$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft File: 921F400C4C46F802E9ABB17F291DC57058C8535E.mft (raw, json) Hash identifier: fFnbeSqVn70PQczuMFSTOsKOgax4pHIy1V0jHCRrVQU= Subject key identifier: B7:F0:90:10:CC:91:0B:AA:7D:AF:1B:A1:E5:40:3E:F6:DF:18:39:AD Authority key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E Certificate issuer: /CN=921F400C4C46F802E9ABB17F291DC57058C8535E Certificate serial: 32F33E07FBF64C378F299A76383EC2E9AF28A7E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 02:29:36 +0000 Manifest this update: Tue 22 Sep 2026 02:24:36 +0000 Manifest next update: Wed 23 Sep 2026 02:58:36 +0000 Files and hashes: 1: 921F400C4C46F802E9ABB17F291DC57058C8535E.crl (hash: OcMy7+r7kANqAhE+Mdv1en3y/lNIoZ5j20U861qKN74=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: f1FXgBK/PW38aWirSx5H2UEdveWzaZdr1flS6u5hn50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f3:3e:07:fb:f6:4c:37:8f:29:9a:76:38:3e:c2:e9:af:28:a7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921F400C4C46F802E9ABB17F291DC57058C8535E Validity Not Before: Sep 22 02:24:36 2026 GMT Not After : Sep 23 02:58:36 2026 GMT Subject: CN=B7F09010CC910BAA7DAF1BA1E5403EF6DF1839AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:6a:ed:d4:1c:8d:7a:20:6f:33:29:34:c4: da:3c:5b:e2:a9:8d:cc:d7:8c:4a:ec:c0:5d:8f:dc: 59:e8:56:63:28:de:9d:42:13:c9:a0:f3:b1:04:91: c4:ac:5c:01:23:bb:03:1a:98:66:1c:66:69:9b:d0: eb:ba:6f:4b:55:19:92:5e:89:ba:1a:d8:52:60:f1: 95:b1:85:f5:0f:f7:f2:76:10:89:f0:e0:fe:a9:0e: 5e:67:bf:2d:12:c5:d8:af:8d:51:07:27:75:fa:9b: 59:dc:32:8b:a9:e9:8b:5c:92:e2:48:52:f2:54:35: 31:ca:db:52:bb:a0:c0:59:a4:fb:bc:b4:2a:ed:7d: 28:25:26:9b:fc:a0:2e:db:1f:f7:95:3e:cb:79:ff: 48:df:1d:e3:8b:16:d0:30:5c:df:5c:84:e9:c2:f9: 30:4f:18:14:d2:3b:f7:00:c3:b4:d9:a2:a2:81:61: 2f:0f:97:1f:95:7f:59:5b:f1:ba:d7:55:6d:a7:0c: 69:ec:0f:d5:c8:c7:a9:a8:4e:9d:1d:2d:89:77:48: 4c:ea:aa:3e:b7:53:07:9b:e2:fe:7e:3c:c4:54:3c: c5:bd:79:28:9f:9b:2e:00:03:c7:e4:71:8f:09:d3: 3f:13:d7:ab:55:bb:fa:45:08:da:57:97:5d:b9:bc: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F0:90:10:CC:91:0B:AA:7D:AF:1B:A1:E5:40:3E:F6:DF:18:39:AD X509v3 Authority Key Identifier: keyid:92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e5:5f:bf:9e:54:fd:c4:7a:c7:92:ce:86:5c:c4:a7:32:26: 32:47:96:25:b3:9e:8d:55:59:57:70:bb:79:86:40:04:aa:09: cd:68:e0:5f:49:fd:06:26:ae:6d:dd:7e:7d:59:47:27:27:ff: 78:c5:6d:d1:58:ec:a8:a5:54:c1:7c:a4:6b:93:a9:7e:bc:b3: f9:23:f4:ae:46:89:b1:23:2c:18:38:e0:30:a6:6c:01:f4:84: 85:e0:ca:4d:66:7f:e3:4f:31:a6:30:b7:50:69:bc:fa:6b:8c: 40:33:fa:0a:da:e5:67:e4:76:c7:3d:f4:09:b4:bb:96:b1:81: d9:ea:b0:e6:01:bc:30:27:7f:db:ea:d2:5d:53:c4:3a:fb:76: 79:f9:8b:83:67:21:04:85:24:87:8a:18:09:45:0a:b0:24:9d: 90:5d:e0:08:16:cf:d3:32:22:de:3a:f0:81:d5:72:71:53:8d: af:5a:41:53:d9:05:77:58:cb:f2:46:1d:55:7a:e3:6a:fb:86: 7c:c7:bd:fb:02:4d:d0:c7:61:ee:75:59:b2:41:53:ee:12:fe: 4f:28:ce:2c:c8:ab:a9:48:ec:b3:de:59:3d:80:91:b3:bc:2f: 5b:d8:b7:de:17:a8:d1:e0:78:ab:43:9e:f4:4b:77:38:14:7e: 5c:c2:1c:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvM+B/v2TDePKZp2OD7C6a8op+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1 OEM4NTM1RTAeFw0yNjA5MjIwMjI0MzZaFw0yNjA5MjMwMjU4MzZaMDMxMTAvBgNV BAMTKEI3RjA5MDEwQ0M5MTBCQUE3REFGMUJBMUU1NDAzRUY2REYxODM5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCblGrt1ByNeiBvMyk0xNo8W+Kp jczXjErswF2P3FnoVmMo3p1CE8mg87EEkcSsXAEjuwMamGYcZmmb0Ou6b0tVGZJe iboa2FJg8ZWxhfUP9/J2EInw4P6pDl5nvy0SxdivjVEHJ3X6m1ncMoup6YtckuJI UvJUNTHK21K7oMBZpPu8tCrtfSglJpv8oC7bH/eVPst5/0jfHeOLFtAwXN9chOnC +TBPGBTSO/cAw7TZoqKBYS8Plx+Vf1lb8brXVW2nDGnsD9XIx6moTp0dLYl3SEzq qj63Uweb4v5+PMRUPMW9eSifmy4AA8fkcY8J0z8T16tVu/pFCNpXl125vJCbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/CQEMyRC6p9rxuh5UA+9t8YOa0wHwYDVR0j BBgwFoAUkh9ADExG+ALpq7F/KR3FcFjIU14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDkxNDJjODItYjA0My00NmViLWIwYTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0 QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1OEM4NTM1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85MjFGNDAwQzRDNDZGODAyRTlBQkIxN0YyOTFEQzU3MDU4Qzg1 MzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1 NzA1OEM4NTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDlX7+eVP3EeseSzoZcxKcyJjJHliWzno1V WVdwu3mGQASqCc1o4F9J/QYmrm3dfn1ZRycn/3jFbdFY7KilVMF8pGuTqX68s/kj 9K5GibEjLBg44DCmbAH0hIXgyk1mf+NPMaYwt1BpvPprjEAz+gra5Wfkdsc99Am0 u5axgdnqsOYBvDAnf9vq0l1TxDr7dnn5i4NnIQSFJIeKGAlFCrAknZBd4AgWz9My It468IHVcnFTja9aQVPZBXdYy/JGHVV642r7hnzHvfsCTdDHYe51WbJBU+4S/k8o zizIq6lI7LPeWT2AkbO8L1vYt94XqNHgeKtDnvRLdzgUflzCHDk= -----END CERTIFICATE-----Generated at Tue Sep 22 16:37:40 2026 by rpki-client