$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft File: 921F400C4C46F802E9ABB17F291DC57058C8535E.mft (raw, json) Hash identifier: zYEhMiqJ1SuaMQkne0sdlvCyvz0XMSzm6kxirRmlk2g= Subject key identifier: 5D:D1:6D:10:34:8A:B7:01:D9:88:53:15:48:FD:1B:1B:28:D4:36:29 Authority key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E Certificate issuer: /CN=921F400C4C46F802E9ABB17F291DC57058C8535E Certificate serial: 1DC84D2DB2D41B5B1A935F742666B70469CE565A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 16:40:24 +0000 Manifest this update: Sat 14 Nov 2026 16:35:24 +0000 Manifest next update: Sun 15 Nov 2026 19:25:24 +0000 Files and hashes: 1: 921F400C4C46F802E9ABB17F291DC57058C8535E.crl (hash: o1BlF5QFujkPqSeB7qPQ2VGBmlsf1s/SjLXkj2aC1yY=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: f1FXgBK/PW38aWirSx5H2UEdveWzaZdr1flS6u5hn50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c8:4d:2d:b2:d4:1b:5b:1a:93:5f:74:26:66:b7:04:69:ce:56:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921F400C4C46F802E9ABB17F291DC57058C8535E Validity Not Before: Nov 14 16:35:24 2026 GMT Not After : Nov 15 19:25:24 2026 GMT Subject: CN=5DD16D10348AB701D988531548FD1B1B28D43629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:29:8b:7d:63:b0:e6:df:58:51:48:4b:1c: 7f:7a:3b:46:be:3b:42:bc:10:37:f8:28:2b:80:0c: 85:32:fa:b5:67:e8:c3:43:e1:85:33:79:f0:6c:03: 98:02:05:54:2b:81:33:90:41:37:c0:8b:39:3c:43: 2c:85:14:bc:bf:d5:67:2c:c5:1d:c3:eb:c7:e8:e9: 5f:49:c4:3e:78:b4:fa:47:ec:06:ad:d0:5f:a7:af: 8e:eb:06:18:c2:b6:67:8b:57:ae:39:50:79:f3:da: 0a:4a:ab:0f:b9:93:94:ef:33:e5:f1:43:04:2c:e7: d0:96:44:2b:bf:67:0a:1a:44:f5:ac:a8:2a:41:3e: 89:c7:f8:72:cd:51:3b:68:4b:83:f9:eb:41:8c:8b: ba:1c:99:c7:d2:fd:18:25:85:50:08:b3:ab:2f:91: 71:1d:a1:01:77:10:c8:17:f0:54:66:97:b6:e3:15: e7:20:fc:4f:24:43:8f:ae:0e:31:38:fb:94:86:38: 04:3d:41:b1:c8:f8:8b:e6:29:a9:1c:03:12:84:bb: ee:71:a4:0a:72:7b:08:72:b3:18:4f:a1:e0:d5:16: 55:04:da:eb:dd:60:cc:ea:7b:08:65:24:ca:e5:f9: c7:45:a4:91:ce:df:9e:ad:7f:6f:37:de:8c:ea:64: f2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D1:6D:10:34:8A:B7:01:D9:88:53:15:48:FD:1B:1B:28:D4:36:29 X509v3 Authority Key Identifier: keyid:92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:38:6d:21:eb:6c:f5:25:c5:5e:a8:eb:2c:32:b9:cc:30:77: 8a:cf:dc:01:54:fa:66:2a:cc:be:c7:bf:75:26:e3:19:66:ed: a9:7e:4a:45:be:91:ed:12:43:b3:f0:f6:8e:a6:23:e5:97:5f: 87:83:4e:4a:b6:30:f2:25:df:36:bd:e7:5a:90:38:72:01:4f: e8:0d:d4:3a:bb:fa:76:8c:2e:00:0c:40:e5:73:9b:64:87:09: 34:5d:41:c6:8e:80:36:d9:21:dc:fb:a8:ad:c0:4a:b7:9c:6b: ae:80:c9:5b:e1:f4:19:62:02:13:69:a9:88:5a:1c:2d:ea:8d: 3c:fa:50:8b:b8:f1:a2:5d:10:64:18:14:bc:90:94:24:f1:d9: ad:90:a7:35:72:8c:84:17:ab:38:c4:c6:df:4b:f6:c6:fa:88: 1b:43:39:05:35:e9:db:19:ae:1d:55:15:22:db:eb:56:09:32: ef:6f:6d:54:da:93:4e:c2:80:3a:20:03:7b:f8:e7:ff:e6:63: fa:a5:57:d3:a5:c6:6b:6f:91:cf:d8:5f:98:0d:d7:0c:4e:cc: 24:06:fa:f7:40:17:49:3a:71:5c:60:6f:f6:d1:f1:35:5c:ac: d5:ab:93:82:cd:70:a8:f1:52:be:2f:84:a1:ac:65:1b:8c:57: 59:87:11:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHchNLbLUG1sak190Jma3BGnOVlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1 OEM4NTM1RTAeFw0yNjExMTQxNjM1MjRaFw0yNjExMTUxOTI1MjRaMDMxMTAvBgNV BAMTKDVERDE2RDEwMzQ4QUI3MDFEOTg4NTMxNTQ4RkQxQjFCMjhENDM2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yCmLfWOw5t9YUUhLHH96O0a+ O0K8EDf4KCuADIUy+rVn6MND4YUzefBsA5gCBVQrgTOQQTfAizk8QyyFFLy/1Wcs xR3D68fo6V9JxD54tPpH7Aat0F+nr47rBhjCtmeLV645UHnz2gpKqw+5k5TvM+Xx QwQs59CWRCu/ZwoaRPWsqCpBPonH+HLNUTtoS4P560GMi7ocmcfS/RglhVAIs6sv kXEdoQF3EMgX8FRml7bjFecg/E8kQ4+uDjE4+5SGOAQ9QbHI+IvmKakcAxKEu+5x pApyewhysxhPoeDVFlUE2uvdYMzqewhlJMrl+cdFpJHO356tf2833ozqZPKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXdFtEDSKtwHZiFMVSP0bGyjUNikwHwYDVR0j BBgwFoAUkh9ADExG+ALpq7F/KR3FcFjIU14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDkxNDJjODItYjA0My00NmViLWIwYTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0 QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1OEM4NTM1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85MjFGNDAwQzRDNDZGODAyRTlBQkIxN0YyOTFEQzU3MDU4Qzg1 MzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1 NzA1OEM4NTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ4bSHrbPUlxV6o6ywyucwwd4rP3AFU+mYq zL7Hv3Um4xlm7al+SkW+ke0SQ7Pw9o6mI+WXX4eDTkq2MPIl3za951qQOHIBT+gN 1Dq7+naMLgAMQOVzm2SHCTRdQcaOgDbZIdz7qK3ASreca66AyVvh9BliAhNpqYha HC3qjTz6UIu48aJdEGQYFLyQlCTx2a2QpzVyjIQXqzjExt9L9sb6iBtDOQU16dsZ rh1VFSLb61YJMu9vbVTak07CgDogA3v45//mY/qlV9Olxmtvkc/YX5gN1wxOzCQG +vdAF0k6cVxgb/bR8TVcrNWrk4LNcKjxUr4vhKGsZRuMV1mHESI= -----END CERTIFICATE-----Generated at Sat Nov 14 22:40:32 2026 by rpki-client