$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: TZBujnubnZsJfz5aj5YYRD9tCViGJ1Jnt40tuaxvkxM= Subject key identifier: B0:E9:E5:E2:93:4C:1C:46:D5:92:7F:3A:82:47:57:84:7A:54:9F:6D Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 590C665B28C67680D5366DF24BC46D91B8E478E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 01F8 Signing time: Mon 03 Nov 2025 15:01:53 +0000 Manifest this update: Mon 03 Nov 2025 14:56:53 +0000 Manifest next update: Fri 07 Nov 2025 02:20:53 +0000 Files and hashes: 1: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: vs5RIVJc80gvdbMwYUf3UH5oDO3pPFbrNK7pJMccNgE=) 2: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: oCFd+DnxuMki+pbIfsbD45mRVqSO+iIh/J+PDtJ8ne8=) 3: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: GtkgNmJXl7nxDiRttWokSpJjVQu0Ps6kMb8tIC7Cyu0=) 4: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0c:66:5b:28:c6:76:80:d5:36:6d:f2:4b:c4:6d:91:b8:e4:78:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: Nov 3 14:56:53 2025 GMT Not After : Nov 7 02:20:53 2025 GMT Subject: CN=B0E9E5E2934C1C46D5927F3A824757847A549F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:a1:17:9b:9e:b1:1b:31:2d:b5:af:7e:21: bb:35:bf:e1:00:75:e1:c5:52:43:67:f8:27:47:49: d3:d5:fa:a4:59:e0:c9:bf:a7:bd:58:54:a9:19:cc: 89:21:ac:96:56:1a:26:4d:59:81:84:99:1f:ba:d8: 11:27:1d:3d:56:7c:e4:f9:cd:18:47:98:2c:d4:75: ad:02:88:cd:47:2d:99:cc:ce:75:54:ae:a8:22:35: c3:84:a8:e9:77:79:37:ba:ef:4c:7a:7f:d1:6c:fd: 6e:36:2f:f1:21:0c:98:8c:74:10:63:d2:41:cd:dc: c1:6d:70:40:94:b3:f3:bd:f7:48:87:fe:25:7f:dc: 4d:7f:56:a9:02:e9:e9:05:f4:01:14:c0:bb:f4:55: 3a:7e:dc:b9:28:82:c5:10:5a:5c:df:a6:0f:d6:c9: 9c:48:b7:97:b9:21:a5:61:1e:d6:48:25:8d:88:0a: 67:2b:17:7b:a5:37:b4:99:38:42:32:5e:5a:75:2a: 3e:79:88:9b:11:08:c1:76:72:4f:f9:fa:02:2d:6b: 2b:45:21:5b:a3:0b:9d:5a:56:66:4b:d5:6d:c0:73: d8:07:63:93:19:42:47:e2:c5:da:a8:5d:96:3c:a5: 8b:9c:78:fb:04:c0:e0:06:04:49:19:05:4a:98:ca: 36:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E9:E5:E2:93:4C:1C:46:D5:92:7F:3A:82:47:57:84:7A:54:9F:6D X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d6:87:c5:cc:1b:43:0d:d7:16:a6:e0:7e:25:7d:77:82:54: 51:65:1e:f7:81:54:8e:4c:86:fc:2e:9a:20:08:b4:17:ef:bf: 2f:60:e5:bc:ee:eb:52:61:39:e8:5c:25:eb:69:09:a9:d1:02: 1b:28:6d:ff:73:43:01:46:ff:1a:0d:4e:36:69:05:60:1a:69: 48:ca:50:70:bb:f6:bb:c0:e5:46:f4:03:46:b9:82:b0:c7:20: 72:cc:a2:90:d6:8d:f8:2e:d8:85:4a:4c:40:db:41:7d:8a:69: f1:5e:f6:d7:27:3c:cc:ef:60:b6:fb:60:ef:80:a0:18:fa:4a: 54:e3:42:c7:e4:86:b4:62:89:49:0d:b1:44:24:8e:f9:9e:8e: 3c:89:60:4c:0c:c0:e6:42:20:6d:e2:13:98:0c:04:d8:07:67: 7e:a0:a2:34:fe:b7:ed:5c:9e:cc:cc:9f:bf:77:30:1d:f5:d0: 5b:0f:a4:36:3c:a6:b9:6a:2e:a0:b0:68:e9:5a:65:f1:d2:f7: a6:21:28:7c:f5:03:84:51:b4:6a:c7:7f:52:d3:c4:81:64:74: e6:fe:5a:a1:47:41:2a:bd:8d:4d:e5:ea:99:df:3b:25:f2:c8: 6f:01:7a:37:4b:04:52:91:45:20:ae:e2:44:ed:a4:e1:98:0f: 3b:df:6c:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQxmWyjGdoDVNm3yS8RtkbjkeOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNTExMDMxNDU2NTNaFw0yNTExMDcwMjIwNTNaMDMxMTAvBgNV BAMTKEIwRTlFNUUyOTM0QzFDNDZENTkyN0YzQTgyNDc1Nzg0N0E1NDlGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0RKEXm56xGzEtta9+Ibs1v+EA deHFUkNn+CdHSdPV+qRZ4Mm/p71YVKkZzIkhrJZWGiZNWYGEmR+62BEnHT1WfOT5 zRhHmCzUda0CiM1HLZnMznVUrqgiNcOEqOl3eTe670x6f9Fs/W42L/EhDJiMdBBj 0kHN3MFtcECUs/O990iH/iV/3E1/VqkC6ekF9AEUwLv0VTp+3LkogsUQWlzfpg/W yZxIt5e5IaVhHtZIJY2ICmcrF3ulN7SZOEIyXlp1Kj55iJsRCMF2ck/5+gItaytF IVujC51aVmZL1W3Ac9gHY5MZQkfixdqoXZY8pYucePsEwOAGBEkZBUqYyjaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsOnl4pNMHEbVkn86gkdXhHpUn20wHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3Wh8XMG0MN1xam4H4lfXeCVFFlHveBVI5M hvwumiAItBfvvy9g5bzu61JhOehcJetpCanRAhsobf9zQwFG/xoNTjZpBWAaaUjK UHC79rvA5Ub0A0a5grDHIHLMopDWjfgu2IVKTEDbQX2KafFe9tcnPMzvYLb7YO+A oBj6SlTjQsfkhrRiiUkNsUQkjvmejjyJYEwMwOZCIG3iE5gMBNgHZ36gojT+t+1c nszMn793MB310FsPpDY8prlqLqCwaOlaZfHS96YhKHz1A4RRtGrHf1LTxIFkdOb+ WqFHQSq9jU3l6pnfOyXyyG8BejdLBFKRRSCu4kTtpOGYDzvfbNg= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:31 2025 by rpki-client