$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft File: D21FEA1A58BBE03288B8857877AB42210C1B816B.mft (raw, json) Hash identifier: 4UJsUeUgwdJ0YwdeKO8zPHKFE0ixbxaTuYhjHGQOVcs= Subject key identifier: CD:89:86:8A:39:D0:6C:E5:A7:64:7C:D6:2A:51:0C:A8:A2:1E:F4:BC Authority key identifier: D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B Certificate issuer: /CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Certificate serial: 2CF99091A4EED60AA792A8BF03529AD73A9BDB3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft Manifest number: BF Signing time: Tue 22 Sep 2026 01:07:53 +0000 Manifest this update: Tue 22 Sep 2026 01:02:53 +0000 Manifest next update: Wed 23 Sep 2026 03:54:53 +0000 Files and hashes: 1: D21FEA1A58BBE03288B8857877AB42210C1B816B.crl (hash: HdO8ay6RTVHiZemHQCm1ZocOcjLOn5yUF3LPJvbYSMI=) 2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: n/NFSto6DR1M2MbEoIzv13Er2v00d7K3BFa5q9qEbBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f9:90:91:a4:ee:d6:0a:a7:92:a8:bf:03:52:9a:d7:3a:9b:db:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Validity Not Before: Sep 22 01:02:53 2026 GMT Not After : Sep 23 03:54:53 2026 GMT Subject: CN=CD89868A39D06CE5A7647CD62A510CA8A21EF4BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:30:08:1e:a0:1d:85:52:84:f1:b4:d0:49: 8b:47:23:95:9f:23:54:ee:d3:1b:3f:fe:56:c3:d1: 94:cc:12:21:22:d0:76:0a:8d:e6:64:37:35:b4:01: a6:81:ad:c1:6b:b6:3f:99:e1:51:6f:f7:a5:8e:88: 57:71:41:02:6e:34:31:96:a4:55:4a:c2:9b:35:37: 86:18:90:29:d8:bd:f0:06:03:de:04:27:f8:2c:f3: fe:e5:85:2c:fa:ed:19:7b:a7:e9:ed:c2:12:c9:ea: e2:a5:3c:b7:3b:59:1d:24:ec:7f:71:86:dc:f2:a1: c8:8e:2e:80:ec:f3:1f:c7:f5:f5:8c:14:25:64:68: e7:10:e2:13:74:fa:9f:2a:f6:ec:f5:48:2d:b2:6c: e0:0f:d3:c0:ea:ae:81:6a:86:e5:88:d2:bb:d9:4b: ed:d1:f9:f9:5e:4a:7b:a6:ec:f8:25:cf:51:ae:9f: 19:f5:d6:ca:4e:03:5e:16:64:08:40:b5:e9:ae:35: 1d:95:73:0a:f6:e0:95:03:5d:97:b2:4f:9c:9e:6b: b7:91:f3:a6:e1:82:8e:14:b4:27:9d:12:91:ab:79: 14:3d:8f:50:cd:3e:e6:b9:c3:b4:43:dc:b5:10:63: 32:6a:21:a4:9a:12:d4:96:f0:ef:f5:62:f1:51:d8: d7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:89:86:8A:39:D0:6C:E5:A7:64:7C:D6:2A:51:0C:A8:A2:1E:F4:BC X509v3 Authority Key Identifier: keyid:D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:03:bc:c8:b6:48:9f:08:4c:13:3e:38:02:0d:31:30:e3:bd: c3:07:48:db:6f:90:1d:25:27:c5:0d:75:72:7e:42:07:3a:f7: 23:bb:77:17:d5:9c:d0:3a:cd:5b:23:72:24:87:5f:4b:2e:df: ea:02:2f:36:23:f8:ad:3d:7d:ed:cc:74:ee:c1:8d:a3:54:3c: 00:b9:f9:a6:54:c2:5a:54:75:03:00:f4:57:b3:ab:fe:c0:cb: d4:31:35:fe:75:50:03:61:de:86:14:8a:cd:86:2e:ef:24:98: 05:6d:66:54:fc:79:dc:9a:c4:16:97:0e:9e:02:be:89:1a:0f: 63:08:b0:e5:8a:cd:93:19:33:83:3a:33:7d:4a:b6:7e:9c:a9: d0:4c:37:37:0c:7f:84:79:8a:5a:95:cd:38:9e:09:41:ca:06: fe:f9:49:8a:81:22:c0:84:d0:f5:68:fa:ca:5b:9b:bc:42:94: a0:65:50:4a:d3:07:47:15:5a:0a:ce:97:b3:bf:c5:b4:16:88: 2b:71:f9:79:25:76:70:bc:e2:ef:58:40:c3:2c:80:74:a9:d3: 49:61:21:2c:b9:79:b7:31:8f:2b:1d:35:d8:9c:c0:de:9e:06: 30:92:d6:3d:d2:0e:f6:12:03:e0:91:71:f7:0d:fb:69:eb:60: 89:67:7a:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPmQkaTu1gqnkqi/A1Ka1zqb2zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEw QzFCODE2QjAeFw0yNjA5MjIwMTAyNTNaFw0yNjA5MjMwMzU0NTNaMDMxMTAvBgNV BAMTKENEODk4NjhBMzlEMDZDRTVBNzY0N0NENjJBNTEwQ0E4QTIxRUY0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LDAIHqAdhVKE8bTQSYtHI5Wf I1Tu0xs//lbD0ZTMEiEi0HYKjeZkNzW0AaaBrcFrtj+Z4VFv96WOiFdxQQJuNDGW pFVKwps1N4YYkCnYvfAGA94EJ/gs8/7lhSz67Rl7p+ntwhLJ6uKlPLc7WR0k7H9x htzyociOLoDs8x/H9fWMFCVkaOcQ4hN0+p8q9uz1SC2ybOAP08DqroFqhuWI0rvZ S+3R+fleSnum7Pglz1Gunxn11spOA14WZAhAtemuNR2Vcwr24JUDXZeyT5yea7eR 86bhgo4UtCedEpGreRQ9j1DNPua5w7RD3LUQYzJqIaSaEtSW8O/1YvFR2NcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYmGijnQbOWnZHzWKlEMqKIe9LwwHwYDVR0j BBgwFoAU0h/qGli74DKIuIV4d6tCIQwbgWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkYWUwYTUtYjRmNi00ZTA4LThiZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1 OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEwQzFCODE2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjFGRUExQTU4QkJFMDMyODhCODg1Nzg3N0FCNDIyMTBDMUI4 MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQy MjEwQzFCODE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8DvMi2SJ8ITBM+OAINMTDjvcMHSNtvkB0l J8UNdXJ+Qgc69yO7dxfVnNA6zVsjciSHX0su3+oCLzYj+K09fe3MdO7BjaNUPAC5 +aZUwlpUdQMA9Fezq/7Ay9QxNf51UANh3oYUis2GLu8kmAVtZlT8edyaxBaXDp4C vokaD2MIsOWKzZMZM4M6M31Ktn6cqdBMNzcMf4R5ilqVzTieCUHKBv75SYqBIsCE 0PVo+spbm7xClKBlUErTB0cVWgrOl7O/xbQWiCtx+XkldnC84u9YQMMsgHSp00lh ISy5ebcxjysdNdicwN6eBjCS1j3SDvYSA+CRcfcN+2nrYIlnelE= -----END CERTIFICATE-----Generated at Tue Sep 22 06:31:36 2026 by rpki-client