$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: HrzkWGvkjsgkRC8cirPNrFk7LezaapE5i8cDnZk4AB8= Subject key identifier: 42:5A:E9:CE:AE:1A:2C:C7:C4:01:FC:2F:6A:A2:5D:30:C2:D2:E4:14 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 1C4ECE6B7A5596A9C5A6BBD886464D11EB7945A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 0205 Signing time: Sun 26 Oct 2025 14:00:39 +0000 Manifest this update: Sun 26 Oct 2025 13:55:39 +0000 Manifest next update: Wed 29 Oct 2025 18:03:39 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 2: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 3: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 4: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 5: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 6: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 7: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: wXC1qCpF7FVKMGnZ/oW4r952EWOIxRanPnLPzNtBNfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4e:ce:6b:7a:55:96:a9:c5:a6:bb:d8:86:46:4d:11:eb:79:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Oct 26 13:55:39 2025 GMT Not After : Oct 29 18:03:39 2025 GMT Subject: CN=425AE9CEAE1A2CC7C401FC2F6AA25D30C2D2E414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c1:51:72:b4:c2:a9:56:2d:e0:77:9e:20:de: 94:dd:5a:a6:fc:7f:08:ac:bc:35:94:72:39:75:38: 3d:0c:a7:13:13:73:50:02:46:6e:05:49:72:9a:7a: 53:e8:b2:87:70:0c:d2:8f:bf:8c:1b:d8:35:6b:7d: 8a:6b:62:2f:67:ba:07:67:b1:1e:df:68:f2:22:a1: 39:85:03:bc:59:91:93:11:b0:9e:36:5f:31:19:07: 22:0d:68:28:a5:c5:be:6d:19:60:58:ee:a6:ee:df: 91:19:0c:fb:0c:10:18:3d:b2:ee:84:2f:f9:6f:20: a6:f5:6e:7e:88:8b:4b:37:1b:45:00:ab:a4:0e:d9: 55:bf:8c:de:93:ac:1a:ee:fe:fa:1a:4f:5f:52:8d: b9:b2:eb:90:6a:08:a3:ab:4b:b0:76:39:5b:e9:e2: 8d:06:9d:f5:bf:07:05:2b:93:dd:a4:ea:00:f6:e9: 8c:2f:f2:d9:6d:07:b2:6a:9d:ac:68:32:04:51:cb: 4a:65:0b:05:b8:44:1d:ce:7e:82:97:4d:f3:45:7e: 52:1c:65:b4:3b:13:ad:00:44:21:e7:76:16:18:28: ee:f1:f8:99:b3:91:2a:4b:c6:8a:2a:97:b7:e2:e1: 88:7c:76:be:76:dc:47:dc:83:71:06:f9:e6:cf:60: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5A:E9:CE:AE:1A:2C:C7:C4:01:FC:2F:6A:A2:5D:30:C2:D2:E4:14 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8a:4a:e9:10:83:85:c5:bb:ba:c2:c6:5c:26:e9:e5:75:8e: cf:ec:42:44:c3:4b:8f:6d:fe:1e:85:22:1a:c7:34:5d:d8:b9: 7c:1c:b4:3b:06:43:03:55:f4:4f:7e:de:65:1e:91:f9:e5:27: 57:35:d9:65:ed:b1:52:f6:0c:1f:ca:a0:3c:9b:e9:69:5f:2f: d9:a2:77:59:e5:77:81:52:e2:f4:fe:59:f2:77:55:cb:af:9b: 2e:ce:2d:39:9a:fd:b4:3d:e9:56:2c:26:9b:50:a4:3e:ed:ee: 05:ec:a0:15:13:c2:32:2e:d4:01:36:3c:6e:a6:d9:21:25:7b: 1f:64:d8:1c:23:44:35:83:1c:08:f4:3b:02:78:15:6a:bb:6e: e6:9e:f7:63:bb:1a:e9:6c:e0:a4:17:f1:d7:b7:f9:6a:f2:b7: 85:a2:09:09:66:2b:cf:4a:61:74:3d:10:0a:87:13:38:d7:de: 5c:f8:ee:6d:c6:73:48:f3:e9:14:fa:64:c9:f5:13:4f:df:36: 6c:cc:e0:78:1c:10:4b:01:6d:85:4a:85:61:11:fe:7d:ff:f0: d1:07:7d:09:6e:d8:b4:cd:b8:88:27:a6:ca:44:94:e5:30:14: 70:25:6d:7b:72:6e:2b:1b:26:89:94:b9:33:6d:39:00:89:d2: e0:b0:f8:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHE7Oa3pVlqnFprvYhkZNEet5RaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTEwMjYxMzU1MzlaFw0yNTEwMjkxODAzMzlaMDMxMTAvBgNV BAMTKDQyNUFFOUNFQUUxQTJDQzdDNDAxRkMyRjZBQTI1RDMwQzJEMkU0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wVFytMKpVi3gd54g3pTdWqb8 fwisvDWUcjl1OD0MpxMTc1ACRm4FSXKaelPosodwDNKPv4wb2DVrfYprYi9nugdn sR7faPIioTmFA7xZkZMRsJ42XzEZByINaCilxb5tGWBY7qbu35EZDPsMEBg9su6E L/lvIKb1bn6Ii0s3G0UAq6QO2VW/jN6TrBru/voaT19Sjbmy65BqCKOrS7B2OVvp 4o0GnfW/BwUrk92k6gD26Ywv8tltB7JqnaxoMgRRy0plCwW4RB3OfoKXTfNFflIc ZbQ7E60ARCHndhYYKO7x+JmzkSpLxooql7fi4Yh8dr523Efcg3EG+ebPYC2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQlrpzq4aLMfEAfwvaqJdMMLS5BQwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSKSukQg4XFu7rCxlwm6eV1js/sQkTDS49t /h6FIhrHNF3YuXwctDsGQwNV9E9+3mUekfnlJ1c12WXtsVL2DB/KoDyb6WlfL9mi d1nld4FS4vT+WfJ3Vcuvmy7OLTma/bQ96VYsJptQpD7t7gXsoBUTwjIu1AE2PG6m 2SElex9k2BwjRDWDHAj0OwJ4FWq7buae92O7Guls4KQX8de3+Wryt4WiCQlmK89K YXQ9EAqHEzjX3lz47m3Gc0jz6RT6ZMn1E0/fNmzM4HgcEEsBbYVKhWER/n3/8NEH fQlu2LTNuIgnpspElOUwFHAlbXtybisbJomUuTNtOQCJ0uCw+Cg= -----END CERTIFICATE-----Generated at Mon Oct 27 09:45:42 2025 by rpki-client