$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft File: D21FEA1A58BBE03288B8857877AB42210C1B816B.mft (raw, json) Hash identifier: 7lINPUoEwaVXadzC36ruUXawt+VQuW1u93wvYZpwVRU= Subject key identifier: 19:0C:A2:60:F4:7A:81:F9:8B:1A:A0:DC:4E:FB:C8:2D:8C:12:C3:84 Authority key identifier: D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B Certificate issuer: /CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Certificate serial: 143F3E94E517E4D949826CEE557A22C20B8DDE17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:34:17 +0000 Manifest this update: Tue 12 May 2026 21:29:17 +0000 Manifest next update: Thu 14 May 2026 00:38:17 +0000 Files and hashes: 1: D21FEA1A58BBE03288B8857877AB42210C1B816B.crl (hash: hvbMJ9SVFsq2edpmovtYzkAWqiOpjqnpYmQEMO57hS8=) 2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: n/NFSto6DR1M2MbEoIzv13Er2v00d7K3BFa5q9qEbBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3f:3e:94:e5:17:e4:d9:49:82:6c:ee:55:7a:22:c2:0b:8d:de:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Validity Not Before: May 12 21:29:17 2026 GMT Not After : May 14 00:38:17 2026 GMT Subject: CN=190CA260F47A81F98B1AA0DC4EFBC82D8C12C384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:1b:17:dd:eb:fc:09:ab:00:21:bd:d1:45: 54:b1:25:d5:ac:41:dc:4c:f3:01:b1:c6:ba:06:50: 7b:6b:47:d1:aa:e8:ef:a8:02:97:c9:85:68:3e:6f: 83:c4:80:a8:7e:ea:1f:02:bc:a6:99:18:c8:35:6b: e9:91:ed:c3:89:4a:7d:6c:8d:14:36:71:3c:8c:a3: 6e:02:d3:be:f6:0c:70:3d:58:e2:49:f4:dd:6c:96: 70:a7:ad:95:fc:f6:3d:81:0b:55:a2:e7:92:48:e9: f5:49:09:2c:7e:af:f9:2e:2e:68:c9:79:10:8e:f8: 83:40:f2:eb:55:7e:0b:69:d5:dd:fe:ef:7b:a4:80: 39:0f:82:e3:42:d6:7e:4b:7c:a1:e6:bf:53:17:07: d0:31:5f:25:4b:4f:0f:81:6f:f7:59:7d:75:e8:c7: a5:3d:f2:d5:2e:01:d9:11:64:7d:56:0f:28:88:a0: fe:08:9d:81:d3:d6:13:4f:4d:1a:b4:a9:40:6d:8f: df:4d:f6:2d:bf:17:85:5a:d4:cc:56:6f:8d:a4:90: dc:16:4c:df:fd:67:92:3d:82:4f:4d:a7:18:53:23: 14:01:63:36:a3:67:6e:99:8e:dc:14:41:ba:da:e9: 2f:08:72:8e:23:7c:3d:25:58:f1:66:ad:4b:c1:6c: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0C:A2:60:F4:7A:81:F9:8B:1A:A0:DC:4E:FB:C8:2D:8C:12:C3:84 X509v3 Authority Key Identifier: keyid:D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:76:65:73:31:65:9d:6a:8e:cf:75:40:5d:a1:0d:ba:03:4a: 69:91:a2:64:51:e5:88:c8:37:82:29:2d:40:03:36:4a:5d:c0: 38:84:f1:1f:03:af:6c:e2:10:02:d2:95:bc:d1:19:e7:42:b1: 68:71:5e:06:91:a5:1b:cc:84:d4:ee:01:97:8e:73:69:e9:9f: c5:39:5b:23:33:f0:bc:94:d4:64:ca:7b:63:fe:f1:77:67:0d: f4:d9:d4:b1:40:b8:f4:0e:6c:1c:38:03:eb:f2:d9:8b:28:48: 44:bc:52:4c:d6:19:90:7a:d9:14:fd:5b:e8:65:07:86:ef:04: 58:83:7d:db:3d:20:08:c4:dc:79:b0:8e:a8:47:e2:a2:f7:d8: 02:57:67:82:70:b2:54:00:d6:2a:fc:50:19:5d:f5:fc:da:12: 70:1c:17:ee:09:1a:62:66:69:97:a9:23:6c:6f:8e:cc:77:dc: c0:72:c3:ee:a0:59:4d:fd:73:50:91:29:56:e5:51:2d:6d:92: c7:46:8d:fd:14:ca:3f:ed:9b:f4:1c:c2:f1:db:3d:99:97:47: 12:3d:19:5a:c3:25:74:2a:b1:60:d3:55:e1:2f:80:c8:3f:53: 7b:cb:3a:8e:35:2c:5c:36:3e:d4:e4:ba:28:de:83:6c:b7:ed: 1e:99:13:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFD8+lOUX5NlJgmzuVXoiwguN3hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEw QzFCODE2QjAeFw0yNjA1MTIyMTI5MTdaFw0yNjA1MTQwMDM4MTdaMDMxMTAvBgNV BAMTKDE5MENBMjYwRjQ3QTgxRjk4QjFBQTBEQzRFRkJDODJEOEMxMkMzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTxsX3ev8CasAIb3RRVSxJdWs QdxM8wGxxroGUHtrR9Gq6O+oApfJhWg+b4PEgKh+6h8CvKaZGMg1a+mR7cOJSn1s jRQ2cTyMo24C0772DHA9WOJJ9N1slnCnrZX89j2BC1Wi55JI6fVJCSx+r/kuLmjJ eRCO+INA8utVfgtp1d3+73ukgDkPguNC1n5LfKHmv1MXB9AxXyVLTw+Bb/dZfXXo x6U98tUuAdkRZH1WDyiIoP4InYHT1hNPTRq0qUBtj99N9i2/F4Va1MxWb42kkNwW TN/9Z5I9gk9NpxhTIxQBYzajZ26ZjtwUQbra6S8Ico4jfD0lWPFmrUvBbAE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGQyiYPR6gfmLGqDcTvvILYwSw4QwHwYDVR0j BBgwFoAU0h/qGli74DKIuIV4d6tCIQwbgWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkYWUwYTUtYjRmNi00ZTA4LThiZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1 OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEwQzFCODE2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjFGRUExQTU4QkJFMDMyODhCODg1Nzg3N0FCNDIyMTBDMUI4 MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQy MjEwQzFCODE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOl2ZXMxZZ1qjs91QF2hDboDSmmRomRR5YjI N4IpLUADNkpdwDiE8R8Dr2ziEALSlbzRGedCsWhxXgaRpRvMhNTuAZeOc2npn8U5 WyMz8LyU1GTKe2P+8XdnDfTZ1LFAuPQObBw4A+vy2YsoSES8UkzWGZB62RT9W+hl B4bvBFiDfds9IAjE3HmwjqhH4qL32AJXZ4JwslQA1ir8UBld9fzaEnAcF+4JGmJm aZepI2xvjsx33MByw+6gWU39c1CRKVblUS1tksdGjf0Uyj/tm/QcwvHbPZmXRxI9 GVrDJXQqsWDTVeEvgMg/U3vLOo41LFw2PtTkuijeg2y37R6ZE+I= -----END CERTIFICATE-----Generated at Wed May 13 01:10:38 2026 by rpki-client