$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: ozdM+VeTNR5mjdYKwibg9x4a+yD2t8SFDc5SOZ96gH4= Subject key identifier: 0E:2F:05:7E:7B:AD:1E:98:C8:FC:47:35:A4:DD:1E:55:A9:44:91:5A Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 32E5E1A4FAB73313966F7E59EE29F70B687CDCE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: DE Signing time: Wed 14 Oct 2026 20:25:15 +0000 Manifest this update: Wed 14 Oct 2026 20:20:15 +0000 Manifest next update: Fri 16 Oct 2026 00:04:15 +0000 Files and hashes: 1: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: 6DS0QQ6+L9Gagtc2i0Tx0Pgy23Bl4mukLXhgy95ChZY=) 2: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) 3: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) 4: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e5:e1:a4:fa:b7:33:13:96:6f:7e:59:ee:29:f7:0b:68:7c:dc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Oct 14 20:20:15 2026 GMT Not After : Oct 16 00:04:15 2026 GMT Subject: CN=0E2F057E7BAD1E98C8FC4735A4DD1E55A944915A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6a:15:5d:3c:99:2c:b1:2e:50:a3:e6:7f:58: 20:10:98:c8:82:24:0e:56:12:27:a2:a9:9a:d6:e5: 0d:32:db:c0:2c:2e:12:f9:5d:e9:bc:1f:15:a9:58: 7f:df:e4:74:27:da:77:f9:b9:66:0d:18:1a:92:88: 59:cf:20:74:9b:ad:9c:2e:91:22:ca:28:25:78:3a: 52:60:2f:b5:78:f7:01:b1:2b:42:fa:7b:bc:71:63: 1d:7b:3a:9e:3d:fa:be:d4:bb:b9:0a:12:76:33:12: 46:05:64:ea:83:37:26:51:a6:42:ed:ee:91:02:30: e0:45:0b:f0:39:c9:52:84:09:57:5b:97:36:0c:ac: 76:dc:68:11:98:da:7a:be:a8:23:31:9e:1d:c4:8d: 5b:eb:de:e8:c2:a1:fc:3f:47:91:ea:07:68:d6:7d: 31:2d:e4:fd:fb:d0:7b:5c:0b:7c:50:87:56:1e:42: f9:41:4f:a5:76:0e:3d:e3:b9:b1:f3:eb:da:55:e3: b1:bd:58:54:c9:b3:b6:e7:43:14:b9:12:4d:16:82: 1f:12:93:8c:ef:82:c9:98:d1:ca:11:3b:8e:d4:fc: 63:20:2a:65:36:d4:6d:35:f1:c0:d2:76:10:12:60: 5b:55:e4:10:02:64:b2:e2:e5:85:97:5a:e2:f0:f0: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2F:05:7E:7B:AD:1E:98:C8:FC:47:35:A4:DD:1E:55:A9:44:91:5A X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f5:4a:17:76:cd:23:82:6f:22:dd:c6:46:22:fa:9b:e0:3a: 2d:c7:bc:07:c5:cb:a0:e5:4f:6b:18:59:39:72:aa:f1:d2:a8: 49:43:62:33:ff:b5:1e:4f:3a:08:28:33:7b:c5:35:69:51:a1: 28:20:3c:19:07:c3:a6:4e:67:7d:a4:31:b8:c4:a3:57:91:06: 9d:70:ac:72:18:66:de:d1:0a:4c:e4:38:eb:95:81:c1:65:dc: bf:dd:3a:9e:0e:0f:21:ff:73:cb:f5:e8:a4:f2:5e:2e:08:03: 2e:25:ec:1f:62:c7:e8:ba:99:78:8c:13:e5:44:8f:81:ea:0a: 63:e8:68:29:c8:fe:5a:8f:87:13:00:54:8d:36:7d:1c:92:65: f4:e0:1b:8d:af:36:34:c0:20:89:1d:e9:68:84:2f:88:c9:ff: a9:2c:6c:7e:77:bd:e9:b8:3a:fc:28:94:c1:a2:bb:50:d9:90: 5b:3e:fc:49:47:db:ce:68:d6:86:c4:ac:aa:e3:78:7a:5c:20: f2:76:97:b0:bd:c5:25:de:ff:26:9d:63:57:65:4c:7e:4f:94: f5:fa:ff:06:a6:1c:16:89:13:3a:fb:e3:fb:66:c3:cb:8b:48: 2e:6d:e5:99:ee:64:39:ec:5e:de:07:5b:7b:c5:dc:f6:52:c7: 01:eb:d4:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuXhpPq3MxOWb35Z7in3C2h83OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjEwMTQyMDIwMTVaFw0yNjEwMTYwMDA0MTVaMDMxMTAvBgNV BAMTKDBFMkYwNTdFN0JBRDFFOThDOEZDNDczNUE0REQxRTU1QTk0NDkxNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhahVdPJkssS5Qo+Z/WCAQmMiC JA5WEieiqZrW5Q0y28AsLhL5Xem8HxWpWH/f5HQn2nf5uWYNGBqSiFnPIHSbrZwu kSLKKCV4OlJgL7V49wGxK0L6e7xxYx17Op49+r7Uu7kKEnYzEkYFZOqDNyZRpkLt 7pECMOBFC/A5yVKECVdblzYMrHbcaBGY2nq+qCMxnh3EjVvr3ujCofw/R5HqB2jW fTEt5P370HtcC3xQh1YeQvlBT6V2Dj3jubHz69pV47G9WFTJs7bnQxS5Ek0Wgh8S k4zvgsmY0coRO47U/GMgKmU21G018cDSdhASYFtV5BACZLLi5YWXWuLw8CAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDi8FfnutHpjI/Ec1pN0eValEkVowHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJL1Shd2zSOCbyLdxkYi+pvgOi3HvAfFy6Dl T2sYWTlyqvHSqElDYjP/tR5POggoM3vFNWlRoSggPBkHw6ZOZ32kMbjEo1eRBp1w rHIYZt7RCkzkOOuVgcFl3L/dOp4ODyH/c8v16KTyXi4IAy4l7B9ix+i6mXiME+VE j4HqCmPoaCnI/lqPhxMAVI02fRySZfTgG42vNjTAIIkd6WiEL4jJ/6ksbH53vem4 OvwolMGiu1DZkFs+/ElH285o1obErKrjeHpcIPJ2l7C9xSXe/yadY1dlTH5PlPX6 /wamHBaJEzr74/tmw8uLSC5t5ZnuZDnsXt4HW3vF3PZSxwHr1OA= -----END CERTIFICATE-----Generated at Thu Oct 15 03:27:52 2026 by rpki-client