$ rpki-client -vvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: JYZ9Mt/l9DRrag95Rrm/MHKJpuaaqcibqM8ANPMRXKg= Subject key identifier: 2E:A0:87:C2:92:A5:4A:8C:CE:A2:80:28:5E:3C:9F:88:EE:6F:29:61 Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 56325FE010E0F5699BE0E4E355168EA24FE24694 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: 05 Signing time: Tue 05 May 2026 09:53:56 +0000 Manifest this update: Tue 05 May 2026 09:48:56 +0000 Manifest next update: Wed 06 May 2026 10:44:56 +0000 Files and hashes: 1: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) 2: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) 3: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: 8a00+YzGJGUCPau9ttX52lde3pwsRWEDBa0YVGamGao=) 4: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:32:5f:e0:10:e0:f5:69:9b:e0:e4:e3:55:16:8e:a2:4f:e2:46:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: May 5 09:48:56 2026 GMT Not After : May 6 10:44:56 2026 GMT Subject: CN=2EA087C292A54A8CCEA280285E3C9F88EE6F2961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c0:a0:67:a4:f9:c1:cd:dd:e9:de:4d:84:d7: 4f:7c:74:8d:de:29:be:82:cc:08:be:bd:f4:8a:f7: ff:7c:1f:a7:e6:f7:c3:d4:df:b1:fe:7f:13:42:5b: 07:18:a0:82:d9:d1:f6:dc:93:2b:3d:c0:da:d3:ab: 8b:70:74:09:d0:df:d9:16:e3:07:9f:fe:68:01:30: ca:39:93:6f:33:69:e0:4c:3a:2c:8d:60:3f:a0:cf: 4f:04:ec:ba:ba:33:3a:f8:8e:a9:4d:c4:26:d5:23: 78:d5:f0:4e:26:a6:9b:b6:fd:d7:6c:87:e3:c1:a5: 2e:09:c8:4f:aa:35:6a:2c:fc:7f:61:8d:cb:7a:52: 2d:ff:61:d6:cc:dc:07:5a:cc:8a:c4:17:a6:1d:28: 84:be:fc:98:01:10:b0:d9:a1:31:aa:f3:b2:2d:98: cc:05:76:36:f7:fd:6c:5a:7c:e4:a1:ef:44:3a:05: ed:25:59:b1:b8:c8:6e:07:48:22:24:2f:c2:ee:dd: 8a:a7:d9:5b:91:c2:02:ae:97:f3:19:d1:57:2a:92: f1:03:bb:0c:03:24:64:7a:a5:cc:8a:78:72:90:40: a0:48:6d:0a:dd:28:4d:05:01:c9:42:1c:1c:c8:e3: ae:51:01:d4:cc:8d:68:a1:6e:28:a5:86:01:bb:fd: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A0:87:C2:92:A5:4A:8C:CE:A2:80:28:5E:3C:9F:88:EE:6F:29:61 X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a4:52:5a:0c:91:95:55:89:04:e5:58:d1:f2:56:7b:d9:ec: e8:03:63:a5:fc:a3:50:f9:b2:88:5b:e9:4b:cb:86:d3:57:9b: 0d:1b:4f:f4:d4:b9:e9:35:7b:a7:ef:1f:df:a7:b2:02:23:71: 55:c2:79:cd:97:90:28:48:fe:ed:70:5e:fe:12:5d:87:73:6c: 87:12:ae:2b:c1:be:c1:2b:44:5d:24:88:42:0e:16:e5:6e:88: 61:ec:96:34:cf:90:a8:34:e5:16:c9:e6:da:fb:7e:62:94:e1: b0:6d:0b:8e:d8:01:06:30:03:d9:9c:94:c4:7e:73:a7:e5:00: d8:ed:cf:13:3e:ac:fb:9a:c5:86:ba:9b:96:a1:12:82:c4:b0: 07:e3:20:c0:64:6b:f9:b6:61:9f:1a:3c:d3:00:b7:7b:0d:53: 40:b2:d2:8e:21:40:56:9b:16:05:18:ce:42:f4:06:86:c2:0c: d7:17:6b:e6:20:86:e6:2a:4f:a5:6a:be:dc:f9:bd:72:c3:fb: 6e:aa:58:d6:87:f5:8e:f5:ee:91:1f:c3:d4:69:a8:6f:5c:1d: e5:90:3f:a1:0b:8a:ee:05:b6:a3:71:80:3f:bd:60:d0:3a:24: 07:ed:ab:22:82:d8:bc:72:14:c2:32:6a:45:09:5c:f4:25:84: 9f:1d:05:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjJf4BDg9Wmb4OTjVRaOok/iRpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjA1MDUwOTQ4NTZaFw0yNjA1MDYxMDQ0NTZaMDMxMTAvBgNV BAMTKDJFQTA4N0MyOTJBNTRBOENDRUEyODAyODVFM0M5Rjg4RUU2RjI5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwKBnpPnBzd3p3k2E1098dI3e Kb6CzAi+vfSK9/98H6fm98PU37H+fxNCWwcYoILZ0fbckys9wNrTq4twdAnQ39kW 4wef/mgBMMo5k28zaeBMOiyNYD+gz08E7Lq6Mzr4jqlNxCbVI3jV8E4mppu2/dds h+PBpS4JyE+qNWos/H9hjct6Ui3/YdbM3AdazIrEF6YdKIS+/JgBELDZoTGq87It mMwFdjb3/WxafOSh70Q6Be0lWbG4yG4HSCIkL8Lu3Yqn2VuRwgKul/MZ0VcqkvED uwwDJGR6pcyKeHKQQKBIbQrdKE0FAclCHBzI465RAdTMjWihbiilhgG7/as9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULqCHwpKlSozOooAoXjyfiO5vKWEwHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6kUloMkZVViQTlWNHyVnvZ7OgDY6X8o1D5 sohb6UvLhtNXmw0bT/TUuek1e6fvH9+nsgIjcVXCec2XkChI/u1wXv4SXYdzbIcS rivBvsErRF0kiEIOFuVuiGHsljTPkKg05RbJ5tr7fmKU4bBtC47YAQYwA9mclMR+ c6flANjtzxM+rPuaxYa6m5ahEoLEsAfjIMBka/m2YZ8aPNMAt3sNU0Cy0o4hQFab FgUYzkL0BobCDNcXa+YghuYqT6Vqvtz5vXLD+26qWNaH9Y717pEfw9RpqG9cHeWQ P6ELiu4FtqNxgD+9YNA6JAftqyKC2LxyFMIyakUJXPQlhJ8dBX4= -----END CERTIFICATE-----Generated at Tue May 5 14:17:18 2026 by rpki-client