:fb:cc:f9:fc: 91:7a:60:29:18:1e:5e:31:1b:0f:37:cb:f2:e9:2e:cd:14:48: fe:32:52:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfPRuIw3oRnTqVuufkL0hsvi0rEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNTEwMjAwNjI2NDJaFw0yNTEwMjMxNDI4NDJaMDMxMTAvBgNV BAMTKEREMkE3NDQ2NkI1RDBGN0JCOUIwRDgzNUMwRDZGNUE3MTUwREQ1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//i5kDEBgcd6on2zmxd3jHkYj p04PBwKhcBu8k00iotlT4fOqSPuiBZNkQREnocp3z4FMfzp73h+WFE2Q0z+88S/0 1cOskqyY3rYRzcspLa88g8JAsjQHspZaYTjY1zfEwQMJYduFspaRz4AxN8quCdTf CdQfexWLvQb1edYX60IN/4NWCtBo6z/pwb/uPRxjg+vhqbgCN9D7ltjM6j+L+7UC 6BpFI3EvKeM2ys0WCUruszAbezZ3xqfzqoRtb/96S/JDbnVFEb+zc2b84rgADprG Quxw70Gu/hFDumFMerG7YVP5yGmUu30toQlEeBBhCuS7Qjt9w0UY/2GRhbdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Sp0RmtdD3u5sNg1wNb1pxUN1Y8wHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3PHDUQZoA8vTcW31nGyMJGyVOIVab8PdXE u1NCla4xPZgHyeplu3I3CUMT0Z121l774g1RClD5oDhPS60O5Eayi/2E37B+CG1o AF1DQqH6dBFw1gR2+OqQ3RYar+jB5f5A0O7Yyc4SCXXu3GsAtm/vhlJOT/SqmfdX rS76mCiNZIw/U6Mj9CIeFK2Mu84eYk1BDTdzQXKuWX3NakCfeRL5bXXx3kWri8QQ 9bhsqZoSGEL88mnsec104e9s36awJELC5ici/FSCWFdGJufQkW43hhKo/reXufOm 48tfn4+ES0wcGO2J+8z5/JF6YCkYHl4xGw83y/LpLs0USP4yUpY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:03 2025 by rpki-client