$ rpki-client -vvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: HbHuFPczXzZRz3a0CuXdWDXS4YnqOI6gUObhCydRLY0= Subject key identifier: 51:82:B3:B6:8B:75:BC:73:27:1A:B1:B5:1F:DB:A4:25:98:96:71:9E Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 0A02BA4CF0C49B6FCD4CB61A3851A57DC3D17016 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 17:47:18 +0000 Manifest this update: Fri 19 Jun 2026 17:42:18 +0000 Manifest next update: Sat 20 Jun 2026 19:18:18 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) 2: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: vLKGYRzWnccTQAI2R0trHzDKCMvpWd+4AQlMjUcvf7M=) 3: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) 4: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:02:ba:4c:f0:c4:9b:6f:cd:4c:b6:1a:38:51:a5:7d:c3:d1:70:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Jun 19 17:42:18 2026 GMT Not After : Jun 20 19:18:18 2026 GMT Subject: CN=5182B3B68B75BC73271AB1B51FDBA4259896719E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:8a:62:d8:8a:8a:36:f5:c8:47:93:5d:40: 8c:fc:cb:59:65:be:69:ad:17:fc:54:8f:55:57:6d: 33:41:af:37:e9:a9:04:fc:c2:f1:ba:01:2e:29:67: ea:4a:6c:f1:fc:1a:65:ba:db:20:98:bd:43:fc:98: 2c:cb:5d:c7:02:b0:e0:2c:1d:74:d9:1c:d9:1c:18: 7d:66:2a:fa:24:26:05:23:fb:d5:b3:ff:10:b6:e2: 11:30:be:7c:6b:b0:00:9b:ef:33:6b:18:6e:6f:f9: 69:b8:6c:dd:09:61:c1:ac:af:16:dd:da:ff:8e:a7: c6:9b:92:3f:8d:7b:ec:31:3e:65:98:f6:bf:1e:20: fb:9b:f4:67:cd:95:28:14:90:a0:ff:f7:50:21:34: 6a:fc:45:26:a7:15:c3:06:0e:cc:f1:53:4a:ff:a6: 50:b8:df:55:ef:a0:e4:ae:1c:e5:c2:84:38:c6:3e: cf:79:19:0b:8e:bf:b8:c5:1c:c3:77:2a:1e:96:d5: 83:3e:1b:ef:11:b7:76:2b:48:47:eb:de:f5:2f:3e: 85:e2:70:64:91:94:14:4b:66:3a:5e:5d:33:a9:6f: 5c:e3:54:ad:85:3c:80:71:20:21:a5:3b:d5:ed:1b: 7c:bc:fb:01:ce:85:95:0d:cc:3f:2f:cc:c3:bc:42: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:82:B3:B6:8B:75:BC:73:27:1A:B1:B5:1F:DB:A4:25:98:96:71:9E X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:88:ff:0c:59:9d:7d:79:34:8b:7a:a0:77:c9:cd:ef:3c:d3: c0:65:7e:10:b2:75:f4:d9:39:0e:a5:14:59:96:9b:e1:c4:94: a5:e3:d0:54:2c:ee:16:8b:62:88:d9:87:df:37:af:bb:86:1b: 00:87:33:ce:08:ac:be:4f:94:a3:ef:62:dc:c7:2d:d0:63:14: 87:50:b7:27:56:30:26:98:1b:40:59:74:38:d3:a7:3f:37:20: ee:51:12:ff:0b:88:09:a9:ae:d1:ca:3f:b0:43:8b:ce:b8:19: c8:fb:68:4f:51:c7:64:04:42:ad:0f:e3:00:94:ec:ea:51:dc: ab:5d:17:5f:44:e5:d2:1f:4b:73:2c:47:27:05:5d:eb:07:62: 6b:44:f0:51:b6:23:6b:43:9a:3b:c2:6f:5f:e5:c3:c4:39:37: 6f:3b:7b:f9:7e:50:60:02:bf:2a:2e:f0:6d:2e:ee:d5:c6:f9: 4e:6f:75:fc:c4:df:5f:f4:45:73:7f:65:8b:58:58:ac:b3:95: 09:55:2a:c0:22:22:de:7f:4e:c0:96:20:65:00:53:5d:c1:77: fa:f9:b0:54:a8:9d:b4:06:03:b5:48:26:85:96:ca:f2:8a:8c: ce:2c:29:53:21:e9:69:87:ed:44:9b:a8:ac:7d:15:c0:79:79: 78:e7:80:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgK6TPDEm2/NTLYaOFGlfcPRcBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjA2MTkxNzQyMThaFw0yNjA2MjAxOTE4MThaMDMxMTAvBgNV BAMTKDUxODJCM0I2OEI3NUJDNzMyNzFBQjFCNTFGREJBNDI1OTg5NjcxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAopi2IqKNvXIR5NdQIz8y1ll vmmtF/xUj1VXbTNBrzfpqQT8wvG6AS4pZ+pKbPH8GmW62yCYvUP8mCzLXccCsOAs HXTZHNkcGH1mKvokJgUj+9Wz/xC24hEwvnxrsACb7zNrGG5v+Wm4bN0JYcGsrxbd 2v+Op8abkj+Ne+wxPmWY9r8eIPub9GfNlSgUkKD/91AhNGr8RSanFcMGDszxU0r/ plC431XvoOSuHOXChDjGPs95GQuOv7jFHMN3Kh6W1YM+G+8Rt3YrSEfr3vUvPoXi cGSRlBRLZjpeXTOpb1zjVK2FPIBxICGlO9XtG3y8+wHOhZUNzD8vzMO8Qm1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUYKztot1vHMnGrG1H9ukJZiWcZ4wHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmI/wxZnX15NIt6oHfJze8808BlfhCydfTZ OQ6lFFmWm+HElKXj0FQs7haLYojZh983r7uGGwCHM84IrL5PlKPvYtzHLdBjFIdQ tydWMCaYG0BZdDjTpz83IO5REv8LiAmprtHKP7BDi864Gcj7aE9Rx2QEQq0P4wCU 7OpR3KtdF19E5dIfS3MsRycFXesHYmtE8FG2I2tDmjvCb1/lw8Q5N287e/l+UGAC vyou8G0u7tXG+U5vdfzE31/0RXN/ZYtYWKyzlQlVKsAiIt5/TsCWIGUAU13Bd/r5 sFSonbQGA7VIJoWWyvKKjM4sKVMh6WmH7USbqKx9FcB5eXjngLc= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:27 2026 by rpki-client