$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: ca7pMayoSstR7I0fGWV/wtNwaK/VjYwXso1FrQbKtXU= Subject key identifier: 26:92:E3:38:6A:FC:F9:29:80:F0:77:E8:FD:4B:0F:E2:48:E1:A6:95 Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 659005F52C85D6CDFBBA2AEE7B0AFF52822DEA97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: BF Signing time: Mon 21 Sep 2026 10:54:55 +0000 Manifest this update: Mon 21 Sep 2026 10:49:55 +0000 Manifest next update: Tue 22 Sep 2026 11:57:55 +0000 Files and hashes: 1: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: oMRl2nJs28kVqZAxicosFSPZVPbQalbXyAtDcQFAFnU=) 2: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) 3: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) 4: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:90:05:f5:2c:85:d6:cd:fb:ba:2a:ee:7b:0a:ff:52:82:2d:ea:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Sep 21 10:49:55 2026 GMT Not After : Sep 22 11:57:55 2026 GMT Subject: CN=2692E3386AFCF92980F077E8FD4B0FE248E1A695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:d0:11:0b:e7:da:c3:24:88:fe:00:e3:49: 50:4b:82:b3:95:2b:32:87:12:b6:7e:74:87:09:4a: 2d:32:be:52:54:94:19:26:34:af:fc:55:80:fc:eb: 98:a8:9b:97:e0:1f:c2:03:ce:a1:e8:30:24:f1:2c: 7e:6d:13:e2:35:c4:82:38:75:d6:d5:65:67:21:59: f4:1f:33:26:69:9f:72:db:5c:1e:2e:45:2f:68:38: e3:7d:19:22:75:c8:ac:ce:57:9c:7f:58:ab:cb:78: 93:15:80:e6:d1:bc:8e:00:4e:8b:0a:6d:13:33:da: da:26:3f:40:40:f5:86:86:bd:45:96:5a:07:c5:ee: 36:c6:68:19:82:36:81:b8:f6:e7:7e:70:82:8d:3c: d9:a2:03:00:ef:28:d0:6b:cd:fc:bf:c6:95:f6:b9: 9c:6f:64:50:d4:73:08:be:01:a7:2a:47:64:04:1d: c1:56:2e:39:bc:56:dd:4c:e2:4f:66:c5:bd:24:f3: c5:92:d1:ae:34:4d:ed:5b:6b:a2:09:28:ab:54:f6: c1:6d:e7:2f:ca:4d:f4:6a:61:87:20:b1:71:80:83: 45:0e:05:bd:7c:7c:cb:4b:9c:5e:ab:fd:11:a6:ca: df:c7:87:f1:3f:26:6b:45:d7:b7:18:75:24:39:00: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:92:E3:38:6A:FC:F9:29:80:F0:77:E8:FD:4B:0F:E2:48:E1:A6:95 X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7d:d8:9b:c3:f8:a0:0d:13:12:b3:80:fb:80:8a:55:4c:04: 86:57:a4:ee:75:41:da:9a:ab:f8:47:b1:3c:24:ee:8d:8e:be: 8f:4d:5d:a1:10:09:74:14:88:d6:a3:42:71:c0:2a:2c:71:85: 68:80:03:36:df:26:5b:c4:4e:25:16:8a:c3:89:22:2c:e3:2b: e8:86:0f:48:44:3c:4d:b2:d5:e7:a7:f6:b3:1b:3b:37:3c:0f: b3:55:31:79:4e:ea:0f:67:23:2a:cf:c6:ed:06:b5:72:0b:ac: ab:58:2f:31:58:7a:c2:a0:7f:14:60:26:41:1d:bb:74:b3:b2: aa:c9:95:43:02:9d:74:64:0b:21:5b:e8:b9:5f:5f:54:29:5d: fa:ce:a0:10:51:55:8c:57:6a:77:b4:54:87:71:b4:07:83:53: 22:ae:3b:c3:37:e1:b1:c3:4b:52:15:8d:b2:6a:24:3e:ec:fe: 00:e4:12:78:52:8b:a1:63:65:11:bf:69:07:51:8e:cb:88:30: 61:1b:ae:5c:1d:fb:48:19:93:e3:c1:09:d5:94:fa:93:d7:32: b3:f1:b4:b7:09:ba:91:7a:ca:f8:68:11:87:5d:6f:4d:67:73: 73:b7:68:8b:0f:13:95:26:6b:33:72:14:41:a8:c4:a7:70:0c: ff:63:19:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZAF9SyF1s37uiruewr/UoIt6pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjA5MjExMDQ5NTVaFw0yNjA5MjIxMTU3NTVaMDMxMTAvBgNV BAMTKDI2OTJFMzM4NkFGQ0Y5Mjk4MEYwNzdFOEZENEIwRkUyNDhFMUE2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrzdARC+fawySI/gDjSVBLgrOV KzKHErZ+dIcJSi0yvlJUlBkmNK/8VYD865iom5fgH8IDzqHoMCTxLH5tE+I1xII4 ddbVZWchWfQfMyZpn3LbXB4uRS9oOON9GSJ1yKzOV5x/WKvLeJMVgObRvI4ATosK bRMz2tomP0BA9YaGvUWWWgfF7jbGaBmCNoG49ud+cIKNPNmiAwDvKNBrzfy/xpX2 uZxvZFDUcwi+AacqR2QEHcFWLjm8Vt1M4k9mxb0k88WS0a40Te1ba6IJKKtU9sFt 5y/KTfRqYYcgsXGAg0UOBb18fMtLnF6r/RGmyt/Hh/E/JmtF17cYdSQ5AKE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJpLjOGr8+SmA8Hfo/UsP4kjhppUwHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp92JvD+KANExKzgPuAilVMBIZXpO51Qdqa q/hHsTwk7o2Ovo9NXaEQCXQUiNajQnHAKixxhWiAAzbfJlvETiUWisOJIizjK+iG D0hEPE2y1een9rMbOzc8D7NVMXlO6g9nIyrPxu0GtXILrKtYLzFYesKgfxRgJkEd u3SzsqrJlUMCnXRkCyFb6LlfX1QpXfrOoBBRVYxXane0VIdxtAeDUyKuO8M34bHD S1IVjbJqJD7s/gDkEnhSi6FjZRG/aQdRjsuIMGEbrlwd+0gZk+PBCdWU+pPXMrPx tLcJupF6yvhoEYddb01nc3O3aIsPE5UmazNyFEGoxKdwDP9jGb4= -----END CERTIFICATE-----Generated at Mon Sep 21 20:38:51 2026 by rpki-client