$ rpki-client -vvf rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft File: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft (raw, json) Hash identifier: 6u46ey9R9Nh9/BrWQLbpRzAq/HHl0zejoBT3OcsBtpg= Subject key identifier: 30:FD:7B:80:B2:4F:02:63:EC:5A:69:8C:C6:33:51:87:31:86:5B:EC Authority key identifier: 21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 Certificate issuer: /CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Certificate serial: 5BA361FD72826F0A348EEA161F4A06D99478F2A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:41:27 +0000 Manifest this update: Thu 23 Jul 2026 21:36:27 +0000 Manifest next update: Fri 24 Jul 2026 22:03:27 +0000 Files and hashes: 1: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl (hash: oBoV8TW7NLnpiwaCN2ncgVss8ja6eMTcWLE8ImsIpME=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a3:61:fd:72:82:6f:0a:34:8e:ea:16:1f:4a:06:d9:94:78:f2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Validity Not Before: Jul 23 21:36:27 2026 GMT Not After : Jul 24 22:03:27 2026 GMT Subject: CN=30FD7B80B24F0263EC5A698CC633518731865BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cf:86:5e:59:b8:32:a2:17:5b:bc:20:76:bf: dd:8b:f3:7f:22:55:1d:b3:04:83:55:5d:c3:39:98: 3e:1e:38:b8:1b:f0:2b:1a:b5:04:9b:d3:22:b0:d2: 10:02:e6:e1:9f:6f:37:02:64:4b:17:eb:70:8f:98: 72:50:e7:7b:be:a0:d1:07:e4:5c:ed:46:e6:0d:b3: 0e:f6:21:88:57:7d:5a:66:0c:a8:ee:c7:5b:8f:17: a5:d3:15:75:21:a8:43:d3:84:9c:ad:43:9e:58:25: 3e:1f:33:42:59:47:b9:1e:13:ac:53:88:f8:a9:41: 15:65:75:56:4b:36:0e:d5:69:a5:0c:20:70:c5:60: e1:1a:39:07:49:0e:1a:09:09:cb:55:3e:4a:4d:32: f3:f5:d4:9a:5d:84:1d:55:b8:14:59:ea:c1:1a:f9: 26:d9:dc:94:e8:d1:c5:08:27:35:cd:8c:dd:d2:ec: be:61:bd:34:f4:59:41:ae:13:40:e4:0c:6a:e0:df: 12:83:ea:b7:f5:3c:4f:32:cb:2d:b0:e6:c0:e8:0c: 84:0e:f6:17:49:83:8a:a1:1a:42:66:5c:08:66:ed: bd:df:73:a9:5e:61:5a:b2:16:23:3f:77:b8:dc:38: 00:5e:88:48:5a:c8:69:3e:db:d9:b2:94:0c:18:8f: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FD:7B:80:B2:4F:02:63:EC:5A:69:8C:C6:33:51:87:31:86:5B:EC X509v3 Authority Key Identifier: keyid:21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:74:f2:ff:db:53:eb:93:bf:5c:4d:9f:1b:05:0b:b5:71:46: 2f:80:6f:6e:51:84:f7:57:cd:d6:de:4c:31:1b:fe:09:44:1f: 4d:94:7c:32:8c:5a:00:4f:9e:27:d1:44:e8:d4:f6:81:1e:f5: f6:a6:45:d4:da:ca:ca:b4:35:b6:a7:39:77:6f:c1:0c:cd:47: 53:ab:25:9e:f8:0d:5c:05:ba:9f:ef:ff:b2:50:0f:7a:e6:ee: 65:62:b0:87:92:ce:b7:49:b1:31:9a:e5:06:48:13:02:85:20: f7:a1:83:7e:77:53:d8:65:8a:66:43:bd:9f:a5:fc:cb:7f:78: 3e:47:16:29:c4:36:1b:41:de:d8:48:ad:cd:a5:8e:14:d8:f4: b1:5e:0b:72:c1:6c:97:c3:9a:a3:3a:fe:c5:1a:03:58:3b:0c: 23:58:7b:c6:35:fc:10:40:f0:19:a2:b9:c5:3d:ec:30:60:cc: c4:6e:cf:22:38:12:68:89:9f:0a:91:6f:93:9c:74:16:7d:0b: 61:74:95:31:a1:63:9c:0a:2a:ef:ed:08:b2:28:76:9d:01:ec: b2:cd:8d:d1:5f:63:9d:97:9e:aa:ff:5f:34:15:56:8c:ac:9b: de:45:de:c3:d3:09:52:17:f5:f0:dd:28:62:ec:09:7b:e7:b0: 8a:5d:fa:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6Nh/XKCbwo0juoWH0oG2ZR48qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIy QzJGQ0ZDODAeFw0yNjA3MjMyMTM2MjdaFw0yNjA3MjQyMjAzMjdaMDMxMTAvBgNV BAMTKDMwRkQ3QjgwQjI0RjAyNjNFQzVBNjk4Q0M2MzM1MTg3MzE4NjVCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzz4ZeWbgyohdbvCB2v92L838i VR2zBINVXcM5mD4eOLgb8CsatQSb0yKw0hAC5uGfbzcCZEsX63CPmHJQ53u+oNEH 5FztRuYNsw72IYhXfVpmDKjux1uPF6XTFXUhqEPThJytQ55YJT4fM0JZR7keE6xT iPipQRVldVZLNg7VaaUMIHDFYOEaOQdJDhoJCctVPkpNMvP11JpdhB1VuBRZ6sEa +SbZ3JTo0cUIJzXNjN3S7L5hvTT0WUGuE0DkDGrg3xKD6rf1PE8yyy2w5sDoDIQO 9hdJg4qhGkJmXAhm7b3fc6leYVqyFiM/d7jcOABeiEhayGk+29mylAwYjwrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMP17gLJPAmPsWmmMxjNRhzGGW+wwHwYDVR0j BBgwFoAUIeVECCWxrclH6sAgrCXnsiwvz8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDAwMGIwYzItN2VmZC00Mjc4LTk4ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgy NUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIyQzJGQ0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUU1NDQwODI1QjFBREM5NDdFQUMwMjBBQzI1RTdCMjJDMkZD RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3 QjIyQzJGQ0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANx08v/bU+uTv1xNnxsFC7VxRi+Ab25RhPdX zdbeTDEb/glEH02UfDKMWgBPnifRROjU9oEe9famRdTaysq0NbanOXdvwQzNR1Or JZ74DVwFup/v/7JQD3rm7mVisIeSzrdJsTGa5QZIEwKFIPehg353U9hlimZDvZ+l /Mt/eD5HFinENhtB3thIrc2ljhTY9LFeC3LBbJfDmqM6/sUaA1g7DCNYe8Y1/BBA 8BmiucU97DBgzMRuzyI4EmiJnwqRb5OcdBZ9C2F0lTGhY5wKKu/tCLIodp0B7LLN jdFfY52Xnqr/XzQVVoysm95F3sPTCVIX9fDdKGLsCXvnsIpd+lk= -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:48 2026 by rpki-client