$ rpki-client -vvf rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft File: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft (raw, json) Hash identifier: ANZ2iQthAkg+D7V1nCheqmhGC2ecpnXj9zD7aP+cwEw= Subject key identifier: 9F:CA:79:5C:56:68:AD:0D:8D:C9:5F:6D:66:B7:38:E8:26:82:ED:2B Authority key identifier: 21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 Certificate issuer: /CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Certificate serial: 68E7C1FA4E4EED0676219E74CCC4930A96574933 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:43:42 +0000 Manifest this update: Tue 12 May 2026 13:38:42 +0000 Manifest next update: Wed 13 May 2026 16:22:42 +0000 Files and hashes: 1: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl (hash: Tz1XyBcN4t85jBqW3uBzPSAkk3edpREM8CYXDp/2qaQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e7:c1:fa:4e:4e:ed:06:76:21:9e:74:cc:c4:93:0a:96:57:49:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Validity Not Before: May 12 13:38:42 2026 GMT Not After : May 13 16:22:42 2026 GMT Subject: CN=9FCA795C5668AD0D8DC95F6D66B738E82682ED2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:80:ce:12:59:71:b7:57:29:cf:14:ac:dd: b1:16:51:df:67:1a:41:d4:5c:bd:c2:85:a8:e9:b9: 28:26:53:b9:fc:05:f7:41:de:05:cb:aa:88:0d:e6: 38:40:25:a5:6b:c4:b1:79:a4:ac:73:09:e7:fc:76: 81:4d:35:0c:77:f9:56:de:5e:7c:16:af:bb:e9:fc: f8:06:aa:88:e5:6f:1d:47:23:50:5b:0a:ef:9e:02: 16:ff:45:a4:08:74:26:91:49:89:f2:4d:7d:2b:b7: 6e:9a:f3:4a:ba:4f:92:28:30:e7:dd:28:a7:d3:05: 10:92:78:59:c2:1d:b5:6f:ab:2d:04:b7:c5:04:03: 18:34:06:d1:42:79:d9:2e:0f:59:41:9e:4e:6f:6a: 02:b4:05:b6:3b:dc:40:81:e2:08:f4:94:64:00:10: 2b:0d:a7:cd:40:f3:ff:0b:c6:98:dc:9c:b6:50:95: fd:f3:54:f9:ba:93:4b:d9:ba:55:48:f8:92:82:fd: 90:f5:4c:e5:89:e5:d0:81:18:3f:93:6a:88:c1:13: 96:df:03:b0:11:87:9e:80:14:d9:d3:5d:20:06:62: aa:c1:c8:05:77:d0:95:3b:8f:b3:bf:60:40:03:9f: 73:b1:80:6f:53:e7:f0:64:3e:8e:81:60:bf:77:9e: 80:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CA:79:5C:56:68:AD:0D:8D:C9:5F:6D:66:B7:38:E8:26:82:ED:2B X509v3 Authority Key Identifier: keyid:21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:72:72:ff:8b:79:af:b9:ba:b0:5c:5a:3a:38:b6:aa:9c:9b: fa:25:5b:9b:27:88:18:71:6b:50:64:75:d5:4c:ea:d7:40:f3: b1:48:13:22:af:ce:81:46:3b:68:d7:9f:94:6c:b8:9f:62:7d: c9:85:a0:41:17:dd:ad:33:d0:99:6d:50:94:15:8d:48:2c:7b: 0b:dc:e2:cb:12:54:8a:ac:af:3b:41:17:61:4c:34:8d:eb:e4: 83:14:4f:8f:0b:a6:21:4b:23:6c:86:50:72:b5:64:61:16:28: ff:dc:87:06:6d:d1:a2:eb:6b:ce:15:f5:de:ff:22:64:b6:02: 71:b9:4d:82:2a:14:14:cd:e1:6d:7a:7b:8a:59:6d:82:e8:4a: 51:97:42:5c:49:ae:ec:f0:4c:72:0f:9e:ad:37:0f:3f:b9:a7: 42:3f:f8:ce:1b:ac:cb:14:7e:01:87:8e:b9:34:33:16:11:3f: 85:66:0d:8f:65:a9:7e:3f:52:cc:a7:71:eb:76:b9:fb:20:1f: 39:56:cf:a3:68:ec:84:50:94:67:e6:a4:02:d7:c2:33:83:08: af:ce:ce:e2:a0:12:03:d9:90:cd:02:6d:f7:83:30:d9:af:b3: d7:62:bf:c7:d4:c1:40:42:14:32:23:14:d7:16:77:62:d7:7e: b1:75:28:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOfB+k5O7QZ2IZ50zMSTCpZXSTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIy QzJGQ0ZDODAeFw0yNjA1MTIxMzM4NDJaFw0yNjA1MTMxNjIyNDJaMDMxMTAvBgNV BAMTKDlGQ0E3OTVDNTY2OEFEMEQ4REM5NUY2RDY2QjczOEU4MjY4MkVEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZb4DOEllxt1cpzxSs3bEWUd9n GkHUXL3ChajpuSgmU7n8BfdB3gXLqogN5jhAJaVrxLF5pKxzCef8doFNNQx3+Vbe XnwWr7vp/PgGqojlbx1HI1BbCu+eAhb/RaQIdCaRSYnyTX0rt26a80q6T5IoMOfd KKfTBRCSeFnCHbVvqy0Et8UEAxg0BtFCedkuD1lBnk5vagK0BbY73ECB4gj0lGQA ECsNp81A8/8LxpjcnLZQlf3zVPm6k0vZulVI+JKC/ZD1TOWJ5dCBGD+TaojBE5bf A7ARh56AFNnTXSAGYqrByAV30JU7j7O/YEADn3OxgG9T5/BkPo6BYL93noBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8p5XFZorQ2NyV9tZrc46CaC7SswHwYDVR0j BBgwFoAUIeVECCWxrclH6sAgrCXnsiwvz8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDAwMGIwYzItN2VmZC00Mjc4LTk4ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgy NUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIyQzJGQ0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUU1NDQwODI1QjFBREM5NDdFQUMwMjBBQzI1RTdCMjJDMkZD RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3 QjIyQzJGQ0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOFycv+Lea+5urBcWjo4tqqcm/olW5sniBhx a1BkddVM6tdA87FIEyKvzoFGO2jXn5RsuJ9ifcmFoEEX3a0z0JltUJQVjUgsewvc 4ssSVIqsrztBF2FMNI3r5IMUT48LpiFLI2yGUHK1ZGEWKP/chwZt0aLra84V9d7/ ImS2AnG5TYIqFBTN4W16e4pZbYLoSlGXQlxJruzwTHIPnq03Dz+5p0I/+M4brMsU fgGHjrk0MxYRP4VmDY9lqX4/Usyncet2ufsgHzlWz6No7IRQlGfmpALXwjODCK/O zuKgEgPZkM0CbfeDMNmvs9div8fUwUBCFDIjFNcWd2LXfrF1KE0= -----END CERTIFICATE-----Generated at Tue May 12 23:45:51 2026 by rpki-client