$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json) Hash identifier: 3OvtrwQY6VohmpoBWOKX0Z3/b1rNenC2vdnvKFgYqj4= Subject key identifier: 9E:42:22:38:35:E2:B6:EF:44:2E:34:53:8C:AD:58:8C:44:22:E6:3A Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Certificate serial: 05964E61B5DA33B7AAFA19C33ECF2A3657FB2181 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:59:31 +0000 Manifest this update: Wed 23 Sep 2026 18:54:31 +0000 Manifest next update: Thu 24 Sep 2026 20:22:31 +0000 Files and hashes: 1: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=) 2: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=) 3: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=) 4: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=) 5: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: RJJKQbjZXObgQkhzbmISdcQgfUrDe6PYzCpm3Vnndhk=) 6: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=) 7: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=) 8: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=) 9: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=) 10: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=) 11: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=) 12: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=) 13: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=) 14: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=) 15: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=) 16: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=) 17: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=) 18: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=) 19: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: PgXL6WDq3i8tznZRJPtlrc9sUxZ4kDtxFC0zL6N0xy0=) 20: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:96:4e:61:b5:da:33:b7:aa:fa:19:c3:3e:cf:2a:36:57:fb:21:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Validity Not Before: Sep 23 18:54:31 2026 GMT Not After : Sep 24 20:22:31 2026 GMT Subject: CN=9E42223835E2B6EF442E34538CAD588C4422E63A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:b6:5d:2f:34:83:e4:30:e3:a4:9c:c6:be: 96:dc:47:e4:75:d5:a4:38:fd:db:21:65:3f:4d:0d: cd:1d:7b:da:07:b7:c7:2e:8c:7f:e6:b0:25:4f:f7: 8f:16:ed:f0:6b:a1:2d:d2:d4:9e:de:51:c2:46:0a: a1:7e:bc:e0:bc:e5:d0:4a:be:af:f2:36:c3:01:4b: 5a:4c:3d:00:f9:f8:6f:ba:fb:b8:ed:d5:62:cb:75: 38:1d:03:1c:8b:99:bc:a3:82:1f:d9:a2:92:2e:bf: 1f:fd:86:7b:b5:95:a9:4e:67:fd:d0:20:8f:14:bd: 9a:c9:0b:b2:ff:f9:f1:99:59:26:53:60:a6:72:a9: 0e:d0:f0:b8:1b:70:ea:c2:a0:08:18:10:da:4a:90: 27:4c:ed:2d:d7:ce:da:0d:3a:b5:ad:c1:8a:e4:be: 75:9b:50:63:12:69:80:98:7e:60:22:d3:58:34:7f: 68:86:46:a8:65:3e:78:c8:7c:e6:d7:31:99:26:58: ee:01:af:6b:0c:e3:64:4a:e9:a1:95:ce:5c:84:f1: dc:59:dd:73:8f:cb:a4:fb:5d:4f:84:44:8b:ee:e2: fa:cd:0c:54:9a:99:52:c8:c6:93:7b:ea:d5:f1:cf: 1c:53:45:1e:ac:cd:91:a2:9c:3f:c3:c4:79:a7:9b: 94:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:42:22:38:35:E2:B6:EF:44:2E:34:53:8C:AD:58:8C:44:22:E6:3A X509v3 Authority Key Identifier: keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:56:69:09:48:8f:ce:0c:f6:c9:14:39:1a:d9:ab:87:3b:9f: f5:d8:59:60:8b:65:62:26:1a:b3:94:a9:ea:1a:1f:a6:a6:83: 3c:83:53:6c:d3:45:1e:f3:b9:3e:81:76:02:8e:be:20:19:14: 47:cf:3e:87:7f:ad:f7:e9:97:0f:d5:62:3c:8c:47:5e:4a:ca: 3e:e8:6e:4a:9f:f5:19:f2:01:cd:53:4f:73:c1:1f:00:42:e8: 45:c6:b9:f8:f3:a1:f5:e3:ed:9d:57:95:ec:ef:6d:e2:67:6c: 6f:a4:b3:ed:21:d9:ad:ca:41:cb:2a:37:31:17:16:2f:e3:9b: 3d:87:50:38:99:97:01:a9:ad:99:4d:1c:50:4d:45:e1:22:af: 9f:e0:bb:28:e0:79:ef:e6:7d:e7:be:c7:42:80:ab:0f:f6:5e: ca:2d:33:24:2e:2b:ad:f1:5a:2c:ed:20:27:3e:e3:c5:78:53: 97:31:f8:fa:a0:6d:51:77:6d:2e:67:70:49:45:ce:92:c7:19: ea:54:a3:9a:46:88:64:03:ef:16:63:74:c4:ad:83:94:60:ae: 76:5a:c1:c8:5b:00:35:f6:c0:dc:05:06:b2:75:45:12:2f:59: 7b:49:fc:b4:87:0c:f7:11:13:96:5c:f9:dc:e2:fb:14:25:6d: dd:af:78:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZZOYbXaM7eq+hnDPs8qNlf7IYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEz RUI2NDQ1QjAeFw0yNjA5MjMxODU0MzFaFw0yNjA5MjQyMDIyMzFaMDMxMTAvBgNV BAMTKDlFNDIyMjM4MzVFMkI2RUY0NDJFMzQ1MzhDQUQ1ODhDNDQyMkU2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUMrZdLzSD5DDjpJzGvpbcR+R1 1aQ4/dshZT9NDc0de9oHt8cujH/msCVP948W7fBroS3S1J7eUcJGCqF+vOC85dBK vq/yNsMBS1pMPQD5+G+6+7jt1WLLdTgdAxyLmbyjgh/ZopIuvx/9hnu1lalOZ/3Q II8UvZrJC7L/+fGZWSZTYKZyqQ7Q8LgbcOrCoAgYENpKkCdM7S3XztoNOrWtwYrk vnWbUGMSaYCYfmAi01g0f2iGRqhlPnjIfObXMZkmWO4Br2sM42RK6aGVzlyE8dxZ 3XOPy6T7XU+ERIvu4vrNDFSamVLIxpN76tXxzxxTRR6szZGinD/DxHmnm5SLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnkIiODXitu9ELjRTjK1YjEQi5jowHwYDVR0j BBgwFoAUIaGvE4IP7KrIced7pwbfkT62RFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI1NDhiYWQtN2ZlZC00MWZkLWI0MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4 MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEzRUI2NDQ1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUExQUYxMzgyMEZFQ0FBQzg3MUU3N0JBNzA2REY5MTNFQjY0 NDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRG OTEzRUI2NDQ1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRWaQlIj84M9skUORrZq4c7n/XYWWCLZWIm GrOUqeoaH6amgzyDU2zTRR7zuT6BdgKOviAZFEfPPod/rffplw/VYjyMR15Kyj7o bkqf9RnyAc1TT3PBHwBC6EXGufjzofXj7Z1XlezvbeJnbG+ks+0h2a3KQcsqNzEX Fi/jmz2HUDiZlwGprZlNHFBNReEir5/guyjgee/mfee+x0KAqw/2XsotMyQuK63x WiztICc+48V4U5cx+PqgbVF3bS5ncElFzpLHGepUo5pGiGQD7xZjdMStg5RgrnZa wchbADX2wNwFBrJ1RRIvWXtJ/LSHDPcRE5Zc+dzi+xQlbd2veIM= -----END CERTIFICATE-----Generated at Thu Sep 24 08:36:45 2026 by rpki-client