$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: E0BTogL/AGz7KAnOMM3rmMZGS7Lg6iwE0AoVsAF9tDg= Subject key identifier: 21:0D:6E:40:E6:B2:B1:C0:09:88:0A:2B:9C:3D:01:08:23:01:45:91 Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 087C7DA6296D9B7055AE74C5DA8E939C280C7B73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: E1 Signing time: Sat 28 Feb 2026 10:22:05 +0000 Manifest this update: Sat 28 Feb 2026 10:17:05 +0000 Manifest next update: Tue 03 Mar 2026 17:23:05 +0000 Files and hashes: 1: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: +PmFbdoieOm1HYaiDNoJSgRpm6MfVAVtuXNpglouU7g=) 2: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: iSq6NwogxUEJNuToH4CRAdLPA94Ifhymd/i0qK2RpFY=) 3: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: NaHe5YrxTvb1T+B86yAscpluwifFSNcBhISUAGBKlIw=) 4: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: juQ/cwjH1toIUGh+4Z6y41hGaf2rFqJaltHbfzkfdBc=) 5: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: aO0x+zXgbPOIjgzHxX0fAcf+6eJJ6z747uBT9dWocuM=) 6: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: 8YC1lx+d7Y/2mdTfcPWYIfbwGV86MgbRjYifWdd5b/w=) 7: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: WYN4mrwjKunsGp4uZVpUx9nBxwBDSeavyWVXTw8bEXE=) 8: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: CbiBxaX9ddBH1o7nomW/iHw3KqeexSYJrX7KRnYKypE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7c:7d:a6:29:6d:9b:70:55:ae:74:c5:da:8e:93:9c:28:0c:7b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Feb 28 10:17:05 2026 GMT Not After : Mar 3 17:23:05 2026 GMT Subject: CN=210D6E40E6B2B1C009880A2B9C3D010823014591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a6:9f:87:c8:6f:ae:5a:31:86:7c:22:a3:40: ea:51:a0:f2:af:a9:67:a3:23:75:0e:8b:03:e7:3c: 34:5b:b9:88:19:ed:66:83:4f:2f:5f:fa:7b:56:8d: 67:b7:64:ff:4b:d8:3d:c4:71:f4:22:87:18:0a:f6: 07:66:f4:ba:e4:99:22:fb:9a:7b:3d:33:b1:11:bd: 8a:3e:e3:77:42:0b:6d:66:1f:10:a4:87:3f:59:24: 54:9e:04:98:b6:cf:15:77:f3:7b:5f:98:24:05:ed: cd:fa:ab:7f:98:2c:c6:d0:83:ec:35:b4:a7:46:5c: e1:13:a6:53:02:0d:34:64:4d:ca:54:87:20:7b:44: ca:07:d7:c2:4c:53:7e:44:31:3a:68:85:2b:81:e4: 39:cb:0d:80:b0:a2:0c:ef:3b:83:83:aa:0f:7b:27: 0b:66:dc:63:1c:61:87:72:11:3d:e2:33:d1:c2:a3: b9:05:17:74:d4:c3:ec:c3:13:06:8d:29:70:6d:e8: 49:2a:34:48:1c:95:a5:56:59:9e:1a:46:88:21:21: d6:88:41:2d:67:9c:9f:d2:de:0b:38:f1:4b:fb:33: 0f:c7:94:a6:fc:fa:de:36:6d:05:1d:bf:40:53:a1: 87:2a:a2:de:e5:ca:70:9f:cd:99:0f:7f:26:73:ac: 99:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0D:6E:40:E6:B2:B1:C0:09:88:0A:2B:9C:3D:01:08:23:01:45:91 X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b8:0a:71:9b:be:c9:bd:7f:ad:5d:c1:93:40:3f:5c:c9:7c: 9b:63:2d:76:07:4a:bf:73:4b:8a:26:8c:73:eb:d9:bc:45:ca: 4b:77:d1:1f:9e:d8:c2:2a:35:3f:3f:d0:2a:04:93:d2:8d:ed: 0c:a2:5c:6a:4b:4a:fb:de:5f:e7:5a:db:e5:1d:28:13:1e:84: 33:63:00:58:95:5c:dd:eb:d8:35:0c:6b:ec:60:cd:ce:ea:70: 77:09:da:55:66:19:d8:87:ba:79:ce:92:76:40:91:4f:a6:b4: fb:94:8b:41:ce:f1:c2:16:ce:19:65:71:1c:4d:d7:08:82:c8: e0:c0:e3:9e:14:cc:d5:17:2b:e7:b7:7e:ad:5f:60:8d:0d:f3: 99:52:b1:d2:50:3a:c1:41:4d:15:2e:ee:a7:ce:a1:be:20:12: d7:4d:fc:d3:f4:1b:09:06:90:2d:56:d0:f8:68:e3:16:6c:1f: 8d:86:d1:66:e8:85:a9:94:e9:30:76:43:3c:0e:bb:ae:5f:d7: c8:2a:40:d2:47:e1:10:5c:90:aa:de:1f:61:e9:e8:5d:82:17: 35:8e:4c:12:3a:98:67:85:c6:00:26:c9:20:a6:2a:ea:24:08: 80:67:d5:98:bd:d9:19:94:b0:ae:03:e0:71:a5:1a:b1:5e:ee: 45:8d:92:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHx9piltm3BVrnTF2o6TnCgMe3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNjAyMjgxMDE3MDVaFw0yNjAzMDMxNzIzMDVaMDMxMTAvBgNV BAMTKDIxMEQ2RTQwRTZCMkIxQzAwOTg4MEEyQjlDM0QwMTA4MjMwMTQ1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOpp+HyG+uWjGGfCKjQOpRoPKv qWejI3UOiwPnPDRbuYgZ7WaDTy9f+ntWjWe3ZP9L2D3EcfQihxgK9gdm9LrkmSL7 mns9M7ERvYo+43dCC21mHxCkhz9ZJFSeBJi2zxV383tfmCQF7c36q3+YLMbQg+w1 tKdGXOETplMCDTRkTcpUhyB7RMoH18JMU35EMTpohSuB5DnLDYCwogzvO4ODqg97 Jwtm3GMcYYdyET3iM9HCo7kFF3TUw+zDEwaNKXBt6EkqNEgclaVWWZ4aRoghIdaI QS1nnJ/S3gs48Uv7Mw/HlKb8+t42bQUdv0BToYcqot7lynCfzZkPfyZzrJm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIQ1uQOayscAJiAornD0BCCMBRZEwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu4CnGbvsm9f61dwZNAP1zJfJtjLXYHSr9z S4omjHPr2bxFykt30R+e2MIqNT8/0CoEk9KN7QyiXGpLSvveX+da2+UdKBMehDNj AFiVXN3r2DUMa+xgzc7qcHcJ2lVmGdiHunnOknZAkU+mtPuUi0HO8cIWzhllcRxN 1wiCyODA454UzNUXK+e3fq1fYI0N85lSsdJQOsFBTRUu7qfOob4gEtdN/NP0GwkG kC1W0Pho4xZsH42G0WbohamU6TB2QzwOu65f18gqQNJH4RBckKreH2Hp6F2CFzWO TBI6mGeFxgAmySCmKuokCIBn1Zi92RmUsK4D4HGlGrFe7kWNkjA= -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:18 2026 by rpki-client