$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft File: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft (raw, json) Hash identifier: J1pcFDuixFPuIgHF1FnmfGJxZE60w9488No74iZwmm4= Subject key identifier: 1E:0A:24:8D:3C:0F:42:7D:51:9C:6E:B2:21:0C:D2:BB:4C:9E:69:C8 Authority key identifier: 21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 Certificate issuer: /CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Certificate serial: 1D30EC45E2FB1427E4A93CE56FBA4A5A90E49B97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:00:51 +0000 Manifest this update: Wed 23 Sep 2026 15:55:51 +0000 Manifest next update: Thu 24 Sep 2026 17:46:51 +0000 Files and hashes: 1: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl (hash: SsceGEmWSc3Y0EdgWQ40JLLs6A+Xdl7AieGDjSbPoRM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:30:ec:45:e2:fb:14:27:e4:a9:3c:e5:6f:ba:4a:5a:90:e4:9b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Validity Not Before: Sep 23 15:55:51 2026 GMT Not After : Sep 24 17:46:51 2026 GMT Subject: CN=1E0A248D3C0F427D519C6EB2210CD2BB4C9E69C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:a3:be:8f:dd:d8:3c:8a:ca:61:16:75:3a: 29:8e:c0:58:c5:27:86:dc:eb:ac:83:43:76:5b:84: c8:6a:5d:22:06:ab:bf:61:8d:06:a2:d2:78:73:e8: d6:fd:40:07:b6:83:c8:b7:30:35:3b:9d:2b:e3:bd: 50:34:3f:44:30:c2:00:f2:d6:82:0a:a4:d0:d4:64: ee:b2:28:b2:51:a9:76:db:6e:4d:3e:80:4b:51:ab: 17:40:3f:75:37:07:b3:95:e8:4f:3c:c9:b6:49:e1: 9a:bf:e2:9f:93:92:58:28:61:ea:1b:74:9a:d7:93: 5f:77:a0:8d:e2:4d:8a:70:a3:cf:2c:34:be:d5:ef: ec:d6:92:69:bd:ec:e2:15:32:bc:eb:9c:c5:6e:6a: a6:19:20:8a:3c:af:36:76:4a:c2:31:a6:79:93:4a: f5:ce:51:39:f5:90:6a:14:87:e9:a1:75:9d:9f:e0: b4:b7:95:68:4d:8d:b6:8c:1b:bb:65:7f:c7:da:ed: f0:f6:16:c3:1d:24:41:8b:09:bf:17:4b:a7:56:22: dd:12:4a:7e:91:5a:6f:15:14:52:c1:af:0a:78:19: 1f:2d:86:ef:ad:9b:a6:c7:9a:68:65:0d:8f:09:f7: c9:1a:3b:2c:f8:ad:6f:06:b2:44:4d:3f:4f:69:fd: 44:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0A:24:8D:3C:0F:42:7D:51:9C:6E:B2:21:0C:D2:BB:4C:9E:69:C8 X509v3 Authority Key Identifier: keyid:21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:89:21:76:3f:35:8d:85:60:a7:ae:2a:0d:70:6b:a6:d8:fc: 4e:69:09:93:47:bb:36:85:2c:bc:c4:16:87:70:3e:32:e9:d2: a8:30:69:2d:2a:23:99:eb:5b:1a:09:dd:83:90:21:80:9b:1c: 3d:ec:e2:39:7a:9d:10:c1:83:11:7b:bb:43:85:2b:77:9e:48: 06:dd:ce:01:95:eb:e0:ee:73:ca:62:ac:67:bc:93:bf:8e:ee: 9d:4f:bc:1e:3b:19:fe:65:ff:1d:0b:24:0a:a0:f7:be:d1:75: 10:76:83:62:9d:df:cd:e4:84:6a:5d:95:7c:e3:2f:ac:9a:84: 45:60:14:1a:0e:05:3f:b0:13:93:07:87:29:87:da:20:b0:fa: a8:55:65:f9:5c:d8:6c:b6:cb:85:07:9f:03:ba:87:1e:85:23: 85:44:4b:f1:5c:94:93:91:e3:a8:2f:9d:e0:0c:9c:20:f8:c6: 27:c4:ff:fb:da:a7:e6:c5:49:6a:b3:c5:58:94:42:97:f9:f7: 21:6f:86:29:66:10:a0:8f:46:33:92:80:6f:33:6b:34:54:3a: 0c:7c:30:55:79:8a:9f:d7:9d:dc:db:99:d0:78:8c:67:b5:4a: ea:4c:ab:d1:98:d8:27:1c:41:c6:32:39:ae:b8:75:7f:86:46: 2b:05:9d:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTDsReL7FCfkqTzlb7pKWpDkm5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIy QzJGQ0ZDODAeFw0yNjA5MjMxNTU1NTFaFw0yNjA5MjQxNzQ2NTFaMDMxMTAvBgNV BAMTKDFFMEEyNDhEM0MwRjQyN0Q1MTlDNkVCMjIxMENEMkJCNEM5RTY5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DKO+j93YPIrKYRZ1OimOwFjF J4bc66yDQ3ZbhMhqXSIGq79hjQai0nhz6Nb9QAe2g8i3MDU7nSvjvVA0P0QwwgDy 1oIKpNDUZO6yKLJRqXbbbk0+gEtRqxdAP3U3B7OV6E88ybZJ4Zq/4p+TklgoYeob dJrXk193oI3iTYpwo88sNL7V7+zWkmm97OIVMrzrnMVuaqYZIIo8rzZ2SsIxpnmT SvXOUTn1kGoUh+mhdZ2f4LS3lWhNjbaMG7tlf8fa7fD2FsMdJEGLCb8XS6dWIt0S Sn6RWm8VFFLBrwp4GR8thu+tm6bHmmhlDY8J98kaOyz4rW8GskRNP09p/URBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHgokjTwPQn1RnG6yIQzSu0yeacgwHwYDVR0j BBgwFoAUIeVECCWxrclH6sAgrCXnsiwvz8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDAwMGIwYzItN2VmZC00Mjc4LTk4ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgy NUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIyQzJGQ0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUU1NDQwODI1QjFBREM5NDdFQUMwMjBBQzI1RTdCMjJDMkZD RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3 QjIyQzJGQ0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOKJIXY/NY2FYKeuKg1wa6bY/E5pCZNHuzaF LLzEFodwPjLp0qgwaS0qI5nrWxoJ3YOQIYCbHD3s4jl6nRDBgxF7u0OFK3eeSAbd zgGV6+Duc8pirGe8k7+O7p1PvB47Gf5l/x0LJAqg977RdRB2g2Kd383khGpdlXzj L6yahEVgFBoOBT+wE5MHhymH2iCw+qhVZflc2Gy2y4UHnwO6hx6FI4VES/FclJOR 46gvneAMnCD4xifE//vap+bFSWqzxViUQpf59yFvhilmEKCPRjOSgG8zazRUOgx8 MFV5ip/XndzbmdB4jGe1SupMq9GY2CccQcYyOa64dX+GRisFnYA= -----END CERTIFICATE-----Generated at Thu Sep 24 12:15:02 2026 by rpki-client