$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft File: D21FEA1A58BBE03288B8857877AB42210C1B816B.mft (raw, json) Hash identifier: hHQ2gk5V4eYBAEvV5O3Gta7nDV9e7n83zNx6Osu8k/w= Subject key identifier: 21:2F:CE:21:AE:20:BB:9D:EF:F8:4E:13:37:81:DF:22:14:51:00:BC Authority key identifier: D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B Certificate issuer: /CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Certificate serial: 16676CCC3F0929203CEE04E3A9D7FEA8ECA20122 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:07:07 +0000 Manifest this update: Tue 21 Jul 2026 05:02:07 +0000 Manifest next update: Wed 22 Jul 2026 07:02:07 +0000 Files and hashes: 1: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: n/NFSto6DR1M2MbEoIzv13Er2v00d7K3BFa5q9qEbBw=) 2: D21FEA1A58BBE03288B8857877AB42210C1B816B.crl (hash: Z9tvgIjoMlIYyRvWXv3bPcfowfP0EI4tLCMSKfKpdWI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:67:6c:cc:3f:09:29:20:3c:ee:04:e3:a9:d7:fe:a8:ec:a2:01:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Validity Not Before: Jul 21 05:02:07 2026 GMT Not After : Jul 22 07:02:07 2026 GMT Subject: CN=212FCE21AE20BB9DEFF84E133781DF22145100BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ea:b6:b3:b3:ca:7b:41:b8:db:6a:35:f7:06: 63:53:90:03:d8:fa:ed:3f:42:b1:1e:2b:3a:4a:b7: 3c:d3:0e:5b:9e:9d:c6:a0:d1:f6:65:6f:2c:fd:72: 8f:d7:bb:2e:4f:7a:b3:b1:cf:bb:85:61:71:db:bb: cf:b0:46:be:e2:6c:81:ff:29:ec:df:c3:8f:14:7b: c4:99:1f:87:9a:58:f2:fd:a1:d0:e7:80:a2:42:94: 31:b8:26:74:b7:c8:b3:3f:14:6b:4e:9a:55:a7:e7: 99:8c:81:06:01:17:52:3c:0a:0b:dd:38:8a:58:9e: 43:ff:97:ee:bd:7a:a6:93:c2:c1:ca:8a:d6:c2:67: da:cb:88:32:20:f8:36:a1:69:07:70:cf:99:62:6c: 61:29:1a:c9:8a:e1:80:6a:2a:d9:3a:0a:e0:53:b8: 19:71:dd:7b:b1:bf:1d:d6:c0:e8:87:2e:91:6e:2c: c9:e1:a8:d5:74:8f:c1:2c:6e:1d:5d:21:09:18:0c: 1a:97:e0:b0:fc:4a:f7:67:4b:78:e6:41:60:1e:95: 56:63:f1:ba:a9:dd:49:36:ba:c6:5a:92:bd:9d:5a: a1:e4:c7:f3:b0:f8:3b:5d:e2:15:9b:3a:78:21:dd: 53:98:0e:89:99:80:2f:25:85:b6:57:27:9b:4d:32: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2F:CE:21:AE:20:BB:9D:EF:F8:4E:13:37:81:DF:22:14:51:00:BC X509v3 Authority Key Identifier: keyid:D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d0:79:b6:7e:9e:74:1f:e9:80:78:8d:e5:18:fa:4b:a2:1b: 98:c8:70:eb:69:f1:43:de:36:7c:20:36:0e:a3:ea:a8:52:dd: f1:78:05:2f:46:99:7e:26:ea:2f:bb:0e:f2:f1:34:11:0a:a8: 7f:c6:e4:3e:c0:3a:b6:a7:85:34:40:0d:7e:c7:95:ba:b4:03: f8:ea:45:c4:78:1c:47:95:af:80:01:c8:e0:02:2b:3f:fb:e6: 39:56:dc:77:85:9f:a8:c8:30:fe:e9:79:ca:0d:04:72:de:b4: 80:53:2b:96:eb:67:e8:9b:79:0d:6f:58:fd:07:f7:68:12:01: 64:4c:07:83:ee:6b:5c:8c:b5:28:24:25:8f:e9:3e:41:27:b7: b1:3f:45:cc:76:47:2d:23:8f:68:4e:8b:52:a6:8e:55:3d:ef: a7:0b:fc:d4:86:bf:c9:73:27:ef:77:9c:d0:9d:62:9f:21:da: 0a:e6:ed:b2:10:c9:30:67:ab:0e:c4:5e:79:b6:17:f3:6a:c5: 13:24:cb:41:b5:1c:97:4d:fe:2e:7f:7a:a2:7c:aa:f4:c1:cf: 1f:81:9d:3b:d3:01:ec:88:c6:8c:29:ab:f9:05:18:d3:4b:1e: d8:b4:66:bd:f0:e7:ba:8f:79:68:5e:b4:3d:a2:67:4b:87:da: 06:54:83:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmdszD8JKSA87gTjqdf+qOyiASIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEw QzFCODE2QjAeFw0yNjA3MjEwNTAyMDdaFw0yNjA3MjIwNzAyMDdaMDMxMTAvBgNV BAMTKDIxMkZDRTIxQUUyMEJCOURFRkY4NEUxMzM3ODFERjIyMTQ1MTAwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM6razs8p7QbjbajX3BmNTkAPY +u0/QrEeKzpKtzzTDluencag0fZlbyz9co/Xuy5PerOxz7uFYXHbu8+wRr7ibIH/ Kezfw48Ue8SZH4eaWPL9odDngKJClDG4JnS3yLM/FGtOmlWn55mMgQYBF1I8Cgvd OIpYnkP/l+69eqaTwsHKitbCZ9rLiDIg+DahaQdwz5libGEpGsmK4YBqKtk6CuBT uBlx3Xuxvx3WwOiHLpFuLMnhqNV0j8Esbh1dIQkYDBqX4LD8SvdnS3jmQWAelVZj 8bqp3Uk2usZakr2dWqHkx/Ow+Dtd4hWbOngh3VOYDomZgC8lhbZXJ5tNMrC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIS/OIa4gu53v+E4TN4HfIhRRALwwHwYDVR0j BBgwFoAU0h/qGli74DKIuIV4d6tCIQwbgWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkYWUwYTUtYjRmNi00ZTA4LThiZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1 OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEwQzFCODE2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjFGRUExQTU4QkJFMDMyODhCODg1Nzg3N0FCNDIyMTBDMUI4 MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQy MjEwQzFCODE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrQebZ+nnQf6YB4jeUY+kuiG5jIcOtp8UPe NnwgNg6j6qhS3fF4BS9GmX4m6i+7DvLxNBEKqH/G5D7AOranhTRADX7Hlbq0A/jq RcR4HEeVr4AByOACKz/75jlW3HeFn6jIMP7pecoNBHLetIBTK5brZ+ibeQ1vWP0H 92gSAWRMB4Pua1yMtSgkJY/pPkEnt7E/Rcx2Ry0jj2hOi1KmjlU976cL/NSGv8lz J+93nNCdYp8h2grm7bIQyTBnqw7EXnm2F/NqxRMky0G1HJdN/i5/eqJ8qvTBzx+B nTvTAeyIxowpq/kFGNNLHti0Zr3w57qPeWhetD2iZ0uH2gZUg28= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:02 2026 by rpki-client