$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: Zut4hfO1qxT+Lk3IAmpsgJ/SmhxWFN7t9xol1wGAHzs= Subject key identifier: E5:C4:38:2F:8A:01:1A:32:44:A6:76:A7:39:3C:19:F7:55:0E:21:B8 Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 13E99EB5C28E3D4525906C2CB844FD3A9F6BB4F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 022D Signing time: Mon 02 Mar 2026 03:22:06 +0000 Manifest this update: Mon 02 Mar 2026 03:17:06 +0000 Manifest next update: Thu 05 Mar 2026 09:43:06 +0000 Files and hashes: 1: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: vs5RIVJc80gvdbMwYUf3UH5oDO3pPFbrNK7pJMccNgE=) 2: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: YdMH8gye8re7/85wpIdMIXUtMazvvRzJsog50GkTYZA=) 3: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=) 4: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: GtkgNmJXl7nxDiRttWokSpJjVQu0Ps6kMb8tIC7Cyu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e9:9e:b5:c2:8e:3d:45:25:90:6c:2c:b8:44:fd:3a:9f:6b:b4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: Mar 2 03:17:06 2026 GMT Not After : Mar 5 09:43:06 2026 GMT Subject: CN=E5C4382F8A011A3244A676A7393C19F7550E21B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:7a:d4:d9:b8:5a:ce:43:26:d3:e7:ce:39: 45:82:7b:a8:d8:ca:3f:0e:77:59:c6:8f:22:0d:4a: e7:fe:a5:24:af:19:ed:57:5e:13:12:cc:d1:5f:09: 1f:51:33:39:10:7f:07:c6:de:10:3c:26:1c:db:40: 92:85:5f:6e:48:25:87:a1:b2:f8:65:56:0c:a5:1f: db:ff:cf:05:f9:f2:89:76:b8:eb:40:bf:b0:e2:db: e7:59:be:e7:4d:91:5c:85:93:a4:90:37:20:03:0c: a4:7c:a3:79:28:bb:da:97:93:af:4a:d5:b4:86:dc: 40:59:ac:30:62:14:4a:9b:a8:5b:af:5a:b7:d2:d2: 7e:bc:00:30:39:65:dc:8b:00:ea:07:71:ed:ea:2e: ad:00:84:86:b4:c9:7d:11:c1:a8:89:71:37:32:af: 28:43:99:62:b6:b9:ac:5a:17:b4:be:39:2a:87:e6: 53:23:d9:c3:80:86:2a:d1:5b:59:30:60:1b:e5:08: 95:a9:c8:35:1a:3d:3f:40:57:cd:89:7d:72:12:95: 75:01:81:99:e4:e1:da:0d:db:d4:36:b4:16:37:99: 20:ab:f4:cd:d7:76:54:23:e1:b7:c5:01:02:15:40: 11:40:e3:c4:b4:be:cd:a4:5d:a1:2b:99:d6:e7:59: d4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C4:38:2F:8A:01:1A:32:44:A6:76:A7:39:3C:19:F7:55:0E:21:B8 X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:31:88:cd:53:f1:93:d5:93:0c:2d:ae:be:03:4f:64:09:e9: 86:2d:b2:59:e5:df:02:82:54:4c:44:0e:00:44:eb:dd:19:9c: 30:6b:4d:d3:82:54:16:30:6a:a0:80:33:ff:8d:cc:49:24:29: f3:bb:13:30:14:c5:c9:83:0a:c2:79:a2:2d:dc:49:94:b5:5c: e0:2f:18:9e:6f:3e:e4:c8:95:d4:77:b7:6e:ec:bc:34:34:0f: 98:9a:a2:e6:23:f1:33:6a:9c:5b:ed:1d:5f:7f:7f:75:2a:ac: f0:a5:64:c7:ea:ee:2e:f2:19:89:f4:53:91:f1:b1:13:2a:80: d6:67:69:ea:71:80:17:eb:eb:32:6d:24:53:c9:30:32:0f:0c: 4b:0b:6e:8e:cc:de:fe:4e:30:da:a2:30:44:53:96:49:23:70: 7f:11:09:84:ee:64:eb:1d:7b:26:bc:19:7e:57:96:67:a2:66: 19:b1:38:61:d5:a4:1e:6d:b1:00:e1:e8:c6:43:83:37:16:5d: 98:18:e2:8a:11:6d:e5:48:dc:12:35:e3:42:5e:4a:89:09:d0: 6a:4f:2c:63:9f:4d:d7:33:cc:12:62:2e:3d:7e:35:ac:03:3e: 87:53:d9:93:40:f7:ce:64:46:e5:19:ce:95:85:bf:a2:b9:47: 28:dc:a5:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+metcKOPUUlkGwsuET9Op9rtPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNjAzMDIwMzE3MDZaFw0yNjAzMDUwOTQzMDZaMDMxMTAvBgNV BAMTKEU1QzQzODJGOEEwMTFBMzI0NEE2NzZBNzM5M0MxOUY3NTUwRTIxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCinXrU2bhazkMm0+fOOUWCe6jY yj8Od1nGjyINSuf+pSSvGe1XXhMSzNFfCR9RMzkQfwfG3hA8JhzbQJKFX25IJYeh svhlVgylH9v/zwX58ol2uOtAv7Di2+dZvudNkVyFk6SQNyADDKR8o3kou9qXk69K 1bSG3EBZrDBiFEqbqFuvWrfS0n68ADA5ZdyLAOoHce3qLq0AhIa0yX0RwaiJcTcy ryhDmWK2uaxaF7S+OSqH5lMj2cOAhirRW1kwYBvlCJWpyDUaPT9AV82JfXISlXUB gZnk4doN29Q2tBY3mSCr9M3XdlQj4bfFAQIVQBFA48S0vs2kXaErmdbnWdTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5cQ4L4oBGjJEpnanOTwZ91UOIbgwHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQxiM1T8ZPVkwwtrr4DT2QJ6YYtslnl3wKC VExEDgBE690ZnDBrTdOCVBYwaqCAM/+NzEkkKfO7EzAUxcmDCsJ5oi3cSZS1XOAv GJ5vPuTIldR3t27svDQ0D5iaouYj8TNqnFvtHV9/f3UqrPClZMfq7i7yGYn0U5Hx sRMqgNZnaepxgBfr6zJtJFPJMDIPDEsLbo7M3v5OMNqiMERTlkkjcH8RCYTuZOsd eya8GX5XlmeiZhmxOGHVpB5tsQDh6MZDgzcWXZgY4ooRbeVI3BI140JeSokJ0GpP LGOfTdczzBJiLj1+NawDPodT2ZNA985kRuUZzpWFv6K5RyjcpXU= -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:26 2026 by rpki-client