$ rpki-client -vvf rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft File: 921F400C4C46F802E9ABB17F291DC57058C8535E.mft (raw, json) Hash identifier: irkdz6kAl4rxabVRtcvEn3HJT0Wd8Bbpszgq/HmEhEg= Subject key identifier: E4:9F:FD:9F:75:1D:B3:44:81:1B:8F:17:6D:68:F8:F7:74:0B:52:7F Authority key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E Certificate issuer: /CN=921F400C4C46F802E9ABB17F291DC57058C8535E Certificate serial: 3789E69370820D9D84CFC53FA29E0DE6B6FF2ACD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 15:26:09 +0000 Manifest this update: Sun 02 Aug 2026 15:21:09 +0000 Manifest next update: Mon 03 Aug 2026 16:27:09 +0000 Files and hashes: 1: 921F400C4C46F802E9ABB17F291DC57058C8535E.crl (hash: l9yU6khflU70YJUbMMXEqBeTrKL7Zbk1zE1/JIHbwGU=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: f1FXgBK/PW38aWirSx5H2UEdveWzaZdr1flS6u5hn50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 16:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:89:e6:93:70:82:0d:9d:84:cf:c5:3f:a2:9e:0d:e6:b6:ff:2a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921F400C4C46F802E9ABB17F291DC57058C8535E Validity Not Before: Aug 2 15:21:09 2026 GMT Not After : Aug 3 16:27:09 2026 GMT Subject: CN=E49FFD9F751DB344811B8F176D68F8F7740B527F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:db:87:79:48:d5:50:ee:55:18:5e:f4:fd:d0: e9:3b:45:03:89:68:9a:a2:59:ab:91:bb:68:f0:eb: 56:74:38:29:74:d6:59:40:b2:8b:70:95:86:94:3a: e5:8d:db:1a:f4:a7:37:74:0b:a5:88:b3:c0:d3:ec: 10:0b:2d:b1:a9:0e:7e:1c:54:5a:ec:96:47:a4:1a: 96:0d:fd:be:e8:80:47:e1:75:61:f3:9c:48:43:bb: 44:d2:d3:c7:89:19:14:54:70:fa:8d:47:a6:cd:87: 83:93:25:ab:a9:34:d9:20:ed:2f:b7:4e:43:96:b8: 3c:16:63:bb:df:c3:b3:cb:cc:cc:5a:82:b9:24:4e: 13:7a:b3:d4:6f:fa:db:dc:0c:14:6e:1f:10:29:ec: c3:e6:46:63:19:4f:3b:58:3a:32:1f:45:fd:f6:3f: 7e:46:07:08:db:6e:33:53:25:96:7b:8f:4b:8b:8c: de:94:78:b3:d7:3d:f8:0c:41:84:02:19:7a:ea:7e: f4:b0:f9:ac:18:e8:fe:3f:2a:b5:4c:57:3e:0b:3d: e5:bc:e7:3d:6a:07:6d:4a:13:c3:4f:1d:5d:28:a7: a1:b7:9e:71:47:3a:c6:4f:7b:cf:69:cb:20:7e:21: d4:0d:c6:25:92:22:dd:d2:f1:02:8f:a2:07:4f:0d: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9F:FD:9F:75:1D:B3:44:81:1B:8F:17:6D:68:F8:F7:74:0B:52:7F X509v3 Authority Key Identifier: keyid:92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fb:76:33:1e:9e:db:90:1d:a8:b2:e2:13:f6:46:68:2c:58: 09:3c:2e:e2:b6:d6:cd:34:fc:74:c6:38:e2:f6:a0:57:7d:0f: 75:67:09:67:c6:4e:ee:cb:fc:4c:e5:12:a7:05:86:ab:33:5c: a4:89:c2:0f:2d:5a:b3:78:f4:f7:d5:63:77:63:5b:b0:83:ee: 2b:2d:b9:30:a6:2d:2c:a2:d1:a9:67:bc:6c:d0:9c:ff:f1:26: 47:79:69:c8:53:35:97:13:5e:7c:30:89:c2:ca:8c:77:ee:b7: b5:7b:7a:5a:2b:b8:dd:70:27:be:ec:7f:2e:7a:4d:09:3b:20: aa:e7:dd:93:09:f4:6b:b0:d7:41:13:5b:be:4d:f3:ae:a2:71: 3a:bc:f4:2a:44:71:f9:0c:d5:67:92:84:b9:75:21:58:27:96: 8b:61:10:f9:88:3f:08:4d:79:b0:c2:e8:c0:e0:29:36:c9:94: c0:53:90:41:df:75:0c:ee:ff:bc:32:a9:dc:85:66:56:a6:d2: c8:22:86:b7:27:79:12:2a:09:e2:12:42:5c:7f:f9:27:59:bc: ea:48:dd:66:69:e4:d0:9c:15:87:ce:f1:2d:ca:b6:9c:c1:40: a4:8a:5d:2a:5e:43:e4:6b:e5:26:f4:ea:ee:b3:3a:63:75:e0: 14:66:8a:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4nmk3CCDZ2Ez8U/op4N5rb/Ks0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1 OEM4NTM1RTAeFw0yNjA4MDIxNTIxMDlaFw0yNjA4MDMxNjI3MDlaMDMxMTAvBgNV BAMTKEU0OUZGRDlGNzUxREIzNDQ4MTFCOEYxNzZENjhGOEY3NzQwQjUyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD024d5SNVQ7lUYXvT90Ok7RQOJ aJqiWauRu2jw61Z0OCl01llAsotwlYaUOuWN2xr0pzd0C6WIs8DT7BALLbGpDn4c VFrslkekGpYN/b7ogEfhdWHznEhDu0TS08eJGRRUcPqNR6bNh4OTJaupNNkg7S+3 TkOWuDwWY7vfw7PLzMxagrkkThN6s9Rv+tvcDBRuHxAp7MPmRmMZTztYOjIfRf32 P35GBwjbbjNTJZZ7j0uLjN6UeLPXPfgMQYQCGXrqfvSw+awY6P4/KrVMVz4LPeW8 5z1qB21KE8NPHV0op6G3nnFHOsZPe89pyyB+IdQNxiWSIt3S8QKPogdPDXbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5J/9n3Uds0SBG48XbWj493QLUn8wHwYDVR0j BBgwFoAUkh9ADExG+ALpq7F/KR3FcFjIU14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDkxNDJjODItYjA0My00NmViLWIwYTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0 QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1OEM4NTM1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85MjFGNDAwQzRDNDZGODAyRTlBQkIxN0YyOTFEQzU3MDU4Qzg1 MzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1 NzA1OEM4NTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT7djMentuQHaiy4hP2RmgsWAk8LuK21s00 /HTGOOL2oFd9D3VnCWfGTu7L/EzlEqcFhqszXKSJwg8tWrN49PfVY3djW7CD7ist uTCmLSyi0alnvGzQnP/xJkd5achTNZcTXnwwicLKjHfut7V7eloruN1wJ77sfy56 TQk7IKrn3ZMJ9Guw10ETW75N866icTq89CpEcfkM1WeShLl1IVgnlothEPmIPwhN ebDC6MDgKTbJlMBTkEHfdQzu/7wyqdyFZlam0sgihrcneRIqCeISQlx/+SdZvOpI 3WZp5NCcFYfO8S3KtpzBQKSKXSpeQ+Rr5Sb06u6zOmN14BRmir8= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:41 2026 by rpki-client