$ rpki-client -vvf rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft File: 921F400C4C46F802E9ABB17F291DC57058C8535E.mft (raw, json) Hash identifier: tEOIDs8hrXO9dKxeYAKXSNv8Wnc9NPpqHafyU/9Vlsk= Subject key identifier: 46:06:C2:B6:D1:6B:CF:D1:DF:96:25:5C:0D:C8:A7:42:70:2F:BE:0E Authority key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E Certificate issuer: /CN=921F400C4C46F802E9ABB17F291DC57058C8535E Certificate serial: 3FA6EB5693B972740078D282B315BFAE3BDCEFF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:20:40 +0000 Manifest this update: Tue 12 May 2026 22:15:40 +0000 Manifest next update: Thu 14 May 2026 01:38:40 +0000 Files and hashes: 1: 921F400C4C46F802E9ABB17F291DC57058C8535E.crl (hash: Eo15CXXS57B5MYYCRTYmOHgMPgdbXi0dNOLCK2RIxus=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: f1FXgBK/PW38aWirSx5H2UEdveWzaZdr1flS6u5hn50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a6:eb:56:93:b9:72:74:00:78:d2:82:b3:15:bf:ae:3b:dc:ef:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921F400C4C46F802E9ABB17F291DC57058C8535E Validity Not Before: May 12 22:15:40 2026 GMT Not After : May 14 01:38:40 2026 GMT Subject: CN=4606C2B6D16BCFD1DF96255C0DC8A742702FBE0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:92:52:fa:3b:e8:aa:54:2b:40:61:db:3a: a3:49:dc:c8:8e:59:a6:fa:ed:50:9e:13:31:96:1a: a4:f3:5f:33:3c:d4:54:b9:5a:a1:12:bf:02:27:65: a0:1b:f9:04:f2:fa:e4:61:c5:17:12:71:80:c6:13: e8:10:9c:c0:8c:10:b3:8d:c2:c7:94:8b:42:86:73: e9:ad:48:d2:d0:bb:5b:6d:c3:72:ab:55:54:3d:93: f4:57:36:82:4b:1d:9f:de:ae:0c:a6:90:ec:7b:67: 89:a2:98:34:4d:43:65:fb:f8:a8:5c:4d:71:58:10: 58:61:ee:95:d3:3c:62:99:7d:17:64:e2:6f:cf:93: cd:4f:a0:2f:39:7c:bd:50:e4:8a:20:fd:35:7a:8d: 77:ba:09:93:79:4b:2e:50:57:b4:a2:7f:ff:50:0c: 12:73:8d:24:9b:f0:5c:db:63:13:6d:b4:1c:e6:d9: c7:2e:1d:50:bd:55:9f:2a:c7:f1:f2:bb:1c:b1:70: 29:a2:07:8c:55:c8:f3:15:0c:ef:8d:43:ce:34:bb: 6f:ab:98:c0:7f:3e:16:15:8a:08:fa:cc:9b:5a:48: 6f:13:80:50:60:10:6d:d7:12:e8:6c:e8:8d:eb:94: 40:76:e7:61:2e:f1:25:18:6b:c1:ae:65:16:f6:67: 40:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:06:C2:B6:D1:6B:CF:D1:DF:96:25:5C:0D:C8:A7:42:70:2F:BE:0E X509v3 Authority Key Identifier: keyid:92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:11:a9:5b:ce:21:37:4d:ec:2c:f2:1e:f2:01:58:ce:94:50: fe:72:97:c2:a5:7e:10:17:ef:83:df:1c:4d:29:9d:3a:b0:fb: 63:6b:1a:96:a5:9e:80:56:ac:c2:8d:4a:0a:6c:a6:74:d6:60: 93:77:11:fa:1a:5d:02:36:1a:18:df:11:14:ad:d0:40:cf:d6: 78:6b:5c:f9:17:fd:07:50:34:1f:b8:20:7f:7c:59:80:4c:41: ce:21:5c:f1:68:b9:ec:7f:f2:0e:e9:bd:3a:18:cd:27:7c:98: 42:cd:d6:bb:1f:60:2c:e4:63:b0:fa:38:8b:07:05:dc:f2:69: 95:8a:f6:13:df:4f:5c:0f:52:58:8a:8a:f7:e8:a9:1d:49:ad: 20:60:7f:c5:3c:4e:fa:57:0e:9e:4f:cd:c1:82:0c:89:71:08: 5e:f3:83:97:69:bf:86:99:3f:43:2a:7e:82:6f:1f:77:8f:a4: 87:5a:0d:b5:19:9f:a1:f9:65:fc:4d:c4:9d:33:40:46:78:a9: 28:46:1c:df:35:ed:16:c6:84:f4:f0:61:c2:68:5c:ee:25:a9: b6:19:9d:d0:73:b7:c5:6b:50:fc:87:21:41:60:3e:09:d1:5b: 20:70:66:f0:e8:ce:e7:49:35:85:83:1b:06:b1:16:5b:5e:f6: 72:0e:6b:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6brVpO5cnQAeNKCsxW/rjvc7/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1 OEM4NTM1RTAeFw0yNjA1MTIyMjE1NDBaFw0yNjA1MTQwMTM4NDBaMDMxMTAvBgNV BAMTKDQ2MDZDMkI2RDE2QkNGRDFERjk2MjU1QzBEQzhBNzQyNzAyRkJFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmT5JS+jvoqlQrQGHbOqNJ3MiO Wab67VCeEzGWGqTzXzM81FS5WqESvwInZaAb+QTy+uRhxRcScYDGE+gQnMCMELON wseUi0KGc+mtSNLQu1ttw3KrVVQ9k/RXNoJLHZ/ergymkOx7Z4mimDRNQ2X7+Khc TXFYEFhh7pXTPGKZfRdk4m/Pk81PoC85fL1Q5Iog/TV6jXe6CZN5Sy5QV7Sif/9Q DBJzjSSb8FzbYxNttBzm2ccuHVC9VZ8qx/HyuxyxcCmiB4xVyPMVDO+NQ840u2+r mMB/PhYVigj6zJtaSG8TgFBgEG3XEuhs6I3rlEB252Eu8SUYa8GuZRb2Z0BtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURgbCttFrz9HfliVcDcinQnAvvg4wHwYDVR0j BBgwFoAUkh9ADExG+ALpq7F/KR3FcFjIU14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDkxNDJjODItYjA0My00NmViLWIwYTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0 QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1OEM4NTM1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85MjFGNDAwQzRDNDZGODAyRTlBQkIxN0YyOTFEQzU3MDU4Qzg1 MzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1 NzA1OEM4NTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQRqVvOITdN7CzyHvIBWM6UUP5yl8KlfhAX 74PfHE0pnTqw+2NrGpalnoBWrMKNSgpspnTWYJN3EfoaXQI2GhjfERSt0EDP1nhr XPkX/QdQNB+4IH98WYBMQc4hXPFouex/8g7pvToYzSd8mELN1rsfYCzkY7D6OIsH BdzyaZWK9hPfT1wPUliKivfoqR1JrSBgf8U8TvpXDp5PzcGCDIlxCF7zg5dpv4aZ P0MqfoJvH3ePpIdaDbUZn6H5ZfxNxJ0zQEZ4qShGHN817RbGhPTwYcJoXO4lqbYZ ndBzt8VrUPyHIUFgPgnRWyBwZvDozudJNYWDGwaxFlte9nIOa48= -----END CERTIFICATE-----Generated at Wed May 13 00:44:25 2026 by rpki-client