$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft File: D21C7558CD1D6E80F107C302A7A49637AD11D654.mft (raw, json) Hash identifier: lJyQWBA+ltO5C37cRwrOR3qiKoR9O5Du4P4a2mIOPBs= Subject key identifier: C6:9E:EF:F5:18:C9:C2:5F:46:AC:7D:08:C3:AC:6A:C1:0A:95:3F:55 Authority key identifier: D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 Certificate issuer: /CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Certificate serial: 4FA4841DB82605E9C64C09A2DF6E1B92278A628D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 23:14:19 +0000 Manifest this update: Thu 24 Sep 2026 23:09:19 +0000 Manifest next update: Sat 26 Sep 2026 00:22:19 +0000 Files and hashes: 1: D21C7558CD1D6E80F107C302A7A49637AD11D654.crl (hash: /8evBud0zcQ9FsVyBzIyJqiWPKrUYY8PVqWlNxiY0MA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a4:84:1d:b8:26:05:e9:c6:4c:09:a2:df:6e:1b:92:27:8a:62:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Validity Not Before: Sep 24 23:09:19 2026 GMT Not After : Sep 26 00:22:19 2026 GMT Subject: CN=C69EEFF518C9C25F46AC7D08C3AC6AC10A953F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:d5:d2:93:ee:56:2a:a3:78:65:40:47:fe: 96:83:bc:5f:49:eb:9d:bb:89:62:63:4f:34:c7:dc: 5b:cc:ea:ed:ce:d4:ee:60:91:b3:53:ca:2c:b5:df: 07:41:2e:79:60:2b:c7:a3:61:7b:18:db:25:51:ae: ed:68:c9:f1:a8:8f:b4:22:50:c9:df:ca:a1:fa:41: 1a:3d:fa:ee:04:0a:ff:ba:e1:38:37:cd:9c:80:43: 10:43:26:5b:11:bb:0f:f3:f2:7a:a2:0a:54:b3:c7: 6d:15:15:53:08:9d:e2:fd:14:30:3c:3d:17:47:cf: 63:fa:63:95:52:02:41:5c:c5:27:96:6b:98:ce:df: 88:53:44:d5:e1:8f:03:aa:99:54:ec:5c:1d:f7:34: e7:b8:01:29:ab:4f:07:a3:fe:3c:f9:48:9f:6b:c6: e2:02:64:e6:22:ed:b6:56:1c:62:33:e5:1c:6a:f0: f2:89:10:e0:81:d9:cc:32:3c:11:1b:9a:c0:dc:01: 31:1b:ea:e0:3b:bc:06:21:f6:ac:15:03:c5:6b:e5: 52:64:38:4d:c9:66:2b:9a:fd:ce:3c:33:ec:a5:15: 51:6a:38:b8:d5:28:6b:d2:b3:50:e8:22:a4:6f:cb: 55:6b:f1:a6:b9:1b:71:a5:ce:2c:49:39:5f:25:1b: cb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9E:EF:F5:18:C9:C2:5F:46:AC:7D:08:C3:AC:6A:C1:0A:95:3F:55 X509v3 Authority Key Identifier: keyid:D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:57:ef:25:ca:48:87:2a:57:b4:ac:71:ea:85:8f:30:04:74: 07:d5:8b:18:4b:da:68:42:56:56:cd:be:13:90:e6:0f:49:f4: 53:91:ef:e8:47:dd:66:79:b5:bf:e4:80:98:b7:bb:ab:ae:64: b4:0b:b4:86:c2:ad:e4:a4:ce:14:0f:ee:83:48:e5:42:75:2f: d8:1a:fe:32:bb:83:14:cf:71:b4:1a:ac:17:28:48:6c:68:1d: e2:dd:18:62:07:6b:39:70:cb:8c:f2:5e:9f:9d:b1:24:69:f1: bc:e6:1f:5f:8a:83:ad:56:d9:e8:0b:f0:44:63:d4:2c:1a:c3: 39:ea:10:f7:ad:53:b3:14:31:a0:82:67:55:57:38:08:27:1d: c5:d4:66:e1:67:83:bb:a9:c5:60:74:7d:b3:eb:e9:3e:ef:ef: 20:2e:78:c7:40:b6:6f:8e:57:15:a2:9e:54:c6:43:96:6c:3c: 36:22:fd:45:be:1b:7f:66:03:5d:27:62:82:fa:3c:6a:a8:67: 0a:e8:9e:1c:8f:53:ec:22:91:45:07:66:a0:76:35:fe:7d:83: dd:e3:06:1b:68:19:07:2f:be:ee:c2:a4:2a:de:48:da:f7:e1: e4:98:68:ca:39:a2:7f:85:28:d0:be:19:70:e2:f3:5d:14:35: 23:30:92:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6SEHbgmBenGTAmi324bkieKYo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2MzdB RDExRDY1NDAeFw0yNjA5MjQyMzA5MTlaFw0yNjA5MjYwMDIyMTlaMDMxMTAvBgNV BAMTKEM2OUVFRkY1MThDOUMyNUY0NkFDN0QwOEMzQUM2QUMxMEE5NTNGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUn9XSk+5WKqN4ZUBH/paDvF9J 6527iWJjTzTH3FvM6u3O1O5gkbNTyiy13wdBLnlgK8ejYXsY2yVRru1oyfGoj7Qi UMnfyqH6QRo9+u4ECv+64Tg3zZyAQxBDJlsRuw/z8nqiClSzx20VFVMIneL9FDA8 PRdHz2P6Y5VSAkFcxSeWa5jO34hTRNXhjwOqmVTsXB33NOe4ASmrTwej/jz5SJ9r xuICZOYi7bZWHGIz5Rxq8PKJEOCB2cwyPBEbmsDcATEb6uA7vAYh9qwVA8Vr5VJk OE3JZiua/c48M+ylFVFqOLjVKGvSs1DoIqRvy1Vr8aa5G3GlzixJOV8lG8t9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxp7v9RjJwl9GrH0Iw6xqwQqVP1UwHwYDVR0j BBgwFoAU0hx1WM0dboDxB8MCp6SWN60R1lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWI0ZDEtZDZiNS00ODIwLWE0OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThD RDFENkU4MEYxMDdDMzAyQTdBNDk2MzdBRDExRDY1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMjFDNzU1OENEMUQ2RTgwRjEwN0MzMDJBN0E0OTYzN0FEMTFE NjU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2 MzdBRDExRDY1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBX7yXKSIcqV7SsceqFjzAEdAfVixhL2mhC VlbNvhOQ5g9J9FOR7+hH3WZ5tb/kgJi3u6uuZLQLtIbCreSkzhQP7oNI5UJ1L9ga /jK7gxTPcbQarBcoSGxoHeLdGGIHazlwy4zyXp+dsSRp8bzmH1+Kg61W2egL8ERj 1CwawznqEPetU7MUMaCCZ1VXOAgnHcXUZuFng7upxWB0fbPr6T7v7yAueMdAtm+O VxWinlTGQ5ZsPDYi/UW+G39mA10nYoL6PGqoZwronhyPU+wikUUHZqB2Nf59g93j BhtoGQcvvu7CpCreSNr34eSYaMo5on+FKNC+GXDi810UNSMwkks= -----END CERTIFICATE-----Generated at Fri Sep 25 01:34:06 2026 by rpki-client