$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft File: 221D17C6CE30682D7329C49D1F803292269A742A.mft (raw, json) Hash identifier: rg5H6u5MGoq5vuAE3i8ZcfPk8bL/XqdidD8ppeATpn8= Subject key identifier: E2:7D:1C:A7:0F:E4:5A:AF:01:BE:6B:93:36:8B:53:57:04:5A:3E:1F Authority key identifier: 22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A Certificate issuer: /CN=221D17C6CE30682D7329C49D1F803292269A742A Certificate serial: 420BD521AE14FD10FE053CEDE16C760770362DB5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 10:58:21 +0000 Manifest this update: Sat 26 Sep 2026 10:53:21 +0000 Manifest next update: Sun 27 Sep 2026 13:36:21 +0000 Files and hashes: 1: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: uCL8hU03zGsiNeckLg3taG50LeWxCsa9pcNoxXuQ5KM=) 2: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: Lt2+hrkcbaTE1hrTjRZ7aEwzbnRpAkFNEq82KpPU4LQ=) 3: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: BTev4pTjb1pwUkqwaS552QJVxBH0Gw6mSTMUfpMFiQ0=) 4: 221D17C6CE30682D7329C49D1F803292269A742A.crl (hash: UnzqOZdhUvxF7rg8kHy0NQ2mwOlTUwBJweYs5ZhfLEU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0b:d5:21:ae:14:fd:10:fe:05:3c:ed:e1:6c:76:07:70:36:2d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221D17C6CE30682D7329C49D1F803292269A742A Validity Not Before: Sep 26 10:53:21 2026 GMT Not After : Sep 27 13:36:21 2026 GMT Subject: CN=E27D1CA70FE45AAF01BE6B93368B5357045A3E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:d7:82:f6:ce:37:dd:6d:3d:21:0f:25:b9: 2c:52:4c:75:91:22:0e:4e:e4:ce:31:82:74:ae:6e: 51:a6:c6:a0:c4:6a:c0:51:17:0a:12:1e:43:4a:29: 37:eb:73:78:2d:d0:fd:b2:60:e5:bc:da:3a:67:c8: 54:25:15:6d:ca:34:29:b5:61:9f:49:fe:8c:21:43: 2e:03:8d:f3:55:d5:66:9e:77:a6:38:6c:76:5f:65: 99:b2:60:f5:62:eb:d7:e5:0c:2a:79:c7:6c:09:24: b5:66:71:fb:dc:25:c1:37:70:9d:e8:4a:68:42:14: 36:76:7b:2e:29:6c:22:ab:29:da:e9:23:04:ac:12: 3b:a0:ad:fd:49:35:56:5c:1c:a7:1b:d3:ef:ad:59: d6:b8:4f:0b:6b:2e:19:00:0b:b8:2b:80:21:00:34: 10:df:8c:b1:38:68:3a:67:82:91:26:a4:96:04:8a: df:df:4f:e9:11:13:b1:d8:b1:0a:91:99:0f:0a:86: 2d:93:65:ee:87:82:ec:ee:46:a3:60:5c:b3:0e:06: 0a:99:3a:22:84:66:42:c8:95:09:ee:4d:66:98:21: eb:96:d6:10:56:24:c2:17:5c:3d:fa:b0:9b:1c:1e: 2b:3b:ec:27:67:8c:29:c5:7b:8f:bc:3a:54:db:fd: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7D:1C:A7:0F:E4:5A:AF:01:BE:6B:93:36:8B:53:57:04:5A:3E:1F X509v3 Authority Key Identifier: