$ rpki-client -vvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: TFzcZw1SaCww6QGAh6LDSdqc9wmIhWzOdLJjaD3OjV8= Subject key identifier: 1A:B2:52:14:6E:FC:55:0C:48:1F:C6:B7:A3:5D:95:26:96:7C:42:64 Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 5F9E782FB2D02A755C01ABA34AD7FBF57A6FAD1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 07:54:07 +0000 Manifest this update: Fri 24 Jul 2026 07:49:07 +0000 Manifest next update: Sat 25 Jul 2026 08:00:07 +0000 Files and hashes: 1: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: fKdlhggXMUmJ63hca1bacj6CHkxbuf/q2qAEf6zt31Y=) 2: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) 3: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) 4: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9e:78:2f:b2:d0:2a:75:5c:01:ab:a3:4a:d7:fb:f5:7a:6f:ad:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Jul 24 07:49:07 2026 GMT Not After : Jul 25 08:00:07 2026 GMT Subject: CN=1AB252146EFC550C481FC6B7A35D9526967C4264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:77:05:c4:46:ad:25:c2:7a:5a:e2:b3:2c: 8a:43:b8:41:12:ba:49:2d:69:29:11:53:85:e4:be: 58:bf:f2:8c:6a:8f:79:c1:3e:42:bf:2e:67:fc:e0: 55:86:ba:8d:fd:a0:a0:cf:60:26:77:45:e9:cf:4f: 47:e1:10:d3:d2:5c:cc:c9:2d:dc:36:86:cf:5c:dd: fb:a8:ec:66:16:2d:94:51:10:e8:68:2e:e0:fd:fd: 1e:10:d6:ef:fa:40:00:0d:2f:fd:80:70:7c:77:37: 00:e8:1b:e0:96:c6:1b:ba:04:a2:d3:d7:7d:00:5e: a9:4f:15:ff:25:5a:b2:de:a8:64:d3:df:77:f6:39: f4:12:7c:dd:33:b3:15:75:b7:e4:64:dd:cc:a8:9a: 8e:e9:b7:db:5a:c0:35:a7:10:c6:52:b7:ea:98:89: 13:10:27:5a:19:27:c6:6e:ec:48:87:d6:0a:24:5f: 23:9e:1d:e0:0b:73:40:72:4c:b1:23:ef:51:bb:c0: 98:e5:8a:0b:32:ee:b7:96:35:38:5a:29:89:5a:53: 8d:04:6c:90:bd:17:d6:e1:04:dc:b7:7d:a5:77:d5: d0:d4:b6:54:49:63:46:10:23:bf:63:65:04:91:78: 8a:76:52:1d:7e:aa:ab:63:a4:f4:ca:68:9a:98:96: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:52:14:6E:FC:55:0C:48:1F:C6:B7:A3:5D:95:26:96:7C:42:64 X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:58:aa:34:04:f5:fa:9a:a7:93:df:a3:6c:3f:4e:05:e4:d0: 5e:fc:94:b8:db:2c:52:d8:3e:08:c9:52:d9:65:98:fb:46:65: 95:dc:92:71:46:ed:85:51:e5:5e:b5:b6:df:4f:c2:50:15:60: 78:2c:ef:0d:c5:9a:4b:5a:9d:40:cd:dc:70:68:17:49:b6:cf: 8b:db:c9:49:b8:71:fe:22:e5:c8:f4:dc:a1:4d:48:91:f1:d4: dc:f3:8a:87:00:3b:fd:89:f7:1a:02:5a:a0:56:0f:a6:e8:92: 6f:69:76:50:ce:ce:cb:fc:2f:14:b8:8a:33:6c:77:8d:ec:95: 52:11:2d:73:fc:84:62:14:5a:a8:c1:e5:65:a7:c0:f1:5e:1e: 55:f0:1f:c6:af:cd:f6:3f:15:d3:91:fc:68:07:1c:bf:63:b0: 43:76:aa:d0:6e:22:2e:ba:e9:d9:32:4a:34:de:15:9c:88:58: 48:ef:06:56:cf:84:bc:b9:19:ac:c7:d3:00:43:22:9c:aa:03: 1d:9b:05:17:14:a7:8f:e7:98:7f:47:1e:72:19:30:0c:7b:9d: ce:8f:cf:31:0a:10:5c:e4:14:80:bf:3b:0b:15:04:58:9e:f5: 21:9e:be:c2:ee:de:da:23:e7:44:81:ed:cf:61:c0:39:c7:e7: 29:39:79:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX554L7LQKnVcAaujStf79XpvrR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjA3MjQwNzQ5MDdaFw0yNjA3MjUwODAwMDdaMDMxMTAvBgNV BAMTKDFBQjI1MjE0NkVGQzU1MEM0ODFGQzZCN0EzNUQ5NTI2OTY3QzQyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6XcFxEatJcJ6WuKzLIpDuEES ukktaSkRU4Xkvli/8oxqj3nBPkK/Lmf84FWGuo39oKDPYCZ3RenPT0fhENPSXMzJ Ldw2hs9c3fuo7GYWLZRREOhoLuD9/R4Q1u/6QAANL/2AcHx3NwDoG+CWxhu6BKLT 130AXqlPFf8lWrLeqGTT33f2OfQSfN0zsxV1t+Rk3cyomo7pt9tawDWnEMZSt+qY iRMQJ1oZJ8Zu7EiH1gokXyOeHeALc0ByTLEj71G7wJjligsy7reWNThaKYlaU40E bJC9F9bhBNy3faV31dDUtlRJY0YQI79jZQSReIp2Uh1+qqtjpPTKaJqYljDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrJSFG78VQxIH8a3o12VJpZ8QmQwHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxYqjQE9fqap5Pfo2w/TgXk0F78lLjbLFLY PgjJUtllmPtGZZXcknFG7YVR5V61tt9PwlAVYHgs7w3FmktanUDN3HBoF0m2z4vb yUm4cf4i5cj03KFNSJHx1NzziocAO/2J9xoCWqBWD6bokm9pdlDOzsv8LxS4ijNs d43slVIRLXP8hGIUWqjB5WWnwPFeHlXwH8avzfY/FdOR/GgHHL9jsEN2qtBuIi66 6dkySjTeFZyIWEjvBlbPhLy5GazH0wBDIpyqAx2bBRcUp4/nmH9HHnIZMAx7nc6P zzEKEFzkFIC/OwsVBFie9SGevsLu3toj50SB7c9hwDnH5yk5eeY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:17:13 2026 by rpki-client