$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: Le9zvKhui3d36/aTmrO0ib/oiBwtIUEYtdk6ZYNXGqY= Subject key identifier: 3B:8D:BF:76:A7:F5:14:CE:A6:7E:37:01:E5:40:8E:C0:69:92:C0:F8 Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 013E5A50E00844A4AA8DD6A6FD0C6BC8642D6856 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 017E Signing time: Mon 20 Oct 2025 04:11:47 +0000 Manifest this update: Mon 20 Oct 2025 04:06:47 +0000 Manifest next update: Thu 23 Oct 2025 14:14:47 +0000 Files and hashes: 1: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: a10heJcyvwgmjt0BonGD65evXtsVyZ4azujTnfd78x8=) 2: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=) 3: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=) 4: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3e:5a:50:e0:08:44:a4:aa:8d:d6:a6:fd:0c:6b:c8:64:2d:68:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Oct 20 04:06:47 2025 GMT Not After : Oct 23 14:14:47 2025 GMT Subject: CN=3B8DBF76A7F514CEA67E3701E5408EC06992C0F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:8b:12:18:78:37:b9:d5:16:c5:c6:d1:ec: df:72:50:b0:f9:70:a5:da:34:7e:c8:1d:ae:57:ff: 03:74:b4:7d:95:4b:52:cf:36:d1:bd:93:4c:43:d9: da:3c:b9:6d:fb:de:c6:b8:16:c5:1c:2b:8d:e1:2b: 10:57:12:d5:63:55:91:b4:46:0b:24:f0:a8:80:b0: 10:f1:ac:72:08:bc:08:25:ec:a3:dd:45:20:43:d9: c3:23:a3:46:b6:68:10:92:5b:45:8f:d8:28:54:a0: 26:4a:b6:6b:67:7d:39:73:ab:94:2d:de:d0:ba:34: 95:1d:23:38:0e:31:e0:34:d2:19:7b:9e:07:8c:84: 10:43:fd:22:6d:c8:a4:00:f2:17:37:34:1c:f0:5b: 38:bf:57:ae:8b:69:1b:4c:c8:48:25:ce:8e:ef:2f: 73:52:38:2d:09:d9:71:6d:c4:ec:c0:25:93:be:5f: 6c:d9:57:41:a6:d4:e3:e7:38:66:eb:17:16:c3:7a: e8:6d:a5:d0:d4:b6:db:58:49:b3:c1:38:63:93:ff: 45:8c:b3:12:4b:f9:57:75:c9:5e:fa:8a:95:d4:12: be:6b:f5:b6:e6:10:42:e9:8c:46:be:53:d1:7e:26: f3:50:5c:17:d1:41:93:17:a0:43:1a:40:bb:04:89: c5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8D:BF:76:A7:F5:14:CE:A6:7E:37:01:E5:40:8E:C0:69:92:C0:F8 X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7c:6b:2a:40:af:38:c0:17:2a:17:72:9d:28:02:89:14:fe: da:db:b6:a1:f2:de:cf:04:53:d6:97:cd:a5:e9:9c:0b:a7:f6: ea:c5:4e:2d:fd:47:08:76:d0:42:a0:5d:ad:cb:8f:60:ce:62: 7e:f0:37:0f:3a:01:ca:59:2d:5a:7d:0d:6c:0f:63:75:0f:2a: 80:84:65:ad:22:ca:6e:11:3d:f1:4c:9a:9f:d8:eb:0d:59:7f: 78:d3:7b:bf:57:76:f3:6a:ea:14:be:e3:7c:f6:19:e3:a3:38: 3a:26:be:e7:5b:3d:ae:d5:b0:c6:e5:45:df:05:72:81:65:7d: 02:f6:11:a2:79:38:91:89:3b:11:c1:7e:5e:99:48:9e:9a:98: d3:4e:70:b6:05:2d:c2:0f:3f:3a:59:2f:d1:83:9e:47:4e:d3: d3:bf:db:b4:b3:8d:9c:2a:d9:2d:7e:a5:9d:b3:1d:f3:c0:fe: b9:86:cb:46:e4:e2:a0:af:52:8d:43:b6:95:c3:a8:82:08:98: 68:cf:cb:8a:ab:13:e6:e0:a5:d3:67:bb:72:a7:1d:fd:2a:58: c5:f3:0f:69:27:2f:84:e0:d9:f2:04:1b:22:d7:c4:81:0f:14: a2:0c:51:70:78:84:c2:cc:63:dd:6d:21:e4:38:9e:e2:18:7d: 6c:c4:f8:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAT5aUOAIRKSqjdam/QxryGQtaFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNTEwMjAwNDA2NDdaFw0yNTEwMjMxNDE0NDdaMDMxMTAvBgNV BAMTKDNCOERCRjc2QTdGNTE0Q0VBNjdFMzcwMUU1NDA4RUMwNjk5MkMwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xYsSGHg3udUWxcbR7N9yULD5 cKXaNH7IHa5X/wN0tH2VS1LPNtG9k0xD2do8uW373sa4FsUcK43hKxBXEtVjVZG0 Rgsk8KiAsBDxrHIIvAgl7KPdRSBD2cMjo0a2aBCSW0WP2ChUoCZKtmtnfTlzq5Qt 3tC6NJUdIzgOMeA00hl7ngeMhBBD/SJtyKQA8hc3NBzwWzi/V66LaRtMyEglzo7v L3NSOC0J2XFtxOzAJZO+X2zZV0Gm1OPnOGbrFxbDeuhtpdDUtttYSbPBOGOT/0WM sxJL+Vd1yV76ipXUEr5r9bbmEELpjEa+U9F+JvNQXBfRQZMXoEMaQLsEicU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO42/dqf1FM6mfjcB5UCOwGmSwPgwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZ8aypArzjAFyoXcp0oAokU/trbtqHy3s8E U9aXzaXpnAun9urFTi39Rwh20EKgXa3Lj2DOYn7wNw86AcpZLVp9DWwPY3UPKoCE Za0iym4RPfFMmp/Y6w1Zf3jTe79XdvNq6hS+43z2GeOjODomvudbPa7VsMblRd8F coFlfQL2EaJ5OJGJOxHBfl6ZSJ6amNNOcLYFLcIPPzpZL9GDnkdO09O/27SzjZwq 2S1+pZ2zHfPA/rmGy0bk4qCvUo1DtpXDqIIImGjPy4qrE+bgpdNnu3KnHf0qWMXz D2knL4Tg2fIEGyLXxIEPFKIMUXB4hMLMY91tIeQ4nuIYfWzE+I0= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:31 2025 by rpki-client