$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: GrWOGYrwvhNqalMBAoYeq2CS+m2/3ITjpaOubajjBME= Subject key identifier: 0C:AC:A6:2F:E0:5D:C3:63:67:C6:D3:DA:24:60:D8:BE:01:49:94:D6 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 1BCAABD343BDE5D857650384755CE22509FF65F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: 0115 Signing time: Thu 16 Apr 2026 23:02:13 +0000 Manifest this update: Thu 16 Apr 2026 22:57:13 +0000 Manifest next update: Mon 20 Apr 2026 03:59:13 +0000 Files and hashes: 1: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: nYNGAgZ/KHJJA/3d3uL0ysMNm9weFEF7cJoGGKweKrc=) 2: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: l3iR50nUIesRrXuxRedIB5m4gPlIpbGPPv3QPItBtu8=) 3: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: qAXFt9Y+nZvCmQiQBtKBz1k2Q0TcP+k2T97gofENa0Q=) 4: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: ODR1nhecNf1PNEUsr6U6g2HSVbKZCJoeERdVZUfBxjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ca:ab:d3:43:bd:e5:d8:57:65:03:84:75:5c:e2:25:09:ff:65:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Apr 16 22:57:13 2026 GMT Not After : Apr 20 03:59:13 2026 GMT Subject: CN=0CACA62FE05DC36367C6D3DA2460D8BE014994D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:12:ea:c5:3d:16:79:94:0f:66:46:24:a3: cf:3a:71:56:26:ee:bc:6e:0a:d2:b7:0d:9b:43:7d: 0d:c3:d8:a0:9b:83:87:1e:51:fd:f1:78:e5:e8:5b: bc:4c:26:ba:d1:fe:2d:0f:b7:cb:b6:14:4d:f0:a7: d8:d1:ae:3a:63:6d:54:37:e7:0d:73:32:7b:e1:e9: ca:a1:c6:0d:b9:c5:17:bb:b0:dd:6c:e9:5d:0b:b1: 51:21:1b:65:8b:74:10:d0:e6:1e:38:9a:8b:64:4a: 57:bd:04:e6:19:72:15:85:e1:1a:c0:60:aa:15:20: f3:1c:2f:47:d6:3a:c6:bc:bc:c9:6a:45:9b:a2:41: a1:3d:02:1b:11:de:33:5e:cd:ce:b5:ff:fc:b6:e5: c7:5f:5b:6d:18:e4:86:30:60:45:9f:8e:6a:4f:b8: e5:83:90:70:49:0e:01:80:83:5b:eb:fa:54:b7:69: bb:e0:9d:a1:4f:1a:2e:2c:e0:be:6b:e8:f3:ad:c1: 62:26:9b:1d:c5:38:6a:38:fe:46:14:75:b6:94:ea: 3c:58:d4:55:3d:46:8b:e4:42:2e:cd:bb:28:71:39: 7e:4c:b2:d6:72:c8:5c:f9:ef:bb:8d:61:08:a9:69: 7d:e5:59:b3:9f:de:aa:6b:e2:75:78:89:46:cc:10: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AC:A6:2F:E0:5D:C3:63:67:C6:D3:DA:24:60:D8:BE:01:49:94:D6 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c3:ff:26:f0:cf:b7:74:f5:d5:ed:c1:0d:9f:94:f3:5e:31: 54:4b:f8:c0:e9:96:e6:c6:32:24:83:d3:95:02:b3:74:1d:5a: 48:2c:2d:3c:bd:81:64:4f:43:24:b4:ad:59:2e:00:0b:4f:e4: 15:56:4f:0c:9c:e3:4b:59:39:2f:31:45:a8:71:06:00:77:6e: 43:fb:34:03:d5:3a:f7:d6:17:75:5e:22:28:0a:5f:00:f0:e3: c1:b8:57:d3:a9:85:23:30:b8:ed:df:8e:d5:ca:60:2e:34:9a: 34:6c:0e:ba:da:63:4f:ca:ed:80:fb:90:b8:06:54:fe:ac:a6: 15:fe:4c:5d:60:ea:cf:03:98:fe:78:c3:d7:da:07:ee:ce:8d: 08:3b:ec:d3:ca:f8:bb:7a:df:ec:21:ec:27:9b:51:e8:38:ce: c3:f2:79:55:08:0e:21:ee:1c:c7:53:ab:c0:61:87:a1:81:92: 07:df:72:81:90:a9:d3:f4:f1:5c:50:7f:dd:11:6b:32:65:12: 20:56:14:e4:f8:4f:7f:d4:b2:cb:94:69:f1:91:a7:3d:f1:46: 74:9b:9f:44:f6:b1:05:65:29:d1:b6:a2:30:81:e9:b8:50:0b: 83:b7:91:5a:b9:28:7b:9f:38:67:03:5a:7f:d5:6c:75:f3:9e: ff:37:e6:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8qr00O95dhXZQOEdVziJQn/ZfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNjA0MTYyMjU3MTNaFw0yNjA0MjAwMzU5MTNaMDMxMTAvBgNV BAMTKDBDQUNBNjJGRTA1REMzNjM2N0M2RDNEQTI0NjBEOEJFMDE0OTk0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uRLqxT0WeZQPZkYko886cVYm 7rxuCtK3DZtDfQ3D2KCbg4ceUf3xeOXoW7xMJrrR/i0Pt8u2FE3wp9jRrjpjbVQ3 5w1zMnvh6cqhxg25xRe7sN1s6V0LsVEhG2WLdBDQ5h44motkSle9BOYZchWF4RrA YKoVIPMcL0fWOsa8vMlqRZuiQaE9AhsR3jNezc61//y25cdfW20Y5IYwYEWfjmpP uOWDkHBJDgGAg1vr+lS3abvgnaFPGi4s4L5r6POtwWImmx3FOGo4/kYUdbaU6jxY 1FU9RovkQi7NuyhxOX5MstZyyFz577uNYQipaX3lWbOf3qpr4nV4iUbMEPJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDKymL+Bdw2NnxtPaJGDYvgFJlNYwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPD/ybwz7d09dXtwQ2flPNeMVRL+MDplubG MiSD05UCs3QdWkgsLTy9gWRPQyS0rVkuAAtP5BVWTwyc40tZOS8xRahxBgB3bkP7 NAPVOvfWF3VeIigKXwDw48G4V9OphSMwuO3fjtXKYC40mjRsDrraY0/K7YD7kLgG VP6sphX+TF1g6s8DmP54w9faB+7OjQg77NPK+Lt63+wh7CebUeg4zsPyeVUIDiHu HMdTq8Bhh6GBkgffcoGQqdP08VxQf90RazJlEiBWFOT4T3/UssuUafGRpz3xRnSb n0T2sQVlKdG2ojCB6bhQC4O3kVq5KHufOGcDWn/VbHXznv835uo= -----END CERTIFICATE-----Generated at Sat Apr 18 15:56:12 2026 by rpki-client