$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: zmfgBe1yCrRaF+JY25lPp/bSQlo2TPerruUFoHwVvgA= Subject key identifier: C7:F6:C6:50:B1:D6:06:97:89:8E:74:47:68:A7:14:0C:29:7C:D2:43 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 67D10C085CF0737CCE3CEEBE394B9E0B5B6B9452 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 0202 Signing time: Sun 19 Oct 2025 19:10:40 +0000 Manifest this update: Sun 19 Oct 2025 19:05:40 +0000 Manifest next update: Wed 22 Oct 2025 21:56:40 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 2: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 3: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 4: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 5: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 6: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: 502H7MhyoXEhWMbxlThnmd8/RTbTN3NyyxQ9FbWi14w=) 7: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d1:0c:08:5c:f0:73:7c:ce:3c:ee:be:39:4b:9e:0b:5b:6b:94:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Oct 19 19:05:40 2025 GMT Not After : Oct 22 21:56:40 2025 GMT Subject: CN=C7F6C650B1D60697898E744768A7140C297CD243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:5c:0b:a8:2b:b1:69:76:79:12:15:2d:91: 99:ed:10:d7:ff:a9:df:c2:63:d0:c0:8f:d7:82:ae: 0e:1d:46:3b:cd:ea:a0:d0:6f:51:15:02:6c:ee:ea: 09:1e:3f:68:29:2f:0b:46:ca:12:22:b4:d3:e4:85: c2:c0:9a:67:d7:66:1e:65:45:1b:8d:99:71:7a:d9: f7:4b:16:ce:a0:da:dc:3a:db:77:a6:d5:53:5e:25: 03:d3:0d:3a:bf:ef:d0:c5:e0:61:b1:97:ce:70:a2: 1d:60:97:4e:19:57:0e:d1:fa:00:71:df:e9:43:6a: 3e:6d:17:cd:5b:68:41:9d:fc:59:2a:fe:74:9b:ee: 4e:e6:6c:5c:01:b9:a2:80:29:1c:c2:ce:e1:3a:ee: e2:0b:17:49:5f:c2:33:0b:f6:f2:8a:f2:23:b9:b6: f1:d7:a6:e7:df:a7:61:4d:72:10:84:6e:ff:94:5f: 5b:59:90:b7:66:a6:d5:23:77:40:8e:05:63:5f:44: a9:1e:67:bc:8b:7c:8f:18:54:35:71:59:d5:c4:cd: b8:05:b6:e8:45:d7:d6:8a:1a:68:b1:1a:0a:7b:3c: bd:f7:8f:2f:5c:04:4a:9c:6a:8e:31:52:80:36:8b: 47:aa:6a:da:74:a4:91:09:42:78:45:8c:7d:bc:49: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F6:C6:50:B1:D6:06:97:89:8E:74:47:68:A7:14:0C:29:7C:D2:43 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c6:8c:a8:8e:dd:e3:22:57:77:4b:77:de:f4:cf:28:e8:ad: d8:f9:d7:25:ef:94:98:b1:f3:b8:85:c7:30:d3:45:07:08:b2: cd:cf:9b:60:77:9a:8e:a1:8a:53:21:65:6d:0a:72:ac:e4:bb: 32:d5:cf:ca:0d:b3:f0:11:4e:66:d8:dc:a6:b9:dd:07:4f:63: b3:ad:68:30:62:3e:22:fa:5d:ab:42:87:15:96:b8:d7:b5:10: 24:6c:00:61:c6:a6:59:e4:75:e2:92:43:ee:0c:0c:aa:22:6a: d1:2e:55:8f:b6:47:5b:de:31:45:b7:f4:d3:d8:f9:a8:b8:2a: 6f:13:01:6a:2a:d3:48:b8:90:01:37:6b:ab:c5:4d:fb:1a:24: 05:bb:a0:36:a6:9a:a8:32:80:84:f1:6a:63:a1:aa:73:66:90: 29:ef:69:3c:79:96:5a:c3:b8:c1:c0:e8:be:75:91:cd:cf:a5: a1:59:e3:84:ee:a3:e9:01:7b:53:f2:f3:a4:04:c6:79:53:5e: df:db:f9:cd:35:f8:56:d4:09:66:da:9d:69:2c:36:62:d2:2c: 0c:a2:01:19:57:1a:3e:d4:4c:4e:61:b1:1a:7d:bc:87:b6:12: 2b:7b:14:fe:a0:fb:3c:cf:7d:e5:a4:b6:f7:79:ba:bb:a9:3b: c4:55:b1:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9EMCFzwc3zOPO6+OUueC1trlFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTEwMTkxOTA1NDBaFw0yNTEwMjIyMTU2NDBaMDMxMTAvBgNV BAMTKEM3RjZDNjUwQjFENjA2OTc4OThFNzQ0NzY4QTcxNDBDMjk3Q0QyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLlwLqCuxaXZ5EhUtkZntENf/ qd/CY9DAj9eCrg4dRjvN6qDQb1EVAmzu6gkeP2gpLwtGyhIitNPkhcLAmmfXZh5l RRuNmXF62fdLFs6g2tw623em1VNeJQPTDTq/79DF4GGxl85woh1gl04ZVw7R+gBx 3+lDaj5tF81baEGd/Fkq/nSb7k7mbFwBuaKAKRzCzuE67uILF0lfwjML9vKK8iO5 tvHXpuffp2FNchCEbv+UX1tZkLdmptUjd0COBWNfRKkeZ7yLfI8YVDVxWdXEzbgF tuhF19aKGmixGgp7PL33jy9cBEqcao4xUoA2i0eqatp0pJEJQnhFjH28SderAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx/bGULHWBpeJjnRHaKcUDCl80kMwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbGjKiO3eMiV3dLd970zyjordj51yXvlJix 87iFxzDTRQcIss3Pm2B3mo6hilMhZW0KcqzkuzLVz8oNs/ARTmbY3Ka53QdPY7Ot aDBiPiL6XatChxWWuNe1ECRsAGHGplnkdeKSQ+4MDKoiatEuVY+2R1veMUW39NPY +ai4Km8TAWoq00i4kAE3a6vFTfsaJAW7oDammqgygITxamOhqnNmkCnvaTx5llrD uMHA6L51kc3PpaFZ44Tuo+kBe1Py86QExnlTXt/b+c01+FbUCWbanWksNmLSLAyi ARlXGj7UTE5hsRp9vIe2Eit7FP6g+zzPfeWktvd5urupO8RVscg= -----END CERTIFICATE-----Generated at Mon Oct 20 14:37:15 2025 by rpki-client