$ rpki-client -vvf rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft (raw, json) Hash identifier: qHFQWzXnc/7kF0Sju38ztgiFz08Now5v9CpfpqkZc54= Subject key identifier: 05:D8:63:4B:6A:71:BB:59:4B:69:94:10:95:93:4F:1F:3C:DC:A6:F6 Authority key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Certificate issuer: /CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Certificate serial: 60A8386DCE755389260F6731DBC1BD64AFC5206D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 21:55:47 +0000 Manifest this update: Tue 16 Jun 2026 21:50:47 +0000 Manifest next update: Thu 18 Jun 2026 00:49:47 +0000 Files and hashes: 1: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl (hash: rdG3oLyfrB4tal+uBZMS+9k968PxY1hs0CeM1On7fv4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a8:38:6d:ce:75:53:89:26:0f:67:31:db:c1:bd:64:af:c5:20:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Validity Not Before: Jun 16 21:50:47 2026 GMT Not After : Jun 18 00:49:47 2026 GMT Subject: CN=05D8634B6A71BB594B69941095934F1F3CDCA6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:3a:42:04:dd:c4:d5:f2:e2:ba:b0:4f:c4: 7a:cb:ee:38:a2:af:12:7a:4e:3d:7c:01:27:c6:a0: bf:3e:e5:55:51:2a:c8:7c:15:50:22:d3:9b:e9:7c: 03:4e:ff:0c:73:73:7a:cb:b7:0f:90:aa:63:b3:ae: d6:1a:59:60:eb:b4:0b:a3:98:b9:52:a5:f9:34:de: a6:55:52:65:53:fc:17:38:f2:a4:52:5c:3f:e0:d9: e3:b4:6a:17:5c:e4:fc:2d:d8:2f:b2:7e:74:27:14: 3b:8e:00:b8:cd:09:b9:a9:51:f8:b0:9c:83:2a:39: ed:73:e6:e9:d8:57:fb:36:9e:ea:bf:97:64:78:f4: 92:58:d9:8d:97:f0:b5:16:3c:c5:bd:a2:67:91:aa: 39:8b:fe:df:ed:68:4c:f5:23:37:69:72:05:48:1e: cb:84:67:98:6f:bb:84:fe:8e:fe:c6:c3:db:7d:98: 91:74:a0:87:66:b7:80:82:4c:3d:59:25:a5:25:45: f4:80:c8:33:46:3f:21:cb:08:5e:81:d8:0c:d5:08: da:9a:8f:5e:03:84:04:30:68:ad:e9:83:c3:6d:03: d4:78:5c:66:05:4d:05:92:6c:aa:fc:eb:3a:0d:c5: 63:68:89:eb:ee:30:18:05:24:ce:0a:86:41:6a:e8: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D8:63:4B:6A:71:BB:59:4B:69:94:10:95:93:4F:1F:3C:DC:A6:F6 X509v3 Authority Key Identifier: keyid:B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:19:35:d6:29:48:ad:c5:38:a0:8d:7d:68:f1:2d:29:3c:89: 2b:cf:ff:3c:54:24:af:60:73:4d:9f:ff:b6:e2:f4:4d:9d:1f: 7b:fc:53:07:2d:6f:ae:f7:45:75:08:ea:a6:f7:0b:a5:af:90: 28:83:aa:bb:bf:50:a7:4c:01:45:80:7f:dd:f7:08:7e:74:2d: 48:34:48:11:44:17:c3:74:bf:1c:b6:b7:93:04:52:ce:53:32: 48:66:f9:b0:bb:ff:6e:9b:b0:a3:77:3f:de:b4:a1:46:86:82: 77:7f:74:df:a7:11:9c:88:82:65:ed:5f:d3:7b:0c:ef:30:e5: ac:fe:6e:92:c4:28:84:d0:ee:d1:a5:48:4c:7b:eb:69:a9:78: a6:1c:e6:1e:f6:6c:1b:3c:17:7f:7f:82:12:67:c7:65:3f:8a: b6:4a:e0:47:48:c0:44:d1:e9:43:21:4b:74:5b:29:a5:99:e2: 80:84:90:81:05:4f:34:88:93:38:7e:cf:7f:15:bf:1a:93:ad: 66:ef:16:3e:b5:e1:1c:95:fb:28:0f:83:81:65:95:dc:a5:2e: ee:e9:32:b4:78:69:6d:41:96:3e:e1:6b:88:c4:2e:52:1f:93: ad:8b:47:41:7d:28:93:70:7f:a3:8d:4e:1d:c7:0d:e4:b2:89: 70:d1:63:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKg4bc51U4kmD2cx28G9ZK/FIG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBGQjAx RkM2NDNDMTAeFw0yNjA2MTYyMTUwNDdaFw0yNjA2MTgwMDQ5NDdaMDMxMTAvBgNV BAMTKDA1RDg2MzRCNkE3MUJCNTk0QjY5OTQxMDk1OTM0RjFGM0NEQ0E2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PjpCBN3E1fLiurBPxHrL7jii rxJ6Tj18ASfGoL8+5VVRKsh8FVAi05vpfANO/wxzc3rLtw+QqmOzrtYaWWDrtAuj mLlSpfk03qZVUmVT/Bc48qRSXD/g2eO0ahdc5Pwt2C+yfnQnFDuOALjNCbmpUfiw nIMqOe1z5unYV/s2nuq/l2R49JJY2Y2X8LUWPMW9omeRqjmL/t/taEz1IzdpcgVI HsuEZ5hvu4T+jv7Gw9t9mJF0oIdmt4CCTD1ZJaUlRfSAyDNGPyHLCF6B2AzVCNqa j14DhAQwaK3pg8NtA9R4XGYFTQWSbKr86zoNxWNoievuMBgFJM4KhkFq6CtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdhjS2pxu1lLaZQQlZNPHzzcpvYwHwYDVR0j BBgwFoAUshIgoSddUCLcHjOQr4wPsB/GQ8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA4ODY0OGYtNWUwYi00MzM4LTkxMWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEy NzVENTAyMkRDMUUzMzkwQUY4QzBGQjAxRkM2NDNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMjEyMjBBMTI3NUQ1MDIyREMxRTMzOTBBRjhDMEZCMDFGQzY0 M0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBG QjAxRkM2NDNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsZNdYpSK3FOKCNfWjxLSk8iSvP/zxUJK9g c02f/7bi9E2dH3v8Uwctb673RXUI6qb3C6WvkCiDqru/UKdMAUWAf933CH50LUg0 SBFEF8N0vxy2t5MEUs5TMkhm+bC7/26bsKN3P960oUaGgnd/dN+nEZyIgmXtX9N7 DO8w5az+bpLEKITQ7tGlSEx762mpeKYc5h72bBs8F39/ghJnx2U/irZK4EdIwETR 6UMhS3RbKaWZ4oCEkIEFTzSIkzh+z38VvxqTrWbvFj614RyV+ygPg4FlldylLu7p MrR4aW1Blj7ha4jELlIfk62LR0F9KJNwf6ONTh3HDeSyiXDRY8A= -----END CERTIFICATE-----Generated at Wed Jun 17 09:25:43 2026 by rpki-client