$ rpki-client -vvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: wufObkHP22XHSBX3s1hzqdENM4ZvQ00thSPtAvf0yfU= Subject key identifier: 24:26:1F:ED:B6:D5:EC:00:C3:ED:4D:CD:65:38:E7:5B:60:59:A1:CB Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 0289B52CCAE37E9186BBAD3D3B7E462BEEB94A07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 23:56:05 +0000 Manifest this update: Tue 28 Jul 2026 23:51:05 +0000 Manifest next update: Thu 30 Jul 2026 03:33:05 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) 2: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) 3: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: L+t0ZBLdZyrUBUve1ZQ3ek5odqEyw6OZcNM5zhxourg=) 4: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:89:b5:2c:ca:e3:7e:91:86:bb:ad:3d:3b:7e:46:2b:ee:b9:4a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Jul 28 23:51:05 2026 GMT Not After : Jul 30 03:33:05 2026 GMT Subject: CN=24261FEDB6D5EC00C3ED4DCD6538E75B6059A1CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:bd:19:ae:54:b5:17:0d:67:9c:7f:13:1a: 41:59:a3:5e:f9:33:94:3c:2f:16:1b:46:b4:ac:62: db:f9:29:a4:e5:1d:29:99:6d:b9:da:74:e8:70:c2: 11:ba:d1:32:70:9b:3f:fc:fa:14:8b:7d:fa:55:26: d5:d9:35:00:16:ff:5a:d9:9f:82:c6:d8:8a:e9:6e: 0f:f5:f6:ae:28:1e:24:03:35:6b:6f:e9:f0:67:d0: 5c:49:81:1b:40:80:cb:0f:06:d2:93:f5:1b:e2:7f: 0d:18:9b:69:61:5f:4e:a6:33:1b:7c:2a:03:d7:8a: 36:bd:cb:b3:f6:e6:d9:df:72:6f:04:0a:21:f1:67: 0c:3b:3d:74:76:04:43:f1:f1:31:97:64:3c:9f:91: 4e:ff:0a:f9:bf:c5:82:8b:68:b1:35:92:19:30:42: 31:b7:b4:e8:4c:1c:b5:60:d4:c6:2d:fe:44:dc:91: 30:19:b4:1f:34:86:de:5c:87:8f:ee:d9:65:26:9d: 91:20:57:66:88:8b:b2:55:00:e3:93:15:dd:a6:3f: f7:42:4f:db:c6:bd:74:63:bb:a9:8f:2c:67:80:fe: 02:53:a0:8b:8f:07:a2:a2:07:2f:cc:4e:e9:4e:b8: 60:27:2d:03:fd:57:66:c2:42:af:e2:12:83:df:52: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:26:1F:ED:B6:D5:EC:00:C3:ED:4D:CD:65:38:E7:5B:60:59:A1:CB X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f8:48:e5:b5:63:a9:5e:a5:c4:6d:ef:fa:c7:44:84:b9:b2: 24:61:06:0b:33:4b:b6:35:73:c7:f0:2c:65:88:6d:90:48:da: 0c:c7:03:0f:cf:8b:7e:82:46:b8:d0:bc:c4:44:eb:4e:de:be: 41:b9:65:13:84:1b:90:4c:cf:66:5e:99:0f:1d:07:e5:a5:1f: 0d:52:48:40:fc:89:da:d2:a0:0e:12:ef:34:db:6a:c4:a9:c1: 5c:eb:47:89:18:34:45:ca:4f:43:3a:69:c2:44:c0:23:ae:bc: 5c:0a:43:ee:14:cc:1e:73:aa:31:c4:12:13:5c:34:15:cb:3a: 42:b2:4b:d5:4c:be:b5:19:d9:5d:97:b0:09:f4:1a:70:5b:56: 05:0b:96:fe:1f:1a:36:1c:34:90:22:de:67:29:78:04:f5:be: cd:1d:8c:c6:00:a4:ce:54:0c:b0:e1:c3:a8:e0:bc:fc:cd:12: cb:d7:c0:cf:49:8f:72:f5:cf:c6:96:e5:94:6e:d1:46:3f:56: b2:70:0f:65:3b:fb:94:2e:95:3f:e6:aa:a7:c3:ac:03:c4:9a: 31:23:8f:4d:84:ca:f7:05:c2:59:b9:8a:2e:5e:37:96:0a:48: 5b:17:33:d0:46:13:21:90:f0:31:c4:72:b4:8f:9d:3a:99:24: 2d:ed:18:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAom1LMrjfpGGu609O35GK+65SgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjA3MjgyMzUxMDVaFw0yNjA3MzAwMzMzMDVaMDMxMTAvBgNV BAMTKDI0MjYxRkVEQjZENUVDMDBDM0VENERDRDY1MzhFNzVCNjA1OUExQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOj70ZrlS1Fw1nnH8TGkFZo175 M5Q8LxYbRrSsYtv5KaTlHSmZbbnadOhwwhG60TJwmz/8+hSLffpVJtXZNQAW/1rZ n4LG2Irpbg/19q4oHiQDNWtv6fBn0FxJgRtAgMsPBtKT9Rvifw0Ym2lhX06mMxt8 KgPXija9y7P25tnfcm8ECiHxZww7PXR2BEPx8TGXZDyfkU7/Cvm/xYKLaLE1khkw QjG3tOhMHLVg1MYt/kTckTAZtB80ht5ch4/u2WUmnZEgV2aIi7JVAOOTFd2mP/dC T9vGvXRju6mPLGeA/gJToIuPB6KiBy/MTulOuGAnLQP9V2bCQq/iEoPfUtLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCYf7bbV7ADD7U3NZTjnW2BZocswHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFf4SOW1Y6lepcRt7/rHRIS5siRhBgszS7Y1 c8fwLGWIbZBI2gzHAw/Pi36CRrjQvMRE607evkG5ZROEG5BMz2ZemQ8dB+WlHw1S SED8idrSoA4S7zTbasSpwVzrR4kYNEXKT0M6acJEwCOuvFwKQ+4UzB5zqjHEEhNc NBXLOkKyS9VMvrUZ2V2XsAn0GnBbVgULlv4fGjYcNJAi3mcpeAT1vs0djMYApM5U DLDhw6jgvPzNEsvXwM9Jj3L1z8aW5ZRu0UY/VrJwD2U7+5QulT/mqqfDrAPEmjEj j02EyvcFwlm5ii5eN5YKSFsXM9BGEyGQ8DHEcrSPnTqZJC3tGCo= -----END CERTIFICATE-----Generated at Wed Jul 29 05:40:51 2026 by rpki-client