$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft File: D21FEA1A58BBE03288B8857877AB42210C1B816B.mft (raw, json) Hash identifier: FPyZp146H+kLEdF2pVxfp7m/3Y0fuZxiYj/2giI82LM= Subject key identifier: A7:E7:40:01:93:84:56:40:99:E6:01:5E:77:FC:75:3C:89:85:1B:D5 Authority key identifier: D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B Certificate issuer: /CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Certificate serial: 7B902F98AC455DCBCE9DBAF58E45EC2A39D20FFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 23:39:49 +0000 Manifest this update: Fri 25 Sep 2026 23:34:49 +0000 Manifest next update: Sun 27 Sep 2026 02:11:49 +0000 Files and hashes: 1: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: n/NFSto6DR1M2MbEoIzv13Er2v00d7K3BFa5q9qEbBw=) 2: D21FEA1A58BBE03288B8857877AB42210C1B816B.crl (hash: 6MQ4D3vtw5DhuGWHGaqZ2RwotmDlEsLaxggApJsHObs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:90:2f:98:ac:45:5d:cb:ce:9d:ba:f5:8e:45:ec:2a:39:d2:0f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Validity Not Before: Sep 25 23:34:49 2026 GMT Not After : Sep 27 02:11:49 2026 GMT Subject: CN=A7E740019384564099E6015E77FC753C89851BD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:9c:56:12:cb:a7:7c:1f:fc:c1:72:e7:40: 06:e3:3d:b5:9e:4c:45:e6:af:44:4d:70:78:d0:2f: 87:2c:84:46:71:56:b9:89:17:50:47:11:0a:1a:7c: 55:ac:72:a4:6f:22:db:24:0e:1e:fa:a0:ce:8b:10: ea:70:ec:bd:61:96:fe:59:09:f9:e8:66:fa:1d:da: 20:8f:8f:ee:50:78:03:db:24:d4:7f:6f:31:76:52: ee:9d:40:3a:38:69:6e:c2:04:e3:1e:38:7b:71:6f: d7:3e:9d:a8:d8:a0:11:09:48:75:0c:3a:77:11:90: ab:0d:e8:f6:81:06:ff:20:f2:e7:7e:cb:da:7f:bd: d7:4a:ff:70:10:f9:f1:db:c0:16:d8:2b:5c:68:79: c7:01:ed:09:be:18:d4:02:9c:35:cc:03:19:cf:7c: ec:11:24:e6:ce:6b:59:db:63:e5:a4:97:bd:b3:b4: 83:44:03:e4:49:23:2e:49:32:59:30:81:bc:49:81: 3c:6e:64:df:27:82:26:76:80:9f:a3:44:5c:15:91: 23:b4:b1:5b:63:d9:9a:0e:c4:91:14:02:dd:bd:05: a4:24:dc:4a:ee:4e:2d:95:f9:d6:5c:cf:0f:49:b8: 74:84:91:f0:b5:9b:8a:dd:05:cf:4a:5d:62:8c:65: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E7:40:01:93:84:56:40:99:E6:01:5E:77:FC:75:3C:89:85:1B:D5 X509v3 Authority Key Identifier: keyid:D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f3:87:52:d1:51:b0:7c:89:07:5e:60:5b:3d:4a:33:d9:56: 84:ab:ee:d0:ae:c6:de:57:53:bb:ce:e4:ea:ea:fc:38:25:ca: 22:1a:25:d1:10:ad:96:e2:86:24:d4:13:cb:c6:4a:92:af:a7: 80:4d:cd:23:b3:f5:6b:9f:5d:7c:c9:f1:80:83:b8:27:a5:00: 46:55:71:74:12:5f:13:75:ea:09:cd:0c:b2:b7:dc:2a:1e:f9: 18:86:49:41:d2:42:c4:b2:bf:c6:a1:27:f0:7e:35:1d:16:e6: bc:07:9d:61:30:df:98:d4:f7:40:3b:72:7b:d4:51:3b:cf:7b: 4b:c0:05:e8:9d:03:9e:59:fd:54:f7:4b:e5:1c:95:85:dc:5b: d0:ff:9d:e3:d5:63:12:5c:a1:88:0d:2c:d2:36:00:c6:f4:46: 85:dc:55:89:87:e3:e9:a7:5f:07:5b:ca:ad:b4:2e:d0:1c:1d: 5f:83:c2:c6:c7:d8:fb:de:9b:58:a1:75:4f:7a:40:6f:ba:95: 71:34:d2:d0:bc:59:ce:64:7e:3a:e2:4f:31:5c:4e:9c:63:de: e1:f6:47:66:c6:9a:83:81:52:2c:f2:bc:ae:a5:a8:f9:ac:37: 95:43:3e:a8:d8:57:f2:a1:7b:0c:b3:90:36:f2:76:c8:0d:3f: 46:e3:c7:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5AvmKxFXcvOnbr1jkXsKjnSD/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEw QzFCODE2QjAeFw0yNjA5MjUyMzM0NDlaFw0yNjA5MjcwMjExNDlaMDMxMTAvBgNV BAMTKEE3RTc0MDAxOTM4NDU2NDA5OUU2MDE1RTc3RkM3NTNDODk4NTFCRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxE5xWEsunfB/8wXLnQAbjPbWe TEXmr0RNcHjQL4cshEZxVrmJF1BHEQoafFWscqRvItskDh76oM6LEOpw7L1hlv5Z CfnoZvod2iCPj+5QeAPbJNR/bzF2Uu6dQDo4aW7CBOMeOHtxb9c+najYoBEJSHUM OncRkKsN6PaBBv8g8ud+y9p/vddK/3AQ+fHbwBbYK1xoeccB7Qm+GNQCnDXMAxnP fOwRJObOa1nbY+Wkl72ztINEA+RJIy5JMlkwgbxJgTxuZN8ngiZ2gJ+jRFwVkSO0 sVtj2ZoOxJEUAt29BaQk3EruTi2V+dZczw9JuHSEkfC1m4rdBc9KXWKMZdr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp+dAAZOEVkCZ5gFed/x1PImFG9UwHwYDVR0j BBgwFoAU0h/qGli74DKIuIV4d6tCIQwbgWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkYWUwYTUtYjRmNi00ZTA4LThiZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1 OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEwQzFCODE2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjFGRUExQTU4QkJFMDMyODhCODg1Nzg3N0FCNDIyMTBDMUI4 MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQy MjEwQzFCODE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfzh1LRUbB8iQdeYFs9SjPZVoSr7tCuxt5X U7vO5Orq/DglyiIaJdEQrZbihiTUE8vGSpKvp4BNzSOz9WufXXzJ8YCDuCelAEZV cXQSXxN16gnNDLK33Coe+RiGSUHSQsSyv8ahJ/B+NR0W5rwHnWEw35jU90A7cnvU UTvPe0vABeidA55Z/VT3S+UclYXcW9D/nePVYxJcoYgNLNI2AMb0RoXcVYmH4+mn Xwdbyq20LtAcHV+DwsbH2Pvem1ihdU96QG+6lXE00tC8Wc5kfjriTzFcTpxj3uH2 R2bGmoOBUizyvK6lqPmsN5VDPqjYV/KhewyzkDbydsgNP0bjx5U= -----END CERTIFICATE-----Generated at Sat Sep 26 01:45:19 2026 by rpki-client