
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json)
Hash identifier: nhQum2Bf/HspY+d/JczTDOUbqgpBz5DZ2EG6vNh1Fxs=
Subject key identifier: 92:DD:47:35:18:35:16:51:A7:D2:C6:E4:0A:B4:EA:81:B5:32:58:28
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial: 40238DB398B71ABD566AB0A73F463A8BD230C6C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 23:58:03 +0000
Manifest this update: Sat 13 Jun 2026 23:53:03 +0000
Manifest next update: Mon 15 Jun 2026 00:20:03 +0000
Files and hashes: 1: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=)
2: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=)
3: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=)
4: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=)
5: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: v4eRjLYiGgKXukFLF6sxB6fTEc3crDjON9jeDmsoAek=)
6: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: PgXL6WDq3i8tznZRJPtlrc9sUxZ4kDtxFC0zL6N0xy0=)
7: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=)
8: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=)
9: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=)
10: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=)
11: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=)
12: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=)
13: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=)
14: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=)
15: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=)
16: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=)
17: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=)
18: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=)
19: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=)
20: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 00:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:23:8d:b3:98:b7:1a:bd:56:6a:b0:a7:3f:46:3a:8b:d2:30:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Validity
Not Before: Jun 13 23:53:03 2026 GMT
Not After : Jun 15 00:20:03 2026 GMT
Subject: CN=92DD473518351651A7D2C6E40AB4EA81B5325828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:2a:f5:eb:49:6d:5a:bc:61:4b:dc:8c:61:
e9:5b:3e:d9:39:bb:15:40:df:fa:86:ef:67:4f:d2:
75:61:38:37:7a:cd:5b:94:ab:5e:ca:7f:19:6c:78:
2f:16:cc:e4:49:3d:fa:e4:2a:31:af:db:19:32:db:
cd:5c:8e:be:ef:29:79:a6:3b:26:04:63:71:8e:28:
93:65:22:9a:44:9a:37:df:bf:b1:a1:77:88:4e:03:
42:29:3b:99:f5:b1:d3:ea:a3:6c:15:21:83:95:5e:
01:76:09:17:fe:e8:7d:49:54:82:a3:d4:de:de:54:
48:2e:59:72:2a:04:6f:75:3a:a7:c2:8f:c0:b8:f7:
0d:73:7e:11:33:9a:85:98:b5:82:b3:9e:68:5f:96:
20:5e:85:65:fd:ce:8e:1f:58:5f:03:a4:d6:74:5a:
05:7e:2b:fa:04:e2:a6:c1:a8:e1:df:de:5d:02:24:
77:8a:bc:82:00:ba:ed:a2:71:ac:73:36:0a:e5:2b:
3e:4b:e8:aa:51:7d:a9:8f:c5:7f:92:fe:d8:b4:2b:
23:87:c1:0e:61:2b:f6:fd:3b:3c:3a:31:c0:06:5a:
fb:8d:28:1c:4f:5a:3c:68:b8:7b:60:fa:e2:eb:b5:
bb:7a:09:54:fd:ee:6e:64:b6:ef:57:12:86:21:03:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DD:47:35:18:35:16:51:A7:D2:C6:E4:0A:B4:EA:81:B5:32:58:28
X509v3 Authority Key Identifier:
keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fb:c6:92:fd:0e:9d:cc:82:9d:39:87:23:93:57:6f:fc:14:
2c:b2:ce:b9:58:6d:77:cf:d7:2a:91:b6:55:4a:4d:9f:21:cb:
d0:3d:4c:fd:77:14:37:4e:d4:4e:7d:36:ea:2f:19:07:97:44:
d8:65:85:4a:1d:dd:41:58:72:64:a5:32:92:f5:ab:16:ea:3b:
37:df:b8:af:af:74:cd:0d:1f:e7:22:32:e4:03:5f:10:6c:11:
1e:14:9c:a0:1f:45:41:f2:fb:f7:24:c9:ad:10:fa:8d:c6:d2:
d6:00:c3:27:e0:fc:f3:ae:05:0f:5a:25:a2:da:ef:3a:63:5f:
68:e0:6f:e9:f6:fc:89:93:51:f5:20:43:5b:c6:9e:21:4a:41:
12:8e:fe:67:3d:f6:c0:70:bd:95:0d:5e:cc:ca:55:93:35:3e:
95:78:a1:68:8e:fd:e3:a7:5c:9f:99:95:4a:83:1e:96:ec:19:
1e:7d:c6:a4:c1:2f:54:2c:fc:5f:68:d2:29:44:e1:ae:89:2e:
af:86:97:01:20:20:5e:f8:1f:16:46:a4:dd:77:3c:0c:3f:b4:
f8:db:e3:aa:68:58:0a:d8:02:07:68:b4:d3:ec:92:44:b4:24:
7b:02:a9:51:4e:93:19:83:fb:ad:07:fb:07:4b:82:97:06:e9:
cd:30:9f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:04:59 2026 by rpki-client