$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft File: A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft (raw, json) Hash identifier: tDCMSGVvVPlSNxv1h4+OG9j1J/CVF4YbI1KRKrQLYck= Subject key identifier: 01:E8:F2:55:F8:ED:3A:CE:4C:B0:BA:1C:3B:0B:4B:2A:FD:B3:68:A6 Authority key identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 Certificate issuer: /CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Certificate serial: 4FC6F561FF5715C7CEF1BC64B760C7C0357A6520 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft Manifest number: A6 Signing time: Sun 01 Mar 2026 06:02:29 +0000 Manifest this update: Sun 01 Mar 2026 05:57:29 +0000 Manifest next update: Wed 04 Mar 2026 06:56:29 +0000 Files and hashes: 1: A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl (hash: g2tIDxloZ04CCVZyUMl2zScQf1qPq5T9rEfcJrOvhC4=) 2: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: u/+nMafNSlBh3MWibaApdEuRrXiSll2yWAqljACJnmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c6:f5:61:ff:57:15:c7:ce:f1:bc:64:b7:60:c7:c0:35:7a:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Validity Not Before: Mar 1 05:57:29 2026 GMT Not After : Mar 4 06:56:29 2026 GMT Subject: CN=01E8F255F8ED3ACE4CB0BA1C3B0B4B2AFDB368A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:d1:41:56:69:02:6d:7b:21:21:ce:0d:e7: 87:3b:8e:4e:a6:41:f2:52:35:7b:2e:22:d7:a0:ae: 37:cc:ca:03:50:b3:87:b1:52:f3:13:64:8f:7c:6f: cb:29:f5:8b:ab:4e:70:3e:74:5e:10:a6:fe:1f:d9: b1:a6:f0:a7:ed:3a:28:db:9c:51:d4:22:22:e7:a1: ff:aa:7c:9d:c2:87:de:51:de:d6:ef:4a:92:b8:21: 98:4a:73:96:ce:53:15:aa:d4:2d:5d:43:dd:25:bc: 59:44:03:b7:15:56:82:c8:53:fe:cd:66:9b:08:6d: 3c:90:50:47:cc:a0:97:ba:dc:2e:cd:ed:6b:ef:14: 2c:1e:c6:f1:80:14:3e:f6:5b:3d:30:4e:ff:c7:d0: 0e:3f:2a:a4:bb:e8:27:1f:20:2e:c5:c5:ef:da:33: bd:31:8c:e0:18:a3:24:60:07:7f:87:97:ee:7b:55: cb:96:33:b6:d9:f3:23:45:2d:fc:00:56:42:8c:3f: ed:17:bf:ee:31:49:f3:cb:4e:4e:a5:39:71:ce:ee: c3:8e:96:75:43:0b:cc:4c:d7:84:ab:05:21:59:71: de:63:cc:29:e3:b5:47:60:c0:59:56:83:88:43:cd: 64:9b:73:c3:f9:6f:7e:dc:c5:8a:ec:73:cf:00:0f: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E8:F2:55:F8:ED:3A:CE:4C:B0:BA:1C:3B:0B:4B:2A:FD:B3:68:A6 X509v3 Authority Key Identifier: keyid:A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:53:97:63:29:ef:de:a9:aa:1d:f0:48:ab:19:5f:15:06:af: 20:5a:37:5c:85:ae:f7:f9:a7:d7:7e:b4:91:ac:a6:a8:bf:9e: 2b:0b:24:85:4e:0e:bb:00:e2:c8:8c:fe:48:49:4c:b7:26:ce: d8:5d:c9:5b:3f:ae:bb:b7:2c:ab:58:4c:b0:4a:32:1a:5c:62: 01:f2:54:f6:e2:59:55:e2:be:a8:1c:61:18:44:2e:8a:60:1c: 39:3b:18:4f:85:a6:94:02:d4:d2:3f:00:e2:04:2e:76:bc:61: 78:12:67:84:5c:2b:42:cc:36:25:46:fc:14:3e:3a:e2:e2:05: 05:66:a7:67:30:fe:32:34:c0:30:6a:4f:71:1e:97:64:31:a5: dd:12:6f:a5:33:d2:13:a6:f1:00:9e:57:28:0d:e2:cc:7f:30: 00:68:08:d4:2a:5b:f2:81:44:7e:34:6b:5a:a1:82:be:eb:3c: 6f:90:8f:2d:07:2d:70:c4:64:3d:b1:b5:20:f6:de:37:53:5b: 14:5b:10:44:5a:d0:4c:f7:80:e9:ba:81:f0:2f:1a:dd:ac:93: a3:93:fd:c6:53:1b:9d:b1:35:4d:43:cd:23:f9:f0:cd:8b:7a: 39:50:d8:4c:80:43:a1:ad:8a:b0:f8:4b:da:65:71:79:6a:b1: a1:f7:f0:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8b1Yf9XFcfO8bxkt2DHwDV6ZSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1 NzBFRDNBNDAeFw0yNjAzMDEwNTU3MjlaFw0yNjAzMDQwNjU2MjlaMDMxMTAvBgNV BAMTKDAxRThGMjU1RjhFRDNBQ0U0Q0IwQkExQzNCMEI0QjJBRkRCMzY4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFp9FBVmkCbXshIc4N54c7jk6m QfJSNXsuItegrjfMygNQs4exUvMTZI98b8sp9YurTnA+dF4Qpv4f2bGm8KftOijb nFHUIiLnof+qfJ3Ch95R3tbvSpK4IZhKc5bOUxWq1C1dQ90lvFlEA7cVVoLIU/7N ZpsIbTyQUEfMoJe63C7N7WvvFCwexvGAFD72Wz0wTv/H0A4/KqS76CcfIC7Fxe/a M70xjOAYoyRgB3+Hl+57VcuWM7bZ8yNFLfwAVkKMP+0Xv+4xSfPLTk6lOXHO7sOO lnVDC8xM14SrBSFZcd5jzCnjtUdgwFlWg4hDzWSbc8P5b37cxYrsc88AD6hpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAejyVfjtOs5MsLocOwtLKv2zaKYwHwYDVR0j BBgwFoAUohunDfjuRw/npgOFtmU4QlcO06QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMS9BMjFCQTcwREY4 RUU0NzBGRTdBNjAzODVCNjY1Mzg0MjU3MEVEM0E0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1NzBF RDNBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4 NDI1NzBFRDNBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVTl2Mp796pqh3wSKsZXxUGryBaN1yFrvf5 p9d+tJGspqi/nisLJIVODrsA4siM/khJTLcmzthdyVs/rru3LKtYTLBKMhpcYgHy VPbiWVXivqgcYRhELopgHDk7GE+FppQC1NI/AOIELna8YXgSZ4RcK0LMNiVG/BQ+ OuLiBQVmp2cw/jI0wDBqT3Eel2Qxpd0Sb6Uz0hOm8QCeVygN4sx/MABoCNQqW/KB RH40a1qhgr7rPG+Qjy0HLXDEZD2xtSD23jdTWxRbEERa0Ez3gOm6gfAvGt2sk6OT /cZTG52xNU1DzSP58M2LejlQ2EyAQ6GtirD4S9plcXlqsaH38FU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:22:07 2026 by rpki-client