$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: EJlQTcqZtYav80bI/rxsQPhqksex9lGWYWqEm06be9Q= Subject key identifier: 10:1D:A1:3E:22:08:1D:A1:3F:E3:1B:96:E9:53:C4:70:C9:72:B8:28 Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 300A15B9D944B0ADEC9F77D2CC779B47EA60D793 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 14:42:24 +0000 Manifest this update: Sun 15 Nov 2026 14:37:24 +0000 Manifest next update: Mon 16 Nov 2026 16:03:24 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) 2: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: bxNvfudDmmswVN/d3bT6McwNp6TI2BLPnGWY29ekd5o=) 3: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) 4: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:0a:15:b9:d9:44:b0:ad:ec:9f:77:d2:cc:77:9b:47:ea:60:d7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Nov 15 14:37:24 2026 GMT Not After : Nov 16 16:03:24 2026 GMT Subject: CN=101DA13E22081DA13FE31B96E953C470C972B828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:96:41:0d:30:ba:f9:3c:0f:03:1c:16:91: 3b:c3:cc:8f:2d:cc:88:90:90:72:19:ef:95:74:45: bb:ca:2e:8e:a2:cf:44:17:37:7d:f4:ce:ec:ff:37: 24:50:a1:49:06:1c:e5:ab:f9:3e:fc:8b:0b:f2:48: 4d:ca:53:9c:93:59:8c:d1:d6:e3:14:13:a1:d3:03: 42:54:aa:30:39:ee:15:f9:7a:73:3d:9b:47:e4:d4: 7d:fb:d4:7d:f6:cf:bb:9a:41:d5:e1:3c:2c:e9:a5: 5f:bc:0b:72:22:d5:7a:1e:58:ed:21:8a:5b:47:da: 4e:89:95:52:ee:fa:9b:39:3f:33:22:9e:25:41:14: 3a:05:7a:12:4b:2a:68:5b:f0:30:db:65:00:26:60: 55:df:15:b8:9d:0a:01:4f:b4:da:79:0a:5b:9b:40: f2:c0:a8:c3:0d:b3:e3:11:56:e4:e0:b1:7d:6c:1d: 09:bb:9a:6e:13:f2:36:b8:c2:8c:0a:cd:3d:9c:12: da:fe:91:37:1b:96:a8:3d:6b:8d:9c:9a:fc:79:d4: 1f:ca:95:fa:1f:07:9a:b5:74:76:4d:18:fb:b9:4f: ce:0c:89:94:24:22:cf:20:2f:1c:d6:8c:48:a3:bc: aa:5f:59:6a:e9:35:a2:20:2f:8f:7b:4a:86:1e:45: 3b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1D:A1:3E:22:08:1D:A1:3F:E3:1B:96:E9:53:C4:70:C9:72:B8:28 X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7b:f9:b8:0b:76:3a:78:15:36:5f:bc:f9:40:20:d0:ab:bc: 34:27:b3:66:38:1f:ba:b5:48:86:8d:36:22:eb:c8:59:15:52: 6e:03:d6:ee:58:f5:9c:98:1e:7e:3b:4c:c9:a3:49:16:be:83: 64:c9:cd:4f:3e:c7:02:a8:05:94:a6:b1:c4:18:ff:c0:f7:06: ac:e8:74:f0:aa:70:02:5a:bd:b6:77:12:a6:39:ca:bd:45:ff: 20:61:83:c1:8a:19:cb:f0:82:fe:58:dc:bd:fd:18:db:19:d5: d0:24:49:6c:43:33:e1:18:5d:ef:69:88:bc:84:a3:31:1e:72: d5:a6:1a:0e:6f:14:c6:73:4e:e9:45:77:cc:01:03:2c:70:b5: 5d:9f:c3:bd:d9:c6:fc:34:69:1a:ce:32:42:08:de:28:4d:aa: fb:42:a2:85:4b:6c:a8:06:0d:04:3f:ea:ef:ec:ec:c5:59:24: a0:ae:b5:c9:95:c8:32:f3:92:55:22:fc:ca:ad:6a:8b:1d:63: 6a:4d:60:8a:97:5c:22:cb:c6:d8:c6:76:8a:ab:89:55:50:d8: d0:75:9d:65:0d:c5:52:de:84:de:6a:2f:7d:f1:a9:79:10:82: ba:57:3e:b3:69:4e:c4:19:e9:08:88:db:f4:eb:90:ad:c5:65: 9c:dc:6c:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAoVudlEsK3sn3fSzHebR+pg15MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjExMTUxNDM3MjRaFw0yNjExMTYxNjAzMjRaMDMxMTAvBgNV BAMTKDEwMURBMTNFMjIwODFEQTEzRkUzMUI5NkU5NTNDNDcwQzk3MkI4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WZZBDTC6+TwPAxwWkTvDzI8t zIiQkHIZ75V0RbvKLo6iz0QXN330zuz/NyRQoUkGHOWr+T78iwvySE3KU5yTWYzR 1uMUE6HTA0JUqjA57hX5enM9m0fk1H371H32z7uaQdXhPCzppV+8C3Ii1XoeWO0h iltH2k6JlVLu+ps5PzMiniVBFDoFehJLKmhb8DDbZQAmYFXfFbidCgFPtNp5Club QPLAqMMNs+MRVuTgsX1sHQm7mm4T8ja4wowKzT2cEtr+kTcblqg9a42cmvx51B/K lfofB5q1dHZNGPu5T84MiZQkIs8gLxzWjEijvKpfWWrpNaIgL497SoYeRTvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEB2hPiIIHaE/4xuW6VPEcMlyuCgwHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACh7+bgLdjp4FTZfvPlAINCrvDQns2Y4H7q1 SIaNNiLryFkVUm4D1u5Y9ZyYHn47TMmjSRa+g2TJzU8+xwKoBZSmscQY/8D3Bqzo dPCqcAJavbZ3EqY5yr1F/yBhg8GKGcvwgv5Y3L39GNsZ1dAkSWxDM+EYXe9piLyE ozEectWmGg5vFMZzTulFd8wBAyxwtV2fw73Zxvw0aRrOMkII3ihNqvtCooVLbKgG DQQ/6u/s7MVZJKCutcmVyDLzklUi/MqtaosdY2pNYIqXXCLLxtjGdoqriVVQ2NB1 nWUNxVLehN5qL33xqXkQgrpXPrNpTsQZ6QiI2/TrkK3FZZzcbA4= -----END CERTIFICATE-----Generated at Sun Nov 15 21:52:44 2026 by rpki-client