$ rpki-client -vvvf rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft File: 01D21CF844B21F1A9486A445F946566129AD4A58.mft (raw, json) Hash identifier: 5/zzvtEpM8Ic/Qc0sID49K/Vgt4IYE9Uoyp1uawRepc= Subject key identifier: 26:4E:C3:3A:E7:56:9E:4D:02:3D:E5:63:70:82:F1:7A:90:6E:A5:10 Authority key identifier: 01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 Certificate issuer: /CN=01D21CF844B21F1A9486A445F946566129AD4A58 Certificate serial: 1AF83988D6AF60A2F409AF7467BD31BA9D2258FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft Manifest number: BF Signing time: Tue 22 Sep 2026 00:32:06 +0000 Manifest this update: Tue 22 Sep 2026 00:27:06 +0000 Manifest next update: Wed 23 Sep 2026 03:57:06 +0000 Files and hashes: 1: 01D21CF844B21F1A9486A445F946566129AD4A58.crl (hash: R1rzn4WYAqQ6LHfu6AB71YO4AngO9A2yksxybuOdLX0=) 2: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: ufsOCUOJb9bQMTjSTFriIXnfAAEVhWffzH9OME9bvBM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f8:39:88:d6:af:60:a2:f4:09:af:74:67:bd:31:ba:9d:22:58:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01D21CF844B21F1A9486A445F946566129AD4A58 Validity Not Before: Sep 22 00:27:06 2026 GMT Not After : Sep 23 03:57:06 2026 GMT Subject: CN=264EC33AE7569E4D023DE5637082F17A906EA510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:c8:e7:69:85:8b:d1:5c:5d:16:9d:46:c9: 95:8d:8f:98:77:1b:cc:38:55:b7:30:3e:8d:c8:ba: 81:f4:77:2c:3a:b0:46:1b:80:4e:bd:16:94:7c:7a: 29:3f:a3:83:00:c9:d2:5a:79:fb:fa:c8:17:5d:2a: 2f:2d:4f:b8:17:9c:74:27:32:df:fd:dd:0e:75:4c: 89:28:23:47:4b:31:5a:ee:ae:5a:1c:e0:9d:c0:cb: 9f:95:37:30:82:53:77:34:11:0f:5f:0c:a6:35:8e: 7d:88:4a:80:13:ee:a4:ec:b9:1b:7c:6a:b4:58:38: e7:8d:ff:dd:ad:4a:3c:72:69:7d:f5:99:7c:6f:57: 52:98:7c:be:40:15:1c:88:46:4a:20:ca:9d:20:96: 3f:0a:2a:e0:f9:f1:6e:48:7b:bf:f8:e5:eb:6f:41: 35:de:50:74:ea:b0:bb:e5:7b:a8:19:27:85:ef:a4: 96:e3:d0:71:0a:73:38:5c:67:99:8d:b4:e6:4e:a2: 03:a3:e0:f8:6e:34:81:a6:4c:1b:27:8f:d8:7a:24: 7e:9e:9f:a3:c0:1d:29:4b:f8:28:1d:f4:07:4d:0b: bc:24:3f:d7:c1:0c:eb:b4:8e:8d:1d:f7:a1:21:da: 39:eb:02:ca:d6:11:a8:1a:88:86:54:58:fc:dd:97: ca:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4E:C3:3A:E7:56:9E:4D:02:3D:E5:63:70:82:F1:7A:90:6E:A5:10 X509v3 Authority Key Identifier: keyid:01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0e:7b:db:ba:89:50:f9:d0:7f:f6:50:4e:67:e8:dc:e6:6b: e3:36:59:f4:47:5d:e0:17:ce:4a:e7:ae:a6:80:f9:3c:39:c8: 