$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft (raw, json) Hash identifier: qqMvVRTKuzUuQ3rTyyqBEP1BsFx10Vkjp5IWs/6xzDY= Subject key identifier: 8F:E7:01:5E:14:11:36:C5:D7:B5:0D:B1:DE:F6:96:2A:D0:04:75:41 Authority key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Certificate issuer: /CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Certificate serial: 16957F97855FAE0DCB1460BBE68502F89941967C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 07:23:28 +0000 Manifest this update: Sat 14 Nov 2026 07:18:28 +0000 Manifest next update: Sun 15 Nov 2026 10:50:28 +0000 Files and hashes: 1: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl (hash: LLn9gvhkAuOGxPMV1N8/ACruCxHXFr4fgQgtvaxHdnI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:95:7f:97:85:5f:ae:0d:cb:14:60:bb:e6:85:02:f8:99:41:96:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Validity Not Before: Nov 14 07:18:28 2026 GMT Not After : Nov 15 10:50:28 2026 GMT Subject: CN=8FE7015E141136C5D7B50DB1DEF6962AD0047541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:d3:9b:c2:5b:35:15:77:30:b6:d1:3c:c6: 20:3d:20:0a:4b:06:d3:db:a1:95:43:58:80:bd:56: 8a:d2:7e:07:9e:ee:e7:2f:25:71:7c:a1:ee:ff:7b: 77:6e:84:fe:71:98:c4:b8:f4:ee:4e:90:7c:71:fb: e6:13:dd:20:83:2b:19:5d:d2:30:03:22:26:55:18: 73:d5:a3:82:37:3f:4c:bc:99:a6:cb:f0:ed:54:58: 8c:1f:3f:ee:91:b0:b8:59:5f:06:50:cf:47:c7:4a: 6e:73:62:31:9e:1c:2b:5e:b2:0e:35:9c:a5:f0:3a: 70:66:22:03:18:ee:92:e2:a3:64:ba:2f:c5:d0:35: 60:ad:9c:c4:b0:c5:f9:27:44:97:9f:e6:59:14:29: bf:53:eb:ef:db:6f:76:0a:9a:47:37:d1:fd:ff:25: d3:a5:b0:98:e4:6e:7b:f7:f3:cd:89:8a:bd:18:45: ee:bb:15:47:a5:83:a0:19:ad:23:c2:a6:23:13:85: a6:d6:10:01:d2:8b:cb:de:85:e2:aa:69:1f:c1:e8: 3d:3a:8f:b5:97:ae:3b:0d:a8:29:16:ac:55:ee:a1: 2a:59:db:94:0c:6a:d5:f2:b0:a9:5a:e2:aa:9e:b6: 1e:04:63:a5:e3:cd:f3:f0:e0:16:02:4d:ba:32:a0: f3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E7:01:5E:14:11:36:C5:D7:B5:0D:B1:DE:F6:96:2A:D0:04:75:41 X509v3 Authority Key Identifier: keyid:B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5e:74:90:3d:5a:74:9b:61:39:89:ad:4f:88:5c:28:d5:2e: f1:0d:66:6d:f2:6d:d9:40:12:76:90:78:c3:73:05:40:b5:63: f5:7d:cd:06:aa:89:60:64:60:82:2c:1a:28:46:bf:a9:99:7d: bc:8a:d6:27:47:06:ff:24:25:40:07:73:3b:de:11:02:f6:ea: f9:bd:49:41:79:ac:75:56:bd:00:8f:46:2a:4d:41:96:fe:fd: 9a:f1:96:d1:e8:4c:6e:1c:cd:77:cf:13:b1:94:dd:0c:de:84: ba:90:16:3a:f2:34:4a:e9:a1:f1:01:63:fc:76:96:44:9b:84: 86:bc:e2:bd:d3:15:f9:7d:9f:db:bd:68:19:75:a6:9c:b7:7d: e4:75:43:5d:3e:12:6d:5c:23:55:a2:f5:27:79:eb:d1:84:0c: ff:71:b2:16:f0:2d:87:96:e6:ca:d9:47:ec:a1:10:92:c8:52: 4f:1c:58:fe:40:61:f5:ce:07:07:c6:7f:7c:54:43:aa:82:66: 9a:1d:57:b9:46:41:53:82:b2:51:4b:fc:cc:a8:c3:c8:5a:3b: 37:e8:bc:a1:5b:5c:8e:56:7b:af:11:26:63:12:7d:ff:5d:12: ce:3c:4d:01:64:9c:21:a5:d4:73:7d:e4:1b:03:44:5b:38:bc: 38:e3:4f:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFpV/l4Vfrg3LFGC75oUC+JlBlnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBGQjAx RkM2NDNDMTAeFw0yNjExMTQwNzE4MjhaFw0yNjExMTUxMDUwMjhaMDMxMTAvBgNV BAMTKDhGRTcwMTVFMTQxMTM2QzVEN0I1MERCMURFRjY5NjJBRDAwNDc1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdNObwls1FXcwttE8xiA9IApL BtPboZVDWIC9VorSfgee7ucvJXF8oe7/e3duhP5xmMS49O5OkHxx++YT3SCDKxld 0jADIiZVGHPVo4I3P0y8mabL8O1UWIwfP+6RsLhZXwZQz0fHSm5zYjGeHCtesg41 nKXwOnBmIgMY7pLio2S6L8XQNWCtnMSwxfknRJef5lkUKb9T6+/bb3YKmkc30f3/ JdOlsJjkbnv3882Jir0YRe67FUelg6AZrSPCpiMThabWEAHSi8veheKqaR/B6D06 j7WXrjsNqCkWrFXuoSpZ25QMatXysKla4qqeth4EY6XjzfPw4BYCTboyoPN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+cBXhQRNsXXtQ2x3vaWKtAEdUEwHwYDVR0j BBgwFoAUshIgoSddUCLcHjOQr4wPsB/GQ8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA4ODY0OGYtNWUwYi00MzM4LTkxMWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEy NzVENTAyMkRDMUUzMzkwQUY4QzBGQjAxRkM2NDNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMjEyMjBBMTI3NUQ1MDIyREMxRTMzOTBBRjhDMEZCMDFGQzY0 M0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBG QjAxRkM2NDNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpedJA9WnSbYTmJrU+IXCjVLvENZm3ybdlA EnaQeMNzBUC1Y/V9zQaqiWBkYIIsGihGv6mZfbyK1idHBv8kJUAHczveEQL26vm9 SUF5rHVWvQCPRipNQZb+/ZrxltHoTG4czXfPE7GU3QzehLqQFjryNErpofEBY/x2 lkSbhIa84r3TFfl9n9u9aBl1ppy3feR1Q10+Em1cI1Wi9Sd569GEDP9xshbwLYeW 5srZR+yhEJLIUk8cWP5AYfXOBwfGf3xUQ6qCZpodV7lGQVOCslFL/Myow8haOzfo vKFbXI5We68RJmMSff9dEs48TQFknCGl1HN95BsDRFs4vDjjT34= -----END CERTIFICATE-----Generated at Sat Nov 14 22:45:50 2026 by rpki-client