$ rpki-client -vvvf rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft File: 01D21CF844B21F1A9486A445F946566129AD4A58.mft (raw, json) Hash identifier: YmdF2zeU0HFft9Ofz3BAc+7/BBKmHk5VE1MFjMwSgig= Subject key identifier: 63:71:CC:8B:1E:FD:43:0D:2F:B8:7B:08:A3:E9:86:5F:BC:2B:CD:A6 Authority key identifier: 01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 Certificate issuer: /CN=01D21CF844B21F1A9486A445F946566129AD4A58 Certificate serial: 48EAD3C065E4906F123A444A2C5DD333AC88AFB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft Manifest number: CA Signing time: Wed 30 Sep 2026 05:37:39 +0000 Manifest this update: Wed 30 Sep 2026 05:32:39 +0000 Manifest next update: Thu 01 Oct 2026 05:51:39 +0000 Files and hashes: 1: 01D21CF844B21F1A9486A445F946566129AD4A58.crl (hash: 9tWVXzASQ3lAXgiv3vgQgv6aBPTMoWUprJBLKP/py6Y=) 2: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: ufsOCUOJb9bQMTjSTFriIXnfAAEVhWffzH9OME9bvBM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 05:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ea:d3:c0:65:e4:90:6f:12:3a:44:4a:2c:5d:d3:33:ac:88:af:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01D21CF844B21F1A9486A445F946566129AD4A58 Validity Not Before: Sep 30 05:32:39 2026 GMT Not After : Oct 1 05:51:39 2026 GMT Subject: CN=6371CC8B1EFD430D2FB87B08A3E9865FBC2BCDA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:d2:2d:4d:1d:d7:a6:b8:5d:37:86:f7:43: 01:fd:3e:df:94:98:60:84:4a:6a:6e:06:74:ca:56: 9a:93:89:6a:1d:0d:d7:56:ab:6c:0b:1f:48:f7:62: 94:db:68:97:86:3a:05:e6:12:64:1a:2f:b2:f8:d5: 97:53:4f:21:50:ff:3f:a3:a6:3b:5e:24:4a:c3:6d: 0d:86:7d:b3:34:d7:86:35:89:73:dd:9d:45:a4:fa: 0b:1f:4b:3e:ae:ff:02:45:5e:6c:0a:53:17:e7:e6: 19:05:82:4f:cb:e0:cd:fb:14:d2:d5:df:8b:f2:20: bb:68:d9:6c:2a:76:73:94:15:ff:df:c1:9e:be:9a: 99:86:8b:08:00:97:eb:32:92:9b:10:58:1d:27:d4: 0e:15:88:22:a6:4d:25:fc:11:dd:27:b0:fc:02:af: 0a:7a:b2:b1:94:e9:7f:7d:6d:80:aa:95:19:62:bd: 0f:6b:9b:95:19:60:1e:ed:23:12:09:37:7e:cc:31: 0b:23:9a:90:54:c8:5e:82:fb:ca:34:6b:e6:51:d6: e7:78:97:26:a9:5f:31:48:dc:49:20:83:b8:15:e4: de:de:7b:9e:44:a0:7f:24:eb:94:e0:85:a2:f3:42: 24:74:aa:a3:f1:8d:f7:85:b3:37:0a:b7:53:ef:ed: b6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:71:CC:8B:1E:FD:43:0D:2F:B8:7B:08:A3:E9:86:5F:BC:2B:CD:A6 X509v3 Authority Key Identifier: keyid:01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:27:b9:c6:41:73:9a:00:66:52:74:49:5e:c2:a2:9e:1c:05: 