3f:a0:8f:5a:70:da:fb:c2:95:4b:d2:f1:4f:1a:1d:87:da:a1: aa:99:f1:70:ad:68:56:6d:84:98:e0:3c:0c:0c:d7:3a:b3:0c: 21:a6:7d:50:9e:c8:82:b1:aa:c9:a6:61:b1:6b:b4:48:05:d6: 36:bb:06:04:31:83:75:38:bf:8a:64:7e:d7:45:2d:bf:6d:63: 33:7f:29:45:46:a7:f5:98:bd:1a:21:49:b3:ea:b5:7b:9b:29: 7e:e1:b0:33:d8:ba:74:10:82:a3:c9:49:fa:a1:06:95:ee:0d: 83:88:2f:01:6f:27:04:f8:b3:a5:ef:b9:3c:e0:b5:8e:3e:4e: 10:ab:9c:b5:71:54:3a:ec:f4:15:7c:13:6f:af:ab:9e:5e:5f: 4e:6d:15:fb:99:65:92:95:9b:37:5e:26:70:8a:3a:10:ed:74: 83:3e:47:c4:6b:3c:98:39:3a:19:21:8d:b4:3f:61:0a:38:b4: 96:a7:80:bf:ec:8a:f4:0d:ff:cc:bd:41:b8:56:1e:c5:dd:93: 83:26:70:29:69:9b:b6:88:0a:31:e3:e8:60:f6:0c:0c:3b:d8: 73:9b:f6:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvg5iNavYKL0Ca90Z70xup0iWP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFEMjFDRjg0NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2NjEy OUFENEE1ODAeFw0yNjA5MjIwMDI3MDZaFw0yNjA5MjMwMzU3MDZaMDMxMTAvBgNV BAMTKDI2NEVDMzNBRTc1NjlFNEQwMjNERTU2MzcwODJGMTdBOTA2RUE1MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVsjnaYWL0VxdFp1GyZWNj5h3 G8w4VbcwPo3IuoH0dyw6sEYbgE69FpR8eik/o4MAydJaefv6yBddKi8tT7gXnHQn Mt/93Q51TIkoI0dLMVrurloc4J3Ay5+VNzCCU3c0EQ9fDKY1jn2ISoAT7qTsuRt8 arRYOOeN/92tSjxyaX31mXxvV1KYfL5AFRyIRkogyp0glj8KKuD58W5Ie7/45etv QTXeUHTqsLvle6gZJ4XvpJbj0HEKczhcZ5mNtOZOogOj4PhuNIGmTBsnj9h6JH6e n6PAHSlL+Cgd9AdNC7wkP9fBDOu0jo0d96Eh2jnrAsrWEagaiIZUWPzdl8oJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJk7DOudWnk0CPeVjcILxepBupRAwHwYDVR0j BBgwFoAUAdIc+ESyHxqUhqRF+UZWYSmtSlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTM0ZDgyNzctMjkxMC00MDc1LWI5MzctNjZmOTQzNTE4ZTI5LzAvMDFEMjFDRjg0 NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2NjEyOUFENEE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUQyMUNGODQ0QjIxRjFBOTQ4NkE0NDVGOTQ2NTY2MTI5QUQ0 QTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvMDFEMjFDRjg0NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2 NjEyOUFENEE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIOe9u6iVD50H/2UE5n6Nzma+M2WfRHXeAX zkrnrqaA+Tw5yD+gj1pw2vvClUvS8U8aHYfaoaqZ8XCtaFZthJjgPAwM1zqzDCGm fVCeyIKxqsmmYbFrtEgF1ja7BgQxg3U4v4pkftdFLb9tYzN/KUVGp/WYvRohSbPq tXubKX7hsDPYunQQgqPJSfqhBpXuDYOILwFvJwT4s6XvuTzgtY4+ThCrnLVxVDrs 9BV8E2+vq55eX05tFfuZZZKVmzdeJnCKOhDtdIM+R8RrPJg5OhkhjbQ/YQo4tJan gL/sivQN/8y9QbhWHsXdk4MmcClpm7aICjHj6GD2DAw72HOb9jk= -----END CERTIFICATE-----Generated at Tue Sep 22 21:25:42 2026 by rpki-client