$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft File: C21FB465A0510DBFCC14562C85738E9077EEC01A.mft (raw, json) Hash identifier: 4NkENNuRSdGaPGpXtz9lZ1J1GJ2e6yPb0UT/d8ruUHg= Subject key identifier: 81:CF:0C:A7:73:2E:D8:D0:C5:1E:A7:B8:D3:09:E7:C2:B7:CE:F4:E3 Authority key identifier: C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A Certificate issuer: /CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Certificate serial: 0586555E2D7EAAA1F3A86E6E11EFA01C9BF969B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 20:37:07 +0000 Manifest this update: Mon 21 Sep 2026 20:32:07 +0000 Manifest next update: Tue 22 Sep 2026 23:44:07 +0000 Files and hashes: 1: C21FB465A0510DBFCC14562C85738E9077EEC01A.crl (hash: Y+fZmg7twpcGwVL/S63ETTtmrdLlw8ctvxDtduC1Yxo=) 2: 3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (hash: Relrsr05v7o6LWUkvyj3CRc7sy187SltL/KM3/wqMnY=) 3: 3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (hash: rtUbQHLZbaAGcuUEYQCtJGPoOA9/PGOEJnisZdWSck8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:86:55:5e:2d:7e:aa:a1:f3:a8:6e:6e:11:ef:a0:1c:9b:f9:69:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Validity Not Before: Sep 21 20:32:07 2026 GMT Not After : Sep 22 23:44:07 2026 GMT Subject: CN=81CF0CA7732ED8D0C51EA7B8D309E7C2B7CEF4E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:14:f5:56:e2:a1:0e:80:10:6b:ef:8b:c0:73: 45:bb:c5:0c:2f:e6:7b:46:50:e5:3f:59:d2:be:18: 9f:3c:51:e9:23:f6:3c:6e:bc:a0:b2:73:55:39:bf: de:ad:f5:ab:60:18:06:a1:4b:58:2a:b1:63:4a:76: a8:99:a9:97:2d:0a:9a:dc:ec:ab:b3:b3:ca:12:2c: 98:3a:ed:53:39:15:db:0a:38:28:81:f3:ae:99:1d: 40:58:e7:e4:90:c2:2b:ba:47:3b:b0:2a:1c:23:ad: ab:6c:6d:5f:2e:df:58:f0:ef:7b:f7:2d:9a:51:59: 6e:56:e2:05:24:62:51:65:d6:4e:93:95:f4:98:ca: d4:e9:03:a4:d0:fd:ac:a3:ac:27:1f:31:bf:3a:68: bd:20:73:e1:cc:71:73:eb:12:ab:93:07:d1:59:07: 1e:7e:62:c9:3e:2b:dd:7b:ca:50:25:0e:64:62:b0: 3c:6d:dc:fd:e3:45:68:44:8e:6c:e8:3a:fb:2c:ec: 31:e0:15:3c:22:db:bf:9e:f5:ac:9f:ac:ea:f2:71: 20:c5:a5:55:53:da:f4:02:54:25:5a:79:ac:54:43: 1b:75:48:71:ed:4f:ad:8b:e0:d6:58:b6:00:33:b7: 28:14:0e:e2:a6:3a:a8:17:c4:f2:9c:21:ca:51:aa: 49:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CF:0C:A7:73:2E:D8:D0:C5:1E:A7:B8:D3:09:E7:C2:B7:CE:F4:E3 X509v3 Authority Key Identifier: keyid:C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:67:f8:5b:1d:5d:ee:31:30:48:48:b3:c0:85:b4:1d:1b:f9: