$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft File: C21FB465A0510DBFCC14562C85738E9077EEC01A.mft (raw, json) Hash identifier: 41a6svJ/Mq640eijWUyGd0rsjQrYI8vPQ9uhUKqyCxQ= Subject key identifier: 55:6B:A7:65:99:02:75:E4:01:A6:29:BE:9E:FD:E9:AA:B2:5C:60:5C Authority key identifier: C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A Certificate issuer: /CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Certificate serial: 582785CEA460680B744DF75D443CD1423D0C0B26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 16:38:12 +0000 Manifest this update: Wed 02 Sep 2026 16:33:12 +0000 Manifest next update: Thu 03 Sep 2026 18:20:12 +0000 Files and hashes: 1: C21FB465A0510DBFCC14562C85738E9077EEC01A.crl (hash: MRUpkfmgmCiutHVvu/xV6EcakmBCygIQphIN8XI/Lbw=) 2: 3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (hash: rtUbQHLZbaAGcuUEYQCtJGPoOA9/PGOEJnisZdWSck8=) 3: 3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (hash: Relrsr05v7o6LWUkvyj3CRc7sy187SltL/KM3/wqMnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 18:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:27:85:ce:a4:60:68:0b:74:4d:f7:5d:44:3c:d1:42:3d:0c:0b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Validity Not Before: Sep 2 16:33:12 2026 GMT Not After : Sep 3 18:20:12 2026 GMT Subject: CN=556BA765990275E401A629BE9EFDE9AAB25C605C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:ce:52:f9:62:a8:b1:7d:54:d2:3b:04:00: c3:66:73:b6:5f:cb:82:c3:cb:8b:4c:e5:81:e6:43: b5:06:1e:35:e5:d8:98:af:72:21:29:ab:83:75:94: bb:46:39:0f:16:7d:47:60:7b:87:47:01:ca:02:bc: e5:5e:8f:91:76:a2:66:fa:d0:a4:b3:dc:41:73:56: c3:d7:c3:ab:3b:18:d9:d8:70:8d:16:e9:86:41:5a: ca:4b:27:ea:59:63:31:a0:47:1a:97:a5:83:f3:5a: a7:79:c9:bb:55:d9:83:ee:8b:47:17:36:0b:ad:f5: 51:14:cf:60:d5:72:da:2e:60:4b:28:41:82:54:ad: a1:78:fc:a2:67:52:2a:9c:4f:97:20:ca:95:70:b4: 2c:48:91:38:5c:2e:4b:fd:35:a1:be:ad:78:49:a5: 0c:8f:a4:b8:a4:e1:29:15:f2:af:0b:42:5b:ea:cc: 4b:9e:45:80:37:12:31:c2:ea:2a:31:e9:f6:2c:b5: a8:a0:17:c7:b5:45:b4:fb:c7:d9:a3:e4:52:09:1e: 94:0f:db:bf:2f:b2:98:01:8c:e5:a3:e2:bb:e6:13: 42:38:fe:c2:e5:93:d1:84:9b:f1:7f:a3:14:3d:a3: f5:bb:d4:ec:2b:84:7e:69:2e:1a:8a:1f:14:ca:88: d8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6B:A7:65:99:02:75:E4:01:A6:29:BE:9E:FD:E9:AA:B2:5C:60:5C X509v3 Authority Key Identifier: keyid:C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1c:68:cc:0c:fb:06:e4:db:a7:42:d6:44:37:af:40:55:72: fb:a8:49:d5:e0:57:7e:5c:ff:b4:69:46:35:3c:d7:2d:16:39: 29:0b:33:db:46:21:a2:09:1f:41:52:71:b5:94:c6:27:eb:f9: 50:0a:69:63:3c:5c:be:a4:8e:3c:ff:1c:4b:78:20:a0:bb:4b: b1:f8:f6:3a:b2:9b:5b:bf:12:11:ff:3a:33:7f:bc:a4:75:5e: de:ee:dd:c9:96:be:1d:6d:d8:04:a0:7c:32:de:5c:cb:cc:79: 5c:1c:65:70:90:24:76:0d:97:0e:91:62:c8:76:af:35:cf:55: 99:50:cf:86:64:ab:61:2f:cd:e9:ff:91:56:5e:2c:b6:10:77: 2f:ff:aa:46:7a:22:56:a5:bf:dc:3b:73:77:21:19:4f:38:5a: 48:03:09:07:86:ff:de:a1:8f:72:7e:fb:16:bd:11:ce:ae:27: 09:d2:27:ed:06:33:a3:7f:bf:49:74:44:fb:21:35:9a:07:44: a4:51:4b:8a:48:55:f0:0c:ff:4b:56:be:f4:bf:26:53:94:47: bf:ff:a3:38:fa:78:e2:d8:4c:74:65:32:99:7d:31:e0:07:ab: 4c:68:8c:7c:2f:80:6a:4d:58:18:89:94:e8:24:86:0e:78:58: 9f:52:31:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWCeFzqRgaAt0TfddRDzRQj0MCyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3 N0VFQzAxQTAeFw0yNjA5MDIxNjMzMTJaFw0yNjA5MDMxODIwMTJaMDMxMTAvBgNV BAMTKDU1NkJBNzY1OTkwMjc1RTQwMUE2MjlCRTlFRkRFOUFBQjI1QzYwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOs5S+WKosX1U0jsEAMNmc7Zf y4LDy4tM5YHmQ7UGHjXl2JivciEpq4N1lLtGOQ8WfUdge4dHAcoCvOVej5F2omb6 0KSz3EFzVsPXw6s7GNnYcI0W6YZBWspLJ+pZYzGgRxqXpYPzWqd5ybtV2YPui0cX Ngut9VEUz2DVctouYEsoQYJUraF4/KJnUiqcT5cgypVwtCxIkThcLkv9NaG+rXhJ pQyPpLik4SkV8q8LQlvqzEueRYA3EjHC6iox6fYstaigF8e1RbT7x9mj5FIJHpQP 278vspgBjOWj4rvmE0I4/sLlk9GEm/F/oxQ9o/W71OwrhH5pLhqKHxTKiNhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVWunZZkCdeQBpim+nv3pqrJcYFwwHwYDVR0j BBgwFoAUwh+0ZaBRDb/MFFYshXOOkHfuwBowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJiY2JmZDktNTdkZi00OTBjLTg4ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVB MDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3N0VFQzAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjFGQjQ2NUEwNTEwREJGQ0MxNDU2MkM4NTczOEU5MDc3RUVD MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJiY2JmZDktNTdkZi00OTBjLTg4 ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhF OTA3N0VFQzAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0caMwM+wbk26dC1kQ3r0BVcvuoSdXgV35c /7RpRjU81y0WOSkLM9tGIaIJH0FScbWUxifr+VAKaWM8XL6kjjz/HEt4IKC7S7H4 9jqym1u/EhH/OjN/vKR1Xt7u3cmWvh1t2ASgfDLeXMvMeVwcZXCQJHYNlw6RYsh2 rzXPVZlQz4Zkq2Evzen/kVZeLLYQdy//qkZ6Ilalv9w7c3chGU84WkgDCQeG/96h j3J++xa9Ec6uJwnSJ+0GM6N/v0l0RPshNZoHRKRRS4pIVfAM/0tWvvS/JlOUR7// ozj6eOLYTHRlMpl9MeAHq0xojHwvgGpNWBiJlOgkhg54WJ9SMd0= -----END CERTIFICATE-----Generated at Thu Sep 3 07:14:20 2026 by rpki-client