$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft File: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft (raw, json) Hash identifier: yQpvxMOuOvWPa/BxxIzJ1mFf2EELioBYLCdG4e3hv7s= Subject key identifier: F1:65:05:F3:CF:FE:69:89:BC:EB:90:5B:D8:B8:B7:C2:D6:BB:D7:5F Authority key identifier: 21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 Certificate issuer: /CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Certificate serial: 26A071C13FF03848776575EF507C0AFF459496D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:04:59 +0000 Manifest this update: Wed 16 Sep 2026 20:59:59 +0000 Manifest next update: Thu 17 Sep 2026 22:37:59 +0000 Files and hashes: 1: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl (hash: PbKc2JyyvxU4ROaNcoDNqcAsixpSBBFvUkOxWMdnhrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a0:71:c1:3f:f0:38:48:77:65:75:ef:50:7c:0a:ff:45:94:96:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Validity Not Before: Sep 16 20:59:59 2026 GMT Not After : Sep 17 22:37:59 2026 GMT Subject: CN=F16505F3CFFE6989BCEB905BD8B8B7C2D6BBD75F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e8:7b:9a:a6:14:f5:e2:ed:54:4c:60:c5:05: 0a:df:85:aa:26:b6:a8:2f:cb:f1:a0:eb:ed:e9:16: 9d:a6:cf:7d:c0:27:4e:8e:65:72:d2:57:15:cd:7f: 6e:6b:d2:36:64:a1:71:e4:54:12:a4:3c:6a:83:8f: 61:07:51:cd:d1:55:2a:ba:4a:e3:14:61:2f:b0:95: 8f:30:d2:6f:dc:c2:08:01:e0:09:77:78:42:07:37: 3c:89:ea:26:2a:d0:8c:f9:95:0f:4c:0b:7e:1d:d2: fd:97:94:c1:51:51:99:21:3c:31:2c:70:35:35:ff: d7:0d:91:e8:c6:18:2a:a1:3b:8d:b1:d1:14:cb:f0: 85:ce:95:52:be:70:b8:cf:2b:b6:17:f1:26:b5:4b: f0:d6:24:7e:86:98:25:c1:1e:06:2d:11:67:90:86: e5:11:9b:ad:90:35:38:6d:80:e6:de:55:1b:4c:50: 37:24:73:24:62:d5:01:9e:c8:e5:de:ce:81:37:48: 93:9a:9c:8d:e3:6f:ff:1b:8c:4f:83:db:05:1f:1a: 1e:7d:f3:47:de:c1:a9:aa:0a:66:3b:5e:a0:5e:8f: 10:d7:62:2e:52:5e:29:5f:73:80:db:63:f9:71:9a: 01:d3:f3:91:f2:bc:9a:ee:1c:7a:30:49:db:c2:12: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:05:F3:CF:FE:69:89:BC:EB:90:5B:D8:B8:B7:C2:D6:BB:D7:5F X509v3 Authority Key Identifier: keyid:21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f9:11:c8:44:a3:a8:aa:02:dc:d8:40:d5:60:c8:6f:52:86: f7:b5:c0:60:c3:54:2c:d0:8c:e7:81:c6:6f:6d:fe:b6:30:4f: b8:6e:06:94:e8:69:73:20:00:ee:50:c9:e5:fb:21:e2:36:a4: 52:0d:81:ca:b7:6a:60:d0:28:85:21:3f:f8:a4:45:a8:46:6d: 89:f3:a1:ae:01:c5:cf:fa:81:35:40:6f:92:50:a9:a2:3f:f1: 66:24:36:62:b9:46:9d:a8:77:11:47:ab:2e:e7:56:16:11:f9: 9a:13:64:56:5a:c5:7f:b7:a3:79:25:99:03:65:5e:bd:55:d1: e7:38:35:82:1f:36:fc:ac:ef:17:27:d7:94:db:83:1f:8f:e8: b9:bc:fd:22:fc:7e:f9:29:d8:c0:61:a5:d9:e4:54:ab:9e:60: 63:f9:e9:7e:cc:cd:e6:59:75:eb:50:10:d1:ce:dc:eb:cd:4d: 5d:ff:e0:7c:32:36:20:6c:89:23:36:01:5d:4f:8c:17:b1:5c: 3c:48:60:5a:d2:03:2c:16:cd:cd:02:6a:bc:96:1f:44:6d:1f: 88:3c:69:3b:89:6f:46:b2:e1:a0:2a:03:d7:12:9c:11:bf:26: 14:26:fe:0e:e0:dc:dc:dc:88:6f:91:35:55:a5:34:d9:72:32: c6:8a:25:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJqBxwT/wOEh3ZXXvUHwK/0WUltYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIy QzJGQ0ZDODAeFw0yNjA5MTYyMDU5NTlaFw0yNjA5MTcyMjM3NTlaMDMxMTAvBgNV BAMTKEYxNjUwNUYzQ0ZGRTY5ODlCQ0VCOTA1QkQ4QjhCN0MyRDZCQkQ3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6HuaphT14u1UTGDFBQrfhaom tqgvy/Gg6+3pFp2mz33AJ06OZXLSVxXNf25r0jZkoXHkVBKkPGqDj2EHUc3RVSq6 SuMUYS+wlY8w0m/cwggB4Al3eEIHNzyJ6iYq0Iz5lQ9MC34d0v2XlMFRUZkhPDEs cDU1/9cNkejGGCqhO42x0RTL8IXOlVK+cLjPK7YX8Sa1S/DWJH6GmCXBHgYtEWeQ huURm62QNThtgObeVRtMUDckcyRi1QGeyOXezoE3SJOanI3jb/8bjE+D2wUfGh59 80fewamqCmY7XqBejxDXYi5SXilfc4DbY/lxmgHT85HyvJruHHowSdvCEoB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8WUF88/+aYm865Bb2Li3wta7118wHwYDVR0j BBgwFoAUIeVECCWxrclH6sAgrCXnsiwvz8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDAwMGIwYzItN2VmZC00Mjc4LTk4ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgy NUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIyQzJGQ0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUU1NDQwODI1QjFBREM5NDdFQUMwMjBBQzI1RTdCMjJDMkZD RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3 QjIyQzJGQ0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJb5EchEo6iqAtzYQNVgyG9Shve1wGDDVCzQ jOeBxm9t/rYwT7huBpToaXMgAO5QyeX7IeI2pFINgcq3amDQKIUhP/ikRahGbYnz oa4Bxc/6gTVAb5JQqaI/8WYkNmK5Rp2odxFHqy7nVhYR+ZoTZFZaxX+3o3klmQNl Xr1V0ec4NYIfNvys7xcn15Tbgx+P6Lm8/SL8fvkp2MBhpdnkVKueYGP56X7MzeZZ detQENHO3OvNTV3/4HwyNiBsiSM2AV1PjBexXDxIYFrSAywWzc0CaryWH0RtH4g8 aTuJb0ay4aAqA9cSnBG/JhQm/g7g3NzciG+RNVWlNNlyMsaKJY8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:07 2026 by rpki-client