$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: Vtj49DMY9eIy2IWZkvf7ztiZd6capRr508l91Jz1668= Subject key identifier: 1F:C4:33:68:9E:A8:15:55:01:92:61:94:CB:43:62:E1:8B:A0:A3:EA Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 5EE5834BBA66AD4EC3197DE7A665A02DFB3FE77C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 01EC Signing time: Tue 24 Mar 2026 18:11:12 +0000 Manifest this update: Tue 24 Mar 2026 18:06:12 +0000 Manifest next update: Fri 27 Mar 2026 23:35:12 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: JciEcvaTyOu9ULHHbn2cng9qZ9XRi3I/0a9dUnGKqis=) 2: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: te6852zJfADU5eUrZR3ew7HIIA2lg8gMA9xd9HC+ESo=) 3: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: ZFdRMUbppznV3pESBcuMYAdFp919xipPaUB0c2Rmz1Q=) 4: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: u/hIg8KsFWw8vq7gPOsdko9qxD6a9n4NweAFWrVWdp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e5:83:4b:ba:66:ad:4e:c3:19:7d:e7:a6:65:a0:2d:fb:3f:e7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Mar 24 18:06:12 2026 GMT Not After : Mar 27 23:35:12 2026 GMT Subject: CN=1FC433689EA8155501926194CB4362E18BA0A3EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a1:ff:d2:db:1a:cf:81:4f:08:80:da:8e:a1: fc:21:bf:59:b5:54:6e:08:08:b8:3a:ae:2b:62:dd: 4e:19:a0:2c:2a:3f:0c:d7:a2:4c:4e:05:3d:43:d2: 26:96:41:a0:7e:73:db:fc:d9:f1:62:00:7b:c5:cd: a9:c1:de:2f:0e:8a:f6:cd:e8:b1:6c:37:65:a2:da: 87:9f:11:48:c0:77:89:45:60:56:d3:e5:68:ee:ae: 64:1a:0e:90:09:b1:f6:3e:b4:4d:f8:45:31:bc:5a: a4:69:29:24:d7:6e:39:36:61:53:65:ea:24:79:8b: e4:e2:96:a9:66:97:63:8a:48:b3:cf:96:85:36:21: 58:1c:b1:c5:79:ac:03:2d:b8:2f:34:2b:9c:63:70: ae:6d:c7:d3:b8:bf:f6:76:65:fa:dd:c3:31:67:e5: 88:8a:88:3f:27:f8:81:72:a2:22:6d:4b:14:8d:03: e2:5f:b4:0e:42:0f:d2:da:95:7d:db:b0:38:9b:40: 1c:34:18:6b:b6:14:24:0b:30:54:4c:39:69:b3:0a: fb:39:61:a1:04:a8:4f:cb:1e:e0:f6:3f:e6:b4:80: 6d:50:01:f7:0a:49:32:15:24:33:54:55:84:26:1c: 5b:95:7d:a4:a2:f8:0c:79:fe:d1:71:bb:be:cb:1e: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:33:68:9E:A8:15:55:01:92:61:94:CB:43:62:E1:8B:A0:A3:EA X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a7:9c:df:14:53:10:3c:5c:72:71:70:aa:8f:54:e3:79:ea: 9e:e0:63:17:66:8e:0c:44:03:73:35:29:61:60:81:65:ea:7e: f3:ac:e8:da:eb:62:f6:08:17:f1:25:a2:b3:7d:32:4d:a1:68: 88:83:28:62:6e:25:96:ca:84:e4:18:c7:6f:6d:4f:37:4d:e3: 7e:d7:86:7b:20:1c:4c:35:00:01:1e:2c:8d:c2:eb:15:4a:1c: cc:a7:8a:a4:df:90:0d:23:13:e8:bd:2b:7b:34:b8:d0:f0:b0: e9:18:c3:c4:c2:c1:5e:d3:48:90:6e:88:36:0e:2f:0e:aa:a3: 8e:0d:36:d6:92:bc:33:5b:6c:ce:1b:d6:db:fa:d2:5b:88:b9: ea:d1:05:21:d2:ba:7a:b6:be:74:eb:13:95:b2:82:40:15:c0: 3d:36:cd:6a:2d:af:01:e6:c3:ab:de:fd:d2:a2:9a:c0:42:9e: 98:c2:cb:da:19:cf:34:7d:35:b6:fa:e2:66:5e:5d:f8:37:df: 3e:2a:e1:c0:60:cd:44:99:da:14:38:3d:37:0d:a8:6c:7f:4f: cc:c3:96:6e:b9:b5:82:14:7d:bd:fd:27:57:75:bd:e0:7f:64: 5f:e1:cd:28:ab:fa:96:b4:4d:26:5e:11:3b:61:2d:f9:7d:74: 2e:30:88:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXuWDS7pmrU7DGX3npmWgLfs/53wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNjAzMjQxODA2MTJaFw0yNjAzMjcyMzM1MTJaMDMxMTAvBgNV BAMTKDFGQzQzMzY4OUVBODE1NTUwMTkyNjE5NENCNDM2MkUxOEJBMEEzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhof/S2xrPgU8IgNqOofwhv1m1 VG4ICLg6riti3U4ZoCwqPwzXokxOBT1D0iaWQaB+c9v82fFiAHvFzanB3i8OivbN 6LFsN2Wi2oefEUjAd4lFYFbT5WjurmQaDpAJsfY+tE34RTG8WqRpKSTXbjk2YVNl 6iR5i+Tilqlml2OKSLPPloU2IVgcscV5rAMtuC80K5xjcK5tx9O4v/Z2ZfrdwzFn 5YiKiD8n+IFyoiJtSxSNA+JftA5CD9LalX3bsDibQBw0GGu2FCQLMFRMOWmzCvs5 YaEEqE/LHuD2P+a0gG1QAfcKSTIVJDNUVYQmHFuVfaSi+Ax5/tFxu77LHtVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH8QzaJ6oFVUBkmGUy0Ni4Yugo+owHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFinnN8UUxA8XHJxcKqPVON56p7gYxdmjgxE A3M1KWFggWXqfvOs6NrrYvYIF/ElorN9Mk2haIiDKGJuJZbKhOQYx29tTzdN437X hnsgHEw1AAEeLI3C6xVKHMyniqTfkA0jE+i9K3s0uNDwsOkYw8TCwV7TSJBuiDYO Lw6qo44NNtaSvDNbbM4b1tv60luIuerRBSHSunq2vnTrE5WygkAVwD02zWotrwHm w6ve/dKimsBCnpjCy9oZzzR9Nbb64mZeXfg33z4q4cBgzUSZ2hQ4PTcNqGx/T8zD lm65tYIUfb39J1d1veB/ZF/hzSir+pa0TSZeETthLfl9dC4wiEM= -----END CERTIFICATE-----Generated at Thu Mar 26 06:05:41 2026 by rpki-client