$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft File: C21FB465A0510DBFCC14562C85738E9077EEC01A.mft (raw, json) Hash identifier: 1ZBxof23NopO+iKKlsoQk7AK8Z7PTqLoBc9+UB4p4xE= Subject key identifier: 51:2A:7E:8E:26:58:BE:72:22:5F:5E:2A:9B:C8:BA:24:57:11:C4:23 Authority key identifier: C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A Certificate issuer: /CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Certificate serial: 3D2920A0B66F68E92ADF0EC794E804B2D414A347 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:09:57 +0000 Manifest this update: Thu 23 Jul 2026 12:04:57 +0000 Manifest next update: Fri 24 Jul 2026 12:17:57 +0000 Files and hashes: 1: 3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (hash: Relrsr05v7o6LWUkvyj3CRc7sy187SltL/KM3/wqMnY=) 2: 3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (hash: rtUbQHLZbaAGcuUEYQCtJGPoOA9/PGOEJnisZdWSck8=) 3: C21FB465A0510DBFCC14562C85738E9077EEC01A.crl (hash: P3jX3P7p36kcYstSH5iFNpDJIkOgxsKJCmsB4h9nk0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:29:20:a0:b6:6f:68:e9:2a:df:0e:c7:94:e8:04:b2:d4:14:a3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Validity Not Before: Jul 23 12:04:57 2026 GMT Not After : Jul 24 12:17:57 2026 GMT Subject: CN=512A7E8E2658BE72225F5E2A9BC8BA245711C423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:29:74:2f:5b:70:4d:06:05:15:bf:48:11: c8:95:ed:df:ca:61:51:32:78:91:5e:48:1a:fb:ec: 77:68:b5:f5:6a:32:d7:be:d4:24:94:60:61:9b:50: a9:5e:86:e9:40:a7:95:12:ce:db:cb:c1:fa:4f:e6: 80:5f:c3:c1:2c:82:0d:6a:c2:32:9a:ad:90:5d:e4: 0c:0d:04:f6:be:37:41:57:cf:54:a6:9a:6e:db:59: 05:56:00:9b:f4:ee:03:4a:76:ef:80:07:69:44:b4: 50:1b:05:c5:f3:64:a3:27:b2:31:f9:69:5f:28:f9: f3:c9:03:95:06:dc:39:67:4f:c2:1e:cc:30:e2:46: c4:bd:ce:d9:d0:45:d1:8b:bb:ef:d7:c1:f0:c0:32: b0:5e:0f:6e:1f:f8:0e:91:18:26:dd:fb:89:02:67: 5e:2d:2e:5c:49:b5:6e:05:f7:63:b9:12:d6:4e:73: ee:bb:19:be:be:83:8a:0f:5d:53:c4:f7:d1:bf:c3: 40:85:35:fd:81:42:d5:dc:0c:85:be:be:52:b2:75: 14:62:65:10:4a:db:94:ca:8c:46:1f:f7:56:95:0d: ac:d3:d4:3e:74:3b:a5:35:a6:bb:f2:58:63:9a:f8: 66:68:4b:77:27:ec:bd:f1:17:55:11:62:a4:f6:d1: 93:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2A:7E:8E:26:58:BE:72:22:5F:5E:2A:9B:C8:BA:24:57:11:C4:23 X509v3 Authority Key Identifier: keyid:C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3f:98:60:81:42:16:f2:9d:34:5d:c4:b0:7d:b6:1d:79:6d: 5b:e6:7d:0d:99:b8:cf:2c:fc:2a:46:e2:da:32:e6:42:0a:c5: 8b:51:3b:56:b3:38:f9:57:4f:ed:84:cb:60:06:1f:e4:a8:62: 49:83:54:8e:2d:57:a9:36:b2:5c:13:80:c5:2b:56:bb:ed:76: 72:16:11:7f:eb:03:da:6e:b8:25:85:b1:4e:7c:f3:c9:fc:dd: 21:48:81:75:af:18:32:00:76:31:56:04:da:b7:d8:5a:43:73: c2:03:38:85:3f:9b:f1:5e:a6:98:9e:b8:97:41:09:7b:d3:b1: ea:f9:22:dd:b2:72:15:b7:ea:22:55:cf:84:03:fb:92:18:71: a0:53:de:d5:45:be:78:43:18:61:0b:2f:d0:03:d9:f4:43:72: 0b:19:50:ec:55:1c:79:36:ca:de:a5:73:28:99:08:29:3b:48: 26:ca:42:d3:82:72:dd:1e:1d:9b:a0:08:5e:58:6c:45:f3:b9: d2:8c:7f:60:c1:8a:c5:44:07:09:7e:a5:7d:7a:66:24:68:fc: 4a:30:99:32:26:ed:39:53:2b:59:f2:da:5a:08:5d:df:e4:fd: ac:6b:48:d1:48:ac:99:02:5a:d8:12:1a:2a:63:42:3c:d6:98: 54:b2:b7:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSkgoLZvaOkq3w7HlOgEstQUo0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3 N0VFQzAxQTAeFw0yNjA3MjMxMjA0NTdaFw0yNjA3MjQxMjE3NTdaMDMxMTAvBgNV BAMTKDUxMkE3RThFMjY1OEJFNzIyMjVGNUUyQTlCQzhCQTI0NTcxMUM0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6Cl0L1twTQYFFb9IEciV7d/K YVEyeJFeSBr77HdotfVqMte+1CSUYGGbUKlehulAp5USztvLwfpP5oBfw8Esgg1q wjKarZBd5AwNBPa+N0FXz1Smmm7bWQVWAJv07gNKdu+AB2lEtFAbBcXzZKMnsjH5 aV8o+fPJA5UG3DlnT8IezDDiRsS9ztnQRdGLu+/XwfDAMrBeD24f+A6RGCbd+4kC Z14tLlxJtW4F92O5EtZOc+67Gb6+g4oPXVPE99G/w0CFNf2BQtXcDIW+vlKydRRi ZRBK25TKjEYf91aVDazT1D50O6U1prvyWGOa+GZoS3cn7L3xF1URYqT20ZMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUSp+jiZYvnIiX14qm8i6JFcRxCMwHwYDVR0j BBgwFoAUwh+0ZaBRDb/MFFYshXOOkHfuwBowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJiY2JmZDktNTdkZi00OTBjLTg4ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVB MDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3N0VFQzAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjFGQjQ2NUEwNTEwREJGQ0MxNDU2MkM4NTczOEU5MDc3RUVD MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJiY2JmZDktNTdkZi00OTBjLTg4 ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhF OTA3N0VFQzAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0/mGCBQhbynTRdxLB9th15bVvmfQ2ZuM8s /CpG4toy5kIKxYtRO1azOPlXT+2Ey2AGH+SoYkmDVI4tV6k2slwTgMUrVrvtdnIW EX/rA9puuCWFsU5888n83SFIgXWvGDIAdjFWBNq32FpDc8IDOIU/m/FeppieuJdB CXvTser5It2ychW36iJVz4QD+5IYcaBT3tVFvnhDGGELL9AD2fRDcgsZUOxVHHk2 yt6lcyiZCCk7SCbKQtOCct0eHZugCF5YbEXzudKMf2DBisVEBwl+pX16ZiRo/Eow mTIm7TlTK1ny2loIXd/k/axrSNFIrJkCWtgSGipjQjzWmFSyt4I= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:57 2026 by rpki-client