59:38:f4:9d:6a:9c:4f:5a:9b:0e:96:95:2e:00:21:54:7f:67: 05:0b:2c:7f:d4:0a:e5:d9:69:14:95:ef:7f:72:ba:52:f9:42: 56:d1:7a:d9:df:17:7e:9d:da:2b:bd:8f:f9:2b:d0:87:e1:2d: 4b:69:53:39:14:6f:d7:2f:58:d1:df:25:70:b3:d0:ec:5a:cb: 68:4e:1d:ea:96:43:ee:c1:23:bc:a2:2d:3d:56:a3:a4:63:c4: 3a:05:a5:64:85:3e:16:6d:0a:17:bd:40:af:d2:5d:76:57:0f: 73:87:21:b5:88:ed:aa:fe:b9:9c:ca:31:3f:27:51:05:fd:a6: ec:13:3b:1d:8d:66:a2:5b:23:ea:03:3f:bf:d9:48:75:00:0d: f8:46:1c:55:46:64:2c:24:4e:c9:cc:9c:40:47:5e:aa:4a:77: 4e:82:a0:94:0a:6e:c3:98:64:49:6f:6a:db:ed:7d:4e:78:9e: 6b:55:74:2c:77:ae:3d:4d:94:fa:82:b9:65:86:eb:3c:6c:65: b7:79:3d:01:2c:a8:18:b1:3f:ee:37:af:69:8f:a4:8b:e2:25: e8:bb:56:a9:71:5f:2e:23:ae:d6:83:5a:81:52:94:9b:45:18: 97:de:06:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOrTwGXkkG8SOkRKLF3TM6yIr7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFEMjFDRjg0NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2NjEy OUFENEE1ODAeFw0yNjA5MzAwNTMyMzlaFw0yNjEwMDEwNTUxMzlaMDMxMTAvBgNV BAMTKDYzNzFDQzhCMUVGRDQzMEQyRkI4N0IwOEEzRTk4NjVGQkMyQkNEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TdItTR3XprhdN4b3QwH9Pt+U mGCESmpuBnTKVpqTiWodDddWq2wLH0j3YpTbaJeGOgXmEmQaL7L41ZdTTyFQ/z+j pjteJErDbQ2GfbM014Y1iXPdnUWk+gsfSz6u/wJFXmwKUxfn5hkFgk/L4M37FNLV 34vyILto2WwqdnOUFf/fwZ6+mpmGiwgAl+sykpsQWB0n1A4ViCKmTSX8Ed0nsPwC rwp6srGU6X99bYCqlRlivQ9rm5UZYB7tIxIJN37MMQsjmpBUyF6C+8o0a+ZR1ud4 lyapXzFI3Ekgg7gV5N7ee55EoH8k65TghaLzQiR0qqPxjfeFszcKt1Pv7bZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY3HMix79Qw0vuHsIo+mGX7wrzaYwHwYDVR0j BBgwFoAUAdIc+ESyHxqUhqRF+UZWYSmtSlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTM0ZDgyNzctMjkxMC00MDc1LWI5MzctNjZmOTQzNTE4ZTI5LzAvMDFEMjFDRjg0 NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2NjEyOUFENEE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUQyMUNGODQ0QjIxRjFBOTQ4NkE0NDVGOTQ2NTY2MTI5QUQ0 QTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvMDFEMjFDRjg0NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2 NjEyOUFENEE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgnucZBc5oAZlJ0SV7Cop4cBVk49J1qnE9a mw6WlS4AIVR/ZwULLH/UCuXZaRSV739yulL5QlbRetnfF36d2iu9j/kr0IfhLUtp UzkUb9cvWNHfJXCz0Oxay2hOHeqWQ+7BI7yiLT1Wo6RjxDoFpWSFPhZtChe9QK/S XXZXD3OHIbWI7ar+uZzKMT8nUQX9puwTOx2NZqJbI+oDP7/ZSHUADfhGHFVGZCwk TsnMnEBHXqpKd06CoJQKbsOYZElvatvtfU54nmtVdCx3rj1NlPqCuWWG6zxsZbd5 PQEsqBixP+43r2mPpIviJei7VqlxXy4jrtaDWoFSlJtFGJfeBmk= -----END CERTIFICATE-----Generated at Wed Sep 30 18:12:46 2026 by rpki-client