$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft File: 921F400C4C46F802E9ABB17F291DC57058C8535E.mft (raw, json) Hash identifier: DGUYrz2i772EreAJagFRfC0MsVrgEARi2zlQuX/M8Dc= Subject key identifier: 73:BE:97:1A:E8:02:7A:1E:F5:D8:D3:CC:51:B5:EF:F8:20:18:7F:9D Authority key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E Certificate issuer: /CN=921F400C4C46F802E9ABB17F291DC57058C8535E Certificate serial: 3DA40D2F7DD08A743ED8C22CA88E336D758BE5E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 20:03:57 +0000 Manifest this update: Wed 16 Sep 2026 19:58:57 +0000 Manifest next update: Thu 17 Sep 2026 20:05:57 +0000 Files and hashes: 1: 921F400C4C46F802E9ABB17F291DC57058C8535E.crl (hash: rqfLSnhoq8HXo+EfUUEPzNBMSCR/C35uZWV4KyH+2pY=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: f1FXgBK/PW38aWirSx5H2UEdveWzaZdr1flS6u5hn50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a4:0d:2f:7d:d0:8a:74:3e:d8:c2:2c:a8:8e:33:6d:75:8b:e5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921F400C4C46F802E9ABB17F291DC57058C8535E Validity Not Before: Sep 16 19:58:57 2026 GMT Not After : Sep 17 20:05:57 2026 GMT Subject: CN=73BE971AE8027A1EF5D8D3CC51B5EFF820187F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:4b:4a:94:ae:e1:98:86:8f:0b:18:63:96: 8d:14:32:54:09:0e:8c:d2:0b:c5:4d:32:77:16:8e: d7:7d:69:d7:ab:ac:cf:a7:00:ef:38:0b:8d:1d:e2: 44:08:cd:3d:30:99:a9:63:0b:9b:0a:92:a1:00:93: f3:ec:28:f8:5d:94:a5:d5:d9:91:bf:2e:09:a6:e3: ab:ec:db:9d:d4:3e:72:c4:cd:92:23:6f:fb:50:79: 33:a5:b5:0e:b8:ed:b4:08:19:2b:99:4a:83:c2:0c: d9:40:10:20:65:13:35:79:5a:46:fb:9d:8b:12:bb: c8:56:33:a4:c4:5e:b0:18:4d:00:3e:94:d0:c2:e2: b6:c7:7a:c9:82:5d:69:5b:8b:bc:3e:cb:33:6b:b7: ac:fa:9f:55:47:30:5e:6a:f4:92:c6:fd:28:42:2e: 74:07:67:f6:5a:22:2a:6d:ea:82:c6:99:11:4b:cb: dc:7e:b2:2b:8c:c2:92:58:93:2b:d7:cb:7b:cd:27: 6e:68:a3:8e:42:9f:ec:f7:ce:c4:01:2a:03:bd:a0: 4c:64:b7:57:c4:48:95:d5:93:22:43:72:66:ac:bf: 7b:7f:a2:3a:7d:9f:04:54:64:12:23:5c:32:4f:48: e8:f2:55:38:67:36:cf:52:30:4a:01:14:dc:3d:3b: f9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BE:97:1A:E8:02:7A:1E:F5:D8:D3:CC:51:B5:EF:F8:20:18:7F:9D X509v3 Authority Key Identifier: keyid:92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2f:c0:2b:4a:ad:6d:9b:c3:7d:14:4a:67:d7:19:c5:d5:02: 37:0b:eb:16:5f:b6:6c:e0:71:7f:d5:b2:f5:ae:7b:a0:48:ec: d7:d7:62:bd:16:7f:ce:50:bb:22:23:7b:77:81:0a:16:81:5c: 90:07:e6:9f:93:15:d4:2f:89:5f:19:44:c3:4d:44:88:b4:cd: cf:28:8f:94:10:f0:c3:86:65:79:c1:bc:38:a6:f8:14:86:e1: ac:fa:5d:b1:26:0e:3a:74:5e:ea:2c:95:c6:be:0f:9c:cc:0a: 97:a5:47:89:0e:fd:59:d0:4a:d8:05:61:b5:a5:ac:fc:51:0e: 6f:62:37:c9:32:c5:42:3e:5f:89:d4:a0:d4:62:8f:ae:01:f9: 15:7c:83:18:3d:8d:37:7e:28:79:d0:43:3e:00:1c:91:4d:dd: a4:d1:9a:44:0d:87:22:e1:c5:0a:f2:47:2f:73:87:0f:88:3d: fa:2e:b6:77:c1:dd:ee:e1:8d:44:23:5c:82:fb:0f:90:d9:9e: e7:5c:1e:90:ad:c7:88:d8:73:e5:bb:58:05:30:77:13:bc:8f: d4:ae:32:2d:c0:3e:fa:70:f3:58:85:26:f7:72:9b:86:e5:ae: 05:9b:cf:9a:bb:d2:80:03:b3:60:c1:18:92:27:c9:67:79:78: 2e:62:87:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaQNL33QinQ+2MIsqI4zbXWL5ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1 OEM4NTM1RTAeFw0yNjA5MTYxOTU4NTdaFw0yNjA5MTcyMDA1NTdaMDMxMTAvBgNV BAMTKDczQkU5NzFBRTgwMjdBMUVGNUQ4RDNDQzUxQjVFRkY4MjAxODdGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BUtKlK7hmIaPCxhjlo0UMlQJ DozSC8VNMncWjtd9aderrM+nAO84C40d4kQIzT0wmaljC5sKkqEAk/PsKPhdlKXV 2ZG/Lgmm46vs253UPnLEzZIjb/tQeTOltQ647bQIGSuZSoPCDNlAECBlEzV5Wkb7 nYsSu8hWM6TEXrAYTQA+lNDC4rbHesmCXWlbi7w+yzNrt6z6n1VHMF5q9JLG/ShC LnQHZ/ZaIipt6oLGmRFLy9x+siuMwpJYkyvXy3vNJ25oo45Cn+z3zsQBKgO9oExk t1fESJXVkyJDcmasv3t/ojp9nwRUZBIjXDJPSOjyVThnNs9SMEoBFNw9O/k5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc76XGugCeh712NPMUbXv+CAYf50wHwYDVR0j BBgwFoAUkh9ADExG+ALpq7F/KR3FcFjIU14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDkxNDJjODItYjA0My00NmViLWIwYTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0 QzQ2RjgwMkU5QUJCMTdGMjkxREM1NzA1OEM4NTM1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85MjFGNDAwQzRDNDZGODAyRTlBQkIxN0YyOTFEQzU3MDU4Qzg1 MzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvOTIxRjQwMEM0QzQ2RjgwMkU5QUJCMTdGMjkxREM1 NzA1OEM4NTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkvwCtKrW2bw30USmfXGcXVAjcL6xZftmzg cX/VsvWue6BI7NfXYr0Wf85QuyIje3eBChaBXJAH5p+TFdQviV8ZRMNNRIi0zc8o j5QQ8MOGZXnBvDim+BSG4az6XbEmDjp0Xuoslca+D5zMCpelR4kO/VnQStgFYbWl rPxRDm9iN8kyxUI+X4nUoNRij64B+RV8gxg9jTd+KHnQQz4AHJFN3aTRmkQNhyLh xQryRy9zhw+IPfoutnfB3e7hjUQjXIL7D5DZnudcHpCtx4jYc+W7WAUwdxO8j9Su Mi3APvpw81iFJvdym4blrgWbz5q70oADs2DBGJInyWd5eC5ih4w= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:01 2026 by rpki-client