$ rpki-client -vvf rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft File: 921F400C4C46F802E9ABB17F291DC57058C8535E.mft (raw, json) Hash identifier: CkRQNMjN4v3ZG9EEyj4HyA1+72oCaX0xX+1VuQP+Ybs= Subject key identifier: 8C:10:31:26:A6:85:E2:8A:44:90:BF:5C:44:A9:DC:33:80:CC:B3:74 Authority key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E Certificate issuer: /CN=921F400C4C46F802E9ABB17F291DC57058C8535E Certificate serial: 33B4231D154D7A72054931F60EB41883095F4A40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:14:26 +0000 Manifest this update: Fri 24 Jul 2026 00:09:26 +0000 Manifest next update: Sat 25 Jul 2026 03:09:26 +0000 Files and hashes: 1: 921F400C4C46F802E9ABB17F291DC57058C8535E.crl (hash: d6sKBar3bT1HNu2sPvpjN2fvEJN7UUSReEW8kU4iIOQ=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: f1FXgBK/PW38aWirSx5H2UEdveWzaZdr1flS6u5hn50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b4:23:1d:15:4d:7a:72:05:49:31:f6:0e:b4:18:83:09:5f:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921F400C4C46F802E9ABB17F291DC57058C8535E Validity Not Before: Jul 24 00:09:26 2026 GMT Not After : Jul 25 03:09:26 2026 GMT Subject: CN=8C103126A685E28A4490BF5C44A9DC3380CCB374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:ec:8f:19:a2:48:67:f8:18:de:02:e9:79: b6:c6:25:7d:89:a3:19:43:72:e0:55:eb:5d:8f:75: af:61:18:ca:37:a0:4c:b2:7a:82:86:37:7d:93:9a: 9c:c0:66:ab:a5:7b:09:51:d6:ad:1a:6e:ad:c3:ef: d6:ab:5a:aa:1e:ec:2f:37:23:5b:31:84:b3:cf:04: ff:05:93:8e:08:74:ce:19:ef:c9:50:01:8b:65:8d: ca:f4:8a:80:7c:18:ea:20:8e:58:4f:e3:7f:c0:0d: 46:28:b4:32:f9:c1:91:78:25:2c:74:b8:4b:bd:54: b1:14:e8:a2:5c:92:ed:74:3d:bc:b9:74:20:e0:24: 82:34:95:73:73:d6:bd:1e:c3:37:ca:6b:eb:9a:78: 4e:99:66:f4:18:27:d8:cf:d2:91:ec:38:b7:17:b6: dd:72:1b:ba:b1:20:f2:72:35:b8:40:2b:9d:17:80: 85:30:08:fc:6f:ae:57:c4:4c:61:6c:da:28:71:78: c8:2a:8e:ed:04:11:24:5d:b2:75:7c:6e:40:2e:81: d8:a3:6c:09:95:82:73:3f:38:b9:42:33:af:ab:73: fa:76:12:8e:2f:b6:84:58:64:0f:44:14:9a:73:73: c7:46:e7:4a:7f:4e:02:9a:5a:cc:21:52:2b:f1:e5: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:10:31:26:A6:85:E2:8A:44:90:BF:5C:44:A9:DC:33:80:CC:B3:74 X509v3 Authority Key Identifier: keyid:92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:96:7b:2c:7d:96:d2:f6:6f:68:d2:20:e1:89:14:79:cd:1a: 04:9c:45:75:0b:b2:d7:24:2d:7d:91:74:13:56:93:1f:43:c1: ce:ac:8f:45:29:85:d8:df:8e:59:7c:09:5a:33:20:87:14:e3: 7a:e3:bf:b1:53:4d:a1:3f:16:8d:05:93:22:4f:a7:bd:9f:07: dc:13:98:94:65:eb:c9:15:72:51:43:d5:ee:38:a9:98:64:ad: e6:37:3a:4f:9a:82:76:cf:c7:cd:85:8e:e3:0c:70:7d:50:c3: f6:56:73:33:39:66:2f:f2:31:fe:a5:50:3d:4c:4c:0c:23:d1: 8f:03:6f:52:f5:fc:c6:1d:b2:c1:17:24:d0:a7:79:b2:bb:9c: 8a:6e:57:42:22:ec:d1:f6:21:4e:03:76:c2:e1:79:59:7e:54: ba:2f:7f:51:da:06:12:d9:64:cd:7b:44:6f:ea:29:1c:7d:84: 53:4e:c9:c1:62:68:bc:f9:f0:05:7f:d2:29:4c:b8:6e:c8:91: ca:91:6a:e5:97:48:0e:7d:a3:c9:98:10:40:d9:a9:2e:13:fa: cc:ab:43:84:b7:23:5a:ef:6c:4f:d7:24:14:40:ab:10:e9:79: b7:ac:34:d0:07:bc:30:f2:1e:3b:78:53:75:3f:fb:0e:3f:9e: f1:d5:41:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7QjHRVNenIFSTH2DrQYgwlfSkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1 OEM4NTM1RTAeFw0yNjA3MjQwMDA5MjZaFw0yNjA3MjUwMzA5MjZaMDMxMTAvBgNV BAMTKDhDMTAzMTI2QTY4NUUyOEE0NDkwQkY1QzQ0QTlEQzMzODBDQ0IzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/eyPGaJIZ/gY3gLpebbGJX2J oxlDcuBV612Pda9hGMo3oEyyeoKGN32TmpzAZqulewlR1q0abq3D79arWqoe7C83 I1sxhLPPBP8Fk44IdM4Z78lQAYtljcr0ioB8GOogjlhP43/ADUYotDL5wZF4JSx0 uEu9VLEU6KJcku10Pby5dCDgJII0lXNz1r0ewzfKa+uaeE6ZZvQYJ9jP0pHsOLcX tt1yG7qxIPJyNbhAK50XgIUwCPxvrlfETGFs2ihxeMgqju0EESRdsnV8bkAugdij bAmVgnM/OLlCM6+rc/p2Eo4vtoRYZA9EFJpzc8dG50p/TgKaWswhUivx5Y+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjBAxJqaF4opEkL9cRKncM4DMs3QwHwYDVR0j BBgwFoAUkh9ADExG+ALpq7F/KR3FcFjIU14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDkxNDJjODItYjA0My00NmViLWIwYTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0 QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1OEM4NTM1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85MjFGNDAwQzRDNDZGODAyRTlBQkIxN0YyOTFEQzU3MDU4Qzg1 MzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1 NzA1OEM4NTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKWeyx9ltL2b2jSIOGJFHnNGgScRXULstck LX2RdBNWkx9Dwc6sj0Uphdjfjll8CVozIIcU43rjv7FTTaE/Fo0FkyJPp72fB9wT mJRl68kVclFD1e44qZhkreY3Ok+agnbPx82FjuMMcH1Qw/ZWczM5Zi/yMf6lUD1M TAwj0Y8Db1L1/MYdssEXJNCnebK7nIpuV0Ii7NH2IU4DdsLheVl+VLovf1HaBhLZ ZM17RG/qKRx9hFNOycFiaLz58AV/0ilMuG7IkcqRauWXSA59o8mYEEDZqS4T+syr Q4S3I1rvbE/XJBRAqxDpebesNNAHvDDyHjt4U3U/+w4/nvHVQYQ= -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:42 2026 by rpki-client