$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: UdI665lHWG1mwOnDo/37NqFMDSDC5Zmpnn6+hsdDEaI= Subject key identifier: C8:B2:80:56:74:CD:3D:B2:D7:C5:7B:F7:A1:40:43:9C:2B:1E:60:54 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 27193746C04C4E9BF6AE945B10A2F75C6DF159DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 0208 Signing time: Sun 02 Nov 2025 09:40:39 +0000 Manifest this update: Sun 02 Nov 2025 09:35:39 +0000 Manifest next update: Wed 05 Nov 2025 16:06:39 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 2: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 3: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: VOdqzC5TT1mtMT46F4PWOA2P4QMAd78dGPuVQMPo1gc=) 4: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 5: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 6: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 7: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:19:37:46:c0:4c:4e:9b:f6:ae:94:5b:10:a2:f7:5c:6d:f1:59:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Nov 2 09:35:39 2025 GMT Not After : Nov 5 16:06:39 2025 GMT Subject: CN=C8B2805674CD3DB2D7C57BF7A140439C2B1E6054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:59:f3:18:68:4b:25:53:c1:2d:34:4d:e4: 8f:8e:c8:33:99:09:f5:bb:a9:68:7c:cf:51:f4:9e: bc:78:b5:e3:85:0a:08:1d:e8:56:c1:40:9c:77:c9: a2:a2:d3:22:84:8a:b3:9b:6b:17:fa:a1:fa:e1:51: fc:17:d9:57:38:da:d3:7f:dc:32:9e:02:aa:68:c0: e2:7f:66:40:51:bb:66:05:d2:c7:1d:6f:3f:db:fb: 61:c2:00:62:c1:72:7c:66:99:bf:0d:a3:2a:db:72: e0:ea:9c:c6:be:bc:45:5b:c7:64:b4:43:9a:b5:f9: e2:21:fc:08:95:a5:7c:b6:d2:c4:f3:72:03:82:6a: a5:0f:00:cc:f2:62:b5:bc:e0:9d:da:d5:65:03:f7: 31:35:0e:8a:10:38:d2:76:b5:31:6a:a8:0c:f2:59: 0f:ab:c7:0a:82:8d:2a:f9:d6:73:43:7c:c0:30:f5: ca:0b:63:17:f9:30:e5:7c:7c:0d:10:e1:75:bd:33: ab:62:39:96:70:a0:43:45:61:81:16:3a:0e:84:64: 88:c0:cc:db:2c:71:3f:58:ee:c8:91:06:a2:c6:d1: 95:6d:dc:60:72:1d:76:39:3e:44:3f:14:c3:ae:ce: 01:78:3e:0b:7e:b6:61:19:e9:05:3a:f3:90:72:8e: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B2:80:56:74:CD:3D:B2:D7:C5:7B:F7:A1:40:43:9C:2B:1E:60:54 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3b:ab:32:40:83:45:7d:a4:8e:94:c6:76:2d:fc:b3:44:22: 69:70:93:d8:a2:a2:bb:83:c3:3a:48:6f:0b:66:14:ac:c1:65: 82:b4:1c:92:f2:41:d0:d4:63:6a:da:be:20:7f:a5:0a:4f:04: e0:a4:0c:02:57:21:e3:92:c4:c5:3d:aa:af:d2:6f:14:b7:97: 3f:75:a7:32:92:d0:47:b2:83:4f:20:b7:0e:2a:ab:a3:a7:93: 66:a0:f7:91:48:85:8d:3f:63:58:24:77:5d:f6:67:71:41:00: 1c:90:16:c7:5b:b5:2d:c0:23:78:3e:97:fc:55:ba:d6:98:b1: b6:5e:ed:3a:d8:1d:ee:c0:7b:de:44:c8:97:4a:7f:a9:8b:0f: cf:02:a4:66:35:16:c0:a7:89:30:2c:a8:25:66:5f:33:08:21: 9b:e4:c1:46:b0:e7:e8:9d:50:57:91:4f:5c:5b:0e:a0:f6:1e: 75:1d:58:f2:d4:49:91:6a:17:47:4c:74:a5:7e:46:b7:24:d2: ef:29:2a:20:8f:92:e8:ee:1e:43:55:c1:3a:75:32:57:2d:af: f5:ff:bd:c8:ef:4a:43:5d:88:3b:48:0b:2e:c8:18:df:59:92: 63:bf:08:36:ad:56:90:ee:54:4e:2b:c5:57:d4:05:79:11:40: 7e:2f:05:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJxk3RsBMTpv2rpRbEKL3XG3xWdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTExMDIwOTM1MzlaFw0yNTExMDUxNjA2MzlaMDMxMTAvBgNV BAMTKEM4QjI4MDU2NzRDRDNEQjJEN0M1N0JGN0ExNDA0MzlDMkIxRTYwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HlnzGGhLJVPBLTRN5I+OyDOZ CfW7qWh8z1H0nrx4teOFCggd6FbBQJx3yaKi0yKEirObaxf6ofrhUfwX2Vc42tN/ 3DKeAqpowOJ/ZkBRu2YF0scdbz/b+2HCAGLBcnxmmb8NoyrbcuDqnMa+vEVbx2S0 Q5q1+eIh/AiVpXy20sTzcgOCaqUPAMzyYrW84J3a1WUD9zE1DooQONJ2tTFqqAzy WQ+rxwqCjSr51nNDfMAw9coLYxf5MOV8fA0Q4XW9M6tiOZZwoENFYYEWOg6EZIjA zNsscT9Y7siRBqLG0ZVt3GByHXY5PkQ/FMOuzgF4Pgt+tmEZ6QU685Byjn+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyLKAVnTNPbLXxXv3oUBDnCseYFQwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADU7qzJAg0V9pI6UxnYt/LNEImlwk9iioruD wzpIbwtmFKzBZYK0HJLyQdDUY2raviB/pQpPBOCkDAJXIeOSxMU9qq/SbxS3lz91 pzKS0Eeyg08gtw4qq6Onk2ag95FIhY0/Y1gkd132Z3FBAByQFsdbtS3AI3g+l/xV utaYsbZe7TrYHe7Ae95EyJdKf6mLD88CpGY1FsCniTAsqCVmXzMIIZvkwUaw5+id UFeRT1xbDqD2HnUdWPLUSZFqF0dMdKV+Rrck0u8pKiCPkujuHkNVwTp1Mlctr/X/ vcjvSkNdiDtICy7IGN9ZkmO/CDatVpDuVE4rxVfUBXkRQH4vBfI= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:33 2025 by rpki-client