$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json) Hash identifier: s1CVnfu6kYmDhzRl/ZUP8UwhS9VNe9IrBJIszm9fjsc= Subject key identifier: 99:62:84:06:D4:D4:D0:00:E8:45:6E:3C:6B:09:6F:95:5F:C6:64:BC Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Certificate serial: 4DBACEEDE327DDB6D0166CC4A7C3D6EBD4DB0E93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft Manifest number: BD Signing time: Sun 20 Sep 2026 20:52:47 +0000 Manifest this update: Sun 20 Sep 2026 20:47:47 +0000 Manifest next update: Mon 21 Sep 2026 22:20:47 +0000 Files and hashes: 1: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=) 2: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=) 3: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=) 4: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: PgXL6WDq3i8tznZRJPtlrc9sUxZ4kDtxFC0zL6N0xy0=) 5: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=) 6: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: AM+12iQ5SYiqJtKAlo3aV0MT9ZrCAvWyTFUJdqxbL9Y=) 7: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=) 8: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=) 9: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=) 10: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=) 11: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=) 12: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=) 13: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=) 14: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=) 15: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=) 16: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=) 17: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=) 18: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=) 19: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=) 20: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ba:ce:ed:e3:27:dd:b6:d0:16:6c:c4:a7:c3:d6:eb:d4:db:0e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Validity Not Before: Sep 20 20:47:47 2026 GMT Not After : Sep 21 22:20:47 2026 GMT Subject: CN=99628406D4D4D000E8456E3C6B096F955FC664BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:09:d4:1c:fd:12:a2:b5:27:b1:08:ae:c4:c2: 85:3c:f1:6e:aa:c1:3e:4e:b6:43:70:b7:54:4e:c7: 61:47:5b:57:a9:42:9c:45:11:8a:23:99:97:ef:9c: eb:3c:cb:e3:9b:98:03:58:c6:15:f0:39:8a:e7:92: 43:c6:c2:3d:a1:a4:21:b2:f8:55:9e:af:10:8f:e2: ba:b1:e0:19:ec:bc:45:6b:95:bc:c4:ea:ac:58:a5: f0:6f:6d:fd:b7:62:4d:1f:22:d5:57:82:16:f3:18: 64:39:d8:fc:79:45:e7:22:1e:4a:f5:91:de:d4:85: 8e:1b:d2:e7:7d:12:03:f1:c6:29:52:87:97:ff:34: 20:56:d8:9b:dc:c8:0f:03:ec:62:fa:69:1a:a7:a0: 36:13:dc:ea:08:8e:b5:4d:c5:cb:9c:9f:30:01:0e: b2:5f:47:3e:47:bd:2f:02:41:c5:5c:21:3b:3f:b1: 72:e7:3b:53:e4:db:a1:17:0f:40:dd:87:2b:3d:88: 44:a8:cf:50:d3:d9:20:c2:4e:5e:23:a1:fa:ec:42: c9:9b:79:07:b1:ea:70:31:de:08:f8:65:85:75:9b: 7e:77:35:d2:d1:49:bf:66:36:c2:5f:e4:3f:ca:0e: 87:33:ce:14:25:f2:e9:d2:3b:17:03:8f:ee:d4:fa: 41:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:62:84:06:D4:D4:D0:00:E8:45:6E:3C:6B:09:6F:95:5F:C6:64:BC X509v3 Authority Key Identifier: keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5c:0b:2b:72:48:5f:e8:a9:80:6c:03:64:02:10:6f:ec:60: ab:c9:db:71:a7:d3:b9:d8:29:9e:02:99:5a:0c:c3:4d:d7:77: 99:82:07:70:c6:75:78:dc:85:86:b6:2b:05:af:7f:81:00:da: b2:6c:ff:cf:ff:61:62:a7:9d:de:74:e7:8f:a4:c7:17:a6:40: 02:0b:af:dc:15:90:37:16:e8:c7:c0:50:3b:bb:e0:25:7c:70: 44:26:b2:1b:13:f0:48:ad:79:dc:8c:1f:96:36:e2:85:58:fc: 94:9a:97:f9:28:a2:47:55:8d:a0:6e:ee:97:d1:0a:f9:79:78: 88:20:0d:9b:0c:57:eb:51:b6:d5:3d:45:e1:8e:ea:72:41:0f: b7:da:e4:01:fd:0d:62:55:5d:5b:19:61:d6:1e:af:09:a6:af: 27:fe:0b:1f:b0:78:0d:a5:09:87:79:ce:a1:b7:da:b7:6f:63: d5:f4:58:ca:2a:af:ab:a0:8b:c4:af:dd:88:6c:72:e9:15:1d: aa:9b:4f:7a:1c:44:ce:03:d3:7c:0a:8d:66:ff:8b:0d:4d:49: b2:2b:07:11:dd:2d:c7:2d:49:ad:91:69:a5:25:c3:e7:22:57: f5:03:00:a5:e4:a7:d2:3e:c1:0e:64:87:8b:53:10:9c:ae:eb: 15:42:cc:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbrO7eMn3bbQFmzEp8PW69TbDpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEz RUI2NDQ1QjAeFw0yNjA5MjAyMDQ3NDdaFw0yNjA5MjEyMjIwNDdaMDMxMTAvBgNV BAMTKDk5NjI4NDA2RDRENEQwMDBFODQ1NkUzQzZCMDk2Rjk1NUZDNjY0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgCdQc/RKitSexCK7EwoU88W6q wT5OtkNwt1ROx2FHW1epQpxFEYojmZfvnOs8y+ObmANYxhXwOYrnkkPGwj2hpCGy +FWerxCP4rqx4BnsvEVrlbzE6qxYpfBvbf23Yk0fItVXghbzGGQ52Px5ReciHkr1 kd7UhY4b0ud9EgPxxilSh5f/NCBW2JvcyA8D7GL6aRqnoDYT3OoIjrVNxcucnzAB DrJfRz5HvS8CQcVcITs/sXLnO1Pk26EXD0Ddhys9iESoz1DT2SDCTl4jofrsQsmb eQex6nAx3gj4ZYV1m353NdLRSb9mNsJf5D/KDoczzhQl8unSOxcDj+7U+kGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmWKEBtTU0ADoRW48awlvlV/GZLwwHwYDVR0j BBgwFoAUIaGvE4IP7KrIced7pwbfkT62RFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI1NDhiYWQtN2ZlZC00MWZkLWI0MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4 MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEzRUI2NDQ1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUExQUYxMzgyMEZFQ0FBQzg3MUU3N0JBNzA2REY5MTNFQjY0 NDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRG OTEzRUI2NDQ1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhcCytySF/oqYBsA2QCEG/sYKvJ23Gn07nY KZ4CmVoMw03Xd5mCB3DGdXjchYa2KwWvf4EA2rJs/8//YWKnnd5054+kxxemQAIL r9wVkDcW6MfAUDu74CV8cEQmshsT8EitedyMH5Y24oVY/JSal/kookdVjaBu7pfR Cvl5eIggDZsMV+tRttU9ReGO6nJBD7fa5AH9DWJVXVsZYdYerwmmryf+Cx+weA2l CYd5zqG32rdvY9X0WMoqr6ugi8Sv3YhscukVHaqbT3ocRM4D03wKjWb/iw1NSbIr BxHdLcctSa2RaaUlw+ciV/UDAKXkp9I+wQ5kh4tTEJyu6xVCzNw= -----END CERTIFICATE-----Generated at Mon Sep 21 09:47:44 2026 by rpki-client