$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft File: 921F400C4C46F802E9ABB17F291DC57058C8535E.mft (raw, json) Hash identifier: af6Z/Mao0UXcyO3caQnSG0X8raAs0u+cRz+0irnavpY= Subject key identifier: 6F:EA:3D:B5:B7:5D:68:3A:EC:16:E2:AF:76:F8:40:40:21:D4:C5:29 Authority key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E Certificate issuer: /CN=921F400C4C46F802E9ABB17F291DC57058C8535E Certificate serial: 3EF0FA4176797EE91C68A535179DF6FB95419757 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 12:00:57 +0000 Manifest this update: Wed 23 Sep 2026 11:55:57 +0000 Manifest next update: Thu 24 Sep 2026 15:54:57 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: f1FXgBK/PW38aWirSx5H2UEdveWzaZdr1flS6u5hn50=) 2: 921F400C4C46F802E9ABB17F291DC57058C8535E.crl (hash: TuaVa2XZ+g8mP13P+LG4Uxj56jZebZpf11JQIaWWdKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f0:fa:41:76:79:7e:e9:1c:68:a5:35:17:9d:f6:fb:95:41:97:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921F400C4C46F802E9ABB17F291DC57058C8535E Validity Not Before: Sep 23 11:55:57 2026 GMT Not After : Sep 24 15:54:57 2026 GMT Subject: CN=6FEA3DB5B75D683AEC16E2AF76F8404021D4C529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f6:ee:e1:31:8d:d9:32:86:d8:e2:3a:cf:90: dc:67:20:f1:9c:bf:7c:d1:77:d4:3a:88:b8:31:9a: f2:0f:b9:f6:c5:d8:b0:62:d7:85:41:2e:d7:d7:6e: 6f:77:c8:4b:c6:e2:9c:8a:71:b7:93:6e:f2:cf:72: 72:97:b7:a6:35:75:03:14:f8:53:bb:45:61:19:70: fa:49:61:da:22:73:30:88:32:ec:b1:d4:2c:93:c2: 4a:79:09:b6:0f:8e:9d:cc:ea:e9:8d:2f:cf:aa:1d: 15:46:a2:54:25:f9:01:c2:10:e9:c8:25:aa:e1:c4: cb:4e:d5:f9:66:82:f8:87:54:c9:67:57:c0:1a:9c: 6a:a6:c1:04:96:16:25:60:38:ec:c9:40:4b:a9:6d: d1:27:68:91:da:18:ea:04:e6:54:5d:70:4e:11:76: 03:46:b2:e6:1f:cd:4d:5b:a6:bf:ee:40:e6:b6:af: 85:a1:be:b5:c6:34:e1:3c:36:90:5c:c3:11:03:fa: 62:01:ab:3b:ee:e0:37:09:12:1b:af:f1:e9:21:b6: f7:84:4d:f6:dd:b2:83:cd:3b:d4:a3:86:8e:47:97: 30:54:41:07:01:75:25:a2:57:7b:02:4f:9b:6c:26: 95:1a:db:03:3c:0b:d2:07:74:6d:97:c4:aa:07:f3: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EA:3D:B5:B7:5D:68:3A:EC:16:E2:AF:76:F8:40:40:21:D4:C5:29 X509v3 Authority Key Identifier: keyid:92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b6:27:e0:bc:20:ea:a7:b1:2f:56:29:7b:55:95:df:be:04: 19:a6:8b:18:7c:6a:ab:ef:9b:ac:01:3f:97:b0:5c:0f:f1:e7: dd:27:66:a9:75:fc:47:d8:23:cf:ec:26:99:bd:22:51:c2:39: 1e:f7:91:48:d1:5f:19:78:6d:2a:69:cb:fe:8e:d7:74:12:ce: 5a:97:2d:44:90:e4:dd:48:d3:8f:be:4d:d5:f6:bf:1a:0f:df: c1:0c:a6:3c:90:4a:80:17:9c:c8:29:6c:fb:bd:e6:10:a4:3e: 99:15:4a:6d:79:77:4d:43:af:f2:20:fc:e1:18:93:71:6d:0a: 98:97:63:a1:bc:43:11:75:25:f0:94:64:2f:1f:11:b6:20:2f: e1:6b:27:9d:ef:94:b5:2d:ac:41:29:d1:dc:81:cb:a9:27:4c: c6:33:e4:67:dd:74:2b:da:b0:e6:41:12:13:fb:64:72:0e:b1: 76:2b:ab:b8:6b:26:c3:1b:2f:6e:9f:0f:48:7e:60:55:77:e8: c4:34:47:1c:53:8c:40:52:be:6a:9b:32:be:ff:6f:58:10:7b: 00:2a:30:9f:27:dc:9d:90:18:eb:4b:b0:1c:e5:87:c9:c9:7b: 96:ff:7f:b5:4a:62:67:4f:3e:fb:39:e0:e6:26:5d:83:1e:72: 41:49:e6:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPvD6QXZ5fukcaKU1F532+5VBl1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1 OEM4NTM1RTAeFw0yNjA5MjMxMTU1NTdaFw0yNjA5MjQxNTU0NTdaMDMxMTAvBgNV BAMTKDZGRUEzREI1Qjc1RDY4M0FFQzE2RTJBRjc2Rjg0MDQwMjFENEM1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe9u7hMY3ZMobY4jrPkNxnIPGc v3zRd9Q6iLgxmvIPufbF2LBi14VBLtfXbm93yEvG4pyKcbeTbvLPcnKXt6Y1dQMU +FO7RWEZcPpJYdoiczCIMuyx1CyTwkp5CbYPjp3M6umNL8+qHRVGolQl+QHCEOnI JarhxMtO1flmgviHVMlnV8AanGqmwQSWFiVgOOzJQEupbdEnaJHaGOoE5lRdcE4R dgNGsuYfzU1bpr/uQOa2r4WhvrXGNOE8NpBcwxED+mIBqzvu4DcJEhuv8ekhtveE TfbdsoPNO9Sjho5HlzBUQQcBdSWiV3sCT5tsJpUa2wM8C9IHdG2XxKoH80aXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb+o9tbddaDrsFuKvdvhAQCHUxSkwHwYDVR0j BBgwFoAUkh9ADExG+ALpq7F/KR3FcFjIU14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDkxNDJjODItYjA0My00NmViLWIwYTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0 QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1OEM4NTM1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85MjFGNDAwQzRDNDZGODAyRTlBQkIxN0YyOTFEQzU3MDU4Qzg1 MzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1 NzA1OEM4NTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFi2J+C8IOqnsS9WKXtVld++BBmmixh8aqvv m6wBP5ewXA/x590nZql1/EfYI8/sJpm9IlHCOR73kUjRXxl4bSppy/6O13QSzlqX LUSQ5N1I04++TdX2vxoP38EMpjyQSoAXnMgpbPu95hCkPpkVSm15d01Dr/Ig/OEY k3FtCpiXY6G8QxF1JfCUZC8fEbYgL+FrJ53vlLUtrEEp0dyBy6knTMYz5GfddCva sOZBEhP7ZHIOsXYrq7hrJsMbL26fD0h+YFV36MQ0RxxTjEBSvmqbMr7/b1gQewAq MJ8n3J2QGOtLsBzlh8nJe5b/f7VKYmdPPvs54OYmXYMeckFJ5tc= -----END CERTIFICATE-----Generated at Thu Sep 24 02:18:54 2026 by rpki-client