
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json)
Hash identifier: CXxSV6CXe+hxhsF0StPW7vZN+apyMDENXKP/C2xWCyM=
Subject key identifier: 02:55:5F:5E:DA:DD:D6:33:F2:C1:6C:B6:B8:8C:A7:D6:8C:C0:95:69
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial: 5223BE6B45AC1A022E33DBF7F2245D017833B1E9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 04:13:59 +0000
Manifest this update: Tue 12 May 2026 04:08:59 +0000
Manifest next update: Wed 13 May 2026 05:28:59 +0000
Files and hashes: 1: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=)
2: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=)
3: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=)
4: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=)
5: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: PgXL6WDq3i8tznZRJPtlrc9sUxZ4kDtxFC0zL6N0xy0=)
6: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=)
7: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=)
8: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: VEnX3wmGxLHX5nx4jLI1fYoYpJ6aRzksqMFsiXI1T38=)
9: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=)
10: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=)
11: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=)
12: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=)
13: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=)
14: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=)
15: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=)
16: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=)
17: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=)
18: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=)
19: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=)
20: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:23:be:6b:45:ac:1a:02:2e:33:db:f7:f2:24:5d:01:78:33:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Validity
Not Before: May 12 04:08:59 2026 GMT
Not After : May 13 05:28:59 2026 GMT
Subject: CN=02555F5EDADDD633F2C16CB6B88CA7D68CC09569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:37:df:92:7d:76:87:dc:d2:2f:d9:50:e0:
86:be:72:f5:31:35:cc:9d:8c:dd:94:69:c2:c7:74:
86:cd:d9:3a:b6:2d:12:2d:6f:28:5c:00:bb:cc:7e:
3e:0b:93:53:32:a3:ef:a4:51:98:58:a3:ce:6a:b6:
59:8b:92:b7:14:a3:28:cb:02:07:7b:2f:a5:d2:d8:
cb:57:c3:2b:c9:8b:9e:62:9f:3f:e1:f4:ad:25:7f:
84:e9:30:ea:06:ad:87:a4:6e:57:9d:ff:86:8a:ae:
68:60:73:ad:36:0c:89:1f:10:4e:9a:94:ff:68:f7:
6e:a1:52:28:c5:d4:fa:d7:0d:a7:af:a4:dd:36:ea:
05:84:00:fc:4d:98:1b:83:19:34:cb:51:ed:81:52:
b1:7e:c1:6d:81:fe:42:75:79:b7:cb:ee:a8:e3:11:
0f:e9:54:62:ed:f1:fa:22:95:5f:7a:e2:7c:a7:7e:
f5:da:cd:16:54:42:5e:03:dd:dc:48:48:ac:99:07:
cd:fa:84:dd:fe:48:e8:5f:29:c7:b6:eb:08:8b:d5:
13:34:75:88:a0:42:58:b5:0c:79:a2:f7:79:60:08:
7a:64:ce:dd:7e:56:7f:10:54:db:1a:ac:c0:9c:ee:
c4:fc:e8:5c:b7:aa:3d:b4:c1:69:c6:8c:77:f1:dc:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:5F:5E:DA:DD:D6:33:F2:C1:6C:B6:B8:8C:A7:D6:8C:C0:95:69
X509v3 Authority Key Identifier:
keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9e:d1:9b:43:57:7f:46:05:bf:12:38:7f:7c:ca:fc:39:03:
b7:4b:52:19:e5:2a:29:89:71:f3:ac:cb:cb:59:54:17:a5:1b:
86:ff:1e:4b:89:99:57:a0:ea:e1:59:44:3a:f0:f2:b7:70:b3:
3b:fa:6b:e8:d5:b4:3e:89:4e:de:88:bb:df:49:c9:b3:f4:b3:
62:07:c1:22:58:99:4e:78:5a:92:db:59:3d:c9:44:41:fe:e5:
60:13:8e:19:58:a9:89:0f:4e:cd:bb:1e:5c:0a:c1:45:ab:0a:
a0:ba:06:8b:d8:2a:a7:c7:29:00:05:6b:7c:4e:80:f6:50:3c:
e4:8b:72:3f:75:13:b9:b5:ec:d1:47:fa:e0:65:af:9a:d1:d2:
24:21:34:01:c0:2f:4a:dd:9d:83:19:8a:9a:fb:9a:a1:a2:9e:
f0:c4:f2:b1:8d:95:ab:b4:75:18:a8:0f:b9:ae:0d:96:ea:a1:
e9:60:7e:23:b5:a6:97:a8:95:4b:36:7e:b0:db:54:73:ba:ce:
49:96:93:56:90:33:b1:e5:2c:36:43:a7:e0:4e:96:2f:1a:19:
32:08:dc:42:94:5c:cb:9f:e0:2e:08:25:f5:30:5b:91:21:0d:
4a:7c:30:02:66:67:5f:f4:b7:c2:4a:60:ba:8e:06:2e:42:5a:
2d:da:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:45:38 2026 by rpki-client