$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft File: C21FB465A0510DBFCC14562C85738E9077EEC01A.mft (raw, json) Hash identifier: 1pQG8kgRhCrS4gB7pzaJF24Wn6lYd2lnzxzULrqYZm0= Subject key identifier: F0:A5:B4:27:8B:10:1C:88:69:F9:ED:9A:35:DD:E2:D0:10:A9:2D:30 Authority key identifier: C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A Certificate issuer: /CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Certificate serial: 46D251777BCF9208F088BC51F66CBF82FBA57FC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:30:53 +0000 Manifest this update: Tue 12 May 2026 22:25:53 +0000 Manifest next update: Thu 14 May 2026 02:09:53 +0000 Files and hashes: 1: C21FB465A0510DBFCC14562C85738E9077EEC01A.crl (hash: rM2QjxOgpmVUlRF83Eg5qx6klfnf2Yh3vGhGAlTDhUg=) 2: 3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (hash: Relrsr05v7o6LWUkvyj3CRc7sy187SltL/KM3/wqMnY=) 3: 3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (hash: rtUbQHLZbaAGcuUEYQCtJGPoOA9/PGOEJnisZdWSck8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d2:51:77:7b:cf:92:08:f0:88:bc:51:f6:6c:bf:82:fb:a5:7f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Validity Not Before: May 12 22:25:53 2026 GMT Not After : May 14 02:09:53 2026 GMT Subject: CN=F0A5B4278B101C8869F9ED9A35DDE2D010A92D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:0d:a0:f3:42:41:ef:4a:5c:9e:2b:1d:2f: 90:54:3d:72:b3:f9:d1:46:69:47:39:5a:6d:44:77: 69:d7:0b:e2:3b:77:29:ef:2b:76:dd:6f:3c:bc:34: fd:f2:53:52:29:59:82:73:f1:fa:53:1c:43:87:c4: 56:0b:d7:33:e0:2c:4e:aa:7b:ee:fa:c4:dc:c3:b4: 7c:68:54:02:97:c0:9c:cf:73:2b:47:e8:5e:fa:9d: c4:44:bd:b6:e3:ad:59:75:99:7a:c6:ca:ae:c7:34: e3:8d:c8:7a:88:4a:d6:94:01:00:54:f3:f4:a5:05: a3:ff:c9:9d:d0:33:5a:d6:16:8d:6f:5e:54:b6:19: 2b:27:e2:75:e8:06:0a:72:86:23:30:53:08:ef:21: b4:c9:98:d5:93:e8:f1:d7:5f:a9:84:65:4e:40:76: 51:8a:c6:cf:54:bc:8b:3b:50:72:45:cb:39:fe:29: a2:a2:c2:1a:5c:78:42:11:f2:c8:66:8e:87:77:89: d5:0b:bf:0f:07:ad:2f:f2:dd:5f:93:d1:ee:c2:61: b4:3c:44:8a:0c:b8:7f:52:bf:b7:a5:fa:81:db:28: f3:71:51:42:ca:c1:ed:33:f1:1a:49:22:03:c3:73: 32:d4:8a:46:bb:4c:c6:e9:12:af:47:ff:e1:1c:db: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A5:B4:27:8B:10:1C:88:69:F9:ED:9A:35:DD:E2:D0:10:A9:2D:30 X509v3 Authority Key Identifier: keyid:C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bb:a2:b8:08:f4:30:8e:e9:09:3e:9b:d4:53:20:fb:e0:be: 09:3f:b0:8e:17:28:bd:94:e7:b4:88:0f:d4:57:25:c8:37:3f: 94:5c:4c:7c:8c:3e:d2:71:38:ef:13:9f:9f:2b:44:70:ac:80: 0d:f6:d6:ea:9e:82:d8:ec:b8:6c:14:cd:a6:67:8a:6c:20:f8: a7:02:e7:fc:5e:55:d5:63:fc:ca:a2:ff:cb:a4:8c:1c:b6:8d: 05:ac:a4:f7:dc:ed:ba:7f:dc:5e:dc:73:e8:11:eb:ee:a3:28: 76:55:e6:17:e0:67:88:65:5c:29:5d:04:46:7e:2e:9e:fb:b7: 71:a3:6c:ea:95:88:f7:cf:c1:e2:ac:fa:88:d0:1a:f7:98:40: 85:63:51:23:9c:90:c2:ce:0f:c4:63:8e:1a:c7:5a:06:ff:55: 8a:de:a8:42:c5:4f:54:86:4a:d1:76:cb:9c:51:1e:75:df:d7: f2:83:c5:29:04:05:9f:cc:37:ea:79:f7:f0:d4:eb:64:f4:bc: 20:7f:0a:b7:79:42:ad:ff:96:fb:50:69:0d:a5:ee:65:18:38: f3:15:74:ee:4d:1b:51:73:ee:6c:66:83:87:12:40:4e:22:e8: 53:52:d6:33:fe:c6:10:b5:bc:18:44:10:77:a6:ea:ae:b7:a5: dd:1e:66:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtJRd3vPkgjwiLxR9my/gvulf8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3 N0VFQzAxQTAeFw0yNjA1MTIyMjI1NTNaFw0yNjA1MTQwMjA5NTNaMDMxMTAvBgNV BAMTKEYwQTVCNDI3OEIxMDFDODg2OUY5RUQ5QTM1RERFMkQwMTBBOTJEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lQ2g80JB70pcnisdL5BUPXKz +dFGaUc5Wm1Ed2nXC+I7dynvK3bdbzy8NP3yU1IpWYJz8fpTHEOHxFYL1zPgLE6q e+76xNzDtHxoVAKXwJzPcytH6F76ncREvbbjrVl1mXrGyq7HNOONyHqIStaUAQBU 8/SlBaP/yZ3QM1rWFo1vXlS2GSsn4nXoBgpyhiMwUwjvIbTJmNWT6PHXX6mEZU5A dlGKxs9UvIs7UHJFyzn+KaKiwhpceEIR8shmjod3idULvw8HrS/y3V+T0e7CYbQ8 RIoMuH9Sv7el+oHbKPNxUULKwe0z8RpJIgPDczLUika7TMbpEq9H/+Ec26pXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8KW0J4sQHIhp+e2aNd3i0BCpLTAwHwYDVR0j BBgwFoAUwh+0ZaBRDb/MFFYshXOOkHfuwBowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJiY2JmZDktNTdkZi00OTBjLTg4ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVB MDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3N0VFQzAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjFGQjQ2NUEwNTEwREJGQ0MxNDU2MkM4NTczOEU5MDc3RUVD MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJiY2JmZDktNTdkZi00OTBjLTg4 ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhF OTA3N0VFQzAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB27orgI9DCO6Qk+m9RTIPvgvgk/sI4XKL2U 57SID9RXJcg3P5RcTHyMPtJxOO8Tn58rRHCsgA321uqegtjsuGwUzaZnimwg+KcC 5/xeVdVj/Mqi/8ukjBy2jQWspPfc7bp/3F7cc+gR6+6jKHZV5hfgZ4hlXCldBEZ+ Lp77t3GjbOqViPfPweKs+ojQGveYQIVjUSOckMLOD8RjjhrHWgb/VYreqELFT1SG StF2y5xRHnXf1/KDxSkEBZ/MN+p59/DU62T0vCB/Crd5Qq3/lvtQaQ2l7mUYOPMV dO5NG1Fz7mxmg4cSQE4i6FNS1jP+xhC1vBhEEHem6q63pd0eZgg= -----END CERTIFICATE-----Generated at Wed May 13 00:45:24 2026 by rpki-client