$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json) Hash identifier: E2aWmxyJBBG0vDf40d1Gg56k4RgLUQ6uTx6rLt3u450= Subject key identifier: F2:D7:5F:6A:59:44:4E:A8:A2:CA:08:AF:33:BC:C5:B1:DD:A2:48:A8 Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Certificate serial: 715044A2D24F81628557152E49ADAC453DBAAFF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft Manifest number: 0102 Signing time: Mon 09 Nov 2026 21:07:08 +0000 Manifest this update: Mon 09 Nov 2026 21:02:08 +0000 Manifest next update: Tue 10 Nov 2026 22:47:08 +0000 Files and hashes: 1: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: XiSPY9KtrbzQBIB3dHWhenC0+qhSoNk9A1K8GzA1Qcw=) 2: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=) 3: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=) 4: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=) 5: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=) 6: 3131302e37362e3135312e302f32342d3234203d3e20313331373036.roa (hash: zktLOhstP59QX+/pVkdSod5es8p+nQ/YXOdOkcdCrEE=) 7: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=) 8: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=) 9: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=) 10: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=) 11: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=) 12: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=) 13: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=) 14: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=) 15: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=) 16: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=) 17: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=) 18: 3131302e37362e3135302e302f32332d3234203d3e20313331373036.roa (hash: eIeeAogwPWqdsxBa/LDDrPIQ2YgZ4wEqVY2TiS9bi9w=) 19: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=) 20: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=) 21: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:50:44:a2:d2:4f:81:62:85:57:15:2e:49:ad:ac:45:3d:ba:af:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Validity Not Before: Nov 9 21:02:08 2026 GMT Not After : Nov 10 22:47:08 2026 GMT Subject: CN=F2D75F6A59444EA8A2CA08AF33BCC5B1DDA248A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dd:24:b8:53:d7:4e:2d:6d:3a:a4:77:6c:7b: c5:f8:c5:33:9d:6e:d3:9c:32:21:d1:bc:fd:93:dc: 71:6c:a9:ae:56:6b:fd:6c:62:c9:50:e1:47:27:79: f7:77:51:bf:16:0d:ca:73:83:4c:06:2f:e4:3e:b7: 16:be:5f:55:3f:80:8f:fa:3d:9a:95:5f:2b:d5:a7: bb:66:5c:60:96:1d:da:28:39:0d:f2:7e:48:80:bf: 52:cc:75:65:62:89:53:4e:3f:09:5f:59:15:6b:41: 96:f9:be:d4:f7:c2:f5:a0:90:d3:ed:b4:02:ef:9d: 88:76:7d:e3:19:fb:07:02:07:b8:a6:ff:f7:1a:83: 65:35:98:16:2a:e3:c1:85:69:bf:86:a7:a0:59:b5: e4:1d:71:6b:86:e9:2c:4f:12:39:c3:da:50:2e:2e: bf:9b:64:f2:d3:43:5b:b6:8a:49:f5:03:7b:6b:95: 