$ rpki-client -vvf rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft File: 921F400C4C46F802E9ABB17F291DC57058C8535E.mft (raw, json) Hash identifier: kiFkdUah+MD3douNDwgX5q2v5lSmJ101c1MDoRUWI6M= Subject key identifier: 21:EF:34:34:3A:69:22:B5:DA:2B:D3:AD:1D:18:06:1E:19:B4:49:53 Authority key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E Certificate issuer: /CN=921F400C4C46F802E9ABB17F291DC57058C8535E Certificate serial: 123A3E93463F3B7A4D9349B874552CA855C2DF7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 10:34:57 +0000 Manifest this update: Thu 18 Jun 2026 10:29:57 +0000 Manifest next update: Fri 19 Jun 2026 14:32:57 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: f1FXgBK/PW38aWirSx5H2UEdveWzaZdr1flS6u5hn50=) 2: 921F400C4C46F802E9ABB17F291DC57058C8535E.crl (hash: rnozfl47jVonK8d5MjrzfIVOqWzj9dPGQF7Lz1vWgVc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3a:3e:93:46:3f:3b:7a:4d:93:49:b8:74:55:2c:a8:55:c2:df:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921F400C4C46F802E9ABB17F291DC57058C8535E Validity Not Before: Jun 18 10:29:57 2026 GMT Not After : Jun 19 14:32:57 2026 GMT Subject: CN=21EF34343A6922B5DA2BD3AD1D18061E19B44953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9d:42:1b:65:33:7f:e1:a8:e3:b0:57:52:0b: d6:2e:21:c2:13:80:80:d9:aa:0a:4b:79:66:04:72: fb:14:31:c8:5a:82:28:09:9e:f8:9a:ab:00:18:01: a1:14:14:6f:57:f9:41:53:f7:8f:e8:72:3f:03:80: 27:61:d8:f9:b9:18:5b:50:79:54:de:a1:01:0a:b8: d8:5d:95:9e:df:18:e4:8b:c6:9c:44:d6:64:28:73: 68:f2:ba:59:c5:77:51:76:28:a6:4d:43:44:23:c4: 7e:63:75:b3:f0:60:bc:2c:5b:42:26:08:fd:87:77: 0e:d9:a5:ba:cf:c3:78:9d:a3:95:87:77:a0:de:c0: 39:f2:dd:47:e2:9b:e3:09:71:dc:b8:ec:66:31:e7: b4:27:93:d7:f5:fe:d2:8e:60:f1:b2:95:a7:35:89: dd:8c:59:e6:92:53:44:e5:80:ec:e1:df:9d:55:80: f9:e1:19:4b:ec:fd:08:d5:84:bd:61:b9:8d:9f:40: 19:05:e9:9d:d5:9b:41:5d:5e:b1:2d:9d:59:dc:49: fc:22:86:06:5d:c1:3d:8a:4a:9a:fe:58:3d:63:fd: 60:2f:98:65:60:68:69:fb:10:7c:5c:b6:a1:7b:44: 91:51:6a:df:44:f7:75:86:89:e8:28:2e:0c:14:f9: 86:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EF:34:34:3A:69:22:B5:DA:2B:D3:AD:1D:18:06:1E:19:B4:49:53 X509v3 Authority Key Identifier: keyid:92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:da:b0:dd:bc:20:5b:1b:f7:7b:b8:b9:56:11:71:72:af:6a: 35:8c:54:d9:a8:06:14:bf:a6:27:9c:97:cc:cb:ab:95:a2:6d: f5:5d:ec:8e:c1:e9:f7:96:bb:72:e7:9e:43:4c:7e:fe:87:3d: 38:68:87:6b:9f:81:a1:7a:86:15:2f:85:c8:ad:28:5c:be:70: ce:23:92:31:36:2c:8c:40:f0:6e:11:75:cb:75:ee:5c:5b:23: 6c:1c:df:67:6e:3c:79:be:80:c8:99:02:67:6e:16:22:80:a9: 3b:3d:22:dc:d2:38:30:e9:cb:11:f2:1c:79:72:1f:5b:f0:96: 39:58:7d:6f:24:9f:73:df:28:09:6f:93:27:85:9a:1d:f3:d7: 37:38:4b:99:fb:4f:f0:3d:65:b3:7d:26:5d:70:40:91:18:a6: 29:45:0e:c8:27:ce:80:93:9b:e4:56:07:d1:03:f7:16:c3:db: 01:d7:de:76:0a:5d:9c:20:bc:8b:64:24:13:a9:2a:fe:27:a0: b4:ae:d6:87:a8:6e:01:84:b2:42:b3:ad:5d:d6:45:01:e1:bb: 67:de:a6:68:aa:20:98:df:59:a7:0f:2f:12:05:f6:8c:dc:69: a0:06:3c:e1:91:3c:89:a8:92:56:50:55:82:e0:20:29:6f:aa: 57:23:3c:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEjo+k0Y/O3pNk0m4dFUsqFXC33swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1 OEM4NTM1RTAeFw0yNjA2MTgxMDI5NTdaFw0yNjA2MTkxNDMyNTdaMDMxMTAvBgNV BAMTKDIxRUYzNDM0M0E2OTIyQjVEQTJCRDNBRDFEMTgwNjFFMTlCNDQ5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYnUIbZTN/4ajjsFdSC9YuIcIT gIDZqgpLeWYEcvsUMchagigJnviaqwAYAaEUFG9X+UFT94/ocj8DgCdh2Pm5GFtQ eVTeoQEKuNhdlZ7fGOSLxpxE1mQoc2jyulnFd1F2KKZNQ0QjxH5jdbPwYLwsW0Im CP2Hdw7ZpbrPw3ido5WHd6DewDny3Ufim+MJcdy47GYx57Qnk9f1/tKOYPGylac1 id2MWeaSU0TlgOzh351VgPnhGUvs/QjVhL1huY2fQBkF6Z3Vm0FdXrEtnVncSfwi hgZdwT2KSpr+WD1j/WAvmGVgaGn7EHxctqF7RJFRat9E93WGiegoLgwU+Ya/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIe80NDppIrXaK9OtHRgGHhm0SVMwHwYDVR0j BBgwFoAUkh9ADExG+ALpq7F/KR3FcFjIU14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDkxNDJjODItYjA0My00NmViLWIwYTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0 QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1OEM4NTM1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85MjFGNDAwQzRDNDZGODAyRTlBQkIxN0YyOTFEQzU3MDU4Qzg1 MzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1 NzA1OEM4NTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHasN28IFsb93u4uVYRcXKvajWMVNmoBhS/ piecl8zLq5WibfVd7I7B6feWu3LnnkNMfv6HPThoh2ufgaF6hhUvhcitKFy+cM4j kjE2LIxA8G4Rdct17lxbI2wc32duPHm+gMiZAmduFiKAqTs9ItzSODDpyxHyHHly H1vwljlYfW8kn3PfKAlvkyeFmh3z1zc4S5n7T/A9ZbN9Jl1wQJEYpilFDsgnzoCT m+RWB9ED9xbD2wHX3nYKXZwgvItkJBOpKv4noLSu1oeobgGEskKzrV3WRQHhu2fe pmiqIJjfWacPLxIF9ozcaaAGPOGRPImoklZQVYLgIClvqlcjPHw= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:35 2026 by rpki-client