$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: QjenPMZha0tMQaIvCr05oyUIeSi3QU1hhNt/z+7ozwU= Subject key identifier: 1D:28:A8:39:6B:14:7E:86:67:5E:84:E5:B1:7B:20:AB:30:09:A3:26 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 78000898068F3B696CB37E51706C231CD53A6CF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: CC Signing time: Tue 04 Nov 2025 00:51:56 +0000 Manifest this update: Tue 04 Nov 2025 00:46:56 +0000 Manifest next update: Fri 07 Nov 2025 07:38:56 +0000 Files and hashes: 1: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: ODR1nhecNf1PNEUsr6U6g2HSVbKZCJoeERdVZUfBxjU=) 2: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: ISaAFcDrWp4tIbpthAvF3IPwzbgGoZjGyAaBO4jG0rE=) 3: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: l3iR50nUIesRrXuxRedIB5m4gPlIpbGPPv3QPItBtu8=) 4: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: nYNGAgZ/KHJJA/3d3uL0ysMNm9weFEF7cJoGGKweKrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:00:08:98:06:8f:3b:69:6c:b3:7e:51:70:6c:23:1c:d5:3a:6c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Nov 4 00:46:56 2025 GMT Not After : Nov 7 07:38:56 2025 GMT Subject: CN=1D28A8396B147E86675E84E5B17B20AB3009A326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:ce:a9:4d:cc:d4:42:6e:b2:a0:77:bf:0e: 7f:01:59:3d:96:2d:3e:8a:e8:fc:18:ae:af:a1:b5: d0:7b:56:04:04:2e:6c:9b:68:54:06:6d:ab:64:db: a8:82:19:11:55:63:91:df:27:62:ce:f4:bb:f0:d0: 02:99:23:15:42:90:4b:e1:60:db:55:27:64:e9:9d: ce:14:90:90:1a:1e:7f:ac:bd:94:e3:2d:a4:58:7c: 7b:0f:85:57:f6:2b:22:1f:9b:a8:3f:87:38:b0:d7: 93:33:39:0d:60:0e:bc:e1:a2:5e:26:61:36:d6:5e: 0f:ac:d7:30:58:65:1d:ba:08:a3:06:c5:57:01:85: 02:a4:44:39:42:9d:1c:39:73:fb:7f:b0:5a:97:7b: 9c:83:50:c9:c2:34:ef:fb:80:2a:3f:22:e8:a0:4b: d5:e1:73:d3:11:51:eb:79:bf:7f:34:93:ed:3e:9c: 8a:4e:c3:8a:ff:88:21:f5:36:18:66:e7:c0:1f:46: 23:25:c2:e0:20:48:30:f3:5f:a1:8f:4f:cc:e2:38: 9a:16:3b:15:12:3e:a6:c5:41:4e:de:db:34:2e:a8: 11:57:80:74:47:a8:46:bd:f3:ee:6c:04:2f:b6:06: fd:6c:3d:0f:c8:6d:58:f6:1a:30:09:fa:9e:29:71: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:28:A8:39:6B:14:7E:86:67:5E:84:E5:B1:7B:20:AB:30:09:A3:26 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c2:1f:51:98:b7:a6:ba:fc:65:c4:0e:05:18:68:26:ab:7b: 79:e4:4c:e1:1d:a0:aa:ba:3a:50:c7:90:9c:fa:3d:63:42:05: a3:ca:97:4e:b8:2f:f8:f6:1f:39:ae:1b:1f:a0:47:87:1f:2f: d6:58:43:f3:32:50:0f:fa:0b:8b:42:35:00:c6:27:44:75:ed: 80:09:ad:74:9c:ee:f7:04:10:31:b0:f6:5c:7f:6a:c4:1c:0b: 8e:16:b4:d0:9f:3b:02:70:d6:8e:6c:62:01:f7:5c:12:e7:ee: 84:ab:45:87:43:d4:14:c0:9d:b4:9c:0d:b8:c9:2f:3a:d8:34: 70:7b:18:f3:b1:88:48:1b:d0:5e:55:bc:5f:13:33:57:11:e8: 30:a7:96:b2:cb:5f:11:a3:ac:6a:11:9a:34:d3:6f:15:7d:fb: 8a:a0:69:ae:36:eb:08:54:d0:fa:d7:0a:24:29:94:1a:e9:a3: 72:aa:0e:3d:e6:5f:2f:df:f4:8d:d4:04:ad:e9:4b:9f:1c:5d: d2:6a:0a:c2:b6:c7:f2:e5:2a:75:80:6a:5c:d0:d9:2c:14:d6: f6:b3:9c:b8:ec:67:91:2d:04:9d:7f:18:1e:6f:21:1b:e4:f5: 40:ca:c3:98:6a:89:0f:01:bb:af:58:cd:30:87:ae:d4:30:d8: 85:21:8b:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeAAImAaPO2lss35RcGwjHNU6bPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTExMDQwMDQ2NTZaFw0yNTExMDcwNzM4NTZaMDMxMTAvBgNV BAMTKDFEMjhBODM5NkIxNDdFODY2NzVFODRFNUIxN0IyMEFCMzAwOUEzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj986pTczUQm6yoHe/Dn8BWT2W LT6K6PwYrq+htdB7VgQELmybaFQGbatk26iCGRFVY5HfJ2LO9Lvw0AKZIxVCkEvh YNtVJ2Tpnc4UkJAaHn+svZTjLaRYfHsPhVf2KyIfm6g/hziw15MzOQ1gDrzhol4m YTbWXg+s1zBYZR26CKMGxVcBhQKkRDlCnRw5c/t/sFqXe5yDUMnCNO/7gCo/Iuig S9Xhc9MRUet5v380k+0+nIpOw4r/iCH1Nhhm58AfRiMlwuAgSDDzX6GPT8ziOJoW OxUSPqbFQU7e2zQuqBFXgHRHqEa98+5sBC+2Bv1sPQ/IbVj2GjAJ+p4pcRANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHSioOWsUfoZnXoTlsXsgqzAJoyYwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzCH1GYt6a6/GXEDgUYaCare3nkTOEdoKq6 OlDHkJz6PWNCBaPKl064L/j2HzmuGx+gR4cfL9ZYQ/MyUA/6C4tCNQDGJ0R17YAJ rXSc7vcEEDGw9lx/asQcC44WtNCfOwJw1o5sYgH3XBLn7oSrRYdD1BTAnbScDbjJ LzrYNHB7GPOxiEgb0F5VvF8TM1cR6DCnlrLLXxGjrGoRmjTTbxV9+4qgaa426whU 0PrXCiQplBrpo3KqDj3mXy/f9I3UBK3pS58cXdJqCsK2x/LlKnWAalzQ2SwU1vaz nLjsZ5EtBJ1/GB5vIRvk9UDKw5hqiQ8Bu69YzTCHrtQw2IUhi7Y= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:38 2025 by rpki-client