$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft File: C21FB465A0510DBFCC14562C85738E9077EEC01A.mft (raw, json) Hash identifier: 7zLKYJTDMHt6nthfOc3RexRsrzupRxpXrNpmXtJSTdQ= Subject key identifier: 21:35:40:80:07:C6:6B:1E:0E:87:A5:1B:D0:34:B7:88:22:4E:CF:0E Authority key identifier: C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A Certificate issuer: /CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Certificate serial: 5EE78E97EA4739FF676381DC0642041A6F5254F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:32:57 +0000 Manifest this update: Wed 23 Sep 2026 09:27:57 +0000 Manifest next update: Thu 24 Sep 2026 10:36:57 +0000 Files and hashes: 1: C21FB465A0510DBFCC14562C85738E9077EEC01A.crl (hash: fTLkzoxVA9RpAsVrh/Bc0eyxOFQD1Km/BcvgxnF8QI4=) 2: 3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (hash: Relrsr05v7o6LWUkvyj3CRc7sy187SltL/KM3/wqMnY=) 3: 3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (hash: rtUbQHLZbaAGcuUEYQCtJGPoOA9/PGOEJnisZdWSck8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e7:8e:97:ea:47:39:ff:67:63:81:dc:06:42:04:1a:6f:52:54:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Validity Not Before: Sep 23 09:27:57 2026 GMT Not After : Sep 24 10:36:57 2026 GMT Subject: CN=2135408007C66B1E0E87A51BD034B788224ECF0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:19:34:19:9b:79:ba:8d:7b:1b:65:be:dc: 20:77:f1:37:85:d6:b0:46:31:93:77:1b:36:15:97: b7:aa:ff:55:44:d4:06:07:e3:b1:12:03:88:26:0f: 5b:34:20:c3:c5:94:8d:4c:0e:fb:a4:2d:3e:9d:71: 9a:7d:b5:1a:d4:72:e2:bf:b8:46:b2:41:03:85:df: 0f:d2:ff:6e:36:a3:f4:2d:5e:a4:5b:0e:be:63:fc: 44:3d:b5:bf:d6:ed:48:1d:23:8e:96:4e:19:5f:ea: 7e:c6:4b:6c:8c:ea:e2:07:05:45:10:bf:0d:e1:e7: 4d:62:e8:9f:e6:b4:4a:b1:cb:f2:58:82:25:fe:9d: 6c:bb:7b:d6:ac:1f:26:d9:0f:a9:74:17:f9:14:9c: 9f:97:ae:ef:c6:39:66:dd:03:ec:85:ea:32:33:a8: 0c:94:54:55:31:21:0f:f6:c6:74:de:40:c5:03:a1: a0:19:39:a9:84:79:72:86:12:cd:fa:f4:bf:d9:f8: 58:ef:61:69:04:43:82:c1:19:da:a4:9d:ad:0c:6e: 1f:3e:7f:02:5c:d0:22:6d:a4:53:c0:a7:33:61:75: 93:e0:fd:40:1d:62:6a:11:f0:b7:4f:80:c6:70:9b: fa:49:d1:01:64:cf:d5:f8:fe:90:66:c8:98:fd:c3: 2a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:35:40:80:07:C6:6B:1E:0E:87:A5:1B:D0:34:B7:88:22:4E:CF:0E X509v3 Authority Key Identifier: keyid:C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a0:ac:48:f6:d1:e1:bc:26:e7:24:c5:4d:db:a3:93:70:a0: be:03:54:3f:df:a0:c3:1b:be:6d:b2:bc:f5:da:db:9a:f5:db: b1:e7:53:1c:a1:2e:ca:34:12:8c:0c:71:6e:d9:5b:19:8b:2d: 2c:60:b2:bb:4f:02:88:57:25:a1:8c:c4:a2:78:53:6f:3b:ab: 9a:09:93:79:2f:e3:3b:46:19:98:83:4b:7d:ab:18:68:89:92: 2a:af:39:3b:13:dd:dd:ac:b7:77:f6:8b:75:6d:cb:a5:31:73: c3:cb:0c:a0:b3:60:a1:a8:12:42:2c:06:bc:98:9e:be:d7:88: 7d:4e:4a:6a:7f:f1:22:19:a7:a0:75:2a:4a:5f:06:de:7b:c7: 0b:5b:d7:6d:57:1c:5f:4a:fd:ed:00:91:6c:7e:d6:8c:a9:c1: eb:f9:25:4f:1e:61:96:17:76:4a:10:82:93:85:c8:ac:c9:87: 97:56:c5:40:ed:3e:d0:38:a5:ed:fe:4f:3d:82:bc:2d:90:d3: 16:08:c0:55:62:04:23:23:02:66:91:e4:0f:5f:f0:46:be:62: d1:95:a2:e2:a9:d9:eb:99:f1:4a:f6:f8:de:4b:cb:5f:18:9b: 6b:42:70:d7:9e:85:82:b9:db:65:12:c5:a0:26:3f:d5:b5:15: 12:72:58:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXueOl+pHOf9nY4HcBkIEGm9SVPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3 N0VFQzAxQTAeFw0yNjA5MjMwOTI3NTdaFw0yNjA5MjQxMDM2NTdaMDMxMTAvBgNV BAMTKDIxMzU0MDgwMDdDNjZCMUUwRTg3QTUxQkQwMzRCNzg4MjI0RUNGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwBk0GZt5uo17G2W+3CB38TeF 1rBGMZN3GzYVl7eq/1VE1AYH47ESA4gmD1s0IMPFlI1MDvukLT6dcZp9tRrUcuK/ uEayQQOF3w/S/242o/QtXqRbDr5j/EQ9tb/W7UgdI46WThlf6n7GS2yM6uIHBUUQ vw3h501i6J/mtEqxy/JYgiX+nWy7e9asHybZD6l0F/kUnJ+Xru/GOWbdA+yF6jIz qAyUVFUxIQ/2xnTeQMUDoaAZOamEeXKGEs369L/Z+FjvYWkEQ4LBGdqkna0Mbh8+ fwJc0CJtpFPApzNhdZPg/UAdYmoR8LdPgMZwm/pJ0QFkz9X4/pBmyJj9wyrtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUITVAgAfGax4Oh6Ub0DS3iCJOzw4wHwYDVR0j BBgwFoAUwh+0ZaBRDb/MFFYshXOOkHfuwBowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJiY2JmZDktNTdkZi00OTBjLTg4ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVB MDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3N0VFQzAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjFGQjQ2NUEwNTEwREJGQ0MxNDU2MkM4NTczOEU5MDc3RUVD MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJiY2JmZDktNTdkZi00OTBjLTg4 ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhF OTA3N0VFQzAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCgrEj20eG8JuckxU3bo5NwoL4DVD/foMMb vm2yvPXa25r127HnUxyhLso0EowMcW7ZWxmLLSxgsrtPAohXJaGMxKJ4U287q5oJ k3kv4ztGGZiDS32rGGiJkiqvOTsT3d2st3f2i3Vty6Uxc8PLDKCzYKGoEkIsBryY nr7XiH1OSmp/8SIZp6B1KkpfBt57xwtb121XHF9K/e0AkWx+1oypwev5JU8eYZYX dkoQgpOFyKzJh5dWxUDtPtA4pe3+Tz2CvC2Q0xYIwFViBCMjAmaR5A9f8Ea+YtGV ouKp2euZ8Ur2+N5Ly18Ym2tCcNeehYK522USxaAmP9W1FRJyWIY= -----END CERTIFICATE-----Generated at Wed Sep 23 15:58:33 2026 by rpki-client