$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: 2oEBsZ/3wKSsfBWkP4KjcFn15zKe+atny8ogcwo+te8= Subject key identifier: E2:38:5F:46:61:2E:B6:F4:02:53:62:E4:53:C4:CF:81:95:27:11:A0 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 25D9325D2968274A1069D6BC0939793A504FFCD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: 0100 Signing time: Sun 01 Mar 2026 08:42:07 +0000 Manifest this update: Sun 01 Mar 2026 08:37:07 +0000 Manifest next update: Wed 04 Mar 2026 19:13:07 +0000 Files and hashes: 1: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: Mt4bzQQ2AjKQTRFo+IDVTuhkDcxat/jfJQkvz5gSZPI=) 2: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: l3iR50nUIesRrXuxRedIB5m4gPlIpbGPPv3QPItBtu8=) 3: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: nYNGAgZ/KHJJA/3d3uL0ysMNm9weFEF7cJoGGKweKrc=) 4: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: ODR1nhecNf1PNEUsr6U6g2HSVbKZCJoeERdVZUfBxjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d9:32:5d:29:68:27:4a:10:69:d6:bc:09:39:79:3a:50:4f:fc:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Mar 1 08:37:07 2026 GMT Not After : Mar 4 19:13:07 2026 GMT Subject: CN=E2385F46612EB6F4025362E453C4CF81952711A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:b6:34:44:d2:78:3e:df:da:70:b4:ba:72: 9f:f9:f8:81:62:3b:79:21:38:a7:4a:22:06:bb:26: 7f:88:55:99:84:bf:af:a0:12:da:83:e4:a2:a7:81: 3d:38:b2:b9:64:6e:ad:7e:97:30:86:e0:ef:62:61: 88:d5:2e:ef:ea:2a:28:7f:a0:75:7e:f2:f6:f5:75: 7e:62:66:ad:ac:24:0a:20:d3:f1:bd:5e:8f:d5:63: 4e:73:79:46:f4:26:24:60:e6:ed:fb:73:9c:a5:f4: 46:95:c0:2c:05:1e:3b:11:fd:82:98:09:a3:84:f0: 71:39:83:72:45:41:11:73:0f:c0:d9:a6:25:70:bd: d7:88:0a:ab:13:80:64:59:f6:98:80:6d:86:5b:00: dd:31:1c:4c:2f:6a:4b:1c:fe:42:33:13:95:d6:cc: 0b:5b:d3:f7:2b:04:92:e7:35:e9:af:3e:fe:aa:09: d5:4c:5a:fe:8a:ec:18:17:de:56:53:6b:a9:33:a1: 0d:c3:d4:73:97:09:70:87:d6:a3:7d:d9:90:b4:c1: 31:2a:65:44:e2:c3:f6:9d:6b:e1:9e:9b:0e:e9:26: 1d:b2:09:15:91:f1:e6:62:6e:b6:80:34:98:52:fa: be:23:f0:5a:a4:10:8c:c7:ee:3e:59:1e:61:8d:56: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:38:5F:46:61:2E:B6:F4:02:53:62:E4:53:C4:CF:81:95:27:11:A0 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:f4:65:44:00:3f:9d:0d:7a:91:fb:ea:f2:53:59:b6:c7:55: 62:7a:e1:a9:45:cd:f9:33:70:ec:fd:2d:2a:e0:17:39:bf:83: 6f:37:db:80:d4:5d:c1:9a:bf:9b:89:33:c3:88:ce:73:ea:69: ef:84:a4:88:2a:5d:56:2b:63:e6:2a:19:8e:b4:95:f4:31:f8: f6:99:5b:a6:4e:0b:aa:c1:38:e1:89:37:24:91:9c:3e:c0:f7: c1:f6:e6:13:64:48:11:5c:ee:de:71:cb:76:35:c8:e7:75:9e: 6f:3e:cb:31:28:61:3d:ff:49:bc:b3:40:bd:b0:4d:cb:52:3a: 3b:8c:00:e1:9f:14:20:7a:de:5b:ed:75:a6:b2:ef:ae:06:f1: 46:f4:99:9a:f4:db:c8:85:4a:00:2e:7c:7d:eb:c8:7d:2d:d3: 28:53:10:7a:ee:6d:9c:1c:f6:9b:d6:09:c9:ff:6f:fc:19:2f: d8:43:ed:97:49:15:38:f1:78:1f:9b:7a:56:fe:7f:76:29:35: d4:4f:54:34:95:8c:87:87:fa:97:cc:2f:6e:63:6d:8a:e8:87: 96:43:8f:04:c6:94:96:9f:dd:f6:08:8b:49:63:fc:40:8f:72: f1:cc:d1:28:03:79:fa:bb:47:32:57:b6:ed:2b:58:02:bb:54: 9c:6d:26:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdkyXSloJ0oQada8CTl5OlBP/NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNjAzMDEwODM3MDdaFw0yNjAzMDQxOTEzMDdaMDMxMTAvBgNV BAMTKEUyMzg1RjQ2NjEyRUI2RjQwMjUzNjJFNDUzQzRDRjgxOTUyNzExQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PLY0RNJ4Pt/acLS6cp/5+IFi O3khOKdKIga7Jn+IVZmEv6+gEtqD5KKngT04srlkbq1+lzCG4O9iYYjVLu/qKih/ oHV+8vb1dX5iZq2sJAog0/G9Xo/VY05zeUb0JiRg5u37c5yl9EaVwCwFHjsR/YKY CaOE8HE5g3JFQRFzD8DZpiVwvdeICqsTgGRZ9piAbYZbAN0xHEwvaksc/kIzE5XW zAtb0/crBJLnNemvPv6qCdVMWv6K7BgX3lZTa6kzoQ3D1HOXCXCH1qN92ZC0wTEq ZUTiw/ada+Gemw7pJh2yCRWR8eZibraANJhS+r4j8FqkEIzH7j5ZHmGNVorlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4jhfRmEutvQCU2LkU8TPgZUnEaAwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALH0ZUQAP50NepH76vJTWbbHVWJ64alFzfkz cOz9LSrgFzm/g28324DUXcGav5uJM8OIznPqae+EpIgqXVYrY+YqGY60lfQx+PaZ W6ZOC6rBOOGJNySRnD7A98H25hNkSBFc7t5xy3Y1yOd1nm8+yzEoYT3/SbyzQL2w TctSOjuMAOGfFCB63lvtdaay764G8Ub0mZr028iFSgAufH3ryH0t0yhTEHrubZwc 9pvWCcn/b/wZL9hD7ZdJFTjxeB+belb+f3YpNdRPVDSVjIeH+pfML25jbYroh5ZD jwTGlJaf3fYIi0lj/ECPcvHM0SgDefq7RzJXtu0rWAK7VJxtJsE= -----END CERTIFICATE-----Generated at Mon Mar 2 08:39:33 2026 by rpki-client