$ rpki-client -vvf rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft (raw, json) Hash identifier: 7BbPshupoJ5IJ40qjTGX0t1bOIRquiCIL/S7HqIgYuQ= Subject key identifier: 03:5E:06:51:2D:AE:C7:61:C3:BC:43:F5:AD:E0:7D:C1:E1:F1:29:58 Authority key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Certificate issuer: /CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Certificate serial: 24F39E24FD02DD510B391EA40405D8E0EE50036C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft Manifest number: 0D Signing time: Tue 12 May 2026 02:56:35 +0000 Manifest this update: Tue 12 May 2026 02:51:35 +0000 Manifest next update: Wed 13 May 2026 05:12:35 +0000 Files and hashes: 1: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl (hash: e0Y+/1MhxvXFVE8M3Mrjcz1WGmCCzblxw3APk7Ocg7M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f3:9e:24:fd:02:dd:51:0b:39:1e:a4:04:05:d8:e0:ee:50:03:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Validity Not Before: May 12 02:51:35 2026 GMT Not After : May 13 05:12:35 2026 GMT Subject: CN=035E06512DAEC761C3BC43F5ADE07DC1E1F12958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e3:aa:0c:4c:ae:6f:20:d1:ee:f4:a7:7a:f5: 6d:94:83:92:a0:c2:e7:b9:25:00:bd:6c:78:d0:c0: 78:6e:57:6a:d7:e9:bb:2f:08:1e:a3:74:1e:7b:3a: 5e:95:61:bd:39:69:c4:70:f1:23:82:dc:c4:db:06: e0:bf:cf:98:65:9f:23:35:58:3c:fd:a6:9d:9a:b0: 6f:bb:a1:6a:fe:ab:36:f1:98:3f:f1:e0:56:dc:af: 3e:b0:1e:39:2c:72:8e:31:b2:0f:6a:37:fc:95:82: 69:73:cf:12:e2:90:2e:c6:72:cd:77:09:e6:1d:0d: bf:a7:f9:87:c7:30:bf:6e:c3:eb:98:48:6b:a6:22: 07:75:a3:f6:70:84:cf:5c:f1:e2:0d:6c:60:24:80: 4a:d4:5d:77:63:3a:63:08:04:c9:0f:4a:e7:9d:16: 85:c9:ba:c8:2e:ac:f6:bf:65:fd:4f:8c:7e:0d:64: d4:20:22:08:56:0a:c9:77:95:81:a6:4a:66:b8:8c: 05:6b:94:b6:fc:d9:7e:a3:33:81:e0:32:c3:97:ad: 3c:39:e1:e3:4e:4b:35:d4:0f:4a:85:b1:6d:5a:8f: a2:44:4a:89:cf:cc:c9:4f:87:69:03:91:10:84:82: 62:51:e1:6e:5a:95:63:cb:14:14:25:9b:82:6b:a7: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5E:06:51:2D:AE:C7:61:C3:BC:43:F5:AD:E0:7D:C1:E1:F1:29:58 X509v3 Authority Key Identifier: keyid:B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:77:9e:34:20:18:13:fa:74:e6:66:19:34:2e:68:d9:91:2f: f9:19:72:e8:09:58:fd:ff:11:24:27:7e:9b:89:6f:97:ea:f7: b2:5b:39:18:78:fd:60:24:be:9c:59:f3:b4:cf:e7:45:50:a9: f3:82:18:48:2b:f3:6a:8f:24:9d:04:70:21:ad:71:33:79:17: 81:c3:ff:81:b9:43:55:46:dd:f9:0d:75:b9:a1:10:26:fb:7e: d0:f7:4a:c3:83:1f:ad:f3:70:7a:f8:5c:cf:52:58:90:d1:f8: 4a:3a:b8:e7:8c:ed:df:9c:1a:5f:f6:ac:7a:7e:83:b8:36:fc: f3:a5:68:91:a2:4f:e0:93:37:ef:ee:71:79:1d:d9:9e:81:91: 17:5a:52:1b:f9:fe:c4:40:56:55:2b:05:ad:9d:f6:7c:0e:4d: 7a:15:8b:cc:20:bd:ee:30:5f:26:0a:4f:31:86:eb:c7:62:ba: e2:12:74:ac:42:ae:6a:76:b9:44:9c:a8:db:df:9b:10:ea:4d: 0c:7b:75:d2:9b:1a:1c:db:5e:42:dc:57:f1:b8:9a:cb:e2:3c: 20:7e:27:85:19:e1:10:5f:75:64:7c:46:b5:e1:a2:5f:4e:f2: 24:c3:07:c9:bc:34:c7:8d:ce:29:3e:87:0f:df:48:7b:40:5a: 00:d2:f9:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJPOeJP0C3VELOR6kBAXY4O5QA2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBGQjAx RkM2NDNDMTAeFw0yNjA1MTIwMjUxMzVaFw0yNjA1MTMwNTEyMzVaMDMxMTAvBgNV BAMTKDAzNUUwNjUxMkRBRUM3NjFDM0JDNDNGNUFERTA3REMxRTFGMTI5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk46oMTK5vINHu9Kd69W2Ug5Kg wue5JQC9bHjQwHhuV2rX6bsvCB6jdB57Ol6VYb05acRw8SOC3MTbBuC/z5hlnyM1 WDz9pp2asG+7oWr+qzbxmD/x4Fbcrz6wHjksco4xsg9qN/yVgmlzzxLikC7Gcs13 CeYdDb+n+YfHML9uw+uYSGumIgd1o/ZwhM9c8eINbGAkgErUXXdjOmMIBMkPSued FoXJusgurPa/Zf1PjH4NZNQgIghWCsl3lYGmSma4jAVrlLb82X6jM4HgMsOXrTw5 4eNOSzXUD0qFsW1aj6JESonPzMlPh2kDkRCEgmJR4W5alWPLFBQlm4Jrp3QHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA14GUS2ux2HDvEP1reB9weHxKVgwHwYDVR0j BBgwFoAUshIgoSddUCLcHjOQr4wPsB/GQ8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA4ODY0OGYtNWUwYi00MzM4LTkxMWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEy NzVENTAyMkRDMUUzMzkwQUY4QzBGQjAxRkM2NDNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMjEyMjBBMTI3NUQ1MDIyREMxRTMzOTBBRjhDMEZCMDFGQzY0 M0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBG QjAxRkM2NDNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ3njQgGBP6dOZmGTQuaNmRL/kZcugJWP3/ ESQnfpuJb5fq97JbORh4/WAkvpxZ87TP50VQqfOCGEgr82qPJJ0EcCGtcTN5F4HD /4G5Q1VG3fkNdbmhECb7ftD3SsODH63zcHr4XM9SWJDR+Eo6uOeM7d+cGl/2rHp+ g7g2/POlaJGiT+CTN+/ucXkd2Z6BkRdaUhv5/sRAVlUrBa2d9nwOTXoVi8wgve4w XyYKTzGG68diuuISdKxCrmp2uUScqNvfmxDqTQx7ddKbGhzbXkLcV/G4msviPCB+ J4UZ4RBfdWR8RrXhol9O8iTDB8m8NMeNzik+hw/fSHtAWgDS+fQ= -----END CERTIFICATE-----Generated at Tue May 12 22:13:19 2026 by rpki-client