$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft File: D21C7558CD1D6E80F107C302A7A49637AD11D654.mft (raw, json) Hash identifier: kIO3eK51mBgHi/bu+D7qGu0xGmVcqAGxbChXvkIxDt0= Subject key identifier: D6:57:E9:93:DB:53:AA:9F:92:FC:DC:0D:E6:71:49:3C:3B:A4:EE:12 Authority key identifier: D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 Certificate issuer: /CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Certificate serial: 2CC4F638F29132E3E9E7AF51933DA41C28D0F5D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 04:45:00 +0000 Manifest this update: Sun 15 Nov 2026 04:40:00 +0000 Manifest next update: Mon 16 Nov 2026 05:27:00 +0000 Files and hashes: 1: D21C7558CD1D6E80F107C302A7A49637AD11D654.crl (hash: vmv05OFrWVmfZ8lBzbO0OhQZ2oQ2jzBLEadg89tp2CQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c4:f6:38:f2:91:32:e3:e9:e7:af:51:93:3d:a4:1c:28:d0:f5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Validity Not Before: Nov 15 04:40:00 2026 GMT Not After : Nov 16 05:27:00 2026 GMT Subject: CN=D657E993DB53AA9F92FCDC0DE671493C3BA4EE12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:1d:e9:8a:91:d4:4e:88:8f:95:f2:e4:32: 01:c5:a2:ee:30:fb:27:69:47:f6:ab:8c:1a:48:f4: c7:b6:93:50:8a:88:60:a1:d2:80:0d:81:55:9c:a8: 14:ca:cc:cd:f1:5c:2c:60:57:87:f7:c5:85:79:8a: 82:f0:a7:b6:c6:3d:e2:48:ba:77:86:c9:48:1a:ed: a4:5d:09:80:7b:28:39:17:49:63:b9:fb:64:de:1b: 96:1a:68:c9:a7:53:df:e0:6f:da:a9:a5:3d:59:79: 25:49:4e:ee:33:ab:4a:9d:47:42:8f:82:8d:f7:f2: 8a:eb:9e:98:95:9c:65:76:3c:55:92:3d:4b:d9:5d: c8:6e:c2:40:16:37:c1:82:d7:29:59:bf:d4:09:e3: f6:b2:d1:53:b9:a0:3c:ac:f3:3e:ad:fe:3c:ce:da: 49:85:78:6d:91:04:c1:63:b5:24:fb:f6:17:af:6b: 19:58:22:c5:c4:aa:31:f0:c3:b8:1b:4d:59:28:5c: e9:78:1a:cc:f3:9e:4c:d8:ed:1e:b2:af:ac:75:9f: ee:0c:97:84:d2:b1:39:50:0b:58:16:94:32:81:a7: 4a:90:fc:9b:98:81:3e:ee:6d:65:c9:5b:53:8a:95: 00:ee:21:f8:42:fd:d4:3e:a0:74:c4:5f:fb:65:25: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:57:E9:93:DB:53:AA:9F:92:FC:DC:0D:E6:71:49:3C:3B:A4:EE:12 X509v3 Authority Key Identifier: keyid:D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:96:57:c0:6b:91:59:22:7d:1f:48:f3:6f:0e:9c:3d:fb:e7: 9c:7f:ed:86:ff:5b:6d:83:a0:88:4c:3f:55:dc:58:d7:60:49: 8b:61:84:f8:18:e5:2e:06:8c:e7:73:67:73:d8:a1:95:21:07: 54:10:eb:54:77:85:33:af:17:96:e6:d5:b2:e1:4b:41:b7:80: 70:82:e3:1d:35:72:9d:26:e2:97:22:60:8a:db:5b:32:de:bf: cd:bd:8c:05:25:55:ee:f5:f2:6a:12:2f:75:77:da:e6:c5:01: 96:fe:34:56:25:5c:87:b7:61:b7:1c:dd:6e:91:48:04:4f:43: 27:54:18:08:17:38:2c:09:05:26:32:d9:b0:a3:cb:54:67:50: d0:d9:c4:30:77:2b:e5:c6:6e:51:ff:58:e9:be:d8:cf:db:79: 88:de:81:bd:9a:5a:65:05:76:d3:87:b4:a2:33:b7:fa:7b:6a: 0b:da:91:6b:c1:07:76:52:94:ae:95:5a:d7:a0:22:94:a4:56: 36:bb:55:0b:38:6d:da:26:a3:56:71:6a:23:d2:d0:4a:56:d9: 7d:98:85:5a:77:01:ff:12:5e:88:7e:2c:30:6a:38:7f:59:99: 57:b7:81:24:bf:4d:77:96:09:f8:bf:cf:13:b6:3b:77:20:65: cc:3e:2d:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMT2OPKRMuPp569Rkz2kHCjQ9dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2MzdB RDExRDY1NDAeFw0yNjExMTUwNDQwMDBaFw0yNjExMTYwNTI3MDBaMDMxMTAvBgNV BAMTKEQ2NTdFOTkzREI1M0FBOUY5MkZDREMwREU2NzE0OTNDM0JBNEVFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92R3pipHUToiPlfLkMgHFou4w +ydpR/arjBpI9Me2k1CKiGCh0oANgVWcqBTKzM3xXCxgV4f3xYV5ioLwp7bGPeJI uneGyUga7aRdCYB7KDkXSWO5+2TeG5YaaMmnU9/gb9qppT1ZeSVJTu4zq0qdR0KP go338orrnpiVnGV2PFWSPUvZXchuwkAWN8GC1ylZv9QJ4/ay0VO5oDys8z6t/jzO 2kmFeG2RBMFjtST79hevaxlYIsXEqjHww7gbTVkoXOl4GszznkzY7R6yr6x1n+4M l4TSsTlQC1gWlDKBp0qQ/JuYgT7ubWXJW1OKlQDuIfhC/dQ+oHTEX/tlJci/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1lfpk9tTqp+S/NwN5nFJPDuk7hIwHwYDVR0j BBgwFoAU0hx1WM0dboDxB8MCp6SWN60R1lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWI0ZDEtZDZiNS00ODIwLWE0OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThD RDFENkU4MEYxMDdDMzAyQTdBNDk2MzdBRDExRDY1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMjFDNzU1OENEMUQ2RTgwRjEwN0MzMDJBN0E0OTYzN0FEMTFE NjU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2 MzdBRDExRDY1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOWV8BrkVkifR9I828OnD3755x/7Yb/W22D oIhMP1XcWNdgSYthhPgY5S4GjOdzZ3PYoZUhB1QQ61R3hTOvF5bm1bLhS0G3gHCC 4x01cp0m4pciYIrbWzLev829jAUlVe718moSL3V32ubFAZb+NFYlXIe3Ybcc3W6R SARPQydUGAgXOCwJBSYy2bCjy1RnUNDZxDB3K+XGblH/WOm+2M/beYjegb2aWmUF dtOHtKIzt/p7agvakWvBB3ZSlK6VWtegIpSkVja7VQs4bdomo1ZxaiPS0EpW2X2Y hVp3Af8SXoh+LDBqOH9ZmVe3gSS/TXeWCfi/zxO2O3cgZcw+Lbo= -----END CERTIFICATE-----Generated at Sun Nov 15 12:00:02 2026 by rpki-client