$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft (raw, json) Hash identifier: fLay30YSjSUA00nj/u9KfqKjsr9PTWCumJZH21ciq7E= Subject key identifier: 62:44:1A:16:51:ED:E6:CD:46:32:4D:BC:8E:3F:7C:9D:CB:70:C7:FC Authority key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Certificate issuer: /CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Certificate serial: 0B40D6EA4273B8FE6EC8620797FE1DCE86BDE5D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft Manifest number: BC Signing time: Mon 21 Sep 2026 04:42:25 +0000 Manifest this update: Mon 21 Sep 2026 04:37:25 +0000 Manifest next update: Tue 22 Sep 2026 06:17:25 +0000 Files and hashes: 1: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl (hash: j5XVmsKsbB2leclgffuiWkzTEPW28p0k5Ex6n39QAS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:40:d6:ea:42:73:b8:fe:6e:c8:62:07:97:fe:1d:ce:86:bd:e5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Validity Not Before: Sep 21 04:37:25 2026 GMT Not After : Sep 22 06:17:25 2026 GMT Subject: CN=62441A1651EDE6CD46324DBC8E3F7C9DCB70C7FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:66:21:d7:1e:cd:3a:0f:d5:b4:b8:e8:31: d8:b8:50:41:59:c1:53:57:c4:a4:01:61:d2:f7:b3: fc:ab:d8:20:58:b2:06:90:bb:3e:17:cc:20:19:57: 18:36:5b:84:9c:4c:f1:2e:17:b4:6b:0a:d1:36:4a: c3:e6:77:de:39:fd:55:5a:1a:e8:76:39:3b:18:f9: 3f:ec:e1:09:d4:17:be:e2:c4:1d:1b:44:41:13:87: c4:27:c3:41:78:5d:f9:aa:97:74:08:c8:5b:3a:c5: 94:7f:cf:60:2c:66:da:99:f7:4d:b6:4c:10:91:89: 43:0c:69:9b:91:cb:2d:76:06:a3:8c:87:02:17:2b: a4:22:c4:32:a1:4d:c2:9a:0c:87:f4:c0:c5:49:34: 0d:66:e6:af:2b:99:33:c1:f1:ae:84:81:ce:8d:56: 77:34:4c:a5:6c:56:46:9d:e7:63:3d:6d:60:28:9f: 1d:e4:87:7f:42:82:8f:34:06:35:74:bd:67:00:45: cc:0c:88:14:ae:24:fe:5a:be:d3:df:a7:b8:83:f7: 01:c2:d9:76:27:b0:8c:42:35:58:80:36:a0:d4:29: ce:e4:ce:4e:3d:16:5f:cf:c5:48:2d:25:81:96:b3: b2:63:80:70:a1:30:e5:b3:d7:28:ba:58:67:cf:15: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:44:1A:16:51:ED:E6:CD:46:32:4D:BC:8E:3F:7C:9D:CB:70:C7:FC X509v3 Authority Key Identifier: keyid:B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:64:f1:90:74:0b:8a:5f:ed:92:b8:a7:89:31:3e:5a:8d:57: 0f:d5:fc:b0:bc:57:0d:67:3f:68:73:c8:28:d6:38:27:e9:b1: 28:fe:d1:20:a4:7e:17:0c:5b:66:09:0c:ed:b1:b4:3b:55:9c: 8c:c0:ca:e5:f6:64:e9:ac:17:5d:34:e7:b2:57:7e:e7:aa:27: bf:77:cf:0e:0b:57:df:26:6d:07:8a:d3:4a:d1:ff:6c:33:af: b7:8b:a4:a4:b2:bb:13:4a:49:34:d7:24:53:00:6f:49:de:c1: 00:2d:4d:75:91:ef:db:d4:69:95:7b:fe:54:87:e4:57:5a:1f: e0:96:ce:f7:60:90:dd:fb:11:b3:2f:14:06:0d:c7:0f:bb:4d: e5:4f:68:f0:9c:04:4d:71:8f:41:61:14:a1:a8:ba:da:95:b6: 9a:f6:a6:fe:d2:40:8d:fa:48:e4:2b:7e:ef:c7:e1:3c:d4:b1: 65:5f:ed:a2:0d:48:ca:4f:68:dc:a0:d7:0f:6b:89:bf:1a:b7: d1:c7:36:1c:ca:90:2d:15:93:34:37:e4:26:d2:78:1f:e4:8c: cf:5a:87:c6:aa:94:57:ba:bd:25:15:6f:a3:1d:59:56:65:34: 90:a3:cd:51:39:66:7f:0e:b2:93:ce:ab:61:98:a1:e6:c0:ce: 3a:ef:a3:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC0DW6kJzuP5uyGIHl/4dzoa95dMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBGQjAx RkM2NDNDMTAeFw0yNjA5MjEwNDM3MjVaFw0yNjA5MjIwNjE3MjVaMDMxMTAvBgNV BAMTKDYyNDQxQTE2NTFFREU2Q0Q0NjMyNERCQzhFM0Y3QzlEQ0I3MEM3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSWYh1x7NOg/VtLjoMdi4UEFZ wVNXxKQBYdL3s/yr2CBYsgaQuz4XzCAZVxg2W4ScTPEuF7RrCtE2SsPmd945/VVa Guh2OTsY+T/s4QnUF77ixB0bREETh8Qnw0F4Xfmql3QIyFs6xZR/z2AsZtqZ9022 TBCRiUMMaZuRyy12BqOMhwIXK6QixDKhTcKaDIf0wMVJNA1m5q8rmTPB8a6Egc6N Vnc0TKVsVkad52M9bWAonx3kh39Cgo80BjV0vWcARcwMiBSuJP5avtPfp7iD9wHC 2XYnsIxCNViANqDUKc7kzk49Fl/PxUgtJYGWs7JjgHChMOWz1yi6WGfPFW29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYkQaFlHt5s1GMk28jj98nctwx/wwHwYDVR0j BBgwFoAUshIgoSddUCLcHjOQr4wPsB/GQ8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA4ODY0OGYtNWUwYi00MzM4LTkxMWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEy NzVENTAyMkRDMUUzMzkwQUY4QzBGQjAxRkM2NDNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMjEyMjBBMTI3NUQ1MDIyREMxRTMzOTBBRjhDMEZCMDFGQzY0 M0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBG QjAxRkM2NDNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtk8ZB0C4pf7ZK4p4kxPlqNVw/V/LC8Vw1n P2hzyCjWOCfpsSj+0SCkfhcMW2YJDO2xtDtVnIzAyuX2ZOmsF10057JXfueqJ793 zw4LV98mbQeK00rR/2wzr7eLpKSyuxNKSTTXJFMAb0newQAtTXWR79vUaZV7/lSH 5FdaH+CWzvdgkN37EbMvFAYNxw+7TeVPaPCcBE1xj0FhFKGoutqVtpr2pv7SQI36 SOQrfu/H4TzUsWVf7aINSMpPaNyg1w9rib8at9HHNhzKkC0VkzQ35CbSeB/kjM9a h8aqlFe6vSUVb6MdWVZlNJCjzVE5Zn8OspPOq2GYoebAzjrvo1c= -----END CERTIFICATE-----Generated at Mon Sep 21 16:34:01 2026 by rpki-client