$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: rYDOshzYAZAs/ixFpZFYakRhx7YeH1raBMrtUihGpac= Subject key identifier: B3:83:CD:61:14:D1:B5:27:52:C9:9E:2F:53:EF:8F:72:A6:F3:2A:8F Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 511A2F2CD2DD286709691B335D6A9C9188670CF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 0237 Signing time: Tue 24 Mar 2026 12:02:09 +0000 Manifest this update: Tue 24 Mar 2026 11:57:09 +0000 Manifest next update: Fri 27 Mar 2026 18:44:09 +0000 Files and hashes: 1: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: vs5RIVJc80gvdbMwYUf3UH5oDO3pPFbrNK7pJMccNgE=) 2: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: VI7i8iGtIJiqrtcgHIw+fCe8DbJNL0vmU3j0hMNhpZw=) 3: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=) 4: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: GtkgNmJXl7nxDiRttWokSpJjVQu0Ps6kMb8tIC7Cyu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1a:2f:2c:d2:dd:28:67:09:69:1b:33:5d:6a:9c:91:88:67:0c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: Mar 24 11:57:09 2026 GMT Not After : Mar 27 18:44:09 2026 GMT Subject: CN=B383CD6114D1B52752C99E2F53EF8F72A6F32A8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:60:f9:d2:a7:9d:a1:c4:45:f9:de:75:4d: 3d:34:e0:86:4b:12:86:be:60:41:33:7c:ff:8f:cc: fc:9b:f3:43:00:f0:f4:41:04:92:c8:e2:d3:4a:73: 26:8b:30:ea:3e:c2:af:cd:17:4a:0a:ba:13:d7:1b: c1:4c:2a:aa:96:94:6c:f4:f9:f1:e8:51:f2:2d:c5: b0:68:5e:ff:2a:d6:79:64:39:03:9a:9f:8b:3b:48: 1e:d9:0f:b4:95:0a:ba:ea:6d:24:44:d6:57:d1:b0: 49:c7:94:cb:e2:d5:5a:d8:65:62:8f:89:34:1f:03: 6b:a2:0c:e9:18:95:14:87:41:2a:c2:6c:0c:13:de: cc:6d:e5:d5:8f:8a:6f:42:b5:69:fd:bf:db:d5:f6: 3f:71:7e:c1:14:55:ee:e0:c1:30:32:00:be:07:70: ef:cc:59:38:f9:d3:aa:1f:b3:06:68:c4:2a:15:3f: 71:08:05:4b:8b:1a:63:7c:8a:c7:50:26:b6:69:e3: 99:8f:c0:c9:ae:f1:fd:f4:84:dd:cf:a1:40:fd:33: ac:92:e7:28:9e:ae:37:fd:91:db:be:af:a4:65:4a: 03:f8:84:7b:bc:be:34:e7:53:b6:d4:a5:84:c4:b0: 4f:cd:cd:1b:01:a5:ee:93:74:73:9b:42:8d:77:5c: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:83:CD:61:14:D1:B5:27:52:C9:9E:2F:53:EF:8F:72:A6:F3:2A:8F X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3d:1f:5b:71:f4:bd:4e:5a:16:4a:87:4e:63:15:5f:1b:1a: 93:45:b5:a8:d7:00:fb:fe:c2:54:3e:04:01:4e:50:99:71:5b: 4b:2f:d1:f3:75:cd:5d:7b:86:13:45:c9:da:24:d6:a1:c7:15: 18:47:e5:a2:a7:2f:62:7b:1c:9a:8d:a2:75:4b:44:ac:8d:27: 8c:24:22:d4:09:e8:65:24:88:67:49:4a:83:9f:b3:ed:3a:e9: 29:b3:db:83:7d:76:dc:ef:d0:00:c7:17:25:6a:58:bf:aa:f6: 59:61:87:9e:80:f9:64:72:2a:83:d6:3d:ef:4e:05:85:f9:9f: a3:71:30:0f:cb:2c:a8:d6:6b:39:b2:89:e4:7d:67:f7:55:a1: ea:ef:29:7d:82:04:c2:9f:d4:d5:1d:de:e0:94:d6:f8:df:94: cc:2f:6b:55:17:cf:04:7d:25:47:8d:c3:2f:a9:47:00:f1:4a: 05:42:67:2e:2f:4a:60:92:94:43:98:0f:35:94:a1:f5:43:00: 0c:fd:2a:7d:f0:f9:87:a1:9c:17:0e:8b:a6:a1:37:3f:8f:6d: c3:c5:d8:e5:92:19:59:31:0b:b0:f4:be:cb:92:35:63:55:d8: da:68:69:30:1a:da:e5:c7:c9:a8:2a:a0:1e:c1:26:3a:23:d1: 23:25:68:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUURovLNLdKGcJaRszXWqckYhnDPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNjAzMjQxMTU3MDlaFw0yNjAzMjcxODQ0MDlaMDMxMTAvBgNV BAMTKEIzODNDRDYxMTREMUI1Mjc1MkM5OUUyRjUzRUY4RjcyQTZGMzJBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6VmD50qedocRF+d51TT004IZL Eoa+YEEzfP+PzPyb80MA8PRBBJLI4tNKcyaLMOo+wq/NF0oKuhPXG8FMKqqWlGz0 +fHoUfItxbBoXv8q1nlkOQOan4s7SB7ZD7SVCrrqbSRE1lfRsEnHlMvi1VrYZWKP iTQfA2uiDOkYlRSHQSrCbAwT3sxt5dWPim9CtWn9v9vV9j9xfsEUVe7gwTAyAL4H cO/MWTj506ofswZoxCoVP3EIBUuLGmN8isdQJrZp45mPwMmu8f30hN3PoUD9M6yS 5yierjf9kdu+r6RlSgP4hHu8vjTnU7bUpYTEsE/NzRsBpe6TdHObQo13XIHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs4PNYRTRtSdSyZ4vU++PcqbzKo8wHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo9H1tx9L1OWhZKh05jFV8bGpNFtajXAPv+ wlQ+BAFOUJlxW0sv0fN1zV17hhNFydok1qHHFRhH5aKnL2J7HJqNonVLRKyNJ4wk ItQJ6GUkiGdJSoOfs+066Smz24N9dtzv0ADHFyVqWL+q9llhh56A+WRyKoPWPe9O BYX5n6NxMA/LLKjWazmyieR9Z/dVoervKX2CBMKf1NUd3uCU1vjflMwva1UXzwR9 JUeNwy+pRwDxSgVCZy4vSmCSlEOYDzWUofVDAAz9Kn3w+YehnBcOi6ahNz+PbcPF 2OWSGVkxC7D0vsuSNWNV2NpoaTAa2uXHyagqoB7BJjoj0SMlaHY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:43:33 2026 by rpki-client