$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: drEhTX/66P7hvRaX6Bal95qgHa12M2pQzqkwPtZIUI0= Subject key identifier: 13:1F:52:0E:90:74:0E:A8:15:57:04:0A:E4:4C:B2:9E:49:FC:42:61 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 6F2A213469C2005CADD77A9A9ECB04B050574954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: 010A Signing time: Tue 24 Mar 2026 14:02:14 +0000 Manifest this update: Tue 24 Mar 2026 13:57:14 +0000 Manifest next update: Fri 27 Mar 2026 19:23:14 +0000 Files and hashes: 1: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: EhPTghbLlOlQx+2b8OaL/Md5uHf8mfDagTELU/txL3s=) 2: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: ODR1nhecNf1PNEUsr6U6g2HSVbKZCJoeERdVZUfBxjU=) 3: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: l3iR50nUIesRrXuxRedIB5m4gPlIpbGPPv3QPItBtu8=) 4: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: nYNGAgZ/KHJJA/3d3uL0ysMNm9weFEF7cJoGGKweKrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2a:21:34:69:c2:00:5c:ad:d7:7a:9a:9e:cb:04:b0:50:57:49:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Mar 24 13:57:14 2026 GMT Not After : Mar 27 19:23:14 2026 GMT Subject: CN=131F520E90740EA81557040AE44CB29E49FC4261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:95:0d:f3:be:ff:70:08:9e:e0:1d:c3:5e:a2: 70:f6:5b:a8:c0:14:21:be:f1:40:48:53:2f:b1:60: be:58:19:8e:2f:5a:0e:65:ac:1a:fb:c9:7c:09:8a: 52:ad:fd:cf:c8:16:c1:c3:34:59:e5:65:69:bf:47: b9:ee:95:d3:97:6d:a2:50:97:a5:e2:1f:6b:ee:3a: 62:d7:98:89:9e:7e:66:6c:a6:e8:97:6e:96:6d:f0: b4:86:b1:a1:7b:57:ea:d8:15:f2:4c:47:34:69:b4: 7b:01:a3:f3:b6:a6:3a:91:bb:b9:c4:41:32:40:92: 25:28:c1:38:68:c6:71:e2:1a:8b:9f:5c:6b:8f:f2: 46:84:4a:33:9a:9f:ba:f1:5a:0b:dc:80:96:bc:d4: 3f:f8:95:e0:c5:66:6f:31:df:c7:ec:c5:62:87:87: 9e:95:e1:e6:63:45:5e:e4:ee:0c:23:9d:5b:ce:84: ed:9c:ee:2d:b3:2e:80:1d:e4:d0:94:44:4f:48:ff: ef:5a:31:46:a5:86:a0:be:68:16:41:7c:e9:43:3d: 7c:56:af:8b:b0:39:f8:59:aa:d6:7b:88:a4:55:6a: d0:45:07:7d:82:97:01:6b:ac:f2:cc:d9:a9:2a:b3: 4c:08:4f:6c:8d:74:45:ff:08:13:dc:c7:1d:01:b8: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1F:52:0E:90:74:0E:A8:15:57:04:0A:E4:4C:B2:9E:49:FC:42:61 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ab:82:53:81:93:b9:71:a2:b3:cc:d1:6a:41:0a:75:90:3d: a0:ad:60:f9:76:d4:3a:34:54:f3:28:11:44:ec:2f:9c:21:53: a0:59:6a:de:83:51:bd:2e:db:25:39:a0:38:85:95:55:62:f2: 05:a2:ac:c8:50:35:08:fc:39:96:a7:19:83:30:14:c0:53:f4: eb:a5:09:cd:62:d1:53:d0:a1:96:7f:ed:49:f7:a4:49:e4:61: ea:fb:06:82:9b:6c:09:2d:22:a1:fb:06:91:d6:1e:d3:30:19: 0b:14:7f:c9:a6:5d:f1:14:37:ed:da:b2:14:9b:c4:dd:b7:4f: 4e:ba:46:b8:8b:95:16:68:17:ca:74:1b:87:7a:12:77:ea:cf: 1b:ea:26:0d:ee:f8:7e:15:31:50:85:20:17:50:13:8c:e6:45: f6:04:48:9d:5c:33:c3:d6:eb:c5:03:e5:41:a7:6a:be:4c:af: a2:ac:f0:a8:85:9b:96:09:d5:25:42:62:42:1b:33:f0:d2:a7: 66:54:7c:64:e0:28:c2:d0:84:ec:62:ea:ab:9a:53:8f:5b:e9: ad:83:59:89:a6:d0:27:91:47:24:71:94:74:f7:27:f4:d8:e7: 70:a5:39:ce:70:34:80:91:0a:13:89:02:3a:3d:1f:0a:fc:7c: 5f:28:99:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbyohNGnCAFyt13qanssEsFBXSVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNjAzMjQxMzU3MTRaFw0yNjAzMjcxOTIzMTRaMDMxMTAvBgNV BAMTKDEzMUY1MjBFOTA3NDBFQTgxNTU3MDQwQUU0NENCMjlFNDlGQzQyNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDglQ3zvv9wCJ7gHcNeonD2W6jA FCG+8UBIUy+xYL5YGY4vWg5lrBr7yXwJilKt/c/IFsHDNFnlZWm/R7nuldOXbaJQ l6XiH2vuOmLXmImefmZspuiXbpZt8LSGsaF7V+rYFfJMRzRptHsBo/O2pjqRu7nE QTJAkiUowThoxnHiGoufXGuP8kaESjOan7rxWgvcgJa81D/4leDFZm8x38fsxWKH h56V4eZjRV7k7gwjnVvOhO2c7i2zLoAd5NCURE9I/+9aMUalhqC+aBZBfOlDPXxW r4uwOfhZqtZ7iKRVatBFB32ClwFrrPLM2akqs0wIT2yNdEX/CBPcxx0BuBqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEx9SDpB0DqgVVwQK5Eyynkn8QmEwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGrglOBk7lxorPM0WpBCnWQPaCtYPl21Do0 VPMoEUTsL5whU6BZat6DUb0u2yU5oDiFlVVi8gWirMhQNQj8OZanGYMwFMBT9Oul Cc1i0VPQoZZ/7Un3pEnkYer7BoKbbAktIqH7BpHWHtMwGQsUf8mmXfEUN+3ashSb xN23T066RriLlRZoF8p0G4d6EnfqzxvqJg3u+H4VMVCFIBdQE4zmRfYESJ1cM8PW 68UD5UGnar5Mr6Ks8KiFm5YJ1SVCYkIbM/DSp2ZUfGTgKMLQhOxi6quaU49b6a2D WYmm0CeRRyRxlHT3J/TY53ClOc5wNICRChOJAjo9Hwr8fF8omR8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:19 2026 by rpki-client