ec:f9:5a:9a:97:85:f0:4d:17:b8:ba:8e:d1:8c:99:1d:0f:dd: b7:9e:24:d8:c9:8f:f3:4d:52:e5:f4:a6:2b:dd:99:30:5d:73: de:61:d7:16:f0:e4:1b:90:58:b3:39:dc:c2:56:79:b8:3d:62: ae:58:aa:64:7d:26:91:62:2d:a3:af:8b:5c:a9:32:9e:fb:81: b3:91:34:b6:d1:62:cb:10:0c:38:73:d6:24:15:95:8a:8d:fb: aa:95:d6:d5:49:06:c7:81:f7:5a:3d:ad:74:c7:7c:46:e2:65: 40:d1:42:b8:a4:c8:be:f5:4c:d3:40:ff:a9:c4:4d:1d:4c:88: 1d:40:49:18:d8:1f:a6:ca:66:31:95:93:88:9e:6f:dd:77:d1: 66:f5:85:2a:8b:50:2f:99:c8:df:63:04:65:2d:6f:b8:9c:f6: 73:3d:47:c4:c6:4c:01:e9:1c:51:be:a9:8f:6f:49:73:f8:39: 9a:ae:c5:48:91:9c:f9:66:d2:2a:b6:e5:bb:a5:e1:97:45:2f: 06:58:22:46:86:72:a2:8a:4e:19:59:63:7b:62:2e:a6:ce:ea: d5:8e:1f:53:30:9b:74:1d:c6:62:f2:8f:a9:32:dd:ca:05:35: 42:d6:3d:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYZVXi1+qqHzqG5uEe+gHJv5abMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3 N0VFQzAxQTAeFw0yNjA5MjEyMDMyMDdaFw0yNjA5MjIyMzQ0MDdaMDMxMTAvBgNV BAMTKDgxQ0YwQ0E3NzMyRUQ4RDBDNTFFQTdCOEQzMDlFN0MyQjdDRUY0RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNFPVW4qEOgBBr74vAc0W7xQwv 5ntGUOU/WdK+GJ88Uekj9jxuvKCyc1U5v96t9atgGAahS1gqsWNKdqiZqZctCprc 7Kuzs8oSLJg67VM5FdsKOCiB866ZHUBY5+SQwiu6RzuwKhwjratsbV8u31jw73v3 LZpRWW5W4gUkYlFl1k6TlfSYytTpA6TQ/ayjrCcfMb86aL0gc+HMcXPrEquTB9FZ Bx5+Ysk+K917ylAlDmRisDxt3P3jRWhEjmzoOvss7DHgFTwi27+e9ayfrOrycSDF pVVT2vQCVCVaeaxUQxt1SHHtT62L4NZYtgAztygUDuKmOqgXxPKcIcpRqkkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgc8Mp3Mu2NDFHqe40wnnwrfO9OMwHwYDVR0j BBgwFoAUwh+0ZaBRDb/MFFYshXOOkHfuwBowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJiY2JmZDktNTdkZi00OTBjLTg4ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVB MDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3N0VFQzAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjFGQjQ2NUEwNTEwREJGQ0MxNDU2MkM4NTczOEU5MDc3RUVD MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJiY2JmZDktNTdkZi00OTBjLTg4 ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhF OTA3N0VFQzAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtn+FsdXe4xMEhIs8CFtB0b+ez5WpqXhfBN F7i6jtGMmR0P3beeJNjJj/NNUuX0pivdmTBdc95h1xbw5BuQWLM53MJWebg9Yq5Y qmR9JpFiLaOvi1ypMp77gbORNLbRYssQDDhz1iQVlYqN+6qV1tVJBseB91o9rXTH fEbiZUDRQrikyL71TNNA/6nETR1MiB1ASRjYH6bKZjGVk4ieb9130Wb1hSqLUC+Z yN9jBGUtb7ic9nM9R8TGTAHpHFG+qY9vSXP4OZquxUiRnPlm0iq25bul4ZdFLwZY IkaGcqKKThlZY3tiLqbO6tWOH1Mwm3QdxmLyj6ky3coFNULWPVk= -----END CERTIFICATE-----Generated at Tue Sep 22 06:33:23 2026 by rpki-client