$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft File: D21C7558CD1D6E80F107C302A7A49637AD11D654.mft (raw, json) Hash identifier: cjJTTAt6ocqTrzxfotqs31cc2FI+53ymKHuvIyuQhBM= Subject key identifier: 12:63:96:F6:7E:9C:2A:DA:5E:91:B7:C2:25:DB:F5:65:DD:AF:F9:5A Authority key identifier: D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 Certificate issuer: /CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Certificate serial: 11D9BE3C6F43603C720F1712105213E0395817C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 05:24:51 +0000 Manifest this update: Wed 04 Nov 2026 05:19:51 +0000 Manifest next update: Thu 05 Nov 2026 05:46:51 +0000 Files and hashes: 1: D21C7558CD1D6E80F107C302A7A49637AD11D654.crl (hash: Tg7TfDMyPnhnn+ZdoQF8Khk7kAVLnwJeShZSfbFWvTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 05:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d9:be:3c:6f:43:60:3c:72:0f:17:12:10:52:13:e0:39:58:17:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Validity Not Before: Nov 4 05:19:51 2026 GMT Not After : Nov 5 05:46:51 2026 GMT Subject: CN=126396F67E9C2ADA5E91B7C225DBF565DDAFF95A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:f9:e4:c4:b6:12:ec:80:b1:8f:84:30:8d: e6:20:ff:45:fa:c3:69:37:22:03:0c:81:d6:d5:6c: 3c:25:d0:36:19:69:e5:02:df:5c:d4:ea:7c:80:8e: 6e:c0:d0:09:44:e9:bb:f5:e6:2b:de:18:2a:1f:f8: 6e:fd:3a:e1:5b:c8:5c:14:5e:ef:90:b9:04:7c:ce: c1:ab:60:fa:cd:85:42:d6:a2:c5:aa:66:c8:57:0a: dc:53:70:84:ca:f1:fc:79:f6:ff:88:1f:02:99:21: ee:79:c4:3c:ce:06:e2:00:cd:1d:e9:e8:88:a6:1c: 8b:f8:ef:4a:67:0e:d9:98:cd:88:c7:7d:64:0d:e9: cf:1b:d2:15:8f:d0:01:19:0a:da:f3:43:e6:0f:42: 91:36:24:33:ec:14:1e:79:1c:af:b5:85:7e:83:4f: e9:ff:4e:a5:20:fc:f7:11:72:f0:d6:c0:59:71:09: 61:d7:6e:0d:8e:ac:97:82:df:a2:2f:a8:6c:2b:02: 9f:04:3c:cb:16:62:c6:86:b2:f7:85:b0:13:4f:92: 88:a4:c0:fc:6b:57:bb:e3:bd:0f:d9:62:a6:68:69: 51:ac:9d:19:30:e7:32:9e:a2:61:a0:02:86:5e:9c: d5:f2:0d:bb:b2:ef:f3:00:a2:64:f9:27:f3:6b:91: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:63:96:F6:7E:9C:2A:DA:5E:91:B7:C2:25:DB:F5:65:DD:AF:F9:5A X509v3 Authority Key Identifier: keyid:D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:8a:32:3d:e4:54:21:a5:c4:0f:15:c6:9f:a5:bb:0f:6f:83: 9e:29:17:49:ff:cb:55:3f:bb:14:2e:9b:0c:c2:10:83:16:22: b4:45:39:4a:14:3a:f8:1d:47:14:52:ed:0c:83:42:6a:8d:4e: ea:b8:4a:1e:6c:c6:aa:e3:48:20:dc:aa:36:1f:fa:92:ae:74: 23:a5:92:7a:3d:ae:8d:02:d7:57:45:13:67:1e:ee:59:c0:f4: e1:8d:c9:86:8f:10:3f:0a:63:ca:24:28:ff:3e:cc:f1:b7:d7: b6:a1:17:5b:9e:d4:c4:99:1b:42:9a:9d:1e:ff:f9:07:f5:14: 32:80:6f:4c:cd:63:83:aa:97:9c:07:71:be:1d:5f:12:12:6e: 5c:e3:6d:70:05:55:27:24:85:2c:d3:40:16:83:b0:2e:f3:c8: db:de:7b:71:20:26:ca:02:c9:50:fe:5e:0e:83:07:c7:bf:ec: 0b:c9:06:c9:b8:9e:95:2b:3a:4d:e2:bf:36:e7:5f:52:64:c6: 3f:a0:81:ba:0d:d0:66:f1:63:0e:b6:92:ab:4e:79:b7:f8:e0: 0e:a9:7e:c6:45:c6:9d:46:d0:4d:55:ef:7f:09:f5:8b:a0:37: 1c:17:ae:91:f4:8b:c3:01:89:3b:0c:7d:0c:26:a9:97:32:bf: e9:03:b1:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdm+PG9DYDxyDxcSEFIT4DlYF8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2MzdB RDExRDY1NDAeFw0yNjExMDQwNTE5NTFaFw0yNjExMDUwNTQ2NTFaMDMxMTAvBgNV BAMTKDEyNjM5NkY2N0U5QzJBREE1RTkxQjdDMjI1REJGNTY1RERBRkY5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1/nkxLYS7ICxj4QwjeYg/0X6 w2k3IgMMgdbVbDwl0DYZaeUC31zU6nyAjm7A0AlE6bv15iveGCof+G79OuFbyFwU Xu+QuQR8zsGrYPrNhULWosWqZshXCtxTcITK8fx59v+IHwKZIe55xDzOBuIAzR3p 6IimHIv470pnDtmYzYjHfWQN6c8b0hWP0AEZCtrzQ+YPQpE2JDPsFB55HK+1hX6D T+n/TqUg/PcRcvDWwFlxCWHXbg2OrJeC36IvqGwrAp8EPMsWYsaGsveFsBNPkoik wPxrV7vjvQ/ZYqZoaVGsnRkw5zKeomGgAoZenNXyDbuy7/MAomT5J/NrkUhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEmOW9n6cKtpekbfCJdv1Zd2v+VowHwYDVR0j BBgwFoAU0hx1WM0dboDxB8MCp6SWN60R1lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWI0ZDEtZDZiNS00ODIwLWE0OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThD RDFENkU4MEYxMDdDMzAyQTdBNDk2MzdBRDExRDY1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMjFDNzU1OENEMUQ2RTgwRjEwN0MzMDJBN0E0OTYzN0FEMTFE NjU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2 MzdBRDExRDY1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCKMj3kVCGlxA8Vxp+luw9vg54pF0n/y1U/ uxQumwzCEIMWIrRFOUoUOvgdRxRS7QyDQmqNTuq4Sh5sxqrjSCDcqjYf+pKudCOl kno9ro0C11dFE2ce7lnA9OGNyYaPED8KY8okKP8+zPG317ahF1ue1MSZG0KanR7/ +Qf1FDKAb0zNY4Oql5wHcb4dXxISblzjbXAFVSckhSzTQBaDsC7zyNvee3EgJsoC yVD+Xg6DB8e/7AvJBsm4npUrOk3ivzbnX1Jkxj+ggboN0GbxYw62kqtOebf44A6p fsZFxp1G0E1V738J9YugNxwXrpH0i8MBiTsMfQwmqZcyv+kDsd4= -----END CERTIFICATE-----Generated at Wed Nov 4 10:41:32 2026 by rpki-client