$ rpki-client -vvf rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft File: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft (raw, json) Hash identifier: /zHBmBm3QlLY7vTnAZCJEo4hruTYT4bKYPl4iDls0f0= Subject key identifier: E6:40:CD:39:7B:C9:9A:50:82:94:2C:30:8D:0C:32:CF:40:32:AE:32 Authority key identifier: 21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 Certificate issuer: /CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Certificate serial: 6C0F7FCF5069A9F46A5872B07A10FC646913E379 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 02:20:30 +0000 Manifest this update: Wed 17 Jun 2026 02:15:30 +0000 Manifest next update: Thu 18 Jun 2026 03:49:30 +0000 Files and hashes: 1: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl (hash: I7fGxCHC3HA9r4dteRxb6NhsG9VYCko8sD4g/+moiHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0f:7f:cf:50:69:a9:f4:6a:58:72:b0:7a:10:fc:64:69:13:e3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Validity Not Before: Jun 17 02:15:30 2026 GMT Not After : Jun 18 03:49:30 2026 GMT Subject: CN=E640CD397BC99A5082942C308D0C32CF4032AE32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:e3:1d:6d:83:76:8c:b0:55:30:7a:5e:68: 72:15:f2:7b:ee:07:e2:d1:d1:ae:fb:d0:80:7a:04: d8:21:a8:69:34:d4:ab:d4:bc:94:45:e3:67:11:1c: c7:59:e3:44:f9:65:62:85:f6:c5:65:2f:2b:f4:97: c9:0c:65:e3:71:23:b5:94:9a:df:89:d9:64:53:a5: 47:e0:08:e5:e9:4e:67:52:ec:18:2e:bb:66:ec:55: cd:f5:0c:03:be:7f:15:51:e8:71:a6:83:47:af:00: 05:af:79:08:fc:29:91:bd:ea:41:4c:2a:7a:88:32: 8f:15:6f:10:f3:17:d2:67:37:5f:49:97:a5:dc:50: 61:60:f0:07:44:b0:13:b0:fb:d5:4d:e3:e8:a2:d4: 35:98:57:15:71:13:5e:a8:90:73:04:95:72:83:f4: 73:6a:a1:72:9b:a7:15:fd:71:28:0f:2b:9d:c3:2b: 52:eb:a2:b3:86:f2:f2:31:57:ac:39:fb:0f:99:9b: 14:83:0b:88:ed:55:03:92:e3:c1:b8:6b:98:8b:ca: 6f:b6:ad:6c:b8:f0:02:2a:77:04:bf:20:95:93:5d: 58:72:3c:6c:ab:f7:e6:41:ba:ec:6a:0d:62:98:c3: 75:48:ac:a9:cd:54:0a:91:33:a8:fd:42:d6:5b:3e: fc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:40:CD:39:7B:C9:9A:50:82:94:2C:30:8D:0C:32:CF:40:32:AE:32 X509v3 Authority Key Identifier: keyid:21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8f:a4:d5:53:75:7f:5c:77:26:5f:4f:b9:4d:2d:ca:1c:54: d7:22:fd:48:54:f9:ce:ef:95:06:44:60:22:0f:03:05:51:28: 63:d5:bb:2d:11:2a:b5:35:97:77:ef:ac:47:fe:7f:e7:5d:23: 1a:de:93:28:da:51:fc:bb:7a:87:e7:c0:cd:5b:e9:8c:f7:31: 46:86:18:ba:96:e7:2b:22:c4:8e:ff:2a:92:ab:38:8b:c3:86: 58:91:26:f3:37:2d:92:24:ca:32:1a:fa:53:5d:38:45:26:dd: 83:52:bf:1d:25:1c:0f:ab:78:8d:2f:71:31:73:95:79:69:71: 65:5d:24:b0:15:cc:4f:4a:ce:82:25:35:1f:e3:f4:e4:3a:de: 84:3d:f0:59:50:b0:e6:81:6f:26:ef:01:cd:b5:f9:ba:1c:2c: 00:ef:66:7f:00:73:65:6e:8a:68:aa:35:b9:92:57:fa:8f:64: b4:9e:f4:34:06:5c:f8:70:fe:35:de:4c:4d:ad:74:c3:a5:65: f8:ca:c1:91:29:09:ad:cc:f2:8d:c8:47:33:31:66:ef:0f:d0: 06:d4:02:ab:9f:56:91:d0:b4:ab:5d:fe:3d:b8:64:1e:8c:16: 0c:00:50:60:18:24:e0:fe:1a:a9:bf:41:aa:e5:b5:65:95:18: 24:0a:dc:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbA9/z1BpqfRqWHKwehD8ZGkT43kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIy QzJGQ0ZDODAeFw0yNjA2MTcwMjE1MzBaFw0yNjA2MTgwMzQ5MzBaMDMxMTAvBgNV BAMTKEU2NDBDRDM5N0JDOTlBNTA4Mjk0MkMzMDhEMEMzMkNGNDAzMkFFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzF+MdbYN2jLBVMHpeaHIV8nvu B+LR0a770IB6BNghqGk01KvUvJRF42cRHMdZ40T5ZWKF9sVlLyv0l8kMZeNxI7WU mt+J2WRTpUfgCOXpTmdS7Bguu2bsVc31DAO+fxVR6HGmg0evAAWveQj8KZG96kFM KnqIMo8VbxDzF9JnN19Jl6XcUGFg8AdEsBOw+9VN4+ii1DWYVxVxE16okHMElXKD 9HNqoXKbpxX9cSgPK53DK1LrorOG8vIxV6w5+w+ZmxSDC4jtVQOS48G4a5iLym+2 rWy48AIqdwS/IJWTXVhyPGyr9+ZBuuxqDWKYw3VIrKnNVAqRM6j9QtZbPvyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5kDNOXvJmlCClCwwjQwyz0AyrjIwHwYDVR0j BBgwFoAUIeVECCWxrclH6sAgrCXnsiwvz8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDAwMGIwYzItN2VmZC00Mjc4LTk4ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgy NUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIyQzJGQ0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUU1NDQwODI1QjFBREM5NDdFQUMwMjBBQzI1RTdCMjJDMkZD RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3 QjIyQzJGQ0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWPpNVTdX9cdyZfT7lNLcocVNci/UhU+c7v lQZEYCIPAwVRKGPVuy0RKrU1l3fvrEf+f+ddIxrekyjaUfy7eofnwM1b6Yz3MUaG GLqW5ysixI7/KpKrOIvDhliRJvM3LZIkyjIa+lNdOEUm3YNSvx0lHA+reI0vcTFz lXlpcWVdJLAVzE9KzoIlNR/j9OQ63oQ98FlQsOaBbybvAc21+bocLADvZn8Ac2Vu imiqNbmSV/qPZLSe9DQGXPhw/jXeTE2tdMOlZfjKwZEpCa3M8o3IRzMxZu8P0AbU AqufVpHQtKtd/j24ZB6MFgwAUGAYJOD+Gqm/QarltWWVGCQK3DI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:25 2026 by rpki-client