$ rpki-client -vvf rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft File: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft (raw, json) Hash identifier: +K7wFbFEzj9VCERaXVCctF9zusHoVZLeLWPkOAcmwbg= Subject key identifier: AA:1F:7F:FB:FA:E7:F7:A4:0D:37:9F:8C:FC:D2:DD:53:39:E2:26:F1 Authority key identifier: 21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 Certificate issuer: /CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Certificate serial: 3E48C19CBD002B7ACD0E6B0CF953CBCDECA8892D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 02:37:52 +0000 Manifest this update: Sat 20 Jun 2026 02:32:52 +0000 Manifest next update: Sun 21 Jun 2026 06:24:52 +0000 Files and hashes: 1: 21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl (hash: gAPXcmb5mOoKmvBTUwuL0LlROVWH8K9Rdwx3ZcOfpJY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:48:c1:9c:bd:00:2b:7a:cd:0e:6b:0c:f9:53:cb:cd:ec:a8:89:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E5440825B1ADC947EAC020AC25E7B22C2FCFC8 Validity Not Before: Jun 20 02:32:52 2026 GMT Not After : Jun 21 06:24:52 2026 GMT Subject: CN=AA1F7FFBFAE7F7A40D379F8CFCD2DD5339E226F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:63:89:39:99:54:21:c2:54:14:87:a2:4d: 1b:4c:74:5a:e8:93:6b:5d:3a:5b:0c:5a:fa:a0:4a: b1:af:54:ff:10:0b:34:11:8d:27:db:b1:11:4c:73: 3e:5b:d2:a3:1c:e0:51:dd:18:46:f4:7f:46:6c:f4: a5:01:79:bf:c3:74:3e:b6:b9:33:ea:d1:30:56:3e: 8b:a7:4f:ec:6e:9a:b2:c9:e7:4a:b9:ad:5c:0e:54: c7:e0:99:46:36:00:ae:66:30:c6:f2:a2:7e:46:a8: 42:26:38:c1:b0:16:f6:30:5d:53:6f:11:bd:b8:cb: 2f:68:00:15:9c:d5:52:af:83:dc:f5:46:4b:e2:27: cc:78:52:dc:ae:72:08:06:fb:60:79:74:fe:d0:78: 94:83:fe:5a:0c:64:71:0e:0e:16:38:54:27:b5:66: f7:08:42:c3:cb:c3:d3:56:a4:88:11:44:90:82:65: 85:2f:1b:dc:63:c7:10:a0:29:e1:27:3a:23:20:48: 04:be:82:4e:50:9f:bf:b6:9f:2e:a1:ff:24:51:6f: 03:aa:3e:f0:56:1e:11:5b:9c:9e:6f:c6:0c:87:fe: 54:40:b9:fa:f5:79:32:88:70:3f:92:4d:81:11:56: b7:24:39:2f:31:ca:cc:51:ff:f4:84:ba:43:ba:71: e8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1F:7F:FB:FA:E7:F7:A4:0D:37:9F:8C:FC:D2:DD:53:39:E2:26:F1 X509v3 Authority Key Identifier: keyid:21:E5:44:08:25:B1:AD:C9:47:EA:C0:20:AC:25:E7:B2:2C:2F:CF:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/21E5440825B1ADC947EAC020AC25E7B22C2FCFC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:59:80:a8:86:97:ba:42:27:e8:d0:41:80:8f:4f:e5:1f:de: 