$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: I8YlnUUjdnkDrt6vdrNPCWOZlw/Peco7/6v4wwhrkqM= Subject key identifier: C7:D6:32:F4:47:3F:96:6A:3F:20:C6:7B:63:9A:F5:F0:DB:E5:E8:79 Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 52027C760E68F0C5DF96CED36B8EFCF5B94840DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: AD Signing time: Mon 03 Nov 2025 20:01:54 +0000 Manifest this update: Mon 03 Nov 2025 19:56:54 +0000 Manifest next update: Thu 06 Nov 2025 20:59:54 +0000 Files and hashes: 1: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: WYN4mrwjKunsGp4uZVpUx9nBxwBDSeavyWVXTw8bEXE=) 2: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: juQ/cwjH1toIUGh+4Z6y41hGaf2rFqJaltHbfzkfdBc=) 3: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: aO0x+zXgbPOIjgzHxX0fAcf+6eJJ6z747uBT9dWocuM=) 4: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: iSq6NwogxUEJNuToH4CRAdLPA94Ifhymd/i0qK2RpFY=) 5: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: NaHe5YrxTvb1T+B86yAscpluwifFSNcBhISUAGBKlIw=) 6: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: +PmFbdoieOm1HYaiDNoJSgRpm6MfVAVtuXNpglouU7g=) 7: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: CbiBxaX9ddBH1o7nomW/iHw3KqeexSYJrX7KRnYKypE=) 8: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: +czAaCTX4X6ABQyr6X8W4obEWDVBLhs3A6tu8xbb8Qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:02:7c:76:0e:68:f0:c5:df:96:ce:d3:6b:8e:fc:f5:b9:48:40:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Nov 3 19:56:54 2025 GMT Not After : Nov 6 20:59:54 2025 GMT Subject: CN=C7D632F4473F966A3F20C67B639AF5F0DBE5E879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d3:dd:3d:79:36:c2:d9:72:cc:90:df:62:97: da:06:65:58:93:35:15:e6:ad:ca:f2:93:bb:f1:d1: d2:74:07:96:89:ef:f1:6d:85:db:7b:2e:ed:47:33: 9b:cb:56:0e:4d:e7:77:1e:33:43:0e:73:fb:04:06: b9:01:bd:c6:bd:e0:48:c2:a5:8b:f0:c3:a9:e9:52: 57:79:35:3c:64:4b:b0:68:11:d2:44:6c:1f:82:03: 44:8c:07:ec:79:9c:8c:58:fb:25:5f:5f:6d:fb:de: 8d:97:23:14:39:b1:a6:99:66:dc:5b:5c:78:32:f3: 3c:9e:f1:58:35:62:7f:14:1f:40:39:4c:d0:2d:04: 3c:34:ea:6e:82:58:32:17:cd:29:5e:b8:ac:1b:35: 68:ce:89:5b:12:45:c4:07:3a:96:57:c7:4b:dd:07: 8a:59:ef:70:2d:e9:b7:23:41:f4:dd:a7:96:48:87: 75:71:27:8c:d3:6c:85:ff:b4:f0:3a:5a:a4:e8:ed: ca:ce:36:1d:ef:e2:fa:6e:13:53:3e:e9:3c:fe:21: 4a:6e:4a:3b:98:2e:94:f1:1b:37:09:23:28:09:07: f6:b8:33:d6:43:df:ae:93:65:37:5a:1f:38:a6:1d: 6b:70:f7:d3:f2:2c:a2:35:55:14:07:df:eb:18:0c: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D6:32:F4:47:3F:96:6A:3F:20:C6:7B:63:9A:F5:F0:DB:E5:E8:79 X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:dc:31:da:d3:72:82:17:92:ee:6a:19:66:70:76:40:23:95: 9a:48:8d:da:75:77:69:38:4b:12:a9:cb:21:7b:20:94:2d:02: f3:50:fc:f1:4a:4e:28:76:65:47:21:a0:7f:1b:02:ee:6a:1d: a2:a4:55:3d:df:24:17:0f:bd:6a:94:eb:b1:75:8a:9e:88:bf: ee:6d:ce:bd:40:0b:b9:52:09:42:30:5a:5a:0a:5e:42:1f:67: d3:80:5f:3b:9a:d9:a3:9b:78:5e:5f:d7:68:04:c8:3c:24:12: 28:6d:6c:0c:fd:08:55:24:bc:65:33:d4:27:d5:d0:68:a0:18: 07:f4:9d:2b:38:17:3d:f5:1f:83:21:14:88:2d:99:dc:a7:01: a5:a3:92:9e:cd:fe:74:b4:6b:a2:e2:7b:64:fb:0f:5d:05:d1: 7e:e1:91:44:4f:8e:51:e1:c6:8d:9e:02:cb:de:ee:81:80:b3: 06:ae:e7:1e:a4:57:2d:b9:bd:55:5e:2e:48:2c:ec:db:0a:4a: 59:fb:f2:4f:36:6c:57:c5:00:74:e2:9c:d8:ed:e0:02:b7:ad: 48:9b:53:9e:f2:fa:74:79:f6:ab:7a:e3:87:5e:c9:2c:88:0b: 31:3f:17:b5:45:43:af:c6:34:36:62:98:2c:2a:34:ae:25:46: 46:c6:05:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgJ8dg5o8MXfls7Ta4789blIQN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNTExMDMxOTU2NTRaFw0yNTExMDYyMDU5NTRaMDMxMTAvBgNV BAMTKEM3RDYzMkY0NDczRjk2NkEzRjIwQzY3QjYzOUFGNUYwREJFNUU4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt0909eTbC2XLMkN9il9oGZViT NRXmrcryk7vx0dJ0B5aJ7/Fthdt7Lu1HM5vLVg5N53ceM0MOc/sEBrkBvca94EjC pYvww6npUld5NTxkS7BoEdJEbB+CA0SMB+x5nIxY+yVfX2373o2XIxQ5saaZZtxb XHgy8zye8Vg1Yn8UH0A5TNAtBDw06m6CWDIXzSleuKwbNWjOiVsSRcQHOpZXx0vd B4pZ73At6bcjQfTdp5ZIh3VxJ4zTbIX/tPA6WqTo7crONh3v4vpuE1M+6Tz+IUpu SjuYLpTxGzcJIygJB/a4M9ZD366TZTdaHzimHWtw99PyLKI1VRQH3+sYDCP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx9Yy9Ec/lmo/IMZ7Y5r18Nvl6HkwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXcMdrTcoIXku5qGWZwdkAjlZpIjdp1d2k4 SxKpyyF7IJQtAvNQ/PFKTih2ZUchoH8bAu5qHaKkVT3fJBcPvWqU67F1ip6Iv+5t zr1AC7lSCUIwWloKXkIfZ9OAXzua2aObeF5f12gEyDwkEihtbAz9CFUkvGUz1CfV 0GigGAf0nSs4Fz31H4MhFIgtmdynAaWjkp7N/nS0a6Lie2T7D10F0X7hkURPjlHh xo2eAsve7oGAswau5x6kVy25vVVeLkgs7NsKSln78k82bFfFAHTinNjt4AK3rUib U57y+nR59qt644deySyICzE/F7VFQ6/GNDZimCwqNK4lRkbGBfo= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:39 2025 by rpki-client