$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft File: D21C7558CD1D6E80F107C302A7A49637AD11D654.mft (raw, json) Hash identifier: JAX4pyfIvFf0BZlnwJug2/0s74aBje0KYq/Tv5XB7CQ= Subject key identifier: BA:BC:20:84:68:4E:AF:28:D9:13:F8:B4:C9:77:92:09:0C:26:A3:5B Authority key identifier: D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 Certificate issuer: /CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Certificate serial: 2AD2C6CCB150B19B805E405124FFC4049715EC9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:46:35 +0000 Manifest this update: Thu 24 Sep 2026 04:41:35 +0000 Manifest next update: Fri 25 Sep 2026 07:13:35 +0000 Files and hashes: 1: D21C7558CD1D6E80F107C302A7A49637AD11D654.crl (hash: ZB8s3lp0oqoJwJ9971OBomOMtEYLADBRxqzIj12Zxak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d2:c6:cc:b1:50:b1:9b:80:5e:40:51:24:ff:c4:04:97:15:ec:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Validity Not Before: Sep 24 04:41:35 2026 GMT Not After : Sep 25 07:13:35 2026 GMT Subject: CN=BABC2084684EAF28D913F8B4C97792090C26A35B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:f2:12:8c:cb:8a:41:87:87:80:c7:cf:b6: 94:c8:50:16:d7:e2:70:f3:74:41:a0:dc:1c:af:b5: 83:4f:1e:fe:b5:60:ae:a0:29:6a:64:73:ba:22:1c: 1f:60:68:4b:21:1a:93:a0:4b:70:f6:69:46:ff:d6: 3a:42:12:c9:3c:6e:b8:f2:d6:e0:c9:f7:46:a1:21: d3:aa:12:f3:19:d8:07:62:4e:d4:7b:67:e0:54:56: 58:0b:88:f8:88:f0:ee:8b:9a:56:a2:01:a8:dd:b9: ad:5d:69:fe:4b:98:d5:47:90:1f:10:3c:2d:27:eb: 47:84:5c:5b:21:fb:a1:1d:b1:98:50:07:55:03:66: 88:ba:e3:34:56:4f:25:06:b4:66:44:ea:32:ae:d7: e0:33:be:a9:80:0f:57:21:4d:64:28:c4:82:7a:b3: 9c:09:4f:2d:2f:c2:2d:1b:0a:cf:f8:78:b6:53:9e: 70:84:dd:32:6a:9c:cd:c7:d3:74:07:e3:e3:10:98: 51:f0:6d:cc:85:b6:09:5f:76:cc:8e:16:56:04:3e: 07:2d:db:a8:81:07:61:e5:77:f0:f4:d0:e8:4b:17: 75:ee:21:9f:2a:4a:61:ba:ef:32:a6:82:97:c0:c4: 5c:66:21:e4:9b:46:ff:03:bb:bf:8f:0e:88:0d:2e: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BC:20:84:68:4E:AF:28:D9:13:F8:B4:C9:77:92:09:0C:26:A3:5B X509v3 Authority Key Identifier: keyid:D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:33:c1:86:06:4f:88:10:7e:15:96:5b:62:79:f0:ef:ca:aa: 32:d9:5b:5e:e9:42:dc:d1:f9:d2:ff:b9:ca:00:b4:b9:dc:ad: bf:6d:e4:f3:7b:26:d7:6c:61:3c:77:d7:de:48:17:cd:47:77: 93:dd:ab:42:7f:0f:47:d4:42:c4:96:7e:f4:b0:85:66:85:d5: a9:f2:2d:a8:14:d7:2c:6d:c0:16:11:ec:87:5d:82:7b:78:86: 95:38:b1:2a:46:17:90:ff:a4:fa:ec:56:20:2d:c9:7d:f9:2e: 6d:d7:8e:1d:79:28:ce:ea:5d:1b:1c:3d:6a:ab:5d:80:05:95: be:36:2b:28:82:3b:9a:ed:a3:83:97:61:d2:0f:a5:e6:db:7c: b9:2f:f8:27:19:ba:6f:53:58:c2:a7:2e:0c:4f:a6:27:f9:94: e1:16:b6:34:38:ee:96:5d:28:67:65:44:85:42:e9:c4:2d:f7: ea:56:01:1d:93:ab:46:c2:e7:2b:04:a8:e8:15:f6:9a:b6:5b: 56:a9:ca:43:2e:e7:46:8a:bc:7f:5d:f3:fc:f9:64:23:44:49: 97:bf:fa:82:08:99:c1:e4:f9:aa:f6:55:6b:5a:a7:e3:20:d5: 2f:50:18:6f:43:dc:d1:60:a6:d6:d4:9b:a5:cd:cb:0a:2c:fa: 0d:13:9b:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtLGzLFQsZuAXkBRJP/EBJcV7J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2MzdB RDExRDY1NDAeFw0yNjA5MjQwNDQxMzVaFw0yNjA5MjUwNzEzMzVaMDMxMTAvBgNV BAMTKEJBQkMyMDg0Njg0RUFGMjhEOTEzRjhCNEM5Nzc5MjA5MEMyNkEzNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLvISjMuKQYeHgMfPtpTIUBbX 4nDzdEGg3ByvtYNPHv61YK6gKWpkc7oiHB9gaEshGpOgS3D2aUb/1jpCEsk8brjy 1uDJ90ahIdOqEvMZ2AdiTtR7Z+BUVlgLiPiI8O6LmlaiAajdua1daf5LmNVHkB8Q PC0n60eEXFsh+6EdsZhQB1UDZoi64zRWTyUGtGZE6jKu1+AzvqmAD1chTWQoxIJ6 s5wJTy0vwi0bCs/4eLZTnnCE3TJqnM3H03QH4+MQmFHwbcyFtglfdsyOFlYEPgct 26iBB2Hld/D00OhLF3XuIZ8qSmG67zKmgpfAxFxmIeSbRv8Du7+PDogNLiKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUurwghGhOryjZE/i0yXeSCQwmo1swHwYDVR0j BBgwFoAU0hx1WM0dboDxB8MCp6SWN60R1lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWI0ZDEtZDZiNS00ODIwLWE0OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThD RDFENkU4MEYxMDdDMzAyQTdBNDk2MzdBRDExRDY1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMjFDNzU1OENEMUQ2RTgwRjEwN0MzMDJBN0E0OTYzN0FEMTFE NjU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2 MzdBRDExRDY1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0zwYYGT4gQfhWWW2J58O/KqjLZW17pQtzR +dL/ucoAtLncrb9t5PN7JtdsYTx3195IF81Hd5Pdq0J/D0fUQsSWfvSwhWaF1any LagU1yxtwBYR7Iddgnt4hpU4sSpGF5D/pPrsViAtyX35Lm3Xjh15KM7qXRscPWqr XYAFlb42KyiCO5rto4OXYdIPpebbfLkv+CcZum9TWMKnLgxPpif5lOEWtjQ47pZd KGdlRIVC6cQt9+pWAR2Tq0bC5ysEqOgV9pq2W1apykMu50aKvH9d8/z5ZCNESZe/ +oIImcHk+ar2VWtap+Mg1S9QGG9D3NFgptbUm6XNywos+g0Tm70= -----END CERTIFICATE-----Generated at Thu Sep 24 20:57:45 2026 by rpki-client