$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: 8pgjloC8Re1q1b2G+vaqKdRD+kDYk5R9+SqiU50SnOI= Subject key identifier: 12:7E:6B:E8:C8:F5:23:A8:BD:C6:1E:32:7D:94:DD:A1:60:25:F5:EE Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 68B7EE18ACF158FF5D73E517711117D796D1CD8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 03:49:53 +0000 Manifest this update: Fri 25 Sep 2026 03:44:53 +0000 Manifest next update: Sat 26 Sep 2026 05:03:53 +0000 Files and hashes: 1: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: 6G7q07pnx26mjo4g2ukVdkmM2Bktvl0iqbW32dS9hzA=) 2: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) 3: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) 4: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b7:ee:18:ac:f1:58:ff:5d:73:e5:17:71:11:17:d7:96:d1:cd:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Sep 25 03:44:53 2026 GMT Not After : Sep 26 05:03:53 2026 GMT Subject: CN=127E6BE8C8F523A8BDC61E327D94DDA16025F5EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:56:18:0f:65:5b:d1:f0:55:79:32:5f:3f: 82:4c:cc:be:1c:ca:9e:11:68:60:3e:bd:ef:0f:97: d7:75:6b:69:bd:ab:b0:0a:2a:c8:cf:7e:2a:d7:25: 97:fd:33:92:5b:d1:03:10:91:a4:d5:7d:f9:c9:32: 75:c0:e8:3e:67:96:d4:10:6a:9d:74:79:89:23:ee: 94:be:a6:5a:6c:6a:17:e4:2e:9e:16:ab:71:17:58: 46:2d:23:f5:9b:51:0a:8d:ac:6f:40:ff:73:45:fa: c3:00:14:22:5b:d0:91:77:f4:34:b2:af:7e:da:7d: 51:b5:bd:ab:bc:ab:97:6c:64:3d:b0:b9:91:21:d6: d9:ed:df:a4:f7:c5:0e:4f:ec:f3:a6:1b:87:90:63: e7:25:6e:15:9a:54:3e:c4:af:57:d2:de:cc:37:a2: 8f:02:0a:64:d3:34:6d:2c:b1:d4:c1:43:50:71:03: 4e:11:78:d2:4e:f7:d6:6c:a7:df:78:f9:8f:2a:8e: 8e:7f:23:03:e2:69:4e:8a:82:c1:03:11:9a:79:46: f8:76:31:ef:02:12:68:2d:2c:72:11:5e:7e:32:8a: fe:5a:14:12:5e:91:ff:8d:69:de:a4:f5:bd:d3:85: f0:59:3c:d1:2d:9e:d0:ce:c0:2d:0e:62:5b:db:3d: 17:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7E:6B:E8:C8:F5:23:A8:BD:C6:1E:32:7D:94:DD:A1:60:25:F5:EE X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0a:25:be:25:b2:57:56:72:9f:6b:a6:64:96:6d:bb:0b:3e: 08:f8:63:71:ad:2f:8e:f1:85:52:4c:92:d4:06:53:4a:99:83: 7e:47:10:80:2a:e7:73:c7:39:5f:d7:ba:2b:43:49:e5:db:c2: a1:05:08:15:8b:22:03:da:5b:47:46:00:a6:ac:38:fe:6f:bf: 84:f8:d1:47:0e:c6:dd:59:60:64:d1:67:83:f2:6b:18:d7:15: 83:a7:30:06:31:77:93:04:0e:b2:7d:aa:84:11:e0:a8:6c:ab: af:6f:fb:68:31:b6:19:3f:97:f2:9f:6b:d5:09:d3:67:1a:1c: 32:c9:c3:92:ce:f9:da:6c:f3:a0:a8:12:a9:81:14:a4:ca:fe: b6:a0:90:0e:db:73:64:3f:6a:3f:c3:c8:2b:d9:7f:6d:e9:4b: 69:8f:bd:4c:6c:0c:f4:23:af:8f:de:b6:66:da:e4:94:c6:a2: 51:46:1f:4c:b6:3d:9f:78:40:6f:cb:67:81:46:e0:ea:8b:18: d2:68:dc:da:d8:fd:76:20:aa:3b:f4:35:7a:d2:18:8c:b9:c3: f5:c8:84:99:0d:98:be:f1:2e:74:fd:ed:10:b5:e3:c1:ec:73: 87:4e:f6:fb:03:a9:23:e9:f6:97:b4:ea:61:17:09:72:2c:22: df:d4:33:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLfuGKzxWP9dc+UXcREX15bRzYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjA5MjUwMzQ0NTNaFw0yNjA5MjYwNTAzNTNaMDMxMTAvBgNV BAMTKDEyN0U2QkU4QzhGNTIzQThCREM2MUUzMjdEOTREREExNjAyNUY1RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3FYYD2Vb0fBVeTJfP4JMzL4c yp4RaGA+ve8Pl9d1a2m9q7AKKsjPfirXJZf9M5Jb0QMQkaTVffnJMnXA6D5nltQQ ap10eYkj7pS+plpsahfkLp4Wq3EXWEYtI/WbUQqNrG9A/3NF+sMAFCJb0JF39DSy r37afVG1vau8q5dsZD2wuZEh1tnt36T3xQ5P7POmG4eQY+clbhWaVD7Er1fS3sw3 oo8CCmTTNG0ssdTBQ1BxA04ReNJO99Zsp994+Y8qjo5/IwPiaU6KgsEDEZp5Rvh2 Me8CEmgtLHIRXn4yiv5aFBJekf+Nad6k9b3ThfBZPNEtntDOwC0OYlvbPRcHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEn5r6Mj1I6i9xh4yfZTdoWAl9e4wHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsKJb4lsldWcp9rpmSWbbsLPgj4Y3GtL47x hVJMktQGU0qZg35HEIAq53PHOV/XuitDSeXbwqEFCBWLIgPaW0dGAKasOP5vv4T4 0UcOxt1ZYGTRZ4PyaxjXFYOnMAYxd5MEDrJ9qoQR4Khsq69v+2gxthk/l/Kfa9UJ 02caHDLJw5LO+dps86CoEqmBFKTK/ragkA7bc2Q/aj/DyCvZf23pS2mPvUxsDPQj r4/etmba5JTGolFGH0y2PZ94QG/LZ4FG4OqLGNJo3NrY/XYgqjv0NXrSGIy5w/XI hJkNmL7xLnT97RC148Hsc4dO9vsDqSPp9pe06mEXCXIsIt/UMxk= -----END CERTIFICATE-----Generated at Fri Sep 25 06:59:21 2026 by rpki-client