$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft (raw, json) Hash identifier: uxzy8j6JKQUQ+kQ7dDFAETvEO2aPkqe/X7b0BPFCdec= Subject key identifier: 80:D1:F0:64:4A:FF:21:6B:2B:D5:CB:CC:4A:BE:AF:5E:DA:02:57:61 Authority key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Certificate issuer: /CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Certificate serial: 3222846A10553CDB4CA36DB50A4979057B61A61B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 19:01:30 +0000 Manifest this update: Mon 02 Nov 2026 18:56:30 +0000 Manifest next update: Tue 03 Nov 2026 22:57:30 +0000 Files and hashes: 1: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl (hash: D/hxjYW7lWkelLGyNDXukhbaa4oKeKNA6hXxXKje+fs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 22:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:22:84:6a:10:55:3c:db:4c:a3:6d:b5:0a:49:79:05:7b:61:a6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Validity Not Before: Nov 2 18:56:30 2026 GMT Not After : Nov 3 22:57:30 2026 GMT Subject: CN=80D1F0644AFF216B2BD5CBCC4ABEAF5EDA025761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:d3:9f:c6:f9:60:12:0a:81:16:20:54:88: 92:84:14:b8:b3:bb:23:d2:10:2f:55:e1:20:35:4f: 49:73:df:47:59:c6:fa:f7:2f:4f:5e:8f:e2:5a:47: 85:46:92:ed:b0:3b:cc:2a:14:32:35:f4:1f:d7:9d: d7:e9:54:97:41:b4:c8:73:08:b2:b6:e1:43:d7:7a: 3f:5e:0a:91:fe:f0:86:4f:bd:47:13:05:91:ca:aa: 91:38:59:43:66:09:78:55:a6:1d:a6:d2:27:38:1a: 37:23:5f:ae:7a:2d:bf:00:c5:61:90:6f:e5:a7:33: 0e:36:bc:6d:f2:08:c0:dc:d3:ab:fa:b4:37:9f:5b: 4e:d3:06:c3:50:18:dc:a6:a3:88:f3:5f:08:ad:7a: 42:19:80:38:2d:54:86:86:d6:4d:52:4e:7c:bb:bf: 8e:de:ae:5a:67:77:eb:6b:0c:9b:ca:d8:26:7a:4e: 87:22:cd:dc:da:92:df:15:0a:a2:91:c1:3c:e5:93: 2f:ef:88:68:99:91:64:62:9d:45:99:57:b5:c2:ce: d8:b3:8f:6c:dc:e2:f7:97:00:b5:99:65:7d:72:09: c5:e6:6e:6e:28:55:fb:ae:89:d1:13:d0:91:b5:82: e2:0c:9e:aa:5d:ee:46:ba:94:16:28:32:75:10:3e: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D1:F0:64:4A:FF:21:6B:2B:D5:CB:CC:4A:BE:AF:5E:DA:02:57:61 X509v3 Authority Key Identifier: keyid:B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d2:f9:86:73:64:0a:3c:34:be:59:0a:a3:63:84:2d:e4:f6: 57:2e:bb:4c:55:4f:ff:ca:18:df:a7:e4:4d:8b:bb:1e:37:5c: d6:63:2a:b9:2e:97:2f:6c:49:2f:51:78:b7:5c:19:c3:63:0d: d8:a1:e6:bf:ca:52:49:99:ee:5a:9a:36:ca:a8:81:78:3d:ca: a2:ce:8b:bf:c3:2b:cb:0f:1d:2c:a3:de:4f:76:fb:72:ca:b6: 30:d5:8d:cc:02:1d:6b:c4:97:82:c9:54:b9:ba:26:0e:fb:ae: de:6c:94:89:8f:71:a3:62:bf:10:24:19:28:50:c0:35:34:cc: 09:b2:a0:5a:d8:e2:7a:96:b0:fa:ee:05:11:d6:de:b1:17:cc: 0c:07:17:ba:11:5c:51:73:68:4c:a3:cd:dd:90:98:3a:74:58: 14:fb:93:58:d8:bd:9a:cd:86:dc:fe:e6:a5:5a:1c:f0:03:a0: fc:5f:c4:3d:66:b5:6a:d8:08:e6:ba:2a:42:70:e4:a1:ee:6f: d9:37:c5:a6:bf:b2:53:24:47:a4:88:9e:bf:0a:53:32:41:fe: ca:55:f2:83:fd:0b:03:fd:34:50:1b:1a:a3:dc:12:da:68:e9: e0:8d:91:25:57:da:28:a3:18:7c:31:43:a0:7a:55:dc:46:4b: 31:85:1d:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMiKEahBVPNtMo221Ckl5BXthphswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBGQjAx RkM2NDNDMTAeFw0yNjExMDIxODU2MzBaFw0yNjExMDMyMjU3MzBaMDMxMTAvBgNV BAMTKDgwRDFGMDY0NEFGRjIxNkIyQkQ1Q0JDQzRBQkVBRjVFREEwMjU3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqdOfxvlgEgqBFiBUiJKEFLiz uyPSEC9V4SA1T0lz30dZxvr3L09ej+JaR4VGku2wO8wqFDI19B/XndfpVJdBtMhz CLK24UPXej9eCpH+8IZPvUcTBZHKqpE4WUNmCXhVph2m0ic4GjcjX656Lb8AxWGQ b+WnMw42vG3yCMDc06v6tDefW07TBsNQGNymo4jzXwitekIZgDgtVIaG1k1STny7 v47erlpnd+trDJvK2CZ6Tocizdzakt8VCqKRwTzlky/viGiZkWRinUWZV7XCztiz j2zc4veXALWZZX1yCcXmbm4oVfuuidET0JG1guIMnqpd7ka6lBYoMnUQPl7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgNHwZEr/IWsr1cvMSr6vXtoCV2EwHwYDVR0j BBgwFoAUshIgoSddUCLcHjOQr4wPsB/GQ8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA4ODY0OGYtNWUwYi00MzM4LTkxMWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEy NzVENTAyMkRDMUUzMzkwQUY4QzBGQjAxRkM2NDNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMjEyMjBBMTI3NUQ1MDIyREMxRTMzOTBBRjhDMEZCMDFGQzY0 M0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBG QjAxRkM2NDNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvS+YZzZAo8NL5ZCqNjhC3k9lcuu0xVT//K GN+n5E2Lux43XNZjKrkuly9sSS9ReLdcGcNjDdih5r/KUkmZ7lqaNsqogXg9yqLO i7/DK8sPHSyj3k92+3LKtjDVjcwCHWvEl4LJVLm6Jg77rt5slImPcaNivxAkGShQ wDU0zAmyoFrY4nqWsPruBRHW3rEXzAwHF7oRXFFzaEyjzd2QmDp0WBT7k1jYvZrN htz+5qVaHPADoPxfxD1mtWrYCOa6KkJw5KHub9k3xaa/slMkR6SInr8KUzJB/spV 8oP9CwP9NFAbGqPcEtpo6eCNkSVX2iijGHwxQ6B6VdxGSzGFHfM= -----END CERTIFICATE-----Generated at Tue Nov 3 08:25:11 2026 by rpki-client