$ rpki-client -vvf rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft File: C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft (raw, json) Hash identifier: HBJXENWQZgddgx7kxp+3yBogofQfdCDjKsFJ1Lp20Pg= Subject key identifier: 92:4C:64:D6:31:13:D6:C9:C4:53:B7:1A:C8:BB:5E:00:F8:E7:0A:D2 Authority key identifier: C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 Certificate issuer: /CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Certificate serial: 448E19CC327B0B20EB7EED98F14C3B5DA0FB3AE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:19:20 +0000 Manifest this update: Wed 17 Jun 2026 05:14:20 +0000 Manifest next update: Thu 18 Jun 2026 05:58:20 +0000 Files and hashes: 1: C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl (hash: vyv14JqquhiPbOTiBFFmw5V7/Mc7r03Y+LWDmQN34no=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: fRCVhusGzoRmw1xVyCKp1DarroNp+AXJavllcEzpEYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8e:19:cc:32:7b:0b:20:eb:7e:ed:98:f1:4c:3b:5d:a0:fb:3a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Validity Not Before: Jun 17 05:14:20 2026 GMT Not After : Jun 18 05:58:20 2026 GMT Subject: CN=924C64D63113D6C9C453B71AC8BB5E00F8E70AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:c3:80:2c:d9:91:f8:17:32:e1:36:e3:74: fd:32:ed:5c:b8:fb:4c:ad:2b:10:b1:83:88:66:8c: fc:a1:e6:cc:4f:bc:b0:90:2d:5a:84:f7:c7:07:5c: 7f:3c:f7:62:79:1d:51:84:ed:37:35:3d:81:06:51: 95:ec:e5:c4:6f:28:a5:4d:ca:3b:2f:4a:5b:43:fd: ee:45:ca:5d:93:25:18:f3:54:48:af:3d:15:02:bc: 8c:ae:b3:2d:32:b8:3c:78:b2:fb:58:5e:50:5a:8d: 2a:60:40:b3:4c:fb:b5:28:49:57:19:41:7b:d3:75: 7d:e0:c6:23:57:df:9b:bb:2d:82:1e:3e:28:ba:19: c3:67:4c:ef:f4:8d:fc:68:2b:dd:23:a0:b5:92:3d: f8:53:03:cc:ee:1d:c4:74:ba:e5:59:b8:ff:85:d2: 72:fe:58:f4:91:59:0d:d6:6c:0c:f1:cc:5a:73:9b: da:c3:1f:18:15:79:22:83:aa:27:89:a4:62:3c:16: 52:0e:35:12:de:04:83:92:2b:5f:4f:dd:79:f6:a9: e1:af:f6:fa:f3:58:cf:a2:7b:c1:b1:87:bb:9b:a6: ba:74:fd:7f:23:8a:3b:dc:eb:a5:93:4c:97:4b:10: 4b:40:11:92:b3:2f:4d:4a:1a:70:74:3c:4c:b4:52: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4C:64:D6:31:13:D6:C9:C4:53:B7:1A:C8:BB:5E:00:F8:E7:0A:D2 X509v3 Authority Key Identifier: keyid:C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4d:57:01:32:95:69:a0:1c:3a:f3:13:6e:1a:30:48:3b:a6: 8f:c1:6b:b7:7b:ab:6f:ec:02:3c:d8:1a:b8:00:54:3a:9e:08: 63:9a:8b:a1:3a:eb:29:3d:df:cd:a9:58:5d:57:b4:ab:ce:47: 3a:64:60:c8:03:47:98:db:f0:8d:ec:6d:29:67:25:f3:66:4d: f0:66:78:3d:ae:a1:d6:36:f8:68:f3:fd:82:2a:18:ad:32:bd: 44:e1:a0:34:8f:fa:03:36:19:19:6f:a7:ce:2c:97:8a:42:b6: 8b:95:d0:69:b2:be:49:b2:07:ad:48:30:86:25:d1:b6:8e:4b: f0:3b:3b:fd:a9:0f:fa:ce:d3:10:53:20:85:2d:ad:37:fb:51: 84:72:60:58:48:b5:e8:c3:b8:1d:82:31:03:97:72:d6:a6:14: 0d:64:42:19:6c:28:4f:f0:7b:55:91:ab:2d:84:7d:34:65:f9: 7a:3a:93:18:68:32:a5:c9:98:17:a5:dd:d3:d8:fe:8e:59:75: 6e:ef:fc:13:57:81:8d:1f:cf:c3:55:b0:ed:65:5c:db:ee:7c: 9a:7f:ac:8c:e9:39:d6:05:15:84:ab:bf:d8:3f:3c:23:56:a6: 25:8a:76:25:ce:95:17:05:e7:56:2c:b1:b1:56:b4:9c:db:18: ec:dd:4c:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURI4ZzDJ7CyDrfu2Y8Uw7XaD7OuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RC MUZBN0EzMTAeFw0yNjA2MTcwNTE0MjBaFw0yNjA2MTgwNTU4MjBaMDMxMTAvBgNV BAMTKDkyNEM2NEQ2MzExM0Q2QzlDNDUzQjcxQUM4QkI1RTAwRjhFNzBBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4cOALNmR+Bcy4TbjdP0y7Vy4 +0ytKxCxg4hmjPyh5sxPvLCQLVqE98cHXH8892J5HVGE7Tc1PYEGUZXs5cRvKKVN yjsvSltD/e5Fyl2TJRjzVEivPRUCvIyusy0yuDx4svtYXlBajSpgQLNM+7UoSVcZ QXvTdX3gxiNX35u7LYIePii6GcNnTO/0jfxoK90joLWSPfhTA8zuHcR0uuVZuP+F 0nL+WPSRWQ3WbAzxzFpzm9rDHxgVeSKDqieJpGI8FlIONRLeBIOSK19P3Xn2qeGv 9vrzWM+ie8Gxh7ubprp0/X8jijvc66WTTJdLEEtAEZKzL01KGnB0PEy0UhR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkkxk1jET1snEU7cayLteAPjnCtIwHwYDVR0j BBgwFoAUwhZJsOkoMYw1YY7hl91dzbH6ejEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4M2IyN2MtYTczMC00MDAyLTkxYjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBF OTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RCMUZBN0EzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjE2NDlCMEU5MjgzMThDMzU2MThFRTE5N0RENURDREIxRkE3 QTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVE Q0RCMUZBN0EzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhNVwEylWmgHDrzE24aMEg7po/Ba7d7q2/s AjzYGrgAVDqeCGOai6E66yk9382pWF1XtKvORzpkYMgDR5jb8I3sbSlnJfNmTfBm eD2uodY2+Gjz/YIqGK0yvUThoDSP+gM2GRlvp84sl4pCtouV0GmyvkmyB61IMIYl 0baOS/A7O/2pD/rO0xBTIIUtrTf7UYRyYFhItejDuB2CMQOXctamFA1kQhlsKE/w e1WRqy2EfTRl+Xo6kxhoMqXJmBel3dPY/o5ZdW7v/BNXgY0fz8NVsO1lXNvufJp/ rIzpOdYFFYSrv9g/PCNWpiWKdiXOlRcF51YssbFWtJzbGOzdTGQ= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:01 2026 by rpki-client