$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: /RG0FluBNoVA/rvL1EoE7SRw6zsfjP8TucK7+F6Ngps= Subject key identifier: ED:A5:7A:1E:21:4F:3C:F0:1B:CF:75:43:BA:AA:19:98:03:53:EA:E0 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 462E226429D94B7F0CAC266A5ED68AFB86B0565C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: C5 Signing time: Sun 19 Oct 2025 11:51:55 +0000 Manifest this update: Sun 19 Oct 2025 11:46:55 +0000 Manifest next update: Wed 22 Oct 2025 13:33:55 +0000 Files and hashes: 1: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: l3iR50nUIesRrXuxRedIB5m4gPlIpbGPPv3QPItBtu8=) 2: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: Iho749MEDjgu6eig0X3S2zouVZ0w4hFbebj0U7EcQNU=) 3: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: ODR1nhecNf1PNEUsr6U6g2HSVbKZCJoeERdVZUfBxjU=) 4: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: nYNGAgZ/KHJJA/3d3uL0ysMNm9weFEF7cJoGGKweKrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2e:22:64:29:d9:4b:7f:0c:ac:26:6a:5e:d6:8a:fb:86:b0:56:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Oct 19 11:46:55 2025 GMT Not After : Oct 22 13:33:55 2025 GMT Subject: CN=EDA57A1E214F3CF01BCF7543BAAA19980353EAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:84:47:5e:35:82:21:c9:c3:24:58:9a:ab: c0:5d:86:96:75:a3:1d:a3:fc:1a:cf:6c:28:49:7d: 09:5d:30:ae:61:82:0f:fd:b3:a4:ee:40:ec:5b:3a: df:b5:c1:37:88:90:74:5f:d4:5d:05:d5:69:ce:06: 4a:bc:d9:a5:6e:b7:52:00:95:48:83:21:d6:b4:cc: c7:eb:c7:e5:38:4d:09:96:2a:ea:49:fc:5e:50:90: 73:2f:3f:ec:c3:fc:94:94:89:3f:81:a5:f3:18:e9: 8b:be:cb:00:62:b8:15:51:2a:2c:10:1d:df:fd:c9: ec:23:a6:b7:35:1f:dd:83:8b:6a:19:00:c7:29:05: fa:9a:64:67:bf:e6:be:4a:a8:2f:56:4a:85:f8:fe: 6f:97:94:e3:c5:f0:e2:67:41:92:ef:d0:c1:db:64: 46:d7:73:ce:66:37:5d:c0:2c:9f:53:b6:e4:00:0d: 50:8c:c4:ce:dd:0c:e1:0a:3f:85:26:73:ce:d0:cf: 84:2a:84:1b:2a:2d:c4:64:a0:96:7a:67:35:b7:c8: b5:30:80:9d:96:54:02:14:65:54:d8:c5:a2:5d:84: d1:83:36:12:ed:59:11:58:e4:9b:71:c9:91:53:9a: 8b:e0:79:64:25:c6:44:f7:f8:d7:80:0c:39:d2:45: 44:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A5:7A:1E:21:4F:3C:F0:1B:CF:75:43:BA:AA:19:98:03:53:EA:E0 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b2:94:47:79:12:81:dd:12:14:3a:00:61:b7:33:39:ba:c0: 16:02:66:f6:ea:4c:7c:5d:f8:2e:32:f5:4f:2a:1a:6d:9d:66: 23:9c:ba:93:c1:12:20:d9:d2:72:92:bc:dd:25:32:81:1d:cd: 60:46:94:8b:9c:d4:67:bc:ec:82:de:89:9b:37:25:73:8a:0f: fe:c1:12:fe:0d:a3:1f:aa:d7:ea:bb:b0:87:b5:c8:b2:54:dc: 1d:4e:75:59:af:8a:f9:23:7d:a5:47:c1:12:5c:a6:81:a7:1a: e6:19:d0:8b:0f:96:83:d8:0a:6b:97:59:5f:47:b3:99:ad:e8: e4:cc:43:89:47:26:f1:49:75:b0:a5:85:28:98:17:7b:62:f0: 5b:28:c0:d8:fd:e4:a7:18:a3:f6:7c:e3:3c:bf:58:ac:59:3c: f2:21:c8:da:a3:5f:a7:55:21:d6:11:40:f2:33:d2:8c:f9:72: 12:c4:77:5c:1f:84:b4:d4:9c:81:17:40:8e:3a:d2:86:8e:57: 8a:3b:4e:aa:34:1e:06:cc:25:bd:5e:de:7f:d8:91:f5:d0:b1: a4:ff:11:43:32:61:35:d7:0b:c3:34:55:ff:90:74:9a:2f:3f: 58:09:fb:81:92:35:2e:ee:ee:f1:4b:00:c7:f1:88:9a:1e:62: 97:18:72:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURi4iZCnZS38MrCZqXtaK+4awVlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTEwMTkxMTQ2NTVaFw0yNTEwMjIxMzMzNTVaMDMxMTAvBgNV BAMTKEVEQTU3QTFFMjE0RjNDRjAxQkNGNzU0M0JBQUExOTk4MDM1M0VBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CIRHXjWCIcnDJFiaq8BdhpZ1 ox2j/BrPbChJfQldMK5hgg/9s6TuQOxbOt+1wTeIkHRf1F0F1WnOBkq82aVut1IA lUiDIda0zMfrx+U4TQmWKupJ/F5QkHMvP+zD/JSUiT+BpfMY6Yu+ywBiuBVRKiwQ Hd/9yewjprc1H92Di2oZAMcpBfqaZGe/5r5KqC9WSoX4/m+XlOPF8OJnQZLv0MHb ZEbXc85mN13ALJ9TtuQADVCMxM7dDOEKP4Umc87Qz4QqhBsqLcRkoJZ6ZzW3yLUw gJ2WVAIUZVTYxaJdhNGDNhLtWRFY5JtxyZFTmovgeWQlxkT3+NeADDnSRUQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7aV6HiFPPPAbz3VDuqoZmANT6uAwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2ylEd5EoHdEhQ6AGG3Mzm6wBYCZvbqTHxd +C4y9U8qGm2dZiOcupPBEiDZ0nKSvN0lMoEdzWBGlIuc1Ge87ILeiZs3JXOKD/7B Ev4Nox+q1+q7sIe1yLJU3B1OdVmvivkjfaVHwRJcpoGnGuYZ0IsPloPYCmuXWV9H s5mt6OTMQ4lHJvFJdbClhSiYF3ti8FsowNj95KcYo/Z84zy/WKxZPPIhyNqjX6dV IdYRQPIz0oz5chLEd1wfhLTUnIEXQI460oaOV4o7Tqo0HgbMJb1e3n/YkfXQsaT/ EUMyYTXXC8M0Vf+QdJovP1gJ+4GSNS7u7vFLAMfxiJoeYpcYciI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:15 2025 by rpki-client