$ rpki-client -vvf rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft File: C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft (raw, json) Hash identifier: tazg2iYYpzRManFFH37TzxV9OiUdYoZkWuSdXD5rotY= Subject key identifier: 5C:DE:96:0A:37:8B:CA:5C:0A:B0:37:B1:32:81:E1:3B:AE:EF:2A:AC Authority key identifier: C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 Certificate issuer: /CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Certificate serial: 3808695939B0059570C59BDF8DB46EB3D14CDB32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:13:42 +0000 Manifest this update: Tue 12 May 2026 21:08:42 +0000 Manifest next update: Wed 13 May 2026 23:04:42 +0000 Files and hashes: 1: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: fRCVhusGzoRmw1xVyCKp1DarroNp+AXJavllcEzpEYc=) 2: C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl (hash: MiQ2ub/Jp5i+6/mMv3CTfmhBcngg7Zt6zfcUQmC8MXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:08:69:59:39:b0:05:95:70:c5:9b:df:8d:b4:6e:b3:d1:4c:db:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Validity Not Before: May 12 21:08:42 2026 GMT Not After : May 13 23:04:42 2026 GMT Subject: CN=5CDE960A378BCA5C0AB037B13281E13BAEEF2AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9d:e1:aa:1f:25:9a:a2:de:3c:c0:ad:48:6d: ab:bf:5b:3d:57:77:96:49:a3:6a:f5:b5:67:60:63: e4:60:4a:fa:93:bb:4b:7e:e6:8c:26:37:7d:d9:65: 1c:7e:6e:71:a9:70:90:f6:32:56:7b:54:18:dc:1e: 1c:6e:d2:9d:0d:d4:13:f5:53:1d:61:22:4a:72:46: c4:0d:03:3a:6b:e2:c0:73:aa:f0:9c:56:5c:7a:6a: 81:88:7b:4b:11:8d:db:59:96:bb:be:c1:c7:f5:44: 26:b5:b4:d0:8a:81:21:0a:db:de:ec:2e:d1:3d:59: d1:97:61:81:a5:0c:0d:24:1c:48:f4:66:2a:c1:b9: 4e:89:d0:45:cc:09:f3:04:ce:04:9a:78:35:58:f8: 5a:1b:cc:b6:d0:06:3a:95:81:9a:6e:66:66:05:03: 8b:5f:ca:c4:ad:e2:29:ad:ec:08:61:00:5d:dc:7a: cd:df:27:12:dc:56:35:38:5e:55:a4:ff:0b:ab:b6: 6e:dc:dd:88:8d:57:ed:72:b7:33:8a:f3:17:94:42: 3e:97:d9:08:60:48:a9:d2:71:9c:58:af:ab:2c:0d: d4:0e:4a:c6:3c:6c:0f:25:47:bd:78:e7:6e:ea:38: 24:b7:3d:de:cc:6a:06:eb:c5:cd:5c:34:51:f8:ee: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DE:96:0A:37:8B:CA:5C:0A:B0:37:B1:32:81:E1:3B:AE:EF:2A:AC X509v3 Authority Key Identifier: keyid:C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:09:64:d0:6f:c7:41:64:c2:a9:0e:a3:d7:81:f8:f4:d1:ab: c8:f8:90:1b:59:38:73:95:bd:25:e4:47:02:59:5f:55:ba:8f: 00:51:07:c4:70:3a:ea:5a:01:fd:3a:3f:36:bf:4b:fe:2d:17: aa:98:2d:8f:3a:e3:8d:a2:e2:f7:6f:88:5c:9d:4d:dc:0c:81: a7:ac:83:28:d5:e3:74:79:db:11:fc:2e:7f:09:70:64:0c:0c: e5:11:71:0a:4b:de:c3:ab:27:a0:62:d1:fb:b5:ec:94:a2:70: 70:c7:20:4d:c5:c0:34:76:9f:04:2e:df:08:13:ed:71:6d:dc: 10:65:ab:00:31:28:30:a0:7c:8c:56:0e:4a:86:6b:24:cf:1a: db:da:44:e9:cd:aa:23:b6:3d:1a:b6:4e:4e:91:eb:cc:ef:07: 7d:21:91:f6:55:2e:88:37:54:b1:32:bc:65:34:cb:4a:7a:49: db:77:04:13:15:88:4d:20:e6:0b:66:e3:b9:c9:65:81:44:83: ab:0b:e7:a1:58:56:a7:8d:cf:3a:30:85:6d:37:56:ca:5f:3c: 10:46:40:f6:43:c8:a0:b7:80:4e:f0:0b:34:67:3c:2a:7e:03: ef:74:f1:84:27:48:ae:ec:50:4b:64:94:60:36:83:5a:ad:7d: 94:68:f3:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOAhpWTmwBZVwxZvfjbRus9FM2zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RC MUZBN0EzMTAeFw0yNjA1MTIyMTA4NDJaFw0yNjA1MTMyMzA0NDJaMDMxMTAvBgNV BAMTKDVDREU5NjBBMzc4QkNBNUMwQUIwMzdCMTMyODFFMTNCQUVFRjJBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQneGqHyWaot48wK1Ibau/Wz1X d5ZJo2r1tWdgY+RgSvqTu0t+5owmN33ZZRx+bnGpcJD2MlZ7VBjcHhxu0p0N1BP1 Ux1hIkpyRsQNAzpr4sBzqvCcVlx6aoGIe0sRjdtZlru+wcf1RCa1tNCKgSEK297s LtE9WdGXYYGlDA0kHEj0ZirBuU6J0EXMCfMEzgSaeDVY+FobzLbQBjqVgZpuZmYF A4tfysSt4imt7AhhAF3ces3fJxLcVjU4XlWk/wurtm7c3YiNV+1ytzOK8xeUQj6X 2QhgSKnScZxYr6ssDdQOSsY8bA8lR714527qOCS3Pd7Magbrxc1cNFH47nVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXN6WCjeLylwKsDexMoHhO67vKqwwHwYDVR0j BBgwFoAUwhZJsOkoMYw1YY7hl91dzbH6ejEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4M2IyN2MtYTczMC00MDAyLTkxYjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBF OTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RCMUZBN0EzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjE2NDlCMEU5MjgzMThDMzU2MThFRTE5N0RENURDREIxRkE3 QTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVE Q0RCMUZBN0EzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8JZNBvx0FkwqkOo9eB+PTRq8j4kBtZOHOV vSXkRwJZX1W6jwBRB8RwOupaAf06Pza/S/4tF6qYLY86442i4vdviFydTdwMgaes gyjV43R52xH8Ln8JcGQMDOURcQpL3sOrJ6Bi0fu17JSicHDHIE3FwDR2nwQu3wgT 7XFt3BBlqwAxKDCgfIxWDkqGayTPGtvaROnNqiO2PRq2Tk6R68zvB30hkfZVLog3 VLEyvGU0y0p6Sdt3BBMViE0g5gtm47nJZYFEg6sL56FYVqeNzzowhW03VspfPBBG QPZDyKC3gE7wCzRnPCp+A+908YQnSK7sUEtklGA2g1qtfZRo8xo= -----END CERTIFICATE-----Generated at Wed May 13 00:33:54 2026 by rpki-client