$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: RBNqNDHhGZoGP/LLW23oZG3kkqDxgnXqLLYFLFpHecg= Subject key identifier: 17:69:E5:B7:B2:51:F9:CB:92:E0:B7:21:6A:B7:5D:D0:81:98:E4:B3 Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 286257A4B41614A591424DBADA6648A571171ACE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 01A4 Signing time: Sun 19 Oct 2025 12:51:03 +0000 Manifest this update: Sun 19 Oct 2025 12:46:03 +0000 Manifest next update: Wed 22 Oct 2025 16:23:03 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) 2: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: J6b4BeE9JrfMsTxraF4PhtrdtnEXJen2QAuNuS+9IPU=) 3: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) 4: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:62:57:a4:b4:16:14:a5:91:42:4d:ba:da:66:48:a5:71:17:1a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Oct 19 12:46:03 2025 GMT Not After : Oct 22 16:23:03 2025 GMT Subject: CN=1769E5B7B251F9CB92E0B7216AB75DD08198E4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:d2:dd:fd:c1:51:fc:48:ad:72:03:56:c5: 8e:68:6f:2f:0e:b2:8e:bf:63:b2:05:46:98:45:ff: 24:ea:3f:ea:95:eb:ab:1d:8a:40:b0:67:bb:82:bf: 3f:6e:2f:88:75:ca:20:f7:a9:84:3f:5a:11:da:0a: e2:24:4a:8f:0a:96:1d:04:94:58:3a:6d:a4:ea:a1: 3e:33:a7:64:2d:20:e2:81:5b:f4:68:31:12:c7:3c: 6a:ab:5d:f7:94:d0:15:8a:84:a8:cd:d2:4c:92:a0: 8a:41:f2:78:49:54:76:a2:b4:d9:5a:15:6a:19:87: 07:fa:dc:4e:10:19:e7:19:20:ea:e4:82:73:22:23: 8c:3d:82:19:b4:e3:a4:eb:e5:73:71:95:0d:bc:cf: 5f:72:e5:3d:f4:20:74:01:7c:6d:5e:14:61:81:70: b3:e6:1a:18:66:03:5f:75:1b:cf:e4:fb:26:ba:41: 73:17:9b:2d:ec:b7:b6:a8:4f:a1:d0:87:5e:ac:19: 90:bb:b9:0a:8c:5e:fc:a2:91:15:5d:5e:04:d2:b6: 9a:2a:11:3a:cd:a0:0e:1b:61:af:8b:db:fa:d1:b0: a4:ab:54:6d:13:f3:86:e5:1b:51:76:06:ad:7c:14: 58:9c:96:2f:3b:37:61:47:27:bb:eb:0b:24:ad:89: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:69:E5:B7:B2:51:F9:CB:92:E0:B7:21:6A:B7:5D:D0:81:98:E4:B3 X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:03:a3:16:90:d8:26:0e:60:f3:f5:86:dd:1d:84:18:e5:eb: 27:19:b5:ef:8b:c3:10:aa:cd:b1:6b:a7:06:18:31:e2:1e:0d: da:ce:84:b8:97:22:ba:0a:e9:49:5c:32:ff:74:d0:7f:99:3e: d4:5e:99:3c:ba:3b:98:b3:6c:f5:7c:22:4e:45:98:87:5b:6e: 76:91:2a:cd:c5:a8:ed:c4:0b:2c:c6:a6:fd:f1:96:11:13:de: 4b:3b:fd:d7:01:83:34:2a:97:24:8b:0d:84:56:96:f0:52:d9: 5f:bd:8a:de:ce:2c:a1:26:81:f6:c2:49:15:f9:fa:7c:7d:f2: 4e:3d:ee:8e:d5:af:33:b6:63:df:23:ec:f0:6a:ab:47:19:f4: 94:9d:00:85:c6:53:1a:31:2d:25:1c:f9:57:0e:f0:07:7c:05: f5:78:46:cc:40:3b:a9:e4:1c:1d:96:ff:d8:b7:c6:ec:4e:e7: 89:50:49:d1:b6:40:46:18:9b:9f:f6:34:ec:50:a8:bb:05:0b: 5c:20:59:bd:f6:07:1a:81:56:b5:65:fe:27:ad:b0:5e:42:2b: 71:d0:15:f9:2e:fb:47:0a:04:f8:34:61:3c:33:8c:05:61:bd: 44:f9:9f:3a:da:ab:bc:15:45:f0:d3:3b:70:48:1a:e2:06:4d: e4:5b:9e:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGJXpLQWFKWRQk262mZIpXEXGs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTEwMTkxMjQ2MDNaFw0yNTEwMjIxNjIzMDNaMDMxMTAvBgNV BAMTKDE3NjlFNUI3QjI1MUY5Q0I5MkUwQjcyMTZBQjc1REQwODE5OEU0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5tLd/cFR/EitcgNWxY5oby8O so6/Y7IFRphF/yTqP+qV66sdikCwZ7uCvz9uL4h1yiD3qYQ/WhHaCuIkSo8Klh0E lFg6baTqoT4zp2QtIOKBW/RoMRLHPGqrXfeU0BWKhKjN0kySoIpB8nhJVHaitNla FWoZhwf63E4QGecZIOrkgnMiI4w9ghm046Tr5XNxlQ28z19y5T30IHQBfG1eFGGB cLPmGhhmA191G8/k+ya6QXMXmy3st7aoT6HQh16sGZC7uQqMXvyikRVdXgTStpoq ETrNoA4bYa+L2/rRsKSrVG0T84blG1F2Bq18FFicli87N2FHJ7vrCyStiePTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF2nlt7JR+cuS4Lchardd0IGY5LMwHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMwDoxaQ2CYOYPP1ht0dhBjl6ycZte+LwxCq zbFrpwYYMeIeDdrOhLiXIroK6UlcMv900H+ZPtRemTy6O5izbPV8Ik5FmIdbbnaR Ks3FqO3ECyzGpv3xlhET3ks7/dcBgzQqlySLDYRWlvBS2V+9it7OLKEmgfbCSRX5 +nx98k497o7VrzO2Y98j7PBqq0cZ9JSdAIXGUxoxLSUc+VcO8Ad8BfV4RsxAO6nk HB2W/9i3xuxO54lQSdG2QEYYm5/2NOxQqLsFC1wgWb32BxqBVrVl/ietsF5CK3HQ Ffku+0cKBPg0YTwzjAVhvUT5nzraq7wVRfDTO3BIGuIGTeRbnp0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:33 2025 by rpki-client