$ rpki-client -vvf rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft (raw, json) Hash identifier: T4bH3T9przhucimA71UAgFoTZGx2hOjtdcJs0n6+Wyk= Subject key identifier: F7:26:51:09:E5:77:46:61:07:03:81:A5:69:E0:F6:09:48:6C:86:AB Authority key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Certificate issuer: /CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Certificate serial: 1362C82AF80C5DEC0956EEE6579B480A4A6FDB6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:34:04 +0000 Manifest this update: Thu 23 Jul 2026 19:29:04 +0000 Manifest next update: Fri 24 Jul 2026 23:27:04 +0000 Files and hashes: 1: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl (hash: Kmff5uiMIYRdNCXA6IGzCoc7K6lnfMkfPCpMhFScqmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:62:c8:2a:f8:0c:5d:ec:09:56:ee:e6:57:9b:48:0a:4a:6f:db:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Validity Not Before: Jul 23 19:29:04 2026 GMT Not After : Jul 24 23:27:04 2026 GMT Subject: CN=F7265109E5774661070381A569E0F609486C86AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:a4:a4:a7:ac:7e:2a:cf:86:52:4a:24:df: 26:62:a6:0e:6a:9c:cd:71:2f:cb:cc:65:f5:a8:ab: 4f:13:28:f4:16:d6:ab:30:fb:be:ad:d6:f6:4f:24: 61:90:f7:77:b0:e9:55:40:98:43:8f:d7:12:eb:07: d3:5b:40:86:4f:ea:fe:91:cc:b5:19:49:89:bc:54: 94:78:4c:b4:e3:c1:fe:7c:98:c8:8d:33:75:95:9e: f2:c7:44:11:d9:34:9a:f8:81:67:da:24:28:e7:8b: 51:b4:69:d8:f8:48:16:2f:1e:e6:6b:a4:74:23:32: e1:52:9f:12:f1:c9:f1:78:ff:b6:7a:42:5b:aa:91: 37:ef:ba:97:d4:20:f9:0b:18:0e:bd:e5:bd:c8:f3: 5d:88:fe:72:b4:b5:5b:ff:0d:3b:79:12:54:93:b9: 1e:c3:07:e3:cc:24:be:4a:af:46:1f:60:8d:92:8b: 45:6b:d1:62:94:91:36:1d:7e:09:f9:81:c6:11:27: 30:9a:ea:7a:b6:1a:dc:2c:fe:fe:a5:1c:e0:84:df: 5c:d6:6e:02:11:b1:ee:ce:74:65:6c:be:6f:f1:42: 33:d7:99:96:58:2c:64:5e:f1:92:e3:56:4c:9e:50: 5c:f8:c0:4b:d1:0f:8e:5c:08:32:e0:40:4a:42:b8: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:26:51:09:E5:77:46:61:07:03:81:A5:69:E0:F6:09:48:6C:86:AB X509v3 Authority Key Identifier: keyid:B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a5:37:9b:a8:13:bb:77:1c:af:ff:2b:f3:cd:b6:1e:35:7a: 0b:5c:f6:b7:0d:3e:01:6e:f0:f9:f7:3b:61:45:25:20:a0:66: fe:47:b3:8e:e5:d3:47:1d:7d:ee:b8:d8:be:2d:ba:be:ff:a3: d6:57:98:63:0f:92:96:99:a9:d9:82:b5:3b:a2:c6:bd:fa:f4: a0:54:7f:51:67:31:ec:d6:bd:77:da:64:c7:02:5f:ac:bd:eb: 1f:47:72:0b:12:2a:fc:04:95:e6:2e:8f:a9:78:d1:f3:c2:61: 14:11:5c:5f:04:ca:79:85:99:12:4e:69:17:1e:ca:25:b0:1e: 04:73:22:eb:a8:31:d1:53:22:6f:5d:09:1e:53:6d:ac:eb:6d: 3b:ea:01:5d:e8:86:b8:90:ea:70:cb:44:00:58:58:c5:06:aa: bb:30:96:60:ba:c2:d4:a0:76:ee:98:9d:36:76:03:d2:b3:99: 22:cc:0f:8d:e2:7e:56:4b:98:0d:54:ca:51:bc:06:55:9b:a9: 55:eb:b9:c5:de:9a:3f:0e:bd:5e:73:f5:f2:bd:2f:70:d9:a2: 63:00:bc:c4:bc:8d:56:08:ff:56:2a:bf:b2:6e:d1:75:9d:7d: bd:d8:a8:7a:d1:68:9f:a6:aa:ff:bc:94:53:12:17:af:a6:11: 5d:7a:01:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2LIKvgMXewJVu7mV5tICkpv220wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBGQjAx RkM2NDNDMTAeFw0yNjA3MjMxOTI5MDRaFw0yNjA3MjQyMzI3MDRaMDMxMTAvBgNV BAMTKEY3MjY1MTA5RTU3NzQ2NjEwNzAzODFBNTY5RTBGNjA5NDg2Qzg2QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKaSkp6x+Ks+GUkok3yZipg5q nM1xL8vMZfWoq08TKPQW1qsw+76t1vZPJGGQ93ew6VVAmEOP1xLrB9NbQIZP6v6R zLUZSYm8VJR4TLTjwf58mMiNM3WVnvLHRBHZNJr4gWfaJCjni1G0adj4SBYvHuZr pHQjMuFSnxLxyfF4/7Z6QluqkTfvupfUIPkLGA695b3I812I/nK0tVv/DTt5ElST uR7DB+PMJL5Kr0YfYI2Si0Vr0WKUkTYdfgn5gcYRJzCa6nq2Gtws/v6lHOCE31zW bgIRse7OdGVsvm/xQjPXmZZYLGRe8ZLjVkyeUFz4wEvRD45cCDLgQEpCuHBzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9yZRCeV3RmEHA4GlaeD2CUhshqswHwYDVR0j BBgwFoAUshIgoSddUCLcHjOQr4wPsB/GQ8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA4ODY0OGYtNWUwYi00MzM4LTkxMWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEy NzVENTAyMkRDMUUzMzkwQUY4QzBGQjAxRkM2NDNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMjEyMjBBMTI3NUQ1MDIyREMxRTMzOTBBRjhDMEZCMDFGQzY0 M0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBG QjAxRkM2NDNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIelN5uoE7t3HK//K/PNth41egtc9rcNPgFu 8Pn3O2FFJSCgZv5Hs47l00cdfe642L4tur7/o9ZXmGMPkpaZqdmCtTuixr369KBU f1FnMezWvXfaZMcCX6y96x9HcgsSKvwEleYuj6l40fPCYRQRXF8EynmFmRJOaRce yiWwHgRzIuuoMdFTIm9dCR5TbazrbTvqAV3ohriQ6nDLRABYWMUGqrswlmC6wtSg du6YnTZ2A9KzmSLMD43iflZLmA1UylG8BlWbqVXrucXemj8OvV5z9fK9L3DZomMA vMS8jVYI/1Yqv7Ju0XWdfb3YqHrRaJ+mqv+8lFMSF6+mEV16Af0= -----END CERTIFICATE-----Generated at Fri Jul 24 16:14:26 2026 by rpki-client