$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: 1GIC/mgGTsatddNlzUsy9ImGWY+cFMsQyLLyJwqJOqM= Subject key identifier: DD:B3:20:DA:FD:BC:C9:63:E2:3A:78:C7:A9:AD:02:E9:BE:D8:9E:F4 Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 2E88D78FE1477620B00F3A9C35C77F85EF32C45E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 017F Signing time: Wed 22 Oct 2025 14:21:45 +0000 Manifest this update: Wed 22 Oct 2025 14:16:45 +0000 Manifest next update: Sat 25 Oct 2025 17:03:45 +0000 Files and hashes: 1: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=) 2: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: nK3JPhy56PBuB2B5aHfhQHRLjuzfXQju6+upCU4B0vU=) 3: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=) 4: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:88:d7:8f:e1:47:76:20:b0:0f:3a:9c:35:c7:7f:85:ef:32:c4:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Oct 22 14:16:45 2025 GMT Not After : Oct 25 17:03:45 2025 GMT Subject: CN=DDB320DAFDBCC963E23A78C7A9AD02E9BED89EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:40:fc:a4:5c:83:f4:0e:b1:38:82:93:47: 5a:e5:e2:f9:ad:2a:11:c3:56:25:ea:8a:2f:3a:3e: a7:09:0f:b3:9e:1c:b5:30:7e:71:50:38:5b:89:b1: fc:65:5a:cc:ee:e5:6a:38:cf:2c:4d:d1:05:97:fa: 78:77:06:73:d1:b3:2d:84:40:67:e8:a6:9c:a0:62: d1:5d:ed:84:6d:73:8c:53:24:f9:29:13:9f:d6:c7: db:41:b4:dc:db:fc:59:c7:05:6e:41:76:ac:bf:83: 91:c1:a4:e0:31:fe:12:c3:51:2d:b2:c3:0a:c0:7b: 09:6f:9f:69:63:67:a4:2b:a1:9f:8b:b6:24:14:6f: c7:c9:70:7a:11:15:1e:eb:a0:19:2c:c8:3a:79:68: 6d:75:d1:01:3e:c5:ce:be:f7:2a:45:7f:2f:d1:0a: 27:82:1c:70:50:7d:de:ec:90:ed:26:a1:a7:5d:cb: 28:2a:d9:e4:86:70:04:86:60:a1:e2:bc:49:57:8f: 9a:0d:c6:28:ca:36:4c:3c:6a:4c:07:3e:2c:4e:44: 1a:1e:b2:80:52:89:a4:77:c5:65:a3:b1:aa:f0:e2: 28:bd:75:66:7c:4b:9a:b3:3d:56:9d:3a:87:64:57: 34:84:31:b7:a7:26:8c:49:6c:80:cb:c1:fa:ec:27: 5d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B3:20:DA:FD:BC:C9:63:E2:3A:78:C7:A9:AD:02:E9:BE:D8:9E:F4 X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ba:0f:97:13:da:90:e3:7b:e6:c4:6d:44:ca:51:d3:a0:e9: ae:59:a6:b5:f1:f0:15:f8:2f:28:b9:9d:f2:97:e4:f8:80:b0: ca:25:e2:13:f6:57:d3:c1:0e:f8:76:f8:15:a5:7f:19:37:62: 60:55:74:dd:03:2e:e1:79:cf:f2:ba:34:1a:16:93:a4:cb:e3: 00:2c:7d:ad:43:66:8b:ef:3e:4f:fe:cb:ad:4f:7f:92:a0:b9: fa:28:74:b2:74:3f:fa:de:c1:3e:d0:e6:fb:d5:4b:eb:7d:0e: fd:fc:14:a7:08:ef:0d:fa:1f:ca:2b:1d:b8:85:c5:aa:ee:cb: 14:20:e5:53:71:c3:86:f7:92:a5:a2:fc:07:3c:5a:28:27:ea: bf:9a:1d:69:82:6e:6c:2b:45:db:c5:80:54:67:26:7b:2e:3a: 51:95:0f:11:90:2c:17:fb:26:03:f9:3f:92:60:8e:a7:34:a2: ab:98:d3:45:60:f4:18:ea:d4:b6:ee:02:d7:60:83:73:30:5f: ed:69:5e:40:0b:50:f3:e1:9d:96:31:29:fe:1a:0e:87:06:2b: 02:f2:95:57:64:98:f4:a2:5c:b0:21:7c:49:70:f4:d8:49:21: ac:13:7c:5e:5a:b2:d1:6e:8e:a7:74:2b:0b:8a:5d:1e:c4:46: 48:c3:33:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULojXj+FHdiCwDzqcNcd/he8yxF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNTEwMjIxNDE2NDVaFw0yNTEwMjUxNzAzNDVaMDMxMTAvBgNV BAMTKEREQjMyMERBRkRCQ0M5NjNFMjNBNzhDN0E5QUQwMkU5QkVEODlFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2e0D8pFyD9A6xOIKTR1rl4vmt KhHDViXqii86PqcJD7OeHLUwfnFQOFuJsfxlWszu5Wo4zyxN0QWX+nh3BnPRsy2E QGfoppygYtFd7YRtc4xTJPkpE5/Wx9tBtNzb/FnHBW5Bdqy/g5HBpOAx/hLDUS2y wwrAewlvn2ljZ6QroZ+LtiQUb8fJcHoRFR7roBksyDp5aG110QE+xc6+9ypFfy/R CieCHHBQfd7skO0moaddyygq2eSGcASGYKHivElXj5oNxijKNkw8akwHPixORBoe soBSiaR3xWWjsarw4ii9dWZ8S5qzPVadOodkVzSEMbenJoxJbIDLwfrsJ129AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3bMg2v28yWPiOnjHqa0C6b7YnvQwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAa6D5cT2pDje+bEbUTKUdOg6a5ZprXx8BX4 Lyi5nfKX5PiAsMol4hP2V9PBDvh2+BWlfxk3YmBVdN0DLuF5z/K6NBoWk6TL4wAs fa1DZovvPk/+y61Pf5KgufoodLJ0P/rewT7Q5vvVS+t9Dv38FKcI7w36H8orHbiF xaruyxQg5VNxw4b3kqWi/Ac8Wign6r+aHWmCbmwrRdvFgFRnJnsuOlGVDxGQLBf7 JgP5P5Jgjqc0oquY00Vg9Bjq1LbuAtdgg3MwX+1pXkALUPPhnZYxKf4aDocGKwLy lVdkmPSiXLAhfElw9NhJIawTfF5astFujqd0KwuKXR7ERkjDMwQ= -----END CERTIFICATE-----Generated at Thu Oct 23 22:33:28 2025 by rpki-client