$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft File: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft (raw, json) Hash identifier: +VUFQI442tWJyrbMGuNmw075W6BRYe6FRC6njVgt7os= Subject key identifier: 00:17:C4:80:61:D1:EF:64:90:82:02:DC:BD:71:AC:D2:1C:CA:88:02 Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 Certificate issuer: /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Certificate serial: 4006BA50FC3F4595ECEF55F504C74299AEBC849E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft Manifest number: 021B Signing time: Fri 05 Sep 2025 10:01:47 +0000 Manifest this update: Fri 05 Sep 2025 09:56:47 +0000 Manifest next update: Mon 08 Sep 2025 15:52:47 +0000 Files and hashes: 1: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl (hash: ZT5klmBGo6lOunDJLOS+UkaPfPRdEWaeW6FbwYa77VY=) 2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: bu4LtbxxfvYhSmPVYXsHJnQ8u6QDASxNerDLPSby9+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:06:ba:50:fc:3f:45:95:ec:ef:55:f5:04:c7:42:99:ae:bc:84:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Validity Not Before: Sep 5 09:56:47 2025 GMT Not After : Sep 8 15:52:47 2025 GMT Subject: CN=0017C48061D1EF64908202DCBD71ACD21CCA8802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:77:38:b6:44:ca:51:26:55:f6:f7:bd:6a: d0:0b:b5:df:3e:73:3d:02:95:25:c3:99:41:50:75: c7:4c:58:a9:9b:23:11:26:02:1d:cc:92:40:3b:6d: 3c:b8:64:2e:cd:00:36:e7:97:a0:80:bd:d2:09:73: 09:42:7c:de:01:1c:95:f0:d0:f9:af:8e:9a:e6:68: 70:75:fb:4d:15:c3:09:b9:d1:bc:0a:02:f6:86:2e: 16:98:57:d5:0d:d2:0f:26:c1:ec:8e:12:04:88:fb: 6a:0b:a5:59:ef:7d:4b:76:73:a3:21:66:b5:64:29: 8c:a5:2e:d3:bc:77:c7:a5:87:16:f5:14:87:28:e4: e0:15:d5:06:97:1f:f8:e1:16:e4:c7:83:85:bf:db: 57:6c:5e:03:73:5a:64:9e:ab:53:83:fd:1d:82:d2: f4:79:de:1a:1d:5d:05:72:1e:44:5e:1e:5b:4d:ca: ae:98:2f:81:b7:20:89:7e:7b:f3:85:81:32:e6:24: c4:4c:37:be:50:c3:0c:84:5e:74:b5:4e:a0:1c:8c: f6:db:51:f6:e6:b1:d9:0d:a0:cb:58:ea:7a:63:5d: f4:0b:17:5f:ff:fd:a0:d4:2c:f8:d1:d4:bc:cb:c4: b6:24:89:2d:64:77:91:1f:6d:45:57:23:2e:61:0d: 81:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:17:C4:80:61:D1:EF:64:90:82:02:DC:BD:71:AC:D2:1C:CA:88:02 X509v3 Authority Key Identifier: keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6c:3d:c0:39:61:4f:c7:fb:dc:f5:77:46:6d:fd:fd:08:03: b7:aa:55:f1:b9:f5:cc:25:98:89:53:c2:5d:19:56:8b:06:f7: 1c:db:5b:b3:33:be:39:83:9c:dd:ef:ff:b2:7b:7d:ba:83:01: c4:4b:55:4c:f6:96:a1:58:ba:09:08:07:1b:c2:d8:f5:58:e1: 21:c4:b4:01:46:74:df:49:4a:c1:f1:93:d4:47:c2:3d:8d:1c: 19:76:c7:c6:b1:61:0d:df:d5:88:78:c5:1d:c2:44:4e:75:e5: 19:ed:ff:16:c4:eb:af:ec:1c:fd:b0:b2:eb:c5:19:a1:4c:ab: cf:13:a0:00:6b:36:d1:1d:5c:54:a9:72:b0:a6:f2:90:cb:8e: 4e:fb:d2:ab:18:af:37:8b:85:36:24:55:d4:00:3e:92:87:26: a3:66:f4:db:f6:77:6d:37:39:35:a1:c8:8d:28:0c:76:d1:dc: 6b:80:19:9b:a9:5e:80:af:bb:d8:48:02:43:e6:43:a4:f0:d3: 69:4f:32:f2:14:31:58:f3:e0:64:3e:6a:c3:a3:3c:2d:1b:70: 0e:d5:ca:26:ca:d6:b4:bc:f3:50:7f:a5:fd:52:8e:83:d2:82: f6:b4:e8:6d:a5:6b:e6:f0:d4:0e:7f:01:17:8c:47:ed:36:da: a7:b4:fd:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAa6UPw/RZXs71X1BMdCma68hJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2 NEREOUYyNjAeFw0yNTA5MDUwOTU2NDdaFw0yNTA5MDgxNTUyNDdaMDMxMTAvBgNV BAMTKDAwMTdDNDgwNjFEMUVGNjQ5MDgyMDJEQ0JENzFBQ0QyMUNDQTg4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAnc4tkTKUSZV9ve9atALtd8+ cz0ClSXDmUFQdcdMWKmbIxEmAh3MkkA7bTy4ZC7NADbnl6CAvdIJcwlCfN4BHJXw 0PmvjprmaHB1+00Vwwm50bwKAvaGLhaYV9UN0g8mweyOEgSI+2oLpVnvfUt2c6Mh ZrVkKYylLtO8d8elhxb1FIco5OAV1QaXH/jhFuTHg4W/21dsXgNzWmSeq1OD/R2C 0vR53hodXQVyHkReHltNyq6YL4G3IIl+e/OFgTLmJMRMN75QwwyEXnS1TqAcjPbb UfbmsdkNoMtY6npjXfQLF1///aDULPjR1LzLxLYkiS1kd5EfbUVXIy5hDYGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABfEgGHR72SQggLcvXGs0hzKiAIwHwYDVR0j BBgwFoAU0ho1l9e169mlR2gPHC7XpGTdnyYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2M1NjA1ZC1mMTdhLTQwMTAtOTI1My0yMTBjNjRmMTQ4YmQvMC9EMjFBMzU5N0Q3 QjVFQkQ5QTU0NzY4MEYxQzJFRDdBNDY0REQ5RjI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2NERE OUYyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3 QTQ2NEREOUYyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9sPcA5YU/H+9z1d0Zt/f0IA7eqVfG59cwl mIlTwl0ZVosG9xzbW7MzvjmDnN3v/7J7fbqDAcRLVUz2lqFYugkIBxvC2PVY4SHE tAFGdN9JSsHxk9RHwj2NHBl2x8axYQ3f1Yh4xR3CRE515Rnt/xbE66/sHP2wsuvF GaFMq88ToABrNtEdXFSpcrCm8pDLjk770qsYrzeLhTYkVdQAPpKHJqNm9Nv2d203 OTWhyI0oDHbR3GuAGZupXoCvu9hIAkPmQ6Tw02lPMvIUMVjz4GQ+asOjPC0bcA7V yibK1rS881B/pf1SjoPSgva06G2la+bw1A5/AReMR+022qe0/RE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:18:46 2025 by rpki-client