
$ rpki-client -vvf rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft
File: 921F400C4C46F802E9ABB17F291DC57058C8535E.mft (raw, json)
Hash identifier: DwdBAxhAkA5V3LyjBI8tWkfp/ZuuF0XRzIUhkK1P/N0=
Subject key identifier: F2:C6:88:03:C2:4B:26:EE:41:4C:39:AE:5A:45:16:7E:BC:5B:07:8B
Authority key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E
Certificate issuer: /CN=921F400C4C46F802E9ABB17F291DC57058C8535E
Certificate serial: 4676B2F61B6FA4080614B8591E3004BCF4F801E8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:40:29 +0000
Manifest this update: Tue 16 Jun 2026 21:35:29 +0000
Manifest next update: Wed 17 Jun 2026 23:43:29 +0000
Files and hashes: 1: 921F400C4C46F802E9ABB17F291DC57058C8535E.crl (hash: 3OSEN0M1uVBchtVygKJTDZaD/nBaPLBi6lLQ7YX+W6I=)
2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: f1FXgBK/PW38aWirSx5H2UEdveWzaZdr1flS6u5hn50=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl
rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:76:b2:f6:1b:6f:a4:08:06:14:b8:59:1e:30:04:bc:f4:f8:01:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921F400C4C46F802E9ABB17F291DC57058C8535E
Validity
Not Before: Jun 16 21:35:29 2026 GMT
Not After : Jun 17 23:43:29 2026 GMT
Subject: CN=F2C68803C24B26EE414C39AE5A45167EBC5B078B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:f8:f9:fb:e1:53:5c:dc:08:4f:61:de:27:
a1:ab:b6:eb:9e:e7:fa:2a:d3:b7:b2:6c:f0:10:c6:
06:02:ea:54:d2:85:ea:20:d6:4c:f8:ec:34:e2:f2:
de:1b:6c:59:dd:d7:9b:61:a1:b8:24:f3:32:c6:44:
ad:c5:9b:d0:1c:23:d8:2a:0f:4f:e7:0e:8d:27:ff:
b6:d8:49:cd:ee:80:75:e5:76:d9:57:3a:0f:b2:4e:
99:76:2e:d3:57:96:fd:41:55:b4:6f:7c:84:30:72:
34:4f:d2:36:9b:c7:5a:2d:54:34:ff:09:8b:84:48:
26:a3:ec:79:8e:4a:96:25:64:6f:a6:17:a0:57:8c:
0f:37:ac:0e:4e:d4:73:1e:f1:67:d9:45:fb:15:02:
81:33:e3:00:ca:8b:30:89:a8:3a:03:ca:b2:81:4f:
f1:ca:64:fe:4b:10:e1:48:13:02:e1:e8:25:9f:97:
ae:9d:f9:f9:1c:f2:86:70:b3:bd:57:ad:ac:f8:b9:
c0:e0:55:f3:e2:42:f7:57:59:7b:09:d2:7b:ee:59:
08:c6:58:1b:6d:ec:02:5f:9f:8a:0b:04:cd:eb:b7:
00:8c:9b:2b:81:60:c7:4b:d2:22:5e:7a:51:60:13:
9f:e7:73:e5:ad:6c:a1:cd:80:e6:f9:e0:fc:46:3f:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C6:88:03:C2:4B:26:EE:41:4C:39:AE:5A:45:16:7E:BC:5B:07:8B
X509v3 Authority Key Identifier:
keyid:92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:52:25:2e:dd:1e:54:3f:6c:46:54:39:d7:ee:f3:49:62:dc:
75:72:0c:68:34:68:f9:65:4d:e6:87:15:f5:c2:a3:ad:a1:d1:
0d:f5:8f:2b:8a:b3:75:11:22:05:76:94:72:bb:6b:bb:9c:b4:
17:e3:ae:f9:c2:e3:9e:5c:d8:b1:82:2f:a9:35:6c:47:85:db:
be:cb:ba:a3:0a:24:cb:a7:dd:b4:c5:84:a0:bb:b9:b9:4e:40:
dc:bb:4d:0e:46:f7:88:d3:e5:e9:93:df:7f:32:37:e7:77:95:
f9:2b:d5:97:a4:d3:28:cf:91:a7:49:1d:7b:cd:c1:82:f7:c7:
95:63:ae:86:e3:c4:28:05:3e:f3:ca:ee:23:a0:1b:ac:bb:82:
db:77:4f:b7:03:dd:85:37:4a:d4:dd:4a:dc:1c:b1:94:ec:50:
53:52:59:a6:7c:16:67:dd:23:f1:1d:53:8c:f5:d2:95:4e:c4:
b3:1d:6e:c2:55:39:07:8a:8b:fd:62:b7:86:93:f5:89:55:4a:
6e:7a:7b:0f:c6:1a:a5:dd:2e:4e:bd:21:76:6f:b9:91:c2:4f:
5e:83:a3:5b:f3:6d:a4:3e:33:a6:14:80:3e:20:bd:bd:c3:c7:
53:d5:5e:0a:35:b2:8e:be:32:10:8c:f1:69:c4:c3:1d:f8:ea:
cb:3d:79:2e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURnay9htvpAgGFLhZHjAEvPT4AegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1
OEM4NTM1RTAeFw0yNjA2MTYyMTM1MjlaFw0yNjA2MTcyMzQzMjlaMDMxMTAvBgNV
BAMTKEYyQzY4ODAzQzI0QjI2RUU0MTRDMzlBRTVBNDUxNjdFQkM1QjA3OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjEvj5++FTXNwIT2HeJ6Grtuue
5/oq07eybPAQxgYC6lTSheog1kz47DTi8t4bbFnd15thobgk8zLGRK3Fm9AcI9gq
D0/nDo0n/7bYSc3ugHXldtlXOg+yTpl2LtNXlv1BVbRvfIQwcjRP0jabx1otVDT/
CYuESCaj7HmOSpYlZG+mF6BXjA83rA5O1HMe8WfZRfsVAoEz4wDKizCJqDoDyrKB
T/HKZP5LEOFIEwLh6CWfl66d+fkc8oZws71Xraz4ucDgVfPiQvdXWXsJ0nvuWQjG
WBtt7AJfn4oLBM3rtwCMmyuBYMdL0iJeelFgE5/nc+WtbKHNgOb54PxGP4AzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8saIA8JLJu5BTDmuWkUWfrxbB4swHwYDVR0j
BBgwFoAUkh9ADExG+ALpq7F/KR3FcFjIU14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDkxNDJjODItYjA0My00NmViLWIwYTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0
QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1OEM4NTM1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC85MjFGNDAwQzRDNDZGODAyRTlBQkIxN0YyOTFEQzU3MDU4Qzg1
MzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw
YTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1
NzA1OEM4NTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGBSJS7dHlQ/bEZUOdfu80li3HVyDGg0aPll
TeaHFfXCo62h0Q31jyuKs3URIgV2lHK7a7uctBfjrvnC455c2LGCL6k1bEeF277L
uqMKJMun3bTFhKC7ublOQNy7TQ5G94jT5emT338yN+d3lfkr1Zek0yjPkadJHXvN
wYL3x5VjrobjxCgFPvPK7iOgG6y7gtt3T7cD3YU3StTdStwcsZTsUFNSWaZ8Fmfd
I/EdU4z10pVOxLMdbsJVOQeKi/1it4aT9YlVSm56ew/GGqXdLk69IXZvuZHCT16D
o1vzbaQ+M6YUgD4gvb3Dx1PVXgo1so6+MhCM8WnEwx346ss9eS4=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:53:07 2026 by rpki-client