7c:a8:5d:39:24:3a:3c:ea:2d:c9:be:df:e0:35:94: 2a:1f:ee:ce:6e:6f:79:cb:2b:46:32:6e:07:d3:55: 9a:50:12:02:23:d0:40:bf:d0:af:89:2f:45:e6:b2: ad:6b:af:ac:17:d8:97:64:38:bd:88:dc:03:78:4a: 3c:e7:b1:40:be:7f:c1:ec:2c:73:63:82:09:6a:5c: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D7:5F:6A:59:44:4E:A8:A2:CA:08:AF:33:BC:C5:B1:DD:A2:48:A8 X509v3 Authority Key Identifier: keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d2:dd:ac:14:84:9a:47:62:6e:54:72:c6:11:ac:2c:d4:86: 1f:f1:e0:59:68:14:5c:d0:4e:71:39:99:90:e9:84:ea:c8:88: 78:23:e8:aa:28:00:fb:42:a9:2a:02:f4:3d:39:90:3e:40:65: 64:12:1e:01:bd:90:be:91:97:a2:fe:ea:6a:98:a1:17:fa:f8: e7:14:47:ef:d8:2b:9d:be:8f:a9:a3:6f:81:39:ca:3b:1c:56: ea:2e:18:03:fc:07:94:71:e5:6d:2c:b4:17:c0:19:4b:3e:5f: 59:15:96:24:3f:cd:3c:30:7f:96:4d:b9:d0:5b:5f:36:fe:f3: 16:0b:d0:fb:e8:48:f5:cf:c5:5d:f3:dc:f2:0b:b2:82:a0:90: 08:64:7e:33:06:55:d3:83:3e:a3:0d:f4:f3:8d:4b:9b:ce:4c: c4:eb:10:4f:15:0b:4a:91:de:a2:55:32:3e:ed:06:66:1f:87: 26:06:ea:c9:72:2f:b0:50:6d:4e:09:f1:17:8e:fe:e1:1c:73: 3b:46:3a:90:46:2f:f9:c9:9a:ba:16:3c:99:fd:a3:4a:2a:60: e5:cc:8c:4c:5c:ae:32:92:03:40:5c:10:3d:0e:44:e0:2f:8e: 9d:1a:3e:2c:61:81:e9:9c:76:71:ad:4e:13:05:af:5b:06:94: f2:20:f3:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcVBEotJPgWKFVxUuSa2sRT26r/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEz RUI2NDQ1QjAeFw0yNjExMDkyMTAyMDhaFw0yNjExMTAyMjQ3MDhaMDMxMTAvBgNV BAMTKEYyRDc1RjZBNTk0NDRFQThBMkNBMDhBRjMzQkNDNUIxRERBMjQ4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP3SS4U9dOLW06pHdse8X4xTOd btOcMiHRvP2T3HFsqa5Wa/1sYslQ4Ucnefd3Ub8WDcpzg0wGL+Q+txa+X1U/gI/6 PZqVXyvVp7tmXGCWHdooOQ3yfkiAv1LMdWViiVNOPwlfWRVrQZb5vtT3wvWgkNPt tALvnYh2feMZ+wcCB7im//cag2U1mBYq48GFab+Gp6BZteQdcWuG6SxPEjnD2lAu Lr+bZPLTQ1u2ikn1A3trlXyoXTkkOjzqLcm+3+A1lCof7s5ub3nLK0YybgfTVZpQ EgIj0EC/0K+JL0Xmsq1rr6wX2JdkOL2I3AN4SjznsUC+f8HsLHNjgglqXG+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8tdfallETqiiygivM7zFsd2iSKgwHwYDVR0j BBgwFoAUIaGvE4IP7KrIced7pwbfkT62RFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI1NDhiYWQtN2ZlZC00MWZkLWI0MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4 MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEzRUI2NDQ1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUExQUYxMzgyMEZFQ0FBQzg3MUU3N0JBNzA2REY5MTNFQjY0 NDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRG OTEzRUI2NDQ1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrS3awUhJpHYm5UcsYRrCzUhh/x4FloFFzQ TnE5mZDphOrIiHgj6KooAPtCqSoC9D05kD5AZWQSHgG9kL6Rl6L+6mqYoRf6+OcU R+/YK52+j6mjb4E5yjscVuouGAP8B5Rx5W0stBfAGUs+X1kVliQ/zTwwf5ZNudBb Xzb+8xYL0PvoSPXPxV3z3PILsoKgkAhkfjMGVdODPqMN9PONS5vOTMTrEE8VC0qR 3qJVMj7tBmYfhyYG6slyL7BQbU4J8ReO/uEccztGOpBGL/nJmroWPJn9o0oqYOXM jExcrjKSA0BcED0OROAvjp0aPixhgemcdnGtThMFr1sGlPIg870= -----END CERTIFICATE-----Generated at Tue Nov 10 01:34:56 2026 by rpki-client