$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: IaYfFRK2qPlN5OIAJJae0ck2/ymztBS4k3QHz56dfGI= Subject key identifier: B9:69:47:57:4E:97:4B:E0:05:9B:A8:24:72:92:D8:96:A7:D4:A1:2D Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 3E7448A5E7D5B3588D69C0C56AACE8BF558C3C01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 023D Signing time: Sun 01 Mar 2026 19:10:49 +0000 Manifest this update: Sun 01 Mar 2026 19:05:49 +0000 Manifest next update: Thu 05 Mar 2026 04:31:49 +0000 Files and hashes: 1: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: 54uV827DWGkct88XhR2oIPpdE9YaezLfahqmX0cipL0=) 2: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 3: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: MVBRsOIN1IZt0jLk1q+iLxrhtC7Paa/XY5pFKcxb+gg=) 4: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 5: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 6: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 7: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: G1ZAtVFl8VG/gYfc4EYdl05ZPWzNHnTYzxrgL9LheQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:74:48:a5:e7:d5:b3:58:8d:69:c0:c5:6a:ac:e8:bf:55:8c:3c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Mar 1 19:05:49 2026 GMT Not After : Mar 5 04:31:49 2026 GMT Subject: CN=B96947574E974BE0059BA8247292D896A7D4A12D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:6d:a7:15:3b:c5:a6:52:4e:51:cb:c0:96: 1f:f7:57:d6:4d:c8:eb:0a:f6:7b:57:a9:ca:79:89: be:75:45:92:31:31:55:00:3c:43:9a:a2:6f:cc:25: 2a:c1:27:81:fa:51:7f:73:ee:54:4a:48:16:7f:82: 87:83:ad:d7:ff:f6:6b:c8:1f:4e:47:95:04:8a:34: f1:68:b5:b8:3d:b9:5c:a9:71:36:7a:9e:7d:aa:04: dd:fe:b8:a1:86:93:60:46:1e:30:6b:1d:54:01:ea: e8:9c:c9:21:61:7d:21:59:3e:b2:7e:2e:91:44:b9: 90:77:28:96:cd:fb:5f:f6:98:a0:bb:1f:5e:2d:54: d7:9b:b0:0f:11:0e:f0:24:4a:7d:f3:6b:69:d9:6b: 39:d6:89:a3:1a:8a:9f:df:3d:40:b6:51:19:5c:8c: 9b:8f:11:5b:98:0c:4c:7b:9e:04:0a:4a:17:f3:65: a3:ac:8b:f1:8e:8d:a3:89:e7:4b:62:fc:c4:52:bb: 00:7d:38:be:18:3b:7c:47:3e:71:84:9b:3b:4d:ab: 35:50:1b:6d:85:f7:5c:ae:90:d4:f2:aa:ae:8b:7c: b9:c1:41:bd:2c:ac:bc:6e:ec:53:47:60:b5:f0:90: 7e:80:be:15:64:83:ef:15:d3:f4:19:5f:54:3e:a3: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:69:47:57:4E:97:4B:E0:05:9B:A8:24:72:92:D8:96:A7:D4:A1:2D X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b0:68:43:0a:4d:0a:86:3b:61:5e:62:9e:f5:db:05:e5:68: f7:62:d3:f6:4b:89:a2:62:1e:67:cd:ae:96:ae:1a:e1:a4:f0: 74:55:eb:30:02:d9:c2:8f:05:a8:e2:1d:bd:a2:cd:17:47:ef: 2e:ca:ea:5b:e2:c8:50:44:a5:ee:e5:33:81:6e:fe:e4:77:f9: ec:ba:68:1d:d1:cd:fe:8a:5e:24:f8:26:25:6d:1b:80:b3:3b: 14:72:e7:c9:29:1b:03:35:2b:f0:c3:33:c5:09:6c:4e:8f:b8: c0:73:aa:d8:3f:ac:de:2f:5d:6d:3c:f8:75:34:68:09:15:00: f0:b8:77:bd:19:a3:12:07:c1:37:86:9c:61:c3:52:f0:ae:9a: 64:95:8f:d1:a4:ee:3a:6a:e0:45:da:99:54:9e:53:fe:89:9d: 0a:36:8e:1d:c8:37:21:3f:1e:b0:8e:d0:6d:43:55:3b:5b:0c: 9f:ee:47:dd:9d:4a:d5:58:bf:86:9e:25:c4:e9:7b:51:83:7b: 6f:94:6f:3f:f3:e3:c5:56:8a:9a:0a:8d:24:7a:93:a3:9b:e1: 9c:35:1f:cb:85:4d:5e:ae:6a:65:ec:e5:4a:c1:6b:24:f1:2e: 45:cb:1c:f6:ed:c1:ee:7c:ba:f7:aa:aa:aa:61:19:f0:d4:9f: 5d:dc:49:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnRIpefVs1iNacDFaqzov1WMPAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNjAzMDExOTA1NDlaFw0yNjAzMDUwNDMxNDlaMDMxMTAvBgNV BAMTKEI5Njk0NzU3NEU5NzRCRTAwNTlCQTgyNDcyOTJEODk2QTdENEExMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1B22nFTvFplJOUcvAlh/3V9ZN yOsK9ntXqcp5ib51RZIxMVUAPEOaom/MJSrBJ4H6UX9z7lRKSBZ/goeDrdf/9mvI H05HlQSKNPFotbg9uVypcTZ6nn2qBN3+uKGGk2BGHjBrHVQB6uicySFhfSFZPrJ+ LpFEuZB3KJbN+1/2mKC7H14tVNebsA8RDvAkSn3za2nZaznWiaMaip/fPUC2URlc jJuPEVuYDEx7ngQKShfzZaOsi/GOjaOJ50ti/MRSuwB9OL4YO3xHPnGEmztNqzVQ G22F91yukNTyqq6LfLnBQb0srLxu7FNHYLXwkH6AvhVkg+8V0/QZX1Q+o7LrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWlHV06XS+AFm6gkcpLYlqfUoS0wHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+waEMKTQqGO2FeYp712wXlaPdi0/ZLiaJi HmfNrpauGuGk8HRV6zAC2cKPBajiHb2izRdH7y7K6lviyFBEpe7lM4Fu/uR3+ey6 aB3Rzf6KXiT4JiVtG4CzOxRy58kpGwM1K/DDM8UJbE6PuMBzqtg/rN4vXW08+HU0 aAkVAPC4d70ZoxIHwTeGnGHDUvCummSVj9Gk7jpq4EXamVSeU/6JnQo2jh3INyE/ HrCO0G1DVTtbDJ/uR92dStVYv4aeJcTpe1GDe2+Ubz/z48VWipoKjSR6k6Ob4Zw1 H8uFTV6uamXs5UrBayTxLkXLHPbtwe58uveqqqphGfDUn13cSYQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:34 2026 by rpki-client