$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: VXZ5rbNSZZRNo9k0wzq/o1VR85/Y8mD6UifB0srQ+n0= Subject key identifier: D5:01:EB:86:03:54:2A:68:9C:97:40:7D:06:55:1D:B5:1B:64:9F:F5 Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 670B8C0A739489EEEC9D366C19268AD2320B5E93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: F6 Signing time: Fri 17 Apr 2026 11:42:07 +0000 Manifest this update: Fri 17 Apr 2026 11:37:07 +0000 Manifest next update: Mon 20 Apr 2026 16:01:07 +0000 Files and hashes: 1: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: juQ/cwjH1toIUGh+4Z6y41hGaf2rFqJaltHbfzkfdBc=) 2: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: WYN4mrwjKunsGp4uZVpUx9nBxwBDSeavyWVXTw8bEXE=) 3: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: p17X/oG+aEfQpqjcZBdD9BvLx1n7fEAXSAY/dfkw71I=) 4: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: NaHe5YrxTvb1T+B86yAscpluwifFSNcBhISUAGBKlIw=) 5: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: CbiBxaX9ddBH1o7nomW/iHw3KqeexSYJrX7KRnYKypE=) 6: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: iSq6NwogxUEJNuToH4CRAdLPA94Ifhymd/i0qK2RpFY=) 7: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: aO0x+zXgbPOIjgzHxX0fAcf+6eJJ6z747uBT9dWocuM=) 8: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: +PmFbdoieOm1HYaiDNoJSgRpm6MfVAVtuXNpglouU7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0b:8c:0a:73:94:89:ee:ec:9d:36:6c:19:26:8a:d2:32:0b:5e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Apr 17 11:37:07 2026 GMT Not After : Apr 20 16:01:07 2026 GMT Subject: CN=D501EB8603542A689C97407D06551DB51B649FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:79:57:eb:ed:31:ac:ac:5e:cf:cd:4a:b4: 7c:b9:67:c4:74:f3:ce:26:a2:16:2a:38:4c:61:6b: fc:b3:67:2a:11:44:6e:83:b0:a1:4a:94:16:e1:5b: b0:59:30:e1:a2:a5:6e:55:48:73:63:3f:20:92:47: 9f:42:16:1d:a2:db:6b:51:02:21:64:d9:e5:4c:20: 69:b3:2e:55:dd:35:43:2b:f1:d6:50:f5:03:2f:d3: a6:b4:45:c1:34:ed:46:4a:cb:ca:52:91:66:18:b5: 49:3a:5c:39:fc:80:ad:df:48:8c:5d:94:62:c4:f5: 8f:1b:38:34:c0:5f:7e:41:fc:07:9d:5a:74:2e:82: 30:9d:7b:c5:63:10:64:6f:60:32:e0:6d:f6:90:3f: 98:c3:7b:79:5c:e3:5e:d5:a1:21:4d:31:2a:5c:2e: 71:1f:be:aa:dc:a3:01:9a:73:eb:79:4f:99:2f:bb: 5b:86:eb:e2:ad:f0:49:02:9b:b0:d4:dd:f0:81:a0: ae:7e:9a:88:d6:a4:c8:fd:a1:b3:ea:a1:c1:06:39: ad:4f:96:59:85:03:4b:53:70:66:bd:08:7c:b7:07: 92:1c:b2:40:a3:db:c8:d5:38:76:b2:4b:c6:c4:23: 06:2e:af:99:b7:bd:a9:c9:f9:46:b1:3f:3a:7d:26: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:01:EB:86:03:54:2A:68:9C:97:40:7D:06:55:1D:B5:1B:64:9F:F5 X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f2:60:ce:a2:2a:24:a7:74:d5:e1:fe:0c:2e:f0:b4:5a:1e: f8:43:0b:ba:78:3d:31:d5:d8:2c:62:dd:aa:f3:2a:7d:1b:59: ee:0c:05:15:3b:1d:41:11:7c:f1:50:7a:98:15:25:2d:d9:4e: 40:e6:c7:f4:18:7c:d7:a6:77:6e:98:e4:27:b1:dc:b2:86:5d: 7d:fd:84:71:b9:ee:86:0b:1b:05:89:a3:6c:64:7e:d3:ba:8e: 61:58:cf:03:9f:e4:f2:de:93:01:2c:b6:c7:e0:90:da:4a:18: f2:8c:22:e0:d8:74:51:20:f5:81:c3:ea:a7:c9:45:36:c2:c8: fd:6e:44:c0:85:dd:40:ed:c3:a4:35:24:f2:9a:a3:13:c3:fa: 6b:87:04:02:bf:bf:20:a9:8e:62:62:0d:9b:5d:4f:7e:4c:90: 66:ca:34:f5:80:8b:dc:10:3a:48:37:bd:7e:a2:ea:a9:db:fe: f1:83:6c:d8:dd:92:91:86:5d:c8:1e:bb:e6:1a:5b:03:83:40: be:d1:ce:63:f0:20:64:32:b4:fc:7f:b6:83:ff:c9:fb:d4:14: 98:60:f2:e6:05:9a:c0:62:4f:3f:12:04:46:5e:a9:d4:c3:ea: 4f:4d:47:b3:23:af:d3:65:1a:bf:3e:8e:07:8f:a9:59:42:a6: f3:79:cd:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwuMCnOUie7snTZsGSaK0jILXpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNjA0MTcxMTM3MDdaFw0yNjA0MjAxNjAxMDdaMDMxMTAvBgNV BAMTKEQ1MDFFQjg2MDM1NDJBNjg5Qzk3NDA3RDA2NTUxREI1MUI2NDlGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnd3lX6+0xrKxez81KtHy5Z8R0 884mohYqOExha/yzZyoRRG6DsKFKlBbhW7BZMOGipW5VSHNjPyCSR59CFh2i22tR AiFk2eVMIGmzLlXdNUMr8dZQ9QMv06a0RcE07UZKy8pSkWYYtUk6XDn8gK3fSIxd lGLE9Y8bODTAX35B/AedWnQugjCde8VjEGRvYDLgbfaQP5jDe3lc417VoSFNMSpc LnEfvqrcowGac+t5T5kvu1uG6+Kt8EkCm7DU3fCBoK5+mojWpMj9obPqocEGOa1P llmFA0tTcGa9CHy3B5IcskCj28jVOHayS8bEIwYur5m3vanJ+UaxPzp9JnQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1QHrhgNUKmicl0B9BlUdtRtkn/UwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACryYM6iKiSndNXh/gwu8LRaHvhDC7p4PTHV 2Cxi3arzKn0bWe4MBRU7HUERfPFQepgVJS3ZTkDmx/QYfNemd26Y5Cex3LKGXX39 hHG57oYLGwWJo2xkftO6jmFYzwOf5PLekwEstsfgkNpKGPKMIuDYdFEg9YHD6qfJ RTbCyP1uRMCF3UDtw6Q1JPKaoxPD+muHBAK/vyCpjmJiDZtdT35MkGbKNPWAi9wQ Okg3vX6i6qnb/vGDbNjdkpGGXcgeu+YaWwODQL7RzmPwIGQytPx/toP/yfvUFJhg 8uYFmsBiTz8SBEZeqdTD6k9NR7Mjr9NlGr8+jgePqVlCpvN5zV0= -----END CERTIFICATE-----Generated at Sat Apr 18 15:59:43 2026 by rpki-client