$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: Y7IIT2nypKNaUHmBJcksUcWNmFK6jXyHexYEj0es5Bc= Subject key identifier: 0E:18:D3:19:67:9D:B3:23:B7:55:97:58:B0:31:6A:98:E9:D8:0A:5D Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 0A7810611A562347D261EB47430611A49B3C9011 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 024A Signing time: Thu 26 Mar 2026 00:30:45 +0000 Manifest this update: Thu 26 Mar 2026 00:25:45 +0000 Manifest next update: Sun 29 Mar 2026 02:51:45 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: MVBRsOIN1IZt0jLk1q+iLxrhtC7Paa/XY5pFKcxb+gg=) 2: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: G1ZAtVFl8VG/gYfc4EYdl05ZPWzNHnTYzxrgL9LheQs=) 3: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: j7N2ECb0BVGbVEWHzzwqnT0StFx/Z+YDBsqzDzBgXkg=) 4: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:78:10:61:1a:56:23:47:d2:61:eb:47:43:06:11:a4:9b:3c:90:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Mar 26 00:25:45 2026 GMT Not After : Mar 29 02:51:45 2026 GMT Subject: CN=0E18D319679DB323B7559758B0316A98E9D80A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:4b:1b:f2:f6:39:87:12:b1:e1:b5:25:97: 53:84:67:b1:2f:8d:3c:09:42:e3:48:ff:88:29:f6: 8e:6c:59:c5:8f:a4:26:c0:77:3d:6a:24:a7:82:a1: c6:ff:4e:b5:f0:e6:ab:29:79:9a:3f:e3:dc:d2:e4: 6f:3b:85:dc:53:ec:e2:91:10:31:79:9c:61:5b:a7: 1d:33:0f:68:bb:ca:9d:2d:e7:1c:4b:b6:a4:90:4a: 88:f3:a9:01:c9:04:20:99:83:15:19:61:20:a7:e4: cd:d7:4a:d4:c5:61:62:e4:5c:ed:e4:5a:fc:fb:15: 39:6a:ee:30:be:13:22:a1:0e:a4:e9:0a:0d:e3:b4: 60:f6:c7:af:83:61:d5:d4:b1:8b:e2:9e:ba:d3:65: 31:8e:ff:9f:26:69:f1:7f:96:90:ff:09:4c:c0:39: 51:2b:a0:db:56:6e:ba:39:28:19:cd:25:8e:19:a9: b3:44:1f:a9:5f:6b:64:ff:b7:d9:71:f7:94:4e:b2: 22:fb:81:59:87:cb:8a:70:2f:d6:9a:69:14:d9:c8: 42:c6:f2:de:4e:25:01:d6:ba:af:57:57:ef:f3:d2: 9c:80:12:fd:4b:11:09:88:69:9b:8e:f2:07:2e:0f: ac:d9:da:72:58:b2:8d:d6:05:d7:91:6a:3b:42:9b: 81:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:18:D3:19:67:9D:B3:23:B7:55:97:58:B0:31:6A:98:E9:D8:0A:5D X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ed:3d:8c:b5:eb:e1:a4:60:01:29:b9:13:a4:fd:f9:04:26: 4f:c0:05:d5:c6:19:28:70:87:7f:90:2c:a9:18:cd:e7:68:9b: 44:40:6e:0d:ad:c5:c8:31:00:00:41:4c:21:cf:f7:f7:9b:97: b9:4d:8a:d5:0a:e8:99:01:ea:61:04:f4:69:81:ac:53:50:64: 74:46:35:c5:5d:86:7b:e6:e0:36:51:bd:20:56:64:6c:8f:aa: 3b:2e:9f:d3:6b:6e:5d:51:e4:72:72:51:40:37:e1:80:af:fc: 9f:65:16:e9:e3:fc:c3:24:d7:70:0f:71:5b:d1:26:81:38:69: 94:5f:d0:64:1e:21:55:ba:63:50:65:7d:40:5a:78:43:d3:96: 0f:5a:2d:a5:6d:f4:ff:d5:43:80:fd:a2:7b:65:d4:df:e9:69: 5c:dc:a8:86:9f:e8:35:75:39:1d:8e:54:ad:5b:c3:b3:ac:08: 61:ff:c4:55:e1:b7:f9:16:cd:83:b1:49:85:81:d6:f8:84:7b: c7:83:36:e8:cb:b7:8b:30:08:7e:7c:d8:04:ea:29:bb:af:ec: c9:eb:60:ad:3a:93:f1:71:78:0d:81:97:91:90:3e:4f:99:93: 35:68:0e:40:6b:d2:f2:62:f9:fb:73:f5:e6:29:c7:52:7e:d7: 45:c1:c8:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCngQYRpWI0fSYetHQwYRpJs8kBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNjAzMjYwMDI1NDVaFw0yNjAzMjkwMjUxNDVaMDMxMTAvBgNV BAMTKDBFMThEMzE5Njc5REIzMjNCNzU1OTc1OEIwMzE2QTk4RTlEODBBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvksb8vY5hxKx4bUll1OEZ7Ev jTwJQuNI/4gp9o5sWcWPpCbAdz1qJKeCocb/TrXw5qspeZo/49zS5G87hdxT7OKR EDF5nGFbpx0zD2i7yp0t5xxLtqSQSojzqQHJBCCZgxUZYSCn5M3XStTFYWLkXO3k Wvz7FTlq7jC+EyKhDqTpCg3jtGD2x6+DYdXUsYvinrrTZTGO/58mafF/lpD/CUzA OVEroNtWbro5KBnNJY4ZqbNEH6lfa2T/t9lx95ROsiL7gVmHy4pwL9aaaRTZyELG 8t5OJQHWuq9XV+/z0pyAEv1LEQmIaZuO8gcuD6zZ2nJYso3WBdeRajtCm4HpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDhjTGWedsyO3VZdYsDFqmOnYCl0wHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIntPYy16+GkYAEpuROk/fkEJk/ABdXGGShw h3+QLKkYzedom0RAbg2txcgxAABBTCHP9/ebl7lNitUK6JkB6mEE9GmBrFNQZHRG NcVdhnvm4DZRvSBWZGyPqjsun9Nrbl1R5HJyUUA34YCv/J9lFunj/MMk13APcVvR JoE4aZRf0GQeIVW6Y1BlfUBaeEPTlg9aLaVt9P/VQ4D9ontl1N/paVzcqIaf6DV1 OR2OVK1bw7OsCGH/xFXht/kWzYOxSYWB1viEe8eDNujLt4swCH582ATqKbuv7Mnr YK06k/FxeA2Bl5GQPk+ZkzVoDkBr0vJi+ftz9eYpx1J+10XByC0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:32:00 2026 by rpki-client