$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: vOqoSHUueVbE54VPzQOLleQmPV+G3FBvTVGV0F28VOs= Subject key identifier: 0D:91:9B:83:34:0E:68:09:F4:14:61:53:72:5D:35:93:ED:43:4E:83 Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 6628C191472DDD275E37D637232F414EBEA03F93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 01C4 Signing time: Wed 25 Mar 2026 15:41:59 +0000 Manifest this update: Wed 25 Mar 2026 15:36:59 +0000 Manifest next update: Sun 29 Mar 2026 01:43:59 +0000 Files and hashes: 1: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: hgZ6lxUTfnRMbDBNn/O6Re3KNOw5yA3vQfau5acJLcs=) 2: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=) 3: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=) 4: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:28:c1:91:47:2d:dd:27:5e:37:d6:37:23:2f:41:4e:be:a0:3f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Mar 25 15:36:59 2026 GMT Not After : Mar 29 01:43:59 2026 GMT Subject: CN=0D919B83340E6809F4146153725D3593ED434E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:2d:1f:c8:49:6b:ec:0a:d6:9f:f8:a3:4f: bb:f0:82:26:a8:31:a7:cf:d7:10:52:fc:b9:e5:32: 80:6a:9c:59:52:93:95:51:f8:1c:f7:2d:8b:d1:72: 29:93:99:6d:1a:b1:d9:4b:c0:aa:68:9f:ee:15:c6: 70:b3:3f:5e:6e:12:21:64:1f:32:bb:18:1f:4a:85: ce:27:20:0d:1b:f4:aa:e8:d2:17:02:f1:16:39:3f: 7e:9e:6c:d7:fa:84:cc:59:55:81:b3:bc:37:b3:8d: fb:27:ff:1b:e3:82:fb:56:36:da:b5:07:e2:c1:20: b2:a3:3e:25:51:1c:f7:da:6f:8d:45:c2:c7:03:08: cb:af:a9:ef:51:7e:8c:96:28:ed:42:f8:03:37:ae: df:ce:d3:04:39:7a:d0:a1:e7:e9:5a:53:c2:7d:a9: e2:70:e0:4c:52:58:6e:62:87:8f:b4:cd:4a:d6:78: e9:6e:07:74:5e:24:a6:75:b4:18:54:45:12:ec:20: 9c:39:27:c4:11:31:d8:e0:a5:78:a9:99:bd:03:5c: 17:34:46:ca:bc:b8:bc:88:5d:4c:23:5e:3e:ea:5d: 4c:8c:f4:dc:12:ef:14:fc:8a:19:a2:e5:31:23:cf: f6:b2:82:48:ec:9a:8c:aa:64:58:03:63:59:03:aa: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:91:9B:83:34:0E:68:09:F4:14:61:53:72:5D:35:93:ED:43:4E:83 X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:40:26:8c:e0:0a:94:87:a2:a6:32:09:74:a1:a8:ce:ad:69: fa:f2:45:78:5a:92:6b:ef:89:88:6b:85:7f:df:df:32:f4:89: 1d:77:1a:08:88:53:2d:fd:ca:7f:6e:e2:a7:17:1c:cf:2e:cf: ba:49:80:75:6f:49:c8:6a:e2:42:ff:40:8d:26:5d:31:f8:eb: 22:26:b3:72:9c:dd:12:d7:7e:8c:5b:b5:bc:93:74:24:4d:cc: de:39:9e:2b:3a:e4:7c:ed:4c:da:5f:ac:27:ef:96:aa:c3:57: eb:90:bb:3a:12:d4:3e:36:28:f6:3f:0f:83:6d:29:e1:ce:aa: 04:58:3c:8f:3f:db:15:32:90:4f:cb:0b:97:b8:30:fc:eb:14: 92:bb:e7:0a:ec:cb:ee:7b:56:a3:9f:5d:cc:a6:16:5d:69:ab: 1c:89:d1:5d:dd:36:51:2b:6c:fb:aa:a5:1f:c0:94:ee:4e:0e: 4c:1b:55:f2:ad:32:1f:5a:3a:fb:66:6a:ec:08:1f:ab:ab:8f: 67:cb:80:5b:ce:7d:94:e4:81:9e:1a:43:3e:db:63:ab:40:60: 78:e4:92:16:e5:2f:9a:77:08:28:55:c8:84:ab:0f:45:70:86: 5e:de:ff:ee:cf:f6:a9:11:c8:57:cd:02:ae:3f:f0:01:60:8a: ae:39:9f:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZijBkUct3SdeN9Y3Iy9BTr6gP5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNjAzMjUxNTM2NTlaFw0yNjAzMjkwMTQzNTlaMDMxMTAvBgNV BAMTKDBEOTE5QjgzMzQwRTY4MDlGNDE0NjE1MzcyNUQzNTkzRUQ0MzRFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ay0fyElr7ArWn/ijT7vwgiao MafP1xBS/LnlMoBqnFlSk5VR+Bz3LYvRcimTmW0asdlLwKpon+4VxnCzP15uEiFk HzK7GB9Khc4nIA0b9Kro0hcC8RY5P36ebNf6hMxZVYGzvDezjfsn/xvjgvtWNtq1 B+LBILKjPiVRHPfab41FwscDCMuvqe9RfoyWKO1C+AM3rt/O0wQ5etCh5+laU8J9 qeJw4ExSWG5ih4+0zUrWeOluB3ReJKZ1tBhURRLsIJw5J8QRMdjgpXipmb0DXBc0 Rsq8uLyIXUwjXj7qXUyM9NwS7xT8ihmi5TEjz/aygkjsmoyqZFgDY1kDqroTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDZGbgzQOaAn0FGFTcl01k+1DToMwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1AJozgCpSHoqYyCXShqM6tafryRXhakmvv iYhrhX/f3zL0iR13GgiIUy39yn9u4qcXHM8uz7pJgHVvSchq4kL/QI0mXTH46yIm s3Kc3RLXfoxbtbyTdCRNzN45nis65HztTNpfrCfvlqrDV+uQuzoS1D42KPY/D4Nt KeHOqgRYPI8/2xUykE/LC5e4MPzrFJK75wrsy+57VqOfXcymFl1pqxyJ0V3dNlEr bPuqpR/AlO5ODkwbVfKtMh9aOvtmauwIH6urj2fLgFvOfZTkgZ4aQz7bY6tAYHjk khblL5p3CChVyISrD0Vwhl7e/+7P9qkRyFfNAq4/8AFgiq45nyM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:05:49 2026 by rpki-client