$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft (raw, json) Hash identifier: 1WDvN56x+W8EVGMfpvAIydjlIOk8AQ7jDFISefynQIo= Subject key identifier: FA:80:BE:F7:E6:16:F2:0E:0A:D8:39:3E:6B:BC:27:A8:6A:0E:0D:F2 Authority key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Certificate issuer: /CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Certificate serial: 4B574867CEA0306F80A07D39A62380413CF44A03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 04:51:38 +0000 Manifest this update: Thu 24 Sep 2026 04:46:38 +0000 Manifest next update: Fri 25 Sep 2026 04:52:38 +0000 Files and hashes: 1: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl (hash: cP6V0ZB7VF9KLg/pTv8OJBEi+n96f43qgrr/GZhtYHI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:57:48:67:ce:a0:30:6f:80:a0:7d:39:a6:23:80:41:3c:f4:4a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Validity Not Before: Sep 24 04:46:38 2026 GMT Not After : Sep 25 04:52:38 2026 GMT Subject: CN=FA80BEF7E616F20E0AD8393E6BBC27A86A0E0DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:d4:e1:d2:c5:4f:98:98:57:c5:b4:ef:3a: ca:96:c1:b4:6b:7e:ea:7b:4c:d0:24:db:5f:13:e0: df:67:1b:a2:46:9f:2e:32:1c:70:ef:c3:d4:03:4c: e9:90:1a:f6:16:de:32:15:de:42:b5:55:30:6c:c8: 9c:2d:25:1d:56:8b:8a:27:1a:a8:a7:65:4b:f9:d3: 2b:fd:e9:3c:28:56:2c:c3:e8:90:34:ef:84:36:25: 8e:9d:c8:b1:cb:fd:3b:ec:5b:17:b8:e4:ba:99:0a: 9d:6d:07:fc:56:05:6d:b8:61:b5:c9:33:eb:ac:a1: f5:af:d2:87:86:a3:bc:7f:20:fe:79:34:24:4f:4a: 36:85:94:98:5e:5b:85:75:2d:24:f2:95:e4:3b:fe: f1:98:b7:ec:9f:0e:c7:eb:23:b9:6d:1f:66:59:23: de:a2:0f:91:37:61:aa:d6:3c:9c:d8:52:2d:b3:95: c5:6c:aa:22:bc:e7:ce:56:b4:3e:0a:d7:f4:ad:86: ed:da:03:f9:7f:87:18:13:7a:5f:ef:58:55:52:56: e8:d8:82:f5:f0:3e:b6:fd:a7:30:93:af:c4:ac:1c: db:27:0f:78:33:e8:50:7f:a6:dc:cf:bf:67:1a:5c: 55:64:80:f8:7f:d0:3e:5d:66:89:0a:ab:66:5f:e3: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:80:BE:F7:E6:16:F2:0E:0A:D8:39:3E:6B:BC:27:A8:6A:0E:0D:F2 X509v3 Authority Key Identifier: keyid:B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:75:04:f2:5f:e7:70:89:33:a2:d5:ff:b5:54:ad:e8:fb:38: 71:5f:94:d9:88:7e:35:57:fe:90:55:a5:93:c9:a5:38:fb:28: 95:d2:44:a3:3b:e4:aa:14:13:f8:84:78:8f:79:a9:f3:8b:b9: 13:63:09:63:05:95:cf:39:2d:61:d6:02:eb:23:0b:16:2c:b1: 1e:34:84:47:16:9d:f0:12:53:a0:6f:16:ea:72:53:5d:76:c2: b0:77:b2:26:b8:48:92:38:80:35:d9:eb:c5:ef:a7:85:a2:89: dd:d2:86:49:47:8b:e2:1f:85:72:ce:3a:ec:63:12:c4:ff:9f: 61:8e:9a:a5:97:58:db:47:c1:36:1c:79:cc:10:75:a5:50:7f: 0a:6d:28:30:b7:98:c7:b7:2d:82:a9:6b:e8:17:7b:3a:06:9a: 13:0e:86:13:2e:85:e1:fe:d8:40:bd:f5:16:1f:04:0b:a4:df: 86:a5:5f:82:18:5e:e3:35:b8:1b:10:7d:73:35:ed:af:e9:b5: c7:20:dd:d3:68:4a:20:d1:17:a0:57:7d:7b:57:b5:83:42:d7: 7b:48:a4:4d:d5:bc:f2:03:bd:9c:39:b8:90:42:f5:b3:65:17: f7:ed:5d:59:d2:11:1b:1a:f8:4d:4d:71:15:5f:d6:ca:08:53: 16:6a:ad:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1dIZ86gMG+AoH05piOAQTz0SgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBGQjAx RkM2NDNDMTAeFw0yNjA5MjQwNDQ2MzhaFw0yNjA5MjUwNDUyMzhaMDMxMTAvBgNV BAMTKEZBODBCRUY3RTYxNkYyMEUwQUQ4MzkzRTZCQkMyN0E4NkEwRTBERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4dTh0sVPmJhXxbTvOsqWwbRr fup7TNAk218T4N9nG6JGny4yHHDvw9QDTOmQGvYW3jIV3kK1VTBsyJwtJR1Wi4on GqinZUv50yv96TwoVizD6JA074Q2JY6dyLHL/TvsWxe45LqZCp1tB/xWBW24YbXJ M+usofWv0oeGo7x/IP55NCRPSjaFlJheW4V1LSTyleQ7/vGYt+yfDsfrI7ltH2ZZ I96iD5E3YarWPJzYUi2zlcVsqiK8585WtD4K1/Sthu3aA/l/hxgTel/vWFVSVujY gvXwPrb9pzCTr8SsHNsnD3gz6FB/ptzPv2caXFVkgPh/0D5dZokKq2Zf46qNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+oC+9+YW8g4K2Dk+a7wnqGoODfIwHwYDVR0j BBgwFoAUshIgoSddUCLcHjOQr4wPsB/GQ8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA4ODY0OGYtNWUwYi00MzM4LTkxMWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEy NzVENTAyMkRDMUUzMzkwQUY4QzBGQjAxRkM2NDNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMjEyMjBBMTI3NUQ1MDIyREMxRTMzOTBBRjhDMEZCMDFGQzY0 M0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBG QjAxRkM2NDNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADl1BPJf53CJM6LV/7VUrej7OHFflNmIfjVX /pBVpZPJpTj7KJXSRKM75KoUE/iEeI95qfOLuRNjCWMFlc85LWHWAusjCxYssR40 hEcWnfASU6BvFupyU112wrB3sia4SJI4gDXZ68Xvp4Wiid3ShklHi+IfhXLOOuxj EsT/n2GOmqWXWNtHwTYcecwQdaVQfwptKDC3mMe3LYKpa+gXezoGmhMOhhMuheH+ 2EC99RYfBAuk34alX4IYXuM1uBsQfXM17a/ptccg3dNoSiDRF6BXfXtXtYNC13tI pE3VvPIDvZw5uJBC9bNlF/ftXVnSERsa+E1NcRVf1soIUxZqrc8= -----END CERTIFICATE-----Generated at Thu Sep 24 17:36:15 2026 by rpki-client