$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft File: C21FB465A0510DBFCC14562C85738E9077EEC01A.mft (raw, json) Hash identifier: fBQnzZSi1JVIWzgeuLkxgpwU1aB3hkt4Cfwo8pW6+Tk= Subject key identifier: 84:0C:07:97:71:D1:83:9B:AA:FB:2B:8E:DF:00:2E:D1:94:E6:08:F6 Authority key identifier: C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A Certificate issuer: /CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Certificate serial: 034CE0B3205AF4948BB7EE01EBB07CC55C85A96D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:55:50 +0000 Manifest this update: Tue 16 Jun 2026 17:50:50 +0000 Manifest next update: Wed 17 Jun 2026 18:39:50 +0000 Files and hashes: 1: C21FB465A0510DBFCC14562C85738E9077EEC01A.crl (hash: rD8HogYADHJ1qk5oHYbWYJqUeG5OkzH99DxK1A4Kogc=) 2: 3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (hash: Relrsr05v7o6LWUkvyj3CRc7sy187SltL/KM3/wqMnY=) 3: 3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (hash: rtUbQHLZbaAGcuUEYQCtJGPoOA9/PGOEJnisZdWSck8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4c:e0:b3:20:5a:f4:94:8b:b7:ee:01:eb:b0:7c:c5:5c:85:a9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Validity Not Before: Jun 16 17:50:50 2026 GMT Not After : Jun 17 18:39:50 2026 GMT Subject: CN=840C079771D1839BAAFB2B8EDF002ED194E608F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:31:d3:f9:17:df:f8:0e:6e:9f:cb:24:c7: 6f:03:ae:a1:98:51:1d:f5:74:30:50:d1:43:da:b8: 1c:bb:da:c7:85:fb:c9:ec:a3:30:f1:06:43:21:0e: 28:9f:14:d7:b3:8d:e7:a1:07:ed:80:64:74:f8:7b: 89:5d:2a:d1:ac:33:2b:ca:42:1b:6b:fa:31:69:83: d7:2a:74:46:ab:e1:67:d6:15:f4:c4:5e:81:93:76: 2d:3f:d0:68:5c:e7:5e:db:9f:98:75:9f:d6:92:a9: c9:30:44:d6:13:d6:29:ee:18:ec:4a:78:65:9d:cf: 5a:68:b6:96:16:2f:af:1f:88:f1:3f:9d:22:f9:e1: 9f:b8:f2:e4:c7:ab:86:46:65:9d:c2:b1:28:2a:7d: ce:73:cc:b5:e2:0e:2a:4c:0a:52:f4:a1:24:cd:18: bb:00:6a:a0:8b:7d:f8:43:1d:18:42:40:60:0a:d9: 23:18:01:f1:9b:f7:0d:71:6a:d2:a9:8a:45:7b:d0: ce:66:06:f8:c1:ec:72:bc:da:27:b2:21:23:c8:61: 8a:0b:82:00:e1:f3:c2:49:43:ce:4d:f2:61:07:06: 37:e1:41:6f:a4:db:30:61:a0:9d:1d:3b:a2:1f:18: 8e:ab:7b:bd:7f:91:1f:a7:ae:32:f7:15:ed:e2:26: 1e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0C:07:97:71:D1:83:9B:AA:FB:2B:8E:DF:00:2E:D1:94:E6:08:F6 X509v3 Authority Key Identifier: keyid:C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:20:d3:52:9b:e6:16:6b:10:5d:8b:21:b5:74:4d:2c:79:57: b8:bb:f7:2b:da:11:ee:0b:12:ea:90:67:f5:4e:7f:4b:69:46: 02:d2:4d:02:e1:bf:4f:83:5a:56:4a:09:d8:af:32:c2:1f:cd: 36:ea:ae:78:1d:1a:a9:82:6d:b6:5b:06:04:22:31:2e:c4:e7: 64:c9:9e:2f:a4:3d:64:63:3b:3e:2f:7d:a6:ed:b0:b3:7f:8d: c1:16:88:64:ef:e8:02:92:10:52:dc:4a:56:7c:d3:79:5b:be: e9:ee:23:bc:b3:9b:b4:0d:45:6d:4a:79:1f:89:f1:c5:68:f0: ca:53:b1:1e:59:1f:18:54:9f:3d:08:1a:1a:5c:bf:b2:34:a7: c4:86:c1:3c:8c:d1:58:3a:ed:de:b8:8d:c1:b7:de:b2:5d:63: b6:4f:49:0d:06:ad:ad:92:f5:88:95:1a:6b:15:cf:69:6a:45: e6:82:15:00:df:53:ba:02:92:d7:ef:c6:5f:bb:a4:d4:55:47: 7e:48:77:1e:7f:fa:f3:68:62:32:cd:b5:ef:13:f7:34:9a:d1: aa:4e:1d:55:ae:e5:18:3b:3e:be:8f:f8:2d:56:e4:3c:ab:10: 09:5e:10:c6:46:7a:83:a8:90:1d:3e:a7:fc:ff:b5:93:37:cc: 5e:a2:51:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0zgsyBa9JSLt+4B67B8xVyFqW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3 N0VFQzAxQTAeFw0yNjA2MTYxNzUwNTBaFw0yNjA2MTcxODM5NTBaMDMxMTAvBgNV BAMTKDg0MEMwNzk3NzFEMTgzOUJBQUZCMkI4RURGMDAyRUQxOTRFNjA4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwTHT+Rff+A5un8skx28DrqGY UR31dDBQ0UPauBy72seF+8nsozDxBkMhDiifFNezjeehB+2AZHT4e4ldKtGsMyvK Qhtr+jFpg9cqdEar4WfWFfTEXoGTdi0/0Ghc517bn5h1n9aSqckwRNYT1inuGOxK eGWdz1potpYWL68fiPE/nSL54Z+48uTHq4ZGZZ3CsSgqfc5zzLXiDipMClL0oSTN GLsAaqCLffhDHRhCQGAK2SMYAfGb9w1xatKpikV70M5mBvjB7HK82ieyISPIYYoL ggDh88JJQ85N8mEHBjfhQW+k2zBhoJ0dO6IfGI6re71/kR+nrjL3Fe3iJh7rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhAwHl3HRg5uq+yuO3wAu0ZTmCPYwHwYDVR0j BBgwFoAUwh+0ZaBRDb/MFFYshXOOkHfuwBowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJiY2JmZDktNTdkZi00OTBjLTg4ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVB MDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3N0VFQzAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjFGQjQ2NUEwNTEwREJGQ0MxNDU2MkM4NTczOEU5MDc3RUVD MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJiY2JmZDktNTdkZi00OTBjLTg4 ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhF OTA3N0VFQzAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkg01Kb5hZrEF2LIbV0TSx5V7i79yvaEe4L EuqQZ/VOf0tpRgLSTQLhv0+DWlZKCdivMsIfzTbqrngdGqmCbbZbBgQiMS7E52TJ ni+kPWRjOz4vfabtsLN/jcEWiGTv6AKSEFLcSlZ803lbvunuI7yzm7QNRW1KeR+J 8cVo8MpTsR5ZHxhUnz0IGhpcv7I0p8SGwTyM0Vg67d64jcG33rJdY7ZPSQ0Gra2S 9YiVGmsVz2lqReaCFQDfU7oCktfvxl+7pNRVR35Idx5/+vNoYjLNte8T9zSa0apO HVWu5Rg7Pr6P+C1W5DyrEAleEMZGeoOokB0+p/z/tZM3zF6iUV4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:05 2026 by rpki-client