$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft File: C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft (raw, json) Hash identifier: 9PxuioOuGJkGxHGz12YghwqpHaB+CvdQw8t0gNO5ubM= Subject key identifier: 47:C9:F3:73:BC:06:2D:5C:F8:42:CA:70:BE:33:E1:29:E8:18:20:A4 Authority key identifier: C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 Certificate issuer: /CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Certificate serial: 549E0131E06496C5F5A2C07C132AB200B7B238B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 13:09:35 +0000 Manifest this update: Tue 03 Nov 2026 13:04:35 +0000 Manifest next update: Wed 04 Nov 2026 15:16:35 +0000 Files and hashes: 1: C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl (hash: vcPMBmYlvRjS7TIKx6Cqi691rV6CqhrESUR5OmyVBKc=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: fRCVhusGzoRmw1xVyCKp1DarroNp+AXJavllcEzpEYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 15:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9e:01:31:e0:64:96:c5:f5:a2:c0:7c:13:2a:b2:00:b7:b2:38:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Validity Not Before: Nov 3 13:04:35 2026 GMT Not After : Nov 4 15:16:35 2026 GMT Subject: CN=47C9F373BC062D5CF842CA70BE33E129E81820A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:4f:10:1f:23:18:62:24:83:8c:7f:e8:34: 48:be:76:f4:19:04:50:b0:e1:11:cb:e6:76:7a:e7: 4f:5c:4d:08:cf:5a:ea:9e:24:c6:c8:99:76:be:74: 37:a8:e1:05:e9:3e:81:40:82:e8:8e:8b:eb:d0:69: 9e:b0:92:bf:f0:2c:e3:51:ea:ee:1f:50:c4:9d:be: bc:f7:40:8f:82:02:09:58:14:c1:e0:f5:22:2c:ea: e7:21:96:1c:82:5d:80:42:b8:67:99:a3:07:2c:ef: 66:6f:69:32:d0:23:47:4f:c5:38:2a:37:4a:7d:e4: a0:eb:bb:21:a1:52:d6:19:cd:62:1f:32:56:7b:d5: 82:28:e9:fc:c4:09:cc:5d:cb:72:b9:d4:20:34:96: 48:77:33:45:af:b4:d3:88:ff:72:44:61:2c:31:3c: 35:19:85:5e:27:74:33:d4:c0:4e:ca:89:e5:6a:4f: 54:cc:46:87:48:1c:a6:c9:70:c7:d1:72:01:b9:53: 96:ce:91:39:54:f4:21:46:f7:64:c9:74:e1:6c:b1: a2:f8:ad:8e:cf:63:f9:c2:9c:a6:56:6c:4a:5e:2c: ae:0c:3a:b1:95:ed:71:f2:aa:b3:5a:c1:b9:61:4c: b8:4b:0c:25:ab:24:6e:c8:ea:8c:e9:6c:90:58:0d: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C9:F3:73:BC:06:2D:5C:F8:42:CA:70:BE:33:E1:29:E8:18:20:A4 X509v3 Authority Key Identifier: keyid:C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:51:5a:d4:79:8c:fe:2a:40:12:f9:29:78:bc:a2:5c:fe:37: 61:e4:23:2a:81:37:80:13:2c:6d:87:a3:e8:3e:58:1b:bd:f5: 6c:fd:5e:6f:ee:17:97:c5:d3:d1:52:8e:7c:ba:8c:57:31:2c: 6b:2a:8d:b2:cb:59:b0:c4:34:dd:c6:eb:b6:dd:88:84:69:b5: ec:26:f1:45:e8:56:34:c4:dc:6f:55:34:94:bf:38:cf:76:62: c7:97:8b:90:78:c2:f1:08:8a:ca:10:9a:e9:17:55:77:81:5d: 36:90:2e:6b:61:2a:fc:26:25:fb:0e:dc:e2:81:f4:9d:bf:90: 9c:8a:35:b1:7c:50:f3:5c:52:c0:88:f5:89:84:64:23:fa:97: 1a:3b:bb:96:a7:a5:45:bc:7f:84:cc:ee:48:e2:2f:d7:4a:e8: 38:a9:e8:5b:d7:6e:49:91:87:ae:0a:02:24:4c:ee:07:4f:69: bf:22:76:3a:d1:56:92:7c:af:f1:0a:59:7e:bc:25:e4:a5:60: 1d:93:4e:68:9a:c0:89:89:f7:15:e9:a0:a1:6e:e3:b4:ad:83: 64:ae:8b:b2:19:f4:86:1a:30:fa:ba:80:aa:62:7c:4d:1c:b7: 60:1d:05:5d:06:ee:d2:e4:df:00:3d:f8:44:fa:e8:ce:ed:7c: 26:c9:e1:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJ4BMeBklsX1osB8EyqyALeyOLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RC MUZBN0EzMTAeFw0yNjExMDMxMzA0MzVaFw0yNjExMDQxNTE2MzVaMDMxMTAvBgNV BAMTKDQ3QzlGMzczQkMwNjJENUNGODQyQ0E3MEJFMzNFMTI5RTgxODIwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pk8QHyMYYiSDjH/oNEi+dvQZ BFCw4RHL5nZ6509cTQjPWuqeJMbImXa+dDeo4QXpPoFAguiOi+vQaZ6wkr/wLONR 6u4fUMSdvrz3QI+CAglYFMHg9SIs6uchlhyCXYBCuGeZowcs72ZvaTLQI0dPxTgq N0p95KDruyGhUtYZzWIfMlZ71YIo6fzECcxdy3K51CA0lkh3M0WvtNOI/3JEYSwx PDUZhV4ndDPUwE7KieVqT1TMRodIHKbJcMfRcgG5U5bOkTlU9CFG92TJdOFssaL4 rY7PY/nCnKZWbEpeLK4MOrGV7XHyqrNawblhTLhLDCWrJG7I6ozpbJBYDbNVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR8nzc7wGLVz4QspwvjPhKegYIKQwHwYDVR0j BBgwFoAUwhZJsOkoMYw1YY7hl91dzbH6ejEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4M2IyN2MtYTczMC00MDAyLTkxYjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBF OTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RCMUZBN0EzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjE2NDlCMEU5MjgzMThDMzU2MThFRTE5N0RENURDREIxRkE3 QTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVE Q0RCMUZBN0EzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhRWtR5jP4qQBL5KXi8olz+N2HkIyqBN4AT LG2Ho+g+WBu99Wz9Xm/uF5fF09FSjny6jFcxLGsqjbLLWbDENN3G67bdiIRptewm 8UXoVjTE3G9VNJS/OM92YseXi5B4wvEIisoQmukXVXeBXTaQLmthKvwmJfsO3OKB 9J2/kJyKNbF8UPNcUsCI9YmEZCP6lxo7u5anpUW8f4TM7kjiL9dK6Dip6FvXbkmR h64KAiRM7gdPab8idjrRVpJ8r/EKWX68JeSlYB2TTmiawImJ9xXpoKFu47Stg2Su i7IZ9IYaMPq6gKpifE0ct2AdBV0G7tLk3wA9+ET66M7tfCbJ4fc= -----END CERTIFICATE-----Generated at Wed Nov 4 05:29:10 2026 by rpki-client