keyid:22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c0:e7:e2:c2:52:76:36:93:02:43:4a:a9:fe:27:0f:a3:ae: 73:ca:79:3d:0e:fb:2a:73:a1:b2:ba:d2:e9:60:eb:4e:ea:4c: 1b:2d:ec:55:db:7c:fc:cf:b4:d8:b9:fe:92:d3:f2:2e:16:54: b4:a0:57:3b:68:8c:71:87:82:23:22:53:0d:90:4c:e1:29:cb: 7a:45:9a:84:4a:5f:07:11:02:b3:e0:b7:89:15:90:09:79:0e: d2:b7:31:39:d0:07:8c:a2:ff:d5:ec:1a:81:ed:c5:93:7d:28: 7a:18:7a:64:21:b1:65:93:b0:60:d2:0c:1d:cd:25:8b:34:1d: 0c:f5:fd:56:a0:b5:79:1c:dc:5a:64:c0:ab:af:44:ac:af:22: 42:9a:59:38:33:35:42:6f:5e:d0:90:60:d8:82:fc:eb:9d:f1: 1b:56:ab:10:6d:f2:58:34:c1:0d:ba:a8:51:8a:22:ce:1c:88: f4:08:c1:8d:f1:31:e7:4a:bc:7e:db:6b:ba:23:1f:7f:3e:f4: cc:37:75:17:00:0d:f1:5a:bb:b1:24:31:5c:7a:1f:a2:02:17: 0f:d8:d5:5d:8f:49:27:fa:49:05:66:01:62:79:fc:73:88:63: 1a:98:64:fe:ba:20:67:8f:ce:ff:0d:9c:7c:42:b1:fb:05:7d: b0:2f:3e:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQgvVIa4U/RD+BTzt4Wx2B3A2LbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMyOTIy NjlBNzQyQTAeFw0yNjA5MjYxMDUzMjFaFw0yNjA5MjcxMzM2MjFaMDMxMTAvBgNV BAMTKEUyN0QxQ0E3MEZFNDVBQUYwMUJFNkI5MzM2OEI1MzU3MDQ1QTNFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumdeC9s433W09IQ8luSxSTHWR Ig5O5M4xgnSublGmxqDEasBRFwoSHkNKKTfrc3gt0P2yYOW82jpnyFQlFW3KNCm1 YZ9J/owhQy4DjfNV1Waed6Y4bHZfZZmyYPVi69flDCp5x2wJJLVmcfvcJcE3cJ3o SmhCFDZ2ey4pbCKrKdrpIwSsEjugrf1JNVZcHKcb0++tWda4TwtrLhkAC7grgCEA NBDfjLE4aDpngpEmpJYEit/fT+kRE7HYsQqRmQ8Khi2TZe6HguzuRqNgXLMOBgqZ OiKEZkLIlQnuTWaYIeuW1hBWJMIXXD36sJscHis77CdnjCnFe4+8OlTb/aANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4n0cpw/kWq8BvmuTNotTVwRaPh8wHwYDVR0j BBgwFoAUIh0Xxs4waC1zKcSdH4AykiaadCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJlMDQwMzgtYTFiNi00MzJjLTg1NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZD RTMwNjgyRDczMjlDNDlEMUY4MDMyOTIyNjlBNzQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjFEMTdDNkNFMzA2ODJENzMyOUM0OUQxRjgwMzI5MjI2OUE3 NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMy OTIyNjlBNzQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvA5+LCUnY2kwJDSqn+Jw+jrnPKeT0O+ypz obK60ulg607qTBst7FXbfPzPtNi5/pLT8i4WVLSgVztojHGHgiMiUw2QTOEpy3pF moRKXwcRArPgt4kVkAl5DtK3MTnQB4yi/9XsGoHtxZN9KHoYemQhsWWTsGDSDB3N JYs0HQz1/VagtXkc3FpkwKuvRKyvIkKaWTgzNUJvXtCQYNiC/Oud8RtWqxBt8lg0 wQ26qFGKIs4ciPQIwY3xMedKvH7ba7ojH38+9Mw3dRcADfFau7EkMVx6H6ICFw/Y 1V2PSSf6SQVmAWJ5/HOIYxqYZP66IGePzv8NnHxCsfsFfbAvPuo= -----END CERTIFICATE-----Generated at Sun Sep 27 00:40:30 2026 by rpki-client