$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: U8M1AVBwobKmOQ8RdyeK+UD/02xUbCNUcIVgG8/vpZg= Subject key identifier: DB:A7:ED:75:54:34:49:B2:91:F2:43:2E:61:4C:DF:16:68:4A:C0:F1 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 3279020C5AE8B614419C39A09A6BD152EDC2E8C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 0254 Signing time: Thu 16 Apr 2026 06:20:53 +0000 Manifest this update: Thu 16 Apr 2026 06:15:53 +0000 Manifest next update: Sun 19 Apr 2026 09:56:53 +0000 Files and hashes: 1: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: G1ZAtVFl8VG/gYfc4EYdl05ZPWzNHnTYzxrgL9LheQs=) 2: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: UeA/K6s23TP7G9W4wTXBjO0p3qSfRASNrbUKVNbItCI=) 3: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: MVBRsOIN1IZt0jLk1q+iLxrhtC7Paa/XY5pFKcxb+gg=) 4: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: GtFfESPappRg+X8S0LovuRWAeH8VG2BvnwblqFGFSN0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:79:02:0c:5a:e8:b6:14:41:9c:39:a0:9a:6b:d1:52:ed:c2:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Apr 16 06:15:53 2026 GMT Not After : Apr 19 09:56:53 2026 GMT Subject: CN=DBA7ED75543449B291F2432E614CDF16684AC0F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fe:04:06:7b:07:e7:19:1c:be:57:91:24:32: 52:c6:74:90:49:28:9c:71:02:26:08:b4:59:07:45: ea:9e:35:3c:23:1a:0e:6f:f5:2f:98:6a:04:38:c3: 0f:d6:74:de:de:52:41:41:a6:53:f9:31:66:5b:5d: e6:0b:13:89:9a:bb:f8:9b:f4:10:51:6f:1f:03:18: ff:c4:02:b2:37:d4:91:6d:a0:ba:6c:ea:3f:9c:e7: 2d:9d:7c:86:5f:09:9b:bd:cd:7f:4c:2b:2f:81:e6: 91:29:26:7c:8b:5e:7d:29:01:c2:ec:42:40:92:37: 19:68:30:37:c2:4d:cd:0a:54:04:22:f4:03:8f:0c: 6d:df:b8:bb:82:ea:6c:0e:0a:b9:c9:e4:67:b9:d9: 74:58:f1:a9:16:c8:8a:43:13:40:d3:f4:bc:49:57: 58:08:ba:92:cd:a3:2b:1e:2d:87:a1:8d:ae:55:84: b1:79:a6:9b:fb:29:ed:f0:66:ee:84:b3:10:74:05: bb:8e:7b:e8:3e:8d:ca:9c:84:01:5d:ca:3c:86:f5: aa:91:38:06:69:78:77:16:65:21:7a:bd:59:0e:db: ea:95:90:57:92:f2:7c:99:41:59:c0:b5:2c:4c:a1: 63:3b:4b:c2:1f:e5:4c:da:b3:89:b0:07:85:97:9b: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A7:ED:75:54:34:49:B2:91:F2:43:2E:61:4C:DF:16:68:4A:C0:F1 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d9:8b:65:ad:ad:f9:44:51:16:ae:f7:1e:25:30:da:77:01: 49:fb:5e:dc:05:f3:32:6c:7f:93:ac:43:27:a6:b8:39:ab:87: ae:dc:b3:42:15:5b:c6:7e:85:ac:1f:2d:62:64:a1:e1:16:c0: ab:fa:c0:fd:90:24:ef:a1:b2:30:ff:05:24:95:6d:3d:79:b7: 56:86:b4:4e:21:f5:8a:61:b6:47:70:73:25:9f:c4:d1:4a:c0: be:f5:f0:21:0a:a5:03:5c:ce:1b:a2:28:5e:1f:26:b3:9b:0f: 08:f0:8b:7f:b0:89:30:32:33:d4:a6:a6:96:5b:bc:b2:99:43: d9:23:7d:a9:33:ce:6d:1b:36:7e:9f:ae:d6:e0:a0:6c:ba:2c: 8e:91:98:84:34:d8:ed:c0:0d:4b:d7:ef:ae:2f:e5:cc:d6:58: 06:0c:c3:cc:8d:77:ec:1d:f3:fb:20:03:03:80:c2:d8:c4:d2: c0:cb:fd:f7:c9:a2:6b:d7:7c:7c:ab:bd:6d:58:b5:2f:8f:aa: 0d:a7:f0:02:66:55:ca:f1:24:14:a4:86:5b:dc:2d:a3:07:46: ec:4b:b2:38:0f:91:49:08:a0:51:7e:f2:f8:61:48:3f:76:9c: 0f:41:2a:e6:4b:94:71:41:56:b5:f2:43:20:6a:fc:7f:23:bf: 0c:69:5b:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnkCDFrothRBnDmgmmvRUu3C6MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNjA0MTYwNjE1NTNaFw0yNjA0MTkwOTU2NTNaMDMxMTAvBgNV BAMTKERCQTdFRDc1NTQzNDQ5QjI5MUYyNDMyRTYxNENERjE2Njg0QUMwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/gQGewfnGRy+V5EkMlLGdJBJ KJxxAiYItFkHReqeNTwjGg5v9S+YagQ4ww/WdN7eUkFBplP5MWZbXeYLE4mau/ib 9BBRbx8DGP/EArI31JFtoLps6j+c5y2dfIZfCZu9zX9MKy+B5pEpJnyLXn0pAcLs QkCSNxloMDfCTc0KVAQi9AOPDG3fuLuC6mwOCrnJ5Ge52XRY8akWyIpDE0DT9LxJ V1gIupLNoyseLYehja5VhLF5ppv7Ke3wZu6EsxB0BbuOe+g+jcqchAFdyjyG9aqR OAZpeHcWZSF6vVkO2+qVkFeS8nyZQVnAtSxMoWM7S8If5Uzas4mwB4WXm6glAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU26ftdVQ0SbKR8kMuYUzfFmhKwPEwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnZi2WtrflEURau9x4lMNp3AUn7XtwF8zJs f5OsQyemuDmrh67cs0IVW8Z+hawfLWJkoeEWwKv6wP2QJO+hsjD/BSSVbT15t1aG tE4h9YphtkdwcyWfxNFKwL718CEKpQNczhuiKF4fJrObDwjwi3+wiTAyM9SmppZb vLKZQ9kjfakzzm0bNn6frtbgoGy6LI6RmIQ02O3ADUvX764v5czWWAYMw8yNd+wd 8/sgAwOAwtjE0sDL/ffJomvXfHyrvW1YtS+Pqg2n8AJmVcrxJBSkhlvcLaMHRuxL sjgPkUkIoFF+8vhhSD92nA9BKuZLlHFBVrXyQyBq/H8jvwxpW2k= -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:27 2026 by rpki-client