$ rpki-client -vvvf rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft File: 01D21CF844B21F1A9486A445F946566129AD4A58.mft (raw, json) Hash identifier: /F37fcXw9nLSrbAnjAfdRUxsEsa/34P9exxuQFmgR0w= Subject key identifier: 28:8C:DD:53:D2:A5:4A:F1:87:77:69:AC:F2:46:D5:38:3D:0B:9B:64 Authority key identifier: 01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 Certificate issuer: /CN=01D21CF844B21F1A9486A445F946566129AD4A58 Certificate serial: 52E94AB29304A4105FD319EDE950346A4FFA2A96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft Manifest number: EB Signing time: Sat 24 Oct 2026 18:42:24 +0000 Manifest this update: Sat 24 Oct 2026 18:37:24 +0000 Manifest next update: Sun 25 Oct 2026 22:39:24 +0000 Files and hashes: 1: 01D21CF844B21F1A9486A445F946566129AD4A58.crl (hash: SMtzxZoCw+ZXlzJQEMeGuaYdINg0y1iYrucCR2B72D8=) 2: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: ufsOCUOJb9bQMTjSTFriIXnfAAEVhWffzH9OME9bvBM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e9:4a:b2:93:04:a4:10:5f:d3:19:ed:e9:50:34:6a:4f:fa:2a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01D21CF844B21F1A9486A445F946566129AD4A58 Validity Not Before: Oct 24 18:37:24 2026 GMT Not After : Oct 25 22:39:24 2026 GMT Subject: CN=288CDD53D2A54AF1877769ACF246D5383D0B9B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:a5:56:e6:2c:7d:7c:69:46:58:f0:d9:96: d7:4c:0b:10:5f:02:73:88:09:0f:6c:7b:4d:f8:6f: d5:86:44:5b:a8:26:22:f8:fc:3f:ac:ce:a5:bf:6b: 82:78:50:09:13:33:25:88:b3:f8:51:ae:72:5b:11: 99:a1:78:39:fc:75:9c:63:f1:18:86:71:40:b5:ce: 11:09:56:79:be:93:8d:fa:72:26:bc:09:84:9b:3f: 6a:cc:e9:90:2e:cd:b4:6d:12:9a:13:be:6c:45:84: c0:fd:44:e7:76:6a:e9:8a:15:98:e1:3d:a8:37:73: 07:2d:9c:4a:18:f7:a9:16:5f:51:7e:a8:30:53:c0: 63:d8:be:0d:6e:5f:ec:ff:6b:73:f7:85:09:a1:b9: 18:8b:01:eb:39:36:d7:ce:7a:b3:fd:92:1c:41:ff: ae:57:58:a6:59:3e:22:3c:7c:34:f3:82:39:c7:b2: cc:0a:91:d3:e7:06:53:df:95:3b:cd:53:41:36:0a: 1b:6b:fe:3e:f1:53:39:65:11:23:ab:a3:7e:85:82: 2d:c3:90:e3:b4:4f:12:9c:12:79:89:9e:63:7c:99: 5b:0a:3b:87:f0:55:17:d6:ad:12:c6:44:f9:0a:07: 19:8d:2e:c8:c1:74:86:23:1c:77:aa:59:8e:50:ba: 45:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8C:DD:53:D2:A5:4A:F1:87:77:69:AC:F2:46:D5:38:3D:0B:9B:64 X509v3 Authority Key Identifier: keyid:01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:15:ec:6c:91:09:93:fa:df:73:c4:36:27:d5:10:60:04:f6: c1:8d:b1:e4:c6:6f:15:88:27:5f:d1:0f:e7:42:59:f6:21:3c: 