$ rpki-client -vvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: n3Q1gnWX8ZicR9J74bmBGB/uSUlqI6dwL1yORzN/uZY= Subject key identifier: 8E:2A:DD:ED:74:1C:42:A5:8F:18:F6:9C:E9:78:AF:51:DD:36:BB:2A Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 450B59745C9F07E06A3D9D826BDBF01696EC7FF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 21:19:54 +0000 Manifest this update: Sat 13 Jun 2026 21:14:54 +0000 Manifest next update: Sun 14 Jun 2026 22:06:54 +0000 Files and hashes: 1: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: Q64cOUOmZTl0s0f5RKLpFRKNsk0esFgvtaYnKx5/Mu4=) 2: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) 3: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) 4: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:0b:59:74:5c:9f:07:e0:6a:3d:9d:82:6b:db:f0:16:96:ec:7f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Jun 13 21:14:54 2026 GMT Not After : Jun 14 22:06:54 2026 GMT Subject: CN=8E2ADDED741C42A58F18F69CE978AF51DD36BB2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:ee:20:ae:0b:05:b0:8c:5e:ba:b0:b2:a2: 9f:c7:13:cf:1d:bd:6e:c8:c1:75:71:94:02:8b:2e: 6b:c9:81:5d:bc:19:92:2c:25:ff:d8:8a:9e:b4:7c: b8:13:7c:24:6c:10:8e:e4:be:5d:d0:74:e2:f2:05: 30:bb:65:f4:c4:f6:84:87:35:ed:c1:b5:4d:90:f7: ef:24:ee:d5:f7:66:61:57:ba:b6:71:76:66:27:c0: 88:dc:82:ac:5f:02:a2:86:f6:f9:68:bf:bf:99:4d: 98:dc:05:a8:24:36:1d:80:8c:4b:7b:1a:26:96:10: 84:69:5a:9f:66:c0:66:56:00:b2:73:9f:1e:c6:1a: 36:ca:0c:0f:4e:1a:3c:48:3f:8e:3b:78:a3:4d:cb: 49:e4:b8:0d:20:7e:26:96:fb:c0:78:8c:7a:0f:3f: 00:63:9d:58:4c:4f:3e:ff:a9:80:7e:39:88:60:91: a6:24:bc:86:41:54:43:c0:06:30:5f:1b:54:04:f2: 11:10:e4:83:d8:e8:a8:eb:66:e8:af:e7:16:c1:70: 4f:0f:6f:58:0f:52:3b:82:72:62:48:c6:ea:7b:f1: 0c:ae:29:52:ab:b5:06:e8:00:22:18:5d:ae:76:fd: 7b:53:b6:8b:01:0c:d5:78:05:cf:6e:64:06:be:bc: ac:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2A:DD:ED:74:1C:42:A5:8F:18:F6:9C:E9:78:AF:51:DD:36:BB:2A X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f2:4c:c6:e0:4c:d2:8a:64:fe:3a:86:f1:7b:1b:a3:6b:60: 5c:ec:a8:96:45:a6:cb:b4:bb:14:e6:3a:e6:65:d3:0a:6b:0a: 13:9b:a6:2b:70:b3:e3:af:1d:46:29:73:2b:16:63:2a:f1:2a: 81:0f:7c:ee:ea:4c:74:de:53:43:6c:4d:87:fa:83:b8:59:98: a2:44:e8:58:9c:54:39:fe:cb:ad:a6:7e:73:8a:88:e0:cc:8c: b1:ab:b7:45:59:4b:d0:c5:3c:30:60:30:eb:7e:86:46:fc:67: f2:8e:c6:45:f0:e2:01:b9:a1:4d:96:fa:63:81:17:60:32:99: 4b:c0:08:c7:51:65:c1:77:54:7e:b9:21:bc:af:68:3a:2e:25: f5:72:e5:11:b7:50:8a:d2:ed:f7:e5:2d:a9:fd:66:32:15:55: 22:c2:dc:eb:b6:21:e4:6c:1b:12:67:bd:e0:96:6c:bf:ec:46: 0d:79:79:ce:68:60:f5:a2:9a:f9:37:3a:a5:3f:c5:39:f1:88: b1:99:76:1e:36:75:d2:68:23:31:9f:71:09:da:fe:50:de:01: 8a:f8:2b:d1:2a:94:62:c2:b6:62:8d:83:7f:27:7f:83:4d:4c: 16:78:5d:65:a2:06:d6:2a:ea:cf:0e:ef:33:52:33:25:78:12: 27:93:16:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURQtZdFyfB+BqPZ2Ca9vwFpbsf/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjA2MTMyMTE0NTRaFw0yNjA2MTQyMjA2NTRaMDMxMTAvBgNV BAMTKDhFMkFEREVENzQxQzQyQTU4RjE4RjY5Q0U5NzhBRjUxREQzNkJCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMO4grgsFsIxeurCyop/HE88d vW7IwXVxlAKLLmvJgV28GZIsJf/Yip60fLgTfCRsEI7kvl3QdOLyBTC7ZfTE9oSH Ne3BtU2Q9+8k7tX3ZmFXurZxdmYnwIjcgqxfAqKG9vlov7+ZTZjcBagkNh2AjEt7 GiaWEIRpWp9mwGZWALJznx7GGjbKDA9OGjxIP447eKNNy0nkuA0gfiaW+8B4jHoP PwBjnVhMTz7/qYB+OYhgkaYkvIZBVEPABjBfG1QE8hEQ5IPY6KjrZuiv5xbBcE8P b1gPUjuCcmJIxup78QyuKVKrtQboACIYXa52/XtTtosBDNV4Bc9uZAa+vKwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjird7XQcQqWPGPac6XivUd02uyowHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHyTMbgTNKKZP46hvF7G6NrYFzsqJZFpsu0 uxTmOuZl0wprChObpitws+OvHUYpcysWYyrxKoEPfO7qTHTeU0NsTYf6g7hZmKJE 6FicVDn+y62mfnOKiODMjLGrt0VZS9DFPDBgMOt+hkb8Z/KOxkXw4gG5oU2W+mOB F2AymUvACMdRZcF3VH65IbyvaDouJfVy5RG3UIrS7fflLan9ZjIVVSLC3Ou2IeRs GxJnveCWbL/sRg15ec5oYPWimvk3OqU/xTnxiLGZdh42ddJoIzGfcQna/lDeAYr4 K9EqlGLCtmKNg38nf4NNTBZ4XWWiBtYq6s8O7zNSMyV4EieTFqw= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:30 2026 by rpki-client