$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: 38JziLwOF50OHFGqNAxbzQy3AaZoDu9cQ+Jcxldn5vo= Subject key identifier: 54:4E:94:1A:AF:C3:09:31:CE:74:46:6A:33:D9:7C:1E:BA:CF:6E:16 Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 07266BC06075AE22199662BCEC96E971FA7F7BD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 01C1 Signing time: Wed 18 Mar 2026 18:52:00 +0000 Manifest this update: Wed 18 Mar 2026 18:47:00 +0000 Manifest next update: Sun 22 Mar 2026 06:15:00 +0000 Files and hashes: 1: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=) 2: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=) 3: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=) 4: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: zFDgOn3cLGi0JgY3SgF5RPOxdnuDfbjaun0yyjJl+1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 06:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:26:6b:c0:60:75:ae:22:19:96:62:bc:ec:96:e9:71:fa:7f:7b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Mar 18 18:47:00 2026 GMT Not After : Mar 22 06:15:00 2026 GMT Subject: CN=544E941AAFC30931CE74466A33D97C1EBACF6E16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:ec:6d:56:6e:71:80:0e:46:5b:d1:0d:f2: 2e:50:cc:23:a7:9b:af:a9:ae:f6:4d:3e:05:f6:45: bf:55:43:23:28:0c:c9:15:7b:78:70:6a:dc:6a:ce: eb:d9:67:8f:e1:2f:d3:11:90:43:10:9a:e6:85:d1: 7b:39:8c:e7:ad:82:17:a0:26:a0:86:91:07:44:b0: da:90:39:b5:6c:1f:77:fb:fc:10:51:bb:ce:05:87: 3f:7b:b1:9e:4a:39:1b:09:6c:c5:d1:91:e2:68:42: 4b:6e:7f:13:b1:3e:c3:06:c0:01:f1:0e:ba:25:fe: 15:43:5e:ef:d8:b1:f8:42:91:87:fa:05:94:6c:ff: 14:36:d5:49:6e:47:fd:c8:50:51:45:f4:e4:77:6f: 7b:ed:b4:bf:98:2f:51:29:15:69:7a:1d:c1:af:98: 45:de:0a:bc:fc:e9:f0:7f:e8:78:86:8d:ce:14:bf: eb:6f:bd:b9:23:57:81:b6:df:93:84:a0:8c:83:5e: 4a:45:a9:09:70:16:3b:10:e3:68:e5:87:b4:28:e3: ac:97:83:ac:c7:a3:cc:57:05:5a:11:38:ae:7f:f2: 3c:27:f5:12:b7:04:da:01:0e:97:e1:07:40:bb:d3: 16:c6:72:7a:8d:3a:0d:ca:ee:99:ec:df:bf:30:a3: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4E:94:1A:AF:C3:09:31:CE:74:46:6A:33:D9:7C:1E:BA:CF:6E:16 X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:41:60:04:26:63:52:35:86:b6:62:df:22:fc:e0:1a:72:75: 21:c0:2f:8e:65:56:5b:23:a0:20:29:4b:2c:db:a5:27:2c:42: e7:a8:3f:56:3f:6c:e5:c5:c7:42:6b:05:cc:d6:b9:08:c4:fe: 0c:1b:e8:de:5e:5b:e4:a8:fe:93:0f:2c:d5:54:af:ea:2d:a6: bc:c6:20:97:7b:8f:22:e9:d4:13:18:b1:9e:68:a3:99:f5:76: a0:04:9f:48:d9:55:78:c5:11:87:96:a0:60:7c:ef:3d:03:2f: 7f:cb:7b:86:ab:5e:2c:fd:d5:7f:6b:ef:bc:e8:a9:de:5d:c7: 6c:b9:be:a5:2b:0c:14:e4:7e:9e:30:e6:2a:5c:ec:62:36:fa: 64:ef:57:14:4c:cc:f3:d1:9c:b6:68:bc:00:b1:fc:0e:52:7f: 10:0a:ee:15:f7:79:7f:1f:9a:d3:ad:bc:94:e0:60:1d:db:d7: b7:8d:be:df:9d:1f:30:af:ef:ad:86:67:6e:75:b2:6e:b6:de: ea:19:93:21:0c:95:00:01:e1:81:31:d2:37:91:31:e5:82:64: ac:0a:15:a9:ac:a8:51:93:26:ca:6a:27:b5:a3:62:7f:64:bb: 93:99:71:7f:51:3a:87:0e:aa:d5:35:fa:39:c6:69:ad:cb:c6: ff:d8:6e:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUByZrwGB1riIZlmK87Jbpcfp/e9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNjAzMTgxODQ3MDBaFw0yNjAzMjIwNjE1MDBaMDMxMTAvBgNV BAMTKDU0NEU5NDFBQUZDMzA5MzFDRTc0NDY2QTMzRDk3QzFFQkFDRjZFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuOxtVm5xgA5GW9EN8i5QzCOn m6+prvZNPgX2Rb9VQyMoDMkVe3hwatxqzuvZZ4/hL9MRkEMQmuaF0Xs5jOetgheg JqCGkQdEsNqQObVsH3f7/BBRu84Fhz97sZ5KORsJbMXRkeJoQktufxOxPsMGwAHx Drol/hVDXu/YsfhCkYf6BZRs/xQ21UluR/3IUFFF9OR3b3vttL+YL1EpFWl6HcGv mEXeCrz86fB/6HiGjc4Uv+tvvbkjV4G235OEoIyDXkpFqQlwFjsQ42jlh7Qo46yX g6zHo8xXBVoROK5/8jwn9RK3BNoBDpfhB0C70xbGcnqNOg3K7pns378wozBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVE6UGq/DCTHOdEZqM9l8HrrPbhYwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlBYAQmY1I1hrZi3yL84BpydSHAL45lVlsj oCApSyzbpScsQueoP1Y/bOXFx0JrBczWuQjE/gwb6N5eW+So/pMPLNVUr+otprzG IJd7jyLp1BMYsZ5oo5n1dqAEn0jZVXjFEYeWoGB87z0DL3/Le4arXiz91X9r77zo qd5dx2y5vqUrDBTkfp4w5ipc7GI2+mTvVxRMzPPRnLZovACx/A5SfxAK7hX3eX8f mtOtvJTgYB3b17eNvt+dHzCv762GZ251sm623uoZkyEMlQAB4YEx0jeRMeWCZKwK FamsqFGTJspqJ7WjYn9ku5OZcX9ROocOqtU1+jnGaa3Lxv/Ybic= -----END CERTIFICATE-----Generated at Thu Mar 19 09:38:15 2026 by rpki-client