$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft File: A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft (raw, json) Hash identifier: 0/FVD4BknPnmRVvXMRqcJ9oByCKKpY3yT7qGppXMe8c= Subject key identifier: BB:39:10:3B:9D:A6:B0:A2:B5:60:50:B7:A2:4C:D8:AE:F6:72:02:47 Authority key identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 Certificate issuer: /CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Certificate serial: 620ADB4BEA01E84D9632A3E6D7EC9B706AC0E298 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft Manifest number: BA Signing time: Wed 15 Apr 2026 20:41:29 +0000 Manifest this update: Wed 15 Apr 2026 20:36:29 +0000 Manifest next update: Sun 19 Apr 2026 04:41:29 +0000 Files and hashes: 1: A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl (hash: /8M1somhJxRdxC3w45MNxq3BGcbmzwjuH5usyFgUAtw=) 2: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: u/+nMafNSlBh3MWibaApdEuRrXiSll2yWAqljACJnmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0a:db:4b:ea:01:e8:4d:96:32:a3:e6:d7:ec:9b:70:6a:c0:e2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Validity Not Before: Apr 15 20:36:29 2026 GMT Not After : Apr 19 04:41:29 2026 GMT Subject: CN=BB39103B9DA6B0A2B56050B7A24CD8AEF6720247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:2a:87:d4:91:e3:44:e1:ab:db:61:e1:30: 3d:1d:eb:38:9a:50:a0:de:69:ed:02:b5:ab:a6:dc: 18:a2:94:fc:61:0a:fa:46:a6:2e:a8:b2:e7:74:0d: 46:ae:45:f7:ab:97:6d:7d:45:e1:9c:35:8b:9c:9e: bb:f9:ed:20:82:5f:2c:32:35:62:01:e0:8a:a3:64: 66:56:a1:e3:20:66:64:c0:ce:da:62:d8:0f:26:4c: 19:06:fb:9f:46:7d:7a:3f:b0:95:52:43:51:94:1f: eb:13:ad:31:80:60:73:e9:e7:53:8c:0b:27:49:a7: f2:fd:ca:34:f2:e8:06:bd:58:e3:66:86:ae:7f:ba: f6:b9:ec:cb:9c:27:48:c8:cb:ab:50:75:00:02:e9: 08:a9:6c:fb:83:1d:f9:3f:ba:dc:65:f1:42:98:52: 0f:04:07:d9:2c:1f:ee:e5:e3:30:eb:f5:dd:41:87: d9:0f:9e:4f:7c:84:e4:cf:00:c5:f3:55:c5:de:32: 72:32:6a:cf:3d:ea:c1:ad:f6:9f:82:ce:f4:9a:28: b5:89:a9:52:be:3f:63:82:8d:49:2a:12:21:90:e7: ff:b7:4e:de:4c:b7:b7:4a:6b:b2:8c:da:1a:ec:63: a7:ad:ae:d9:d4:48:33:29:55:64:ca:4b:1e:a1:30: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:39:10:3B:9D:A6:B0:A2:B5:60:50:B7:A2:4C:D8:AE:F6:72:02:47 X509v3 Authority Key Identifier: keyid:A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ab:41:dc:09:de:9a:b4:91:3a:bd:4d:3f:2e:d3:c3:94:af: ab:51:ce:e6:64:43:77:a4:db:70:59:85:15:05:fd:a6:a7:7c: 4a:1a:3f:82:b8:dc:17:13:5a:54:91:92:50:32:bb:e1:04:ef: 88:28:4b:78:78:be:64:d1:ed:90:e5:b4:6c:d6:a2:64:99:18: bb:8c:f7:92:b3:2a:b3:f6:7e:16:f4:de:cf:7d:c5:a3:2a:16: 50:73:98:03:3e:c0:ce:3a:46:a1:db:27:f1:16:94:f0:10:a4: 9a:84:fb:24:f9:f3:16:cb:73:2b:b1:2b:4a:ff:e5:26:09:c5: c0:fb:32:c1:d0:69:84:63:14:77:3d:2a:cf:4f:ab:89:77:0d: 1d:4e:43:9e:fe:5f:5b:27:2c:14:84:32:5a:0e:f4:e3:98:38: 3e:94:3d:2e:1f:07:9c:90:d9:ff:f2:56:d1:72:b9:cc:8f:c2: b2:e3:ac:bc:0d:e9:db:e9:8f:22:9b:91:00:6a:44:3c:26:97: 88:96:1e:e4:2a:51:76:ce:6e:48:b5:ec:c0:1d:73:b7:41:5b: 97:9c:17:9b:3b:bb:03:9d:69:1e:d7:09:86:b5:ee:91:0f:df: 23:2e:90:b3:b4:58:f7:02:ad:99:82:c1:e6:bf:7f:ac:87:2e: 6e:e1:36:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgrbS+oB6E2WMqPm1+ybcGrA4pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1 NzBFRDNBNDAeFw0yNjA0MTUyMDM2MjlaFw0yNjA0MTkwNDQxMjlaMDMxMTAvBgNV BAMTKEJCMzkxMDNCOURBNkIwQTJCNTYwNTBCN0EyNENEOEFFRjY3MjAyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnOCqH1JHjROGr22HhMD0d6zia UKDeae0Ctaum3BiilPxhCvpGpi6osud0DUauRferl219ReGcNYucnrv57SCCXywy NWIB4IqjZGZWoeMgZmTAztpi2A8mTBkG+59GfXo/sJVSQ1GUH+sTrTGAYHPp51OM CydJp/L9yjTy6Aa9WONmhq5/uva57MucJ0jIy6tQdQAC6QipbPuDHfk/utxl8UKY Ug8EB9ksH+7l4zDr9d1Bh9kPnk98hOTPAMXzVcXeMnIyas896sGt9p+CzvSaKLWJ qVK+P2OCjUkqEiGQ5/+3Tt5Mt7dKa7KM2hrsY6etrtnUSDMpVWTKSx6hMG59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuzkQO52msKK1YFC3okzYrvZyAkcwHwYDVR0j BBgwFoAUohunDfjuRw/npgOFtmU4QlcO06QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMS9BMjFCQTcwREY4 RUU0NzBGRTdBNjAzODVCNjY1Mzg0MjU3MEVEM0E0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1NzBF RDNBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4 NDI1NzBFRDNBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+rQdwJ3pq0kTq9TT8u08OUr6tRzuZkQ3ek 23BZhRUF/aanfEoaP4K43BcTWlSRklAyu+EE74goS3h4vmTR7ZDltGzWomSZGLuM 95KzKrP2fhb03s99xaMqFlBzmAM+wM46RqHbJ/EWlPAQpJqE+yT58xbLcyuxK0r/ 5SYJxcD7MsHQaYRjFHc9Ks9Pq4l3DR1OQ57+X1snLBSEMloO9OOYOD6UPS4fB5yQ 2f/yVtFyucyPwrLjrLwN6dvpjyKbkQBqRDwml4iWHuQqUXbObki17MAdc7dBW5ec F5s7uwOdaR7XCYa17pEP3yMukLO0WPcCrZmCwea/f6yHLm7hNt8= -----END CERTIFICATE-----Generated at Fri Apr 17 21:29:48 2026 by rpki-client