24:9d:d8:b7:7a:64:a5:ee:93:5b:6d:ac:b7:a6:a6:0d:29:4b: 45:47:63:35:31:83:b7:c5:a4:8d:eb:2f:41:82:89:a5:2e:55: 25:89:82:33:df:07:dc:84:31:0d:cd:da:cc:45:c8:b9:7c:be: 56:8d:e1:e8:5d:05:8d:05:e5:b3:bd:96:32:34:fa:ef:8c:e6: fe:b6:34:c8:7d:93:0e:79:3f:73:e3:7d:ee:0a:57:90:07:cb: 0f:12:00:cc:fe:e4:50:a2:e1:cb:0d:c4:22:89:8a:a4:44:b2: da:5f:5d:99:e8:40:da:bf:8a:45:67:53:2d:02:ef:74:f7:c6: dd:e5:d8:7e:90:be:29:ee:e2:18:c7:1b:b3:6d:5f:66:c5:c5: 6c:12:88:64:fa:36:57:39:96:b2:1e:c7:27:91:aa:04:1c:71: 31:16:ee:9b:7b:57:be:47:19:58:9e:3c:64:03:bc:32:62:d9: 18:62:6d:f4:ff:21:79:27:34:f5:57:de:1d:02:3d:1d:8c:71: 54:87:8e:eb:03:d0:7c:dd:fe:dd:89:32:e6:78:05:f6:bb:7e: c0:2e:29:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUulKspMEpBBf0xnt6VA0ak/6KpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFEMjFDRjg0NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2NjEy OUFENEE1ODAeFw0yNjEwMjQxODM3MjRaFw0yNjEwMjUyMjM5MjRaMDMxMTAvBgNV BAMTKDI4OENERDUzRDJBNTRBRjE4Nzc3NjlBQ0YyNDZENTM4M0QwQjlCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WqVW5ix9fGlGWPDZltdMCxBf AnOICQ9se034b9WGRFuoJiL4/D+szqW/a4J4UAkTMyWIs/hRrnJbEZmheDn8dZxj 8RiGcUC1zhEJVnm+k436cia8CYSbP2rM6ZAuzbRtEpoTvmxFhMD9ROd2aumKFZjh Pag3cwctnEoY96kWX1F+qDBTwGPYvg1uX+z/a3P3hQmhuRiLAes5NtfOerP9khxB /65XWKZZPiI8fDTzgjnHsswKkdPnBlPflTvNU0E2Chtr/j7xUzllESOro36Fgi3D kOO0TxKcEnmJnmN8mVsKO4fwVRfWrRLGRPkKBxmNLsjBdIYjHHeqWY5QukWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKIzdU9KlSvGHd2ms8kbVOD0Lm2QwHwYDVR0j BBgwFoAUAdIc+ESyHxqUhqRF+UZWYSmtSlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTM0ZDgyNzctMjkxMC00MDc1LWI5MzctNjZmOTQzNTE4ZTI5LzAvMDFEMjFDRjg0 NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2NjEyOUFENEE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUQyMUNGODQ0QjIxRjFBOTQ4NkE0NDVGOTQ2NTY2MTI5QUQ0 QTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvMDFEMjFDRjg0NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2 NjEyOUFENEE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAV7GyRCZP633PENifVEGAE9sGNseTGbxWI J1/RD+dCWfYhPCSd2Ld6ZKXuk1ttrLempg0pS0VHYzUxg7fFpI3rL0GCiaUuVSWJ gjPfB9yEMQ3N2sxFyLl8vlaN4ehdBY0F5bO9ljI0+u+M5v62NMh9kw55P3Pjfe4K V5AHyw8SAMz+5FCi4csNxCKJiqREstpfXZnoQNq/ikVnUy0C73T3xt3l2H6Qvinu 4hjHG7NtX2bFxWwSiGT6Nlc5lrIexyeRqgQccTEW7pt7V75HGViePGQDvDJi2Rhi bfT/IXknNPVX3h0CPR2McVSHjusD0Hzd/t2JMuZ4Bfa7fsAuKX4= -----END CERTIFICATE-----Generated at Sun Oct 25 09:13:57 2026 by rpki-client