$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft File: 921F400C4C46F802E9ABB17F291DC57058C8535E.mft (raw, json) Hash identifier: wQzuyXjIDBHX6VFzF1/mA0LxqzN/1xCsfXrB4bL8DqE= Subject key identifier: 0D:CB:F5:3E:82:9C:56:40:9C:64:26:AD:5B:16:45:B2:54:F7:3C:1E Authority key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E Certificate issuer: /CN=921F400C4C46F802E9ABB17F291DC57058C8535E Certificate serial: 10FCDDE6DF2E05ABC4F839AFAFF9151B3AFD5C77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 09:50:31 +0000 Manifest this update: Tue 03 Nov 2026 09:45:31 +0000 Manifest next update: Wed 04 Nov 2026 10:45:31 +0000 Files and hashes: 1: 921F400C4C46F802E9ABB17F291DC57058C8535E.crl (hash: WTb/mCXNzIltLV7v+40Rs71Viazx0WzaNTyaeJG3oyI=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: f1FXgBK/PW38aWirSx5H2UEdveWzaZdr1flS6u5hn50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:fc:dd:e6:df:2e:05:ab:c4:f8:39:af:af:f9:15:1b:3a:fd:5c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921F400C4C46F802E9ABB17F291DC57058C8535E Validity Not Before: Nov 3 09:45:31 2026 GMT Not After : Nov 4 10:45:31 2026 GMT Subject: CN=0DCBF53E829C56409C6426AD5B1645B254F73C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:99:6a:0e:7c:b0:c6:8b:d7:9b:6f:b6:63: 26:54:5e:9c:a6:1e:da:0d:6b:65:be:97:54:b6:51: ad:54:8e:5f:b8:c4:43:5b:b3:14:27:7a:cf:29:b3: 68:f0:00:a7:b1:0f:53:ef:99:78:7a:9e:5c:49:33: 26:30:17:8e:62:ff:1d:02:62:4f:7c:d0:c0:c9:f7: f9:aa:c4:5c:cd:fc:5a:79:61:56:e9:7f:41:29:9e: 60:04:c7:03:60:2b:e5:64:be:49:04:3f:f4:ca:0c: 97:40:06:0b:5d:11:f6:16:6a:4a:ff:d7:09:80:62: bd:fe:4b:00:ef:5c:f9:10:79:4e:82:ed:7e:56:9f: 9b:04:27:56:e5:19:73:fb:01:48:b1:c6:e5:b2:96: d7:f1:4b:0a:c6:a9:39:c0:a3:f9:53:e6:52:90:c0: fc:43:e8:1f:c6:37:33:34:e4:f8:f5:8d:b5:28:5e: 44:00:59:87:63:d3:0b:e0:ef:c8:91:cc:24:3a:93: 74:28:71:ad:d8:4a:74:3e:2b:63:6d:6b:c1:7e:f2: 99:b1:fd:9a:a3:e9:cd:f6:d2:a6:f2:d4:f7:14:92: 08:ee:aa:87:aa:f7:f7:43:3e:63:12:6b:df:7c:6d: 40:35:f2:ad:0f:fe:a1:f4:f8:74:4f:cd:cb:d0:af: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CB:F5:3E:82:9C:56:40:9C:64:26:AD:5B:16:45:B2:54:F7:3C:1E X509v3 Authority Key Identifier: keyid:92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:72:93:bb:a6:17:ec:5d:7e:ba:1f:35:d8:61:04:b0:77:e5: 3c:2c:eb:87:b8:1c:a5:c7:38:6a:d9:a1:4a:c7:e4:c5:7d:68: 13:85:2e:70:7c:9c:7d:a6:1b:bd:9d:09:b8:8f:1d:5d:91:0e: de:ff:7d:69:90:be:89:a5:6d:ff:9a:23:b7:e7:0e:6c:ed:c0: ed:fc:6d:ac:92:a4:c9:e5:06:68:96:fb:05:ee:3a:2b:d2:ad: c1:2c:64:89:51:11:0b:f1:f6:97:ae:7b:21:c0:54:34:55:ba: e5:40:28:4c:27:1a:26:40:81:97:11:a8:51:e0:d5:17:72:43: 68:32:83:00:84:03:a9:cc:9f:a2:d5:69:8b:ab:76:cd:de:0e: 38:0c:a7:ce:9d:e8:a2:67:bd:95:38:5d:ea:f3:d8:85:ee:a4: 66:b5:58:75:46:07:1e:64:c4:c7:82:c2:9e:99:f7:5e:3b:54: 7c:a9:b2:2c:42:45:b1:6d:8a:7c:b0:6c:7c:be:b0:33:33:56: ac:36:e4:80:05:4d:11:1f:9c:75:0f:ce:df:82:97:be:06:a0: 3a:b0:eb:76:96:d0:fa:c4:3d:96:cd:c8:6c:6a:75:37:cd:dc: ab:bc:c1:4e:65:cb:db:b6:5f:9f:fe:3e:05:de:8f:2f:bf:c8: ae:37:f9:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPzd5t8uBavE+Dmvr/kVGzr9XHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1 OEM4NTM1RTAeFw0yNjExMDMwOTQ1MzFaFw0yNjExMDQxMDQ1MzFaMDMxMTAvBgNV BAMTKDBEQ0JGNTNFODI5QzU2NDA5QzY0MjZBRDVCMTY0NUIyNTRGNzNDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZZlqDnywxovXm2+2YyZUXpym HtoNa2W+l1S2Ua1Ujl+4xENbsxQnes8ps2jwAKexD1PvmXh6nlxJMyYwF45i/x0C Yk980MDJ9/mqxFzN/Fp5YVbpf0EpnmAExwNgK+VkvkkEP/TKDJdABgtdEfYWakr/ 1wmAYr3+SwDvXPkQeU6C7X5Wn5sEJ1blGXP7AUixxuWyltfxSwrGqTnAo/lT5lKQ wPxD6B/GNzM05Pj1jbUoXkQAWYdj0wvg78iRzCQ6k3Qoca3YSnQ+K2Nta8F+8pmx /Zqj6c320qby1PcUkgjuqoeq9/dDPmMSa998bUA18q0P/qH0+HRPzcvQr8WjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDcv1PoKcVkCcZCatWxZFslT3PB4wHwYDVR0j BBgwFoAUkh9ADExG+ALpq7F/KR3FcFjIU14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDkxNDJjODItYjA0My00NmViLWIwYTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0 QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1OEM4NTM1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85MjFGNDAwQzRDNDZGODAyRTlBQkIxN0YyOTFEQzU3MDU4Qzg1 MzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1 NzA1OEM4NTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1yk7umF+xdfrofNdhhBLB35Tws64e4HKXH OGrZoUrH5MV9aBOFLnB8nH2mG72dCbiPHV2RDt7/fWmQvomlbf+aI7fnDmztwO38 baySpMnlBmiW+wXuOivSrcEsZIlREQvx9peueyHAVDRVuuVAKEwnGiZAgZcRqFHg 1RdyQ2gygwCEA6nMn6LVaYurds3eDjgMp86d6KJnvZU4Xerz2IXupGa1WHVGBx5k xMeCwp6Z9147VHypsixCRbFtinywbHy+sDMzVqw25IAFTREfnHUPzt+Cl74GoDqw 63aW0PrEPZbNyGxqdTfN3Ku8wU5ly9u2X5/+PgXejy+/yK43+XQ= -----END CERTIFICATE-----Generated at Tue Nov 3 22:42:11 2026 by rpki-client