$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: xu48odq7/vVQ/GCzEE7faGMUUhzeK/g6T8il7QRmKvs= Subject key identifier: 93:40:C5:0A:45:55:B1:10:34:3F:2A:A7:11:DC:21:23:5C:54:A9:DB Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 0E5AEC9B1B935BBC0D1513D6A83C6D6CCE8D5DD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 01CE Signing time: Thu 16 Apr 2026 04:22:03 +0000 Manifest this update: Thu 16 Apr 2026 04:17:03 +0000 Manifest next update: Sun 19 Apr 2026 10:47:03 +0000 Files and hashes: 1: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: eBkg06bp7AxUGwLlphsfQE4PQGiogajY0W4u9TXjZ9E=) 2: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: EZ3cUn//Lr+1T4x3R3lninQDcCuDNqb80eslIvKVzaE=) 3: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: 5dmBKfeza3gGUh/V2sAdhjNmfeP3Q+riH0GOcBizRKA=) 4: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: rjc/w01l37zLAI4D1TAtAwVk+nmo3PzQu/9YBMOYPHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:5a:ec:9b:1b:93:5b:bc:0d:15:13:d6:a8:3c:6d:6c:ce:8d:5d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Apr 16 04:17:03 2026 GMT Not After : Apr 19 10:47:03 2026 GMT Subject: CN=9340C50A4555B110343F2AA711DC21235C54A9DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:87:70:b8:5e:ba:f3:84:0c:87:21:b5:f7: c5:ce:4e:14:d7:2a:5e:ca:40:bc:a4:e9:52:99:d1: 6c:87:2f:91:64:ca:13:ad:2a:0b:e2:f3:0c:20:04: b6:22:cb:b4:a5:7e:01:dc:14:b8:6f:32:73:5f:3e: f0:30:ce:a4:6b:30:42:1f:a7:e7:36:3a:c6:fc:3a: a6:56:93:c0:d7:a3:e9:37:1d:5b:8a:ce:4b:84:57: 96:d8:82:02:9e:9a:4d:9d:5f:a6:8e:32:71:23:c3: 4a:bf:87:a9:e3:32:65:a5:31:d0:83:09:17:8e:30: 36:5d:06:bd:79:fb:84:5f:a3:ce:4e:bb:cd:2f:9c: f4:86:37:cc:76:92:e9:3b:b5:20:a6:00:48:24:a7: 95:40:b5:54:60:5d:e9:2c:47:52:3e:1f:37:dc:c8: 03:e4:4b:d9:2a:e5:86:07:e8:6a:ec:e4:58:1d:5b: 1e:09:2c:2c:b7:56:73:74:b4:2b:f3:38:69:87:c0: cf:86:7a:ac:3f:10:16:08:84:4f:bf:99:34:05:72: 64:e1:50:91:73:18:45:4b:6b:f0:32:c9:26:ed:63: 55:51:76:af:aa:bd:33:a9:7d:64:c9:9a:ae:db:37: 5c:4f:56:66:5b:50:d4:3b:75:51:4b:e0:fb:94:75: af:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:40:C5:0A:45:55:B1:10:34:3F:2A:A7:11:DC:21:23:5C:54:A9:DB X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:35:19:12:fb:60:03:1f:62:7d:ca:0a:a7:4f:84:76:89:05: 07:22:92:06:2a:cc:de:4f:55:5c:b4:e0:b9:41:f5:e9:13:12: 40:37:e0:71:86:4e:cb:4b:08:44:83:86:53:14:64:a3:64:e1: 38:9b:86:da:fd:f0:33:92:11:a5:4a:1b:b7:53:26:13:21:fe: bb:ba:1d:fd:8d:d9:e1:03:14:35:e9:b2:7f:22:24:cc:54:10: 16:72:5d:98:98:e5:b8:65:8a:19:08:d0:0a:e8:49:2b:d3:9f: 65:0c:6d:81:ed:14:dd:ab:dc:cc:84:79:e1:8a:fc:37:ac:ca: a3:2c:08:41:7c:b1:ab:18:7f:de:3b:a0:d2:d2:1d:1b:bb:38: 68:67:e2:e5:0f:0f:5d:96:37:cd:af:de:b8:f7:97:ed:1c:19: 67:d7:01:c3:d2:fa:b9:c9:cd:16:9b:95:99:e7:bd:f5:ec:45: ac:73:84:d0:c7:6b:50:b8:a4:75:01:b7:3e:b1:57:e3:9c:94: 23:5b:1c:a9:4a:7e:ed:90:4e:71:fa:b8:87:2c:87:b2:f9:7f: 33:76:eb:24:38:3c:0a:8f:a3:0a:7c:93:44:7f:a3:16:63:99: 8d:66:df:fe:69:2f:be:54:60:78:a2:7b:b7:95:ce:9f:ab:7e: 44:c2:98:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlrsmxuTW7wNFRPWqDxtbM6NXdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNjA0MTYwNDE3MDNaFw0yNjA0MTkxMDQ3MDNaMDMxMTAvBgNV BAMTKDkzNDBDNTBBNDU1NUIxMTAzNDNGMkFBNzExREMyMTIzNUM1NEE5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi7IdwuF6684QMhyG198XOThTX Kl7KQLyk6VKZ0WyHL5FkyhOtKgvi8wwgBLYiy7SlfgHcFLhvMnNfPvAwzqRrMEIf p+c2Osb8OqZWk8DXo+k3HVuKzkuEV5bYggKemk2dX6aOMnEjw0q/h6njMmWlMdCD CReOMDZdBr15+4Rfo85Ou80vnPSGN8x2kuk7tSCmAEgkp5VAtVRgXeksR1I+Hzfc yAPkS9kq5YYH6Grs5FgdWx4JLCy3VnN0tCvzOGmHwM+Geqw/EBYIhE+/mTQFcmTh UJFzGEVLa/AyySbtY1VRdq+qvTOpfWTJmq7bN1xPVmZbUNQ7dVFL4PuUda9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk0DFCkVVsRA0PyqnEdwhI1xUqdswHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGg1GRL7YAMfYn3KCqdPhHaJBQcikgYqzN5P VVy04LlB9ekTEkA34HGGTstLCESDhlMUZKNk4Tibhtr98DOSEaVKG7dTJhMh/ru6 Hf2N2eEDFDXpsn8iJMxUEBZyXZiY5bhlihkI0AroSSvTn2UMbYHtFN2r3MyEeeGK /DesyqMsCEF8sasYf947oNLSHRu7OGhn4uUPD12WN82v3rj3l+0cGWfXAcPS+rnJ zRablZnnvfXsRaxzhNDHa1C4pHUBtz6xV+OclCNbHKlKfu2QTnH6uIcsh7L5fzN2 6yQ4PAqPowp8k0R/oxZjmY1m3/5pL75UYHiie7eVzp+rfkTCmFU= -----END CERTIFICATE-----Generated at Fri Apr 17 16:32:26 2026 by rpki-client