$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: YIM2+28X92IOCx46hkTXNANgL8hVlpBljnf7nabVLow= Subject key identifier: F4:CD:EF:04:70:BB:41:5B:04:7D:A0:D0:BF:99:54:FB:20:B5:23:65 Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 1D90D4CDCE30FC9EB7D0ECF0783BBF0F42BF402C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: DD Signing time: