$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: 8IO9fvjBokzQ7SsmO65sKXcju7KjOdoAJYQixE9MEu0= Subject key identifier: 87:A2:4A:81:89:8F:0A:01:F0:A9:2A:9F:9E:46:C1:D6:BC:E4:AC:FE Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 1DA2183DE2188439749B52385848633811D4D154 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 025B Signing time: Sun 01 Mar 2026 02:31:58 +0000 Manifest this update: Sun 01 Mar 2026 02:26:58 +0000 Manifest next update: Wed 04 Mar 2026 04:31:58 +0000 Files and hashes: 1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: /FCqa1IJEfWY0xdRz8/D7seG7gUssnxGKCOGAq4SKiM=) 2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: zDhU5/5RfI0V8ymqm/BDcf0iSN5UmSfxRPVbXBCBMFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a2:18:3d:e2:18:84:39:74:9b:52:38:58:48:63:38:11:d4:d1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Mar 1 02:26:58 2026 GMT Not After : Mar 4 04:31:58 2026 GMT Subject: CN=87A24A81898F0A01F0A92A9F9E46C1D6BCE4ACFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:0e:2f:f6:86:82:47:41:36:ba:59:84:ff: df:f5:1f:1b:ed:06:e4:2d:07:c9:19:11:6c:7f:d0: 7b:ee:0c:fe:ec:a3:7a:31:b0:bb:4a:01:7a:b4:25: 47:44:5f:a0:6d:7c:61:c4:97:3c:4d:8c:1c:50:a5: 9d:64:88:e6:c4:92:e8:3d:72:e1:10:c1:88:fb:d6: 0f:19:cc:12:a8:2d:4d:a6:9f:2c:ac:14:b5:34:f9: 63:36:5f:3b:9d:69:fb:e4:e6:d4:04:26:a4:dc:7b: 5f:08:e3:57:ca:3c:c9:8b:67:90:86:40:3d:d6:1c: 36:20:1f:41:7d:af:c7:06:ec:65:3f:df:22:05:a8: 55:2b:cc:e7:42:5f:fc:0c:c2:60:54:1b:c2:77:b8: f4:38:2e:50:f4:f4:1a:4b:42:0c:1c:c8:b7:92:a1: cc:6d:5f:1a:20:d9:30:65:7d:32:c8:b0:0e:8a:1f: 2d:bc:77:19:60:1c:d8:17:e4:56:82:21:ec:65:a3: 02:94:df:cd:b6:e8:e6:7f:1d:62:86:e4:a6:d3:31: 30:1c:c2:29:8c:a8:14:00:e7:42:82:cf:2d:05:d6: 31:4d:35:10:4f:49:e6:47:e2:0c:50:4a:5f:14:21: 3b:e5:51:da:de:12:55:29:4c:53:3c:30:b4:43:d7: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A2:4A:81:89:8F:0A:01:F0:A9:2A:9F:9E:46:C1:D6:BC:E4:AC:FE X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f0:d4:ae:57:e7:15:2e:4b:0a:fd:3a:0c:cb:3b:fe:94:38: 07:0b:16:f9:40:ba:ff:e8:c6:4e:ba:3e:30:4f:8e:45:cf:3b: 27:bf:95:d0:b7:a3:b5:17:13:33:47:4c:f3:74:06:c6:68:78: 51:87:95:47:6b:73:d3:23:96:9a:08:ac:87:80:36:3e:6f:1f: 83:68:f7:76:32:57:34:bd:a3:a8:d9:d9:64:c7:67:45:52:0b: a2:58:76:7c:b4:88:4e:f4:ce:83:ff:41:0f:ad:59:cf:b9:f5: d1:48:08:07:7a:a1:ca:92:92:71:d2:52:40:ec:d6:e6:75:94: 24:24:af:19:66:96:42:7b:25:40:90:72:83:39:8c:a6:0b:cf: e3:69:75:97:25:74:48:c7:96:b5:89:1a:7f:f2:b9:1b:76:d2: c7:66:8d:76:6d:d9:e9:12:c3:75:aa:d1:21:3b:14:b9:da:a4: f3:0d:2d:87:49:3e:9f:94:20:72:55:a7:17:2b:d1:26:f6:1f: 11:03:4a:79:4e:1a:c4:8f:fe:88:84:e2:40:6d:25:7f:1d:6d: ae:e6:4f:e6:47:0a:00:e1:20:62:43:16:a6:20:50:96:b6:3c: df:1c:51:c0:06:9d:77:63:dd:e4:e9:19:2c:89:21:e0:bb:df: 2a:23:ba:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaIYPeIYhDl0m1I4WEhjOBHU0VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNjAzMDEwMjI2NThaFw0yNjAzMDQwNDMxNThaMDMxMTAvBgNV BAMTKDg3QTI0QTgxODk4RjBBMDFGMEE5MkE5RjlFNDZDMUQ2QkNFNEFDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6w4v9oaCR0E2ulmE/9/1Hxvt BuQtB8kZEWx/0HvuDP7so3oxsLtKAXq0JUdEX6BtfGHElzxNjBxQpZ1kiObEkug9 cuEQwYj71g8ZzBKoLU2mnyysFLU0+WM2Xzudafvk5tQEJqTce18I41fKPMmLZ5CG QD3WHDYgH0F9r8cG7GU/3yIFqFUrzOdCX/wMwmBUG8J3uPQ4LlD09BpLQgwcyLeS ocxtXxog2TBlfTLIsA6KHy28dxlgHNgX5FaCIexlowKU38226OZ/HWKG5KbTMTAc wimMqBQA50KCzy0F1jFNNRBPSeZH4gxQSl8UITvlUdreElUpTFM8MLRD1/xrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6JKgYmPCgHwqSqfnkbB1rzkrP4wHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3w1K5X5xUuSwr9OgzLO/6UOAcLFvlAuv/o xk66PjBPjkXPOye/ldC3o7UXEzNHTPN0BsZoeFGHlUdrc9MjlpoIrIeANj5vH4No 93YyVzS9o6jZ2WTHZ0VSC6JYdny0iE70zoP/QQ+tWc+59dFICAd6ocqSknHSUkDs 1uZ1lCQkrxlmlkJ7JUCQcoM5jKYLz+NpdZcldEjHlrWJGn/yuRt20sdmjXZt2ekS w3Wq0SE7FLnapPMNLYdJPp+UIHJVpxcr0Sb2HxEDSnlOGsSP/oiE4kBtJX8dba7m T+ZHCgDhIGJDFqYgUJa2PN8cUcAGnXdj3eTpGSyJIeC73yojuq8= -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:55 2026 by rpki-client