$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft File: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft (raw, json) Hash identifier: DiBmjnbS5quOdPPNnXH1IVIbpS5sq53T3W3WgpSZLgs= Subject key identifier: 4B:61:65:00:7B:44:99:5C:A4:B4:EA:0B:7C:14:CF:A5:24:BF:0D:0E Authority key identifier: 21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 Certificate issuer: /CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Certificate serial: 6389F63781B7103E0FB45421C4301CD424B08946 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft Manifest number: BD Signing time: Sun 20 Sep 2026 14:50:20 +0000 Manifest this update: Sun 20 Sep 2026 14:45:20 +0000 Manifest next update: Mon 21 Sep 2026 17:07:20 +0000 Files and hashes: 1: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl (hash: xxt23hxRayhGyFpasnEsmeXE5TjL1rBFuRg8ddBbHfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:89:f6:37:81:b7:10:3e:0f:b4:54:21:c4:30:1c:d4:24:b0:89:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Validity Not Before: Sep 20 14:45:20 2026 GMT Not After : Sep 21 17:07:20 2026 GMT Subject: CN=4B6165007B44995CA4B4EA0B7C14CFA524BF0D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:5f:2b:a0:8c:d3:ed:de:cf:e9:9c:2b:e8: de:2b:cb:8c:97:9b:0f:51:9d:29:af:42:cc:bf:15: 8c:c2:6f:8f:1a:c3:85:1f:4a:bd:cb:c5:73:23:61: f0:d8:33:15:81:66:4e:33:b1:4a:52:74:a7:3f:33: 37:66:56:b1:46:02:be:36:e0:a8:06:5a:8e:46:9a: c8:ad:ab:d7:d2:d1:fd:8d:1d:fd:b3:17:f4:09:de: 2e:8a:5f:72:1a:68:c6:d5:65:86:ac:26:ac:95:14: 38:36:ff:bc:dd:24:6b:e1:62:6a:66:23:08:5c:e2: 3b:19:e6:66:85:23:e2:9a:06:16:ad:1b:e1:cd:40: e2:8b:69:06:02:08:37:5d:d9:2c:72:4b:d0:87:5c: b2:ff:c4:c9:70:68:ca:16:be:9c:7b:8e:13:ba:9b: 27:23:63:61:18:bb:de:51:da:bf:30:b2:e9:bd:94: ac:b0:7a:97:96:b9:8b:50:93:4a:9c:ad:90:dd:7f: e6:03:76:fe:d6:86:ab:98:53:d4:cf:f0:a8:6b:68: 30:7c:a5:be:de:62:40:03:c3:a8:4d:12:19:8d:f2: 73:c0:f8:9a:ef:ef:86:69:09:2c:73:6d:c7:09:b4: da:e6:e2:79:00:66:92:7c:d6:9a:a7:f8:ea:d4:86: 3c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:61:65:00:7B:44:99:5C:A4:B4:EA:0B:7C:14:CF:A5:24:BF:0D:0E X509v3 Authority Key Identifier: keyid:21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:46:bb:9c:85:54:3f:b8:5c:79:fb:76:69:6a:47:ae:80:52: bc:6a:2f:73:34:4d:d8:2c:4d:74:b1:3b:da:07:02:53:53:ed: 7e:69:f4:9b:f2:51:a2:90:dd:57:f9:35:ae:a9:e4:20:8c:09: 0d:95:34:cf:13:4a:b9:e4:d8:08:b2:f7:b2:fe:ec:b4:c4:61: 43:0e:2a:39:43:97:13:a1:14:ab:e8:8e:89:48:68:0d:5b:92: 23:19:43:33:b6:49:ef:c8:e7:fe:72:a3:38:70:bb:16:1d:38: 9f:64:f9:3d:ff:36:38:45:29:26:09:ef:be:a9:28:65:f5:b6: 2e:32:1c:d0:aa:9a:f4:cf:86:39:3c:8e:4d:64:23:b9:e4:98: e4:93:f9:91:f1:25:59:2b:34:1e:3c:09:38:07:9c:2d:b7:08: 53:2c:cd:c7:89:3f:c9:3f:6b:6c:3c:1b:67:72:83:be:d3:7f: 41:eb:6a:73:fb:12:e9:2d:51:23:8f:41:84:ff:9d:14:1f:52: bb:a8:22:bc:9d:95:14:8b:44:35:c8:db:54:ac:14:75:12:a6: 0e:e5:43:d4:2b:7e:3b:17:51:63:93:a4:e7:01:e0:dd:dd:81: 70:f5:b6:d3:d5:7c:9f:4c:b5:1b:06:a1:31:3e:2d:d2:76:aa: 52:ff:25:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4n2N4G3ED4PtFQhxDAc1CSwiUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIy QzJGQ0ZDODAeFw0yNjA5MjAxNDQ1MjBaFw0yNjA5MjExNzA3MjBaMDMxMTAvBgNV BAMTKDRCNjE2NTAwN0I0NDk5NUNBNEI0RUEwQjdDMTRDRkE1MjRCRjBEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMBF8roIzT7d7P6Zwr6N4ry4yX mw9RnSmvQsy/FYzCb48aw4UfSr3LxXMjYfDYMxWBZk4zsUpSdKc/MzdmVrFGAr42 4KgGWo5Gmsitq9fS0f2NHf2zF/QJ3i6KX3IaaMbVZYasJqyVFDg2/7zdJGvhYmpm Iwhc4jsZ5maFI+KaBhatG+HNQOKLaQYCCDdd2SxyS9CHXLL/xMlwaMoWvpx7jhO6 mycjY2EYu95R2r8wsum9lKywepeWuYtQk0qcrZDdf+YDdv7WhquYU9TP8KhraDB8 pb7eYkADw6hNEhmN8nPA+Jrv74ZpCSxzbccJtNrm4nkAZpJ81pqn+OrUhjw1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2FlAHtEmVyktOoLfBTPpSS/DQ4wHwYDVR0j BBgwFoAUIeVECCWxrclH6sAgrCXnsiwvz8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDAwMGIwYzItN2VmZC00Mjc4LTk4ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgy NUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIyQzJGQ0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUU1NDQwODI1QjFBREM5NDdFQUMwMjBBQzI1RTdCMjJDMkZD RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3 QjIyQzJGQ0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFGu5yFVD+4XHn7dmlqR66AUrxqL3M0Tdgs TXSxO9oHAlNT7X5p9JvyUaKQ3Vf5Na6p5CCMCQ2VNM8TSrnk2Aiy97L+7LTEYUMO KjlDlxOhFKvojolIaA1bkiMZQzO2Se/I5/5yozhwuxYdOJ9k+T3/NjhFKSYJ776p KGX1ti4yHNCqmvTPhjk8jk1kI7nkmOST+ZHxJVkrNB48CTgHnC23CFMszceJP8k/ a2w8G2dyg77Tf0HranP7EuktUSOPQYT/nRQfUruoIrydlRSLRDXI21SsFHUSpg7l Q9QrfjsXUWOTpOcB4N3dgXD1ttPVfJ9MtRsGoTE+LdJ2qlL/JVE= -----END CERTIFICATE-----Generated at Mon Sep 21 09:55:51 2026 by rpki-client