$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: 3C14jaEOcAeGrRyyfoIOISS0vJABLWQc4MEQAer1BCc= Subject key identifier: 5E:6F:BF:8F:5F:43:2E:82:AF:00:B9:70:AA:F5:76:B7:AA:F0:B9:76 Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 165EC150896DE198944AC390B622C207DAFFD591 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 01F7 Signing time: Sat 18 Apr 2026 19:21:15 +0000 Manifest this update: Sat 18 Apr 2026 19:16:15 +0000 Manifest next update: Tue 21 Apr 2026 22:34:15 +0000 Files and hashes: 1: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: Pyk3NIKZOAdd7FZ8K7etPgDO1xbiuzsEyQghJNlVNwk=) 2: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: u/hIg8KsFWw8vq7gPOsdko9qxD6a9n4NweAFWrVWdp8=) 3: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: te6852zJfADU5eUrZR3ew7HIIA2lg8gMA9xd9HC+ESo=) 4: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: JciEcvaTyOu9ULHHbn2cng9qZ9XRi3I/0a9dUnGKqis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 22:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5e:c1:50:89:6d:e1:98:94:4a:c3:90:b6:22:c2:07:da:ff:d5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Apr 18 19:16:15 2026 GMT Not After : Apr 21 22:34:15 2026 GMT Subject: CN=5E6FBF8F5F432E82AF00B970AAF576B7AAF0B976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:ad:6f:34:2b:9c:3a:59:5f:cf:f9:b1:13: a8:87:14:b8:00:66:1e:78:34:90:93:64:9d:b0:75: 00:e7:fb:8c:29:44:7e:6b:7b:35:29:d5:14:d9:0b: e8:94:f9:52:1f:12:17:22:e7:29:ee:ff:af:07:a2: 0f:16:c8:a1:3e:d5:da:7d:b8:46:11:95:4b:13:66: 31:fe:50:4f:f5:a1:ae:2f:98:30:9e:2d:4c:01:13: 92:bd:fb:68:5c:b7:b8:96:3c:58:8c:d6:40:24:07: 36:61:49:2f:fc:63:7f:2e:0b:02:cd:3c:96:62:12: 73:62:a0:89:4c:9c:e4:08:38:6d:a2:ea:22:25:b2: 0e:6e:c0:29:de:c4:ff:e5:ef:6b:0d:55:19:cf:b3: ae:4c:65:50:48:92:c3:05:0d:40:e1:c0:fd:d2:2b: 94:5a:41:c5:d8:37:9e:ad:00:ca:b4:4b:52:71:ff: 07:c5:76:ec:bc:00:a6:8b:4c:a5:3a:e6:20:43:74: 08:3a:e4:45:35:21:8a:0c:9d:eb:b0:0d:78:75:d9: 0e:a9:12:e0:f1:5b:9e:95:c4:81:2e:33:3a:b4:da: c6:7c:61:18:c6:1c:d5:77:1f:b9:78:08:79:47:c9: 95:2c:49:40:5a:f8:b9:dd:5b:fc:24:d1:28:ab:8a: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6F:BF:8F:5F:43:2E:82:AF:00:B9:70:AA:F5:76:B7:AA:F0:B9:76 X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:50:23:69:bf:53:81:ee:ea:c2:51:9a:60:02:b2:be:22:99: 67:68:0a:d9:4e:db:81:42:dd:32:5f:18:71:9b:66:98:ab:1a: 04:92:d0:88:99:4f:75:88:19:1b:d0:1b:ce:2b:62:26:81:ab: 28:6a:d0:7e:51:3a:67:bd:6a:10:ea:9a:ad:79:39:95:49:a7: f8:aa:63:3d:0b:5a:42:1f:31:9c:1f:49:76:93:79:8c:76:0c: fe:a9:cc:c1:ac:d3:bc:6f:96:84:4f:48:8d:6e:77:7e:3f:84: 4d:4f:6a:e7:6a:8f:ec:e0:56:ef:eb:3f:2a:22:74:fa:a4:08: 13:1a:c5:17:c0:35:7d:26:7e:19:e8:94:ce:54:bf:80:4b:5c: 3c:6e:87:21:27:22:49:b2:71:81:ef:e7:bb:47:5e:80:f5:de: 98:6d:cd:b4:e9:6b:72:6d:ef:d5:20:0e:6a:b3:c4:ac:ef:1a: f6:84:bf:0e:e2:88:a6:a6:08:f6:b9:33:99:ec:aa:84:53:e3: f5:bb:d8:46:7e:82:e2:c7:d0:89:ab:e2:bd:db:17:69:e7:74: 74:bd:4f:b7:92:a0:60:58:65:73:3f:ab:f8:c8:ab:b3:78:c0: b0:36:2d:ec:cc:4d:2b:1e:7f:45:79:3e:35:6b:4a:fe:be:c3: e0:76:5d:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFl7BUIlt4ZiUSsOQtiLCB9r/1ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNjA0MTgxOTE2MTVaFw0yNjA0MjEyMjM0MTVaMDMxMTAvBgNV BAMTKDVFNkZCRjhGNUY0MzJFODJBRjAwQjk3MEFBRjU3NkI3QUFGMEI5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNB61vNCucOllfz/mxE6iHFLgA Zh54NJCTZJ2wdQDn+4wpRH5rezUp1RTZC+iU+VIfEhci5ynu/68Hog8WyKE+1dp9 uEYRlUsTZjH+UE/1oa4vmDCeLUwBE5K9+2hct7iWPFiM1kAkBzZhSS/8Y38uCwLN PJZiEnNioIlMnOQIOG2i6iIlsg5uwCnexP/l72sNVRnPs65MZVBIksMFDUDhwP3S K5RaQcXYN56tAMq0S1Jx/wfFduy8AKaLTKU65iBDdAg65EU1IYoMneuwDXh12Q6p EuDxW56VxIEuMzq02sZ8YRjGHNV3H7l4CHlHyZUsSUBa+LndW/wk0SiriqiZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXm+/j19DLoKvALlwqvV2t6rwuXYwHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZQI2m/U4Hu6sJRmmACsr4imWdoCtlO24FC 3TJfGHGbZpirGgSS0IiZT3WIGRvQG84rYiaBqyhq0H5ROme9ahDqmq15OZVJp/iq Yz0LWkIfMZwfSXaTeYx2DP6pzMGs07xvloRPSI1ud34/hE1Paudqj+zgVu/rPyoi dPqkCBMaxRfANX0mfhnolM5Uv4BLXDxuhyEnIkmycYHv57tHXoD13phtzbTpa3Jt 79UgDmqzxKzvGvaEvw7iiKamCPa5M5nsqoRT4/W72EZ+guLH0Imr4r3bF2nndHS9 T7eSoGBYZXM/q/jIq7N4wLA2LezMTSsef0V5PjVrSv6+w+B2XQM= -----END CERTIFICATE-----Generated at Sun Apr 19 15:49:51 2026 by rpki-client