95:0e:b2:7c:e5:08:9e:45:65:1a:3d:14:65:de:05:b5:f8:ab: 6f:09:5f:4a:48:26:78:6a:e7:c4:2b:28:f3:9b:91:9e:64:35: dd:bc:95:7e:48:2b:1e:27:89:ad:95:ab:a6:d4:bf:43:27:9a: 13:48:a9:5b:b1:18:12:18:e5:cc:db:9d:a6:b3:ce:09:3c:42: 7e:2f:10:ba:90:1a:e6:d5:b5:01:8f:87:87:23:d4:c5:a0:d6: 21:85:ae:8e:c6:07:fd:a0:4d:19:c4:72:00:5f:3f:40:65:3a: aa:3f:c0:8a:e9:16:76:d0:75:2c:70:cb:37:f0:9d:69:49:ca: 1e:15:98:40:c2:ed:b5:08:b9:0f:41:20:d4:ea:d6:e8:65:6d: b9:8a:e3:b4:56:7c:2b:59:d6:6a:c0:df:f3:39:95:99:ba:da: 7b:d9:f5:84:29:38:e5:5d:1b:3b:c8:82:d6:93:34:ab:39:bf: 57:63:f5:ac:bd:fe:5f:c0:6f:6d:36:1d:2a:86:71:df:56:03: dd:c1:41:f1:1d:eb:8a:bd:7e:74:9e:5d:9e:e9:11:6c:ce:6d: eb:9b:ba:08:dd:1c:10:1a:00:0f:94:7d:58:1e:a7:72:c0:36: 91:ab:b0:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkjBnL0AK3rNDmsM+VPLzeyoiS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIy QzJGQ0ZDODAeFw0yNjA2MjAwMjMyNTJaFw0yNjA2MjEwNjI0NTJaMDMxMTAvBgNV BAMTKEFBMUY3RkZCRkFFN0Y3QTQwRDM3OUY4Q0ZDRDJERDUzMzlFMjI2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QmOJOZlUIcJUFIeiTRtMdFro k2tdOlsMWvqgSrGvVP8QCzQRjSfbsRFMcz5b0qMc4FHdGEb0f0Zs9KUBeb/DdD62 uTPq0TBWPounT+xumrLJ50q5rVwOVMfgmUY2AK5mMMbyon5GqEImOMGwFvYwXVNv Eb24yy9oABWc1VKvg9z1RkviJ8x4UtyucggG+2B5dP7QeJSD/loMZHEODhY4VCe1 ZvcIQsPLw9NWpIgRRJCCZYUvG9xjxxCgKeEnOiMgSAS+gk5Qn7+2ny6h/yRRbwOq PvBWHhFbnJ5vxgyH/lRAufr1eTKIcD+STYERVrckOS8xysxR//SEukO6cejbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqh9/+/rn96QNN5+M/NLdUzniJvEwHwYDVR0j BBgwFoAUIeVECCWxrclH6sAgrCXnsiwvz8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDAwMGIwYzItN2VmZC00Mjc4LTk4ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgy NUIxQURDOTQ3RUFDMDIwQUMyNUU3QjIyQzJGQ0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUU1NDQwODI1QjFBREM5NDdFQUMwMjBBQzI1RTdCMjJDMkZD RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvMjFFNTQ0MDgyNUIxQURDOTQ3RUFDMDIwQUMyNUU3 QjIyQzJGQ0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxZgKiGl7pCJ+jQQYCPT+Uf3pUOsnzlCJ5F ZRo9FGXeBbX4q28JX0pIJnhq58QrKPObkZ5kNd28lX5IKx4nia2Vq6bUv0MnmhNI qVuxGBIY5czbnaazzgk8Qn4vELqQGubVtQGPh4cj1MWg1iGFro7GB/2gTRnEcgBf P0BlOqo/wIrpFnbQdSxwyzfwnWlJyh4VmEDC7bUIuQ9BINTq1uhlbbmK47RWfCtZ 1mrA3/M5lZm62nvZ9YQpOOVdGzvIgtaTNKs5v1dj9ay9/l/Ab202HSqGcd9WA93B QfEd64q9fnSeXZ7pEWzObeubugjdHBAaAA+UfVgep3LANpGrsG4= -----END CERTIFICATE-----Generated at Sat Jun 20 08:37:36 2026 by rpki-client