$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: O8Hfe/t3EngGap3o5e/dfA96y8SKJ8Gx7D2V3gr4NBE= Subject key identifier: 60:4C:E7:73:2A:15:E7:35:17:D5:B3:91:C3:EC:92:56:AD:A9:65:A4 Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 1730E395341934D8510B8DADFD057BB698C60D91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 01F1 Signing time: Sun 19 Oct 2025 09:51:52 +0000 Manifest this update: Sun 19 Oct 2025 09:46:52 +0000 Manifest next update: Wed 22 Oct 2025 17:54:52 +0000 Files and hashes: 1: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: /s2lvdSdjxREx/aoqkMihQHRNJ1IROpxkptDIMxVIxY=) 2: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=) 3: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: vs5RIVJc80gvdbMwYUf3UH5oDO3pPFbrNK7pJMccNgE=) 4: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: GtkgNmJXl7nxDiRttWokSpJjVQu0Ps6kMb8tIC7Cyu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:30:e3:95:34:19:34:d8:51:0b:8d:ad:fd:05:7b:b6:98:c6:0d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: Oct 19 09:46:52 2025 GMT Not After : Oct 22 17:54:52 2025 GMT Subject: CN=604CE7732A15E73517D5B391C3EC9256ADA965A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a7:d3:45:96:1b:45:da:af:5c:21:43:07:dc: 73:97:36:d3:f7:91:90:43:e7:33:fb:dc:71:3b:d2: 41:0c:b0:a5:48:5a:64:51:97:d9:b0:d2:d9:8a:b5: 7d:6d:59:31:0d:6d:55:b8:9d:b7:9a:3d:54:28:eb: 82:fc:28:79:7f:df:10:cc:e4:ec:87:2d:31:b0:b6: 7d:4c:c3:ba:31:ca:6b:91:30:37:ce:1d:2c:c8:83: 37:4f:fc:7d:0d:5c:f3:fd:27:57:92:90:de:3b:e6: ff:ba:7c:3b:34:d7:51:c7:47:02:f3:4b:2b:4f:de: 20:a1:2b:b4:5c:7e:95:b7:2b:b1:de:96:81:15:de: 54:84:67:a0:c7:26:16:bd:94:c7:c2:77:a1:44:ab: 1f:9a:06:e8:25:2a:e3:86:fa:21:14:45:d3:bd:a5: 33:90:7c:7d:46:4b:d4:8d:be:65:7e:6c:37:bc:ba: 13:e5:fe:79:ef:3a:d8:38:6e:de:99:74:c3:d0:af: fb:88:c4:1a:03:ab:9b:74:a9:b1:e8:7f:e1:14:9e: fd:47:79:a8:00:80:5b:ca:58:bb:be:39:b1:a6:ca: 49:49:71:09:97:f7:07:49:ed:95:99:5a:a1:f2:8a: c1:f4:9f:63:03:4b:e5:af:aa:d8:df:0e:2f:3e:4d: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4C:E7:73:2A:15:E7:35:17:D5:B3:91:C3:EC:92:56:AD:A9:65:A4 X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1f:b9:75:2b:bd:eb:a2:fa:a1:5c:5c:2d:13:6a:68:97:f0: 33:3f:16:df:dd:04:9b:9b:13:65:58:43:71:d1:af:d9:5e:1b: 42:b4:23:de:18:a0:47:bb:6d:8e:6f:a2:3d:53:66:d9:33:2b: 4e:dd:c0:4f:92:34:43:f0:84:bd:42:73:9e:0d:a4:fb:31:9a: eb:78:f3:ed:59:11:42:d9:75:f6:a2:c8:74:af:09:44:fb:22: aa:f7:e9:c3:20:f5:5f:4b:48:c5:58:0a:17:b0:c8:15:7a:3f: a7:55:ed:61:62:b6:79:69:43:42:5b:d7:f7:ca:60:b1:46:1f: 8f:28:8c:f4:2a:fd:37:ec:67:d5:50:4a:09:f2:1e:a3:e4:1e: af:50:5c:25:d1:9c:2e:fe:b8:d3:11:4c:31:6e:db:8e:11:1a: 5c:2d:b6:1a:9d:1a:48:51:9b:12:9e:1a:84:6e:14:78:68:17: c4:eb:fb:01:dd:4d:2d:ea:24:7b:a4:21:3d:73:0d:3b:5e:44: d0:ba:45:b2:a5:f5:b0:f6:ab:76:93:83:e6:ce:f5:78:c8:f4: 10:3c:af:c1:40:5e:95:ef:4b:f6:1d:1d:e8:f6:46:d2:e8:aa: 5e:28:9c:4f:01:60:9f:6c:a1:9f:b5:9f:ea:a0:05:ff:b9:d0: ce:b7:51:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzDjlTQZNNhRC42t/QV7tpjGDZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNTEwMTkwOTQ2NTJaFw0yNTEwMjIxNzU0NTJaMDMxMTAvBgNV BAMTKDYwNENFNzczMkExNUU3MzUxN0Q1QjM5MUMzRUM5MjU2QURBOTY1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzp9NFlhtF2q9cIUMH3HOXNtP3 kZBD5zP73HE70kEMsKVIWmRRl9mw0tmKtX1tWTENbVW4nbeaPVQo64L8KHl/3xDM 5OyHLTGwtn1Mw7oxymuRMDfOHSzIgzdP/H0NXPP9J1eSkN475v+6fDs011HHRwLz SytP3iChK7RcfpW3K7HeloEV3lSEZ6DHJha9lMfCd6FEqx+aBuglKuOG+iEURdO9 pTOQfH1GS9SNvmV+bDe8uhPl/nnvOtg4bt6ZdMPQr/uIxBoDq5t0qbHof+EUnv1H eagAgFvKWLu+ObGmyklJcQmX9wdJ7ZWZWqHyisH0n2MDS+WvqtjfDi8+TTpXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYEzncyoV5zUX1bORw+ySVq2pZaQwHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0fuXUrveui+qFcXC0TamiX8DM/Ft/dBJub E2VYQ3HRr9leG0K0I94YoEe7bY5voj1TZtkzK07dwE+SNEPwhL1Cc54NpPsxmut4 8+1ZEULZdfaiyHSvCUT7Iqr36cMg9V9LSMVYChewyBV6P6dV7WFitnlpQ0Jb1/fK YLFGH48ojPQq/TfsZ9VQSgnyHqPkHq9QXCXRnC7+uNMRTDFu244RGlwtthqdGkhR mxKeGoRuFHhoF8Tr+wHdTS3qJHukIT1zDTteRNC6RbKl9bD2q3aTg+bO9XjI9BA8 r8FAXpXvS/YdHej2RtLoql4onE8BYJ9soZ+1n+qgBf+50M63URA= -----END CERTIFICATE-----Generated at Mon Oct 20 11:59:48 2025 by rpki-client