$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft File: C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft (raw, json) Hash identifier: zzEGFrKNWxBUKFMwDBppMlAY0aC3v+ZoWNgOZz3Upv8= Subject key identifier: 53:B4:FF:6D:BF:46:E8:F3:41:02:8C:CF:0F:29:E3:1C:CE:9D:DA:7F Authority key identifier: C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 Certificate issuer: /CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Certificate serial: 44B22D4CD89198BE50F61551C473D80CCBAA008A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft Manifest number: BD Signing time: Sun 20 Sep 2026 07:41:33 +0000 Manifest this update: Sun 20 Sep 2026 07:36:33 +0000 Manifest next update: Mon 21 Sep 2026 09:46:33 +0000 Files and hashes: 1: C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl (hash: 99VOwscpGm0tlyeWpKGItbygt/CUfBp1XfgBIFutpYA=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: fRCVhusGzoRmw1xVyCKp1DarroNp+AXJavllcEzpEYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 09:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b2:2d:4c:d8:91:98:be:50:f6:15:51:c4:73:d8:0c:cb:aa:00:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Validity Not Before: Sep 20 07:36:33 2026 GMT Not After : Sep 21 09:46:33 2026 GMT Subject: CN=53B4FF6DBF46E8F341028CCF0F29E31CCE9DDA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:cb:29:c7:0d:f3:b7:12:e0:48:67:05:bf: 07:f9:94:cd:3e:37:79:a0:f7:f0:78:15:b3:7d:95: d4:11:9d:4f:31:9e:47:1f:b5:75:56:d8:80:49:45: d8:24:57:9f:d9:86:8c:07:1c:01:a0:94:17:fe:a3: f4:61:d9:d1:cf:38:e2:4a:e3:3c:d9:f9:08:1f:58: 24:f4:2d:ab:de:d7:6e:99:35:b6:12:83:d6:fc:eb: b1:55:26:15:3a:8c:46:c6:2d:e2:3c:7c:26:72:82: 9f:de:ae:c5:b8:f1:6f:a3:3d:72:eb:d8:8c:06:93: 8a:89:ce:5f:ff:8a:48:51:5c:19:4a:2f:0f:b8:a2: e2:b3:7f:01:4e:3c:7a:59:fb:16:03:f0:bf:70:be: b1:88:93:05:c6:05:ba:4c:9d:f0:48:e0:c8:c3:95: b5:b9:a7:87:60:f4:3c:25:48:f7:06:de:2c:c1:fa: c8:2c:6c:10:de:8d:a0:3b:ac:ae:53:0a:34:60:56: 99:10:8c:17:02:1f:fc:3d:43:f7:3b:03:eb:e1:e3: a1:26:e9:11:ca:54:e4:fc:7d:a3:fc:5f:36:5b:2f: af:22:b0:f4:48:8d:4e:01:44:12:49:52:71:c3:e9: 41:6f:bd:ac:e9:9c:68:36:b7:4c:f1:7d:c0:3d:d1: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B4:FF:6D:BF:46:E8:F3:41:02:8C:CF:0F:29:E3:1C:CE:9D:DA:7F X509v3 Authority Key Identifier: keyid:C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ce:a4:ab:62:bf:b2:f6:a7:18:4a:7c:40:dc:35:52:ac:e8: 94:55:ad:1d:5e:6d:a9:83:01:47:59:ad:0a:75:38:77:7a:1c: 5b:e5:03:15:b5:71:2a:ed:e2:ed:1f:66:8b:1d:ae:26:3e:74: 35:6b:94:de:6c:d4:e7:a3:b2:ba:e7:08:05:75:3e:9f:a8:66: 3e:6c:bd:b3:6e:be:a6:7a:ed:f3:3f:32:19:e4:82:38:0b:1a: e5:3e:87:a4:0c:59:43:de:82:d8:a7:53:2f:c5:77:0d:f8:b9: 1c:26:fc:f4:ef:b2:33:00:1e:cf:ba:ff:6f:30:99:4d:67:84: ad:f0:92:d0:57:6e:ce:87:81:31:6c:e2:50:25:b4:68:87:6b: 0b:5a:43:5f:23:95:08:4f:ec:41:6b:1f:6b:d1:62:34:4b:41: 83:13:fe:36:c3:90:cb:5d:76:5c:87:39:a3:2d:36:4b:f4:d0: b8:ec:1a:26:cf:79:bb:51:22:35:cf:90:c9:4b:c2:98:b4:70: db:1a:4c:eb:99:6b:9e:66:77:b6:d8:db:5d:5b:65:15:78:a7: 5a:57:f8:d9:54:c2:0a:9f:97:11:cf:f9:7a:25:8b:94:e3:5b: d3:19:aa:a7:4d:b7:95:06:95:25:9a:cd:e0:ef:0b:e4:92:cb: ea:4e:04:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLItTNiRmL5Q9hVRxHPYDMuqAIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RC MUZBN0EzMTAeFw0yNjA5MjAwNzM2MzNaFw0yNjA5MjEwOTQ2MzNaMDMxMTAvBgNV BAMTKDUzQjRGRjZEQkY0NkU4RjM0MTAyOENDRjBGMjlFMzFDQ0U5RERBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi/cspxw3ztxLgSGcFvwf5lM0+ N3mg9/B4FbN9ldQRnU8xnkcftXVW2IBJRdgkV5/ZhowHHAGglBf+o/Rh2dHPOOJK 4zzZ+QgfWCT0Lave126ZNbYSg9b867FVJhU6jEbGLeI8fCZygp/ersW48W+jPXLr 2IwGk4qJzl//ikhRXBlKLw+4ouKzfwFOPHpZ+xYD8L9wvrGIkwXGBbpMnfBI4MjD lbW5p4dg9DwlSPcG3izB+sgsbBDejaA7rK5TCjRgVpkQjBcCH/w9Q/c7A+vh46Em 6RHKVOT8faP8XzZbL68isPRIjU4BRBJJUnHD6UFvvazpnGg2t0zxfcA90T8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU7T/bb9G6PNBAozPDynjHM6d2n8wHwYDVR0j BBgwFoAUwhZJsOkoMYw1YY7hl91dzbH6ejEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4M2IyN2MtYTczMC00MDAyLTkxYjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBF OTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RCMUZBN0EzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjE2NDlCMEU5MjgzMThDMzU2MThFRTE5N0RENURDREIxRkE3 QTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVE Q0RCMUZBN0EzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHOpKtiv7L2pxhKfEDcNVKs6JRVrR1ebamD AUdZrQp1OHd6HFvlAxW1cSrt4u0fZosdriY+dDVrlN5s1OejsrrnCAV1Pp+oZj5s vbNuvqZ67fM/MhnkgjgLGuU+h6QMWUPegtinUy/Fdw34uRwm/PTvsjMAHs+6/28w mU1nhK3wktBXbs6HgTFs4lAltGiHawtaQ18jlQhP7EFrH2vRYjRLQYMT/jbDkMtd dlyHOaMtNkv00LjsGibPebtRIjXPkMlLwpi0cNsaTOuZa55md7bY211bZRV4p1pX +NlUwgqflxHP+Xoli5TjW9MZqqdNt5UGlSWazeDvC+SSy+pOBO8= -----END CERTIFICATE-----Generated at Mon Sep 21 04:14:03 2026 by rpki-client