$ rpki-client -vvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: rkatwthlUGjSlY9FbpqES4zqfiSx30QXJVS+E7/CYPE= Subject key identifier: 5C:BE:95:57:AE:CE:07:4E:6C:5F:15:4B:11:04:32:08:3F:DC:47:FB Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 52ACD32D536D9A083CCB61FF2FB9CD6F2F0B5D17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:51:58 +0000 Manifest this update: Thu 23 Jul 2026 13:46:58 +0000 Manifest next update: Fri 24 Jul 2026 15:52:58 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) 2: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) 3: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) 4: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: V5/a0E8c15/XPNUJX8zXeZzAgeERVXlJv/FBspdJvoI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ac:d3:2d:53:6d:9a:08:3c:cb:61:ff:2f:b9:cd:6f:2f:0b:5d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Jul 23 13:46:58 2026 GMT Not After : Jul 24 15:52:58 2026 GMT Subject: CN=5CBE9557AECE074E6C5F154B110432083FDC47FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:ea:69:6b:56:a9:66:fa:f9:c3:76:6e:f1: d5:5a:ad:08:aa:76:f0:e0:f0:3b:a2:1a:45:a4:c2: 43:d5:64:e5:aa:b4:98:54:a4:7a:c0:f6:65:db:96: 70:eb:15:a5:12:cb:39:ba:f7:77:78:a7:1c:ca:eb: 44:8d:7b:fe:1a:86:bc:ae:78:eb:89:d6:62:2f:8c: 74:9e:39:e4:a1:f1:73:3a:45:fd:bf:38:53:b9:a0: 7d:1c:09:7c:c0:e0:cd:16:97:ca:05:ea:8f:08:43: 19:2f:52:24:65:f3:e4:12:ea:59:00:f4:6f:98:4c: 50:2c:d7:29:2c:1a:dd:e6:54:02:7c:e4:94:2d:96: 95:07:4d:31:9e:54:0a:ae:df:3f:b3:2c:7e:44:48: 44:bf:29:5b:27:d7:8a:07:6f:d5:6a:b6:1c:37:bd: 13:07:d5:ac:ee:50:ce:d5:1a:ed:0d:35:1c:96:04: 8b:3a:ad:ff:ce:72:a2:4d:9b:11:f3:d8:3d:44:56: 37:96:b6:b9:88:c0:83:0b:dc:4a:5c:d4:bc:2c:8d: fc:a7:6e:9e:24:03:42:8b:54:2d:fc:2e:7a:32:9b: 33:cc:75:f7:e6:68:b0:25:4c:e2:02:71:e8:5f:bf: f5:9b:f8:7d:1b:b9:d3:0e:bf:5b:c8:7f:62:0f:9f: b0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BE:95:57:AE:CE:07:4E:6C:5F:15:4B:11:04:32:08:3F:DC:47:FB X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:53:1a:3c:7b:a5:03:8b:c7:35:bb:67:d2:ce:36:6a:67:2a: fc:e6:cc:da:c2:c9:30:38:fd:22:3e:7e:db:57:bb:b7:05:97: cd:d5:40:3b:28:fa:c8:dc:2c:34:2c:0a:fc:6d:5c:db:4e:41: 25:17:df:ac:c4:b0:b3:06:d1:37:08:3c:ed:d3:79:67:48:6b: 52:88:37:ae:60:56:63:1a:e3:d5:1a:13:96:88:c3:d2:15:b5: ae:1d:8f:46:4e:8a:79:44:10:01:74:79:1e:65:62:e5:74:11: c2:87:be:7d:72:88:74:f2:ce:1e:16:5d:c9:1e:03:a7:ee:8b: c1:54:f4:78:1b:82:af:6d:7a:99:ba:58:fa:f0:94:29:57:b9: 87:b8:e8:d3:a7:d0:1d:57:77:de:08:1c:7f:74:3d:4e:13:91: 14:cd:c1:97:5c:f3:d0:75:7b:ee:1c:9a:47:2c:9c:21:16:93: fc:c3:f3:ca:69:c3:f3:91:7c:22:93:f6:07:28:4b:93:08:4f: 71:f3:f0:59:f6:b3:23:e5:e2:8a:f6:b9:c2:68:9e:df:ad:4d: 44:96:3f:a9:10:65:ed:27:a8:88:d3:da:c2:4f:8d:b8:bd:c7: 81:95:36:ec:8a:6b:d4:40:ce:e8:12:82:6a:12:84:0e:0e:34: b7:7d:35:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqzTLVNtmgg8y2H/L7nNby8LXRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjA3MjMxMzQ2NThaFw0yNjA3MjQxNTUyNThaMDMxMTAvBgNV BAMTKDVDQkU5NTU3QUVDRTA3NEU2QzVGMTU0QjExMDQzMjA4M0ZEQzQ3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnOppa1apZvr5w3Zu8dVarQiq dvDg8DuiGkWkwkPVZOWqtJhUpHrA9mXblnDrFaUSyzm693d4pxzK60SNe/4ahryu eOuJ1mIvjHSeOeSh8XM6Rf2/OFO5oH0cCXzA4M0Wl8oF6o8IQxkvUiRl8+QS6lkA 9G+YTFAs1yksGt3mVAJ85JQtlpUHTTGeVAqu3z+zLH5ESES/KVsn14oHb9Vqthw3 vRMH1azuUM7VGu0NNRyWBIs6rf/OcqJNmxHz2D1EVjeWtrmIwIML3Epc1Lwsjfyn bp4kA0KLVC38LnoymzPMdffmaLAlTOICcehfv/Wb+H0budMOv1vIf2IPn7ABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXL6VV67OB05sXxVLEQQyCD/cR/swHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdTGjx7pQOLxzW7Z9LONmpnKvzmzNrCyTA4 /SI+fttXu7cFl83VQDso+sjcLDQsCvxtXNtOQSUX36zEsLMG0TcIPO3TeWdIa1KI N65gVmMa49UaE5aIw9IVta4dj0ZOinlEEAF0eR5lYuV0EcKHvn1yiHTyzh4WXcke A6fui8FU9Hgbgq9tepm6WPrwlClXuYe46NOn0B1Xd94IHH90PU4TkRTNwZdc89B1 e+4cmkcsnCEWk/zD88ppw/ORfCKT9gcoS5MIT3Hz8Fn2syPl4or2ucJont+tTUSW P6kQZe0nqIjT2sJPjbi9x4GVNuyKa9RAzugSgmoShA4ONLd9NZY= -----END CERTIFICATE-----Generated at Fri Jul 24 08:18:43 2026 by rpki-client