$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: R/c9E8cAhL3KKNOVt+7LXoikVKfMdJ9JPs4uZYI71vA= Subject key identifier: 99:9C:5B:95:A9:CF:2F:D7:D0:45:6D:97:39:9B:E3:5E:1D:B9:42:F4 Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 67F4FD1DB11134F0BBE77074A86561069F3E97FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 0271 Signing time: Sun 19 Apr 2026 06:52:07 +0000 Manifest this update: Sun 19 Apr 2026 06:47:07 +0000 Manifest next update: Wed 22 Apr 2026 16:11:07 +0000 Files and hashes: 1: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: zDhU5/5RfI0V8ymqm/BDcf0iSN5UmSfxRPVbXBCBMFk=) 2: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: XRyAJBCILzy4fX/unNl5WejY7kMRCUX/V63qLw4To+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f4:fd:1d:b1:11:34:f0:bb:e7:70:74:a8:65:61:06:9f:3e:97:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Apr 19 06:47:07 2026 GMT Not After : Apr 22 16:11:07 2026 GMT Subject: CN=999C5B95A9CF2FD7D0456D97399BE35E1DB942F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8f:2a:3d:8c:08:25:a3:f3:67:06:d0:69:c0: 29:ec:f1:d5:0e:92:7c:3a:a3:2f:4d:60:91:a4:60: 8f:64:e7:56:1b:f5:0e:c9:de:ef:de:fc:af:50:da: 0f:5b:3c:28:3a:70:49:9a:34:7b:25:01:21:88:e0: 4b:cf:0a:b1:ba:2a:82:01:0a:08:7b:1a:95:1c:44: 48:4d:34:7f:72:bf:e6:1f:87:1a:7b:7c:2e:a1:ac: 9d:3d:0b:2b:99:8a:8a:cf:0a:72:44:d5:3c:7e:f2: cc:d1:0a:02:fd:d3:8e:b8:4e:90:c1:2a:7f:51:5b: 41:4c:b0:a6:cf:7a:3f:ac:25:67:c4:08:46:67:a2: 26:bd:6c:89:76:9e:19:57:ee:d4:00:6d:2a:6f:68: 2a:90:66:67:80:d0:25:98:95:a9:f8:98:1d:97:e2: 19:e3:4b:15:2a:30:90:42:02:d7:8c:c2:56:e9:73: 23:8f:25:51:c3:e4:d2:6c:f7:db:44:88:c8:88:56: 95:18:93:99:d8:9b:2b:3a:4e:d8:cc:ed:bb:a0:e3: 0a:a1:64:f0:ce:c6:9f:e7:e1:70:13:3b:ec:55:35: 5d:74:22:97:aa:de:f4:a5:65:81:8f:b1:57:44:66: ca:f2:07:50:8e:8c:6f:ce:69:c5:4c:03:a5:f3:9c: 7e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9C:5B:95:A9:CF:2F:D7:D0:45:6D:97:39:9B:E3:5E:1D:B9:42:F4 X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e6:2d:23:a4:e4:f7:fe:c2:d6:21:33:1f:8f:ac:97:6f:d9: cd:99:2b:e2:9f:b6:b4:60:00:62:4a:a2:0c:17:2d:bc:62:37: c4:81:d9:37:fe:f0:0c:65:b0:0d:17:f8:e3:45:98:c6:34:46: 03:82:9a:27:cf:a3:83:26:bd:9d:d1:fa:96:5c:56:30:19:5f: ae:84:e3:b8:94:5c:c2:d3:a9:a0:b4:c3:78:ef:fa:8e:b2:40: 2b:e9:45:47:2e:35:1c:c8:a3:d4:32:8b:51:7e:32:18:d6:25: 96:22:e3:71:a8:bc:61:63:49:bf:b2:18:df:eb:47:ee:47:64: 1f:05:e6:91:67:27:a5:72:a0:dc:6f:67:a4:bf:bc:be:cf:c9: 98:0d:0c:49:db:a4:7c:eb:90:0c:ac:d1:32:dd:38:c5:17:e9: c0:c4:cf:ab:a6:91:ca:e0:d3:e2:75:1e:45:fe:f9:03:f0:b4: 16:19:98:dc:84:69:e3:99:62:9d:89:56:79:c4:35:16:ab:93: 44:84:ce:ff:84:45:b8:5a:0b:6e:a1:6b:bc:cb:e2:24:46:7e: 1f:be:9c:a9:53:4d:0c:5a:45:81:85:a9:c3:88:54:0a:f0:f9: ff:da:61:dd:e5:b4:30:aa:69:d0:a9:3a:05:9c:0e:3b:74:53: 95:b8:a2:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/T9HbERNPC753B0qGVhBp8+l/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNjA0MTkwNjQ3MDdaFw0yNjA0MjIxNjExMDdaMDMxMTAvBgNV BAMTKDk5OUM1Qjk1QTlDRjJGRDdEMDQ1NkQ5NzM5OUJFMzVFMURCOTQyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjyo9jAglo/NnBtBpwCns8dUO knw6oy9NYJGkYI9k51Yb9Q7J3u/e/K9Q2g9bPCg6cEmaNHslASGI4EvPCrG6KoIB Cgh7GpUcREhNNH9yv+Yfhxp7fC6hrJ09CyuZiorPCnJE1Tx+8szRCgL90464TpDB Kn9RW0FMsKbPej+sJWfECEZnoia9bIl2nhlX7tQAbSpvaCqQZmeA0CWYlan4mB2X 4hnjSxUqMJBCAteMwlbpcyOPJVHD5NJs99tEiMiIVpUYk5nYmys6TtjM7bug4wqh ZPDOxp/n4XATO+xVNV10Ipeq3vSlZYGPsVdEZsryB1COjG/OacVMA6XznH6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZxblanPL9fQRW2XOZvjXh25QvQwHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPmLSOk5Pf+wtYhMx+PrJdv2c2ZK+KftrRg AGJKogwXLbxiN8SB2Tf+8AxlsA0X+ONFmMY0RgOCmifPo4MmvZ3R+pZcVjAZX66E 47iUXMLTqaC0w3jv+o6yQCvpRUcuNRzIo9Qyi1F+MhjWJZYi43GovGFjSb+yGN/r R+5HZB8F5pFnJ6VyoNxvZ6S/vL7PyZgNDEnbpHzrkAys0TLdOMUX6cDEz6umkcrg 0+J1HkX++QPwtBYZmNyEaeOZYp2JVnnENRark0SEzv+ERbhaC26ha7zL4iRGfh++ nKlTTQxaRYGFqcOIVArw+f/aYd3ltDCqadCpOgWcDjt0U5W4ohc= -----END CERTIFICATE-----Generated at Sun Apr 19 14:21:06 2026 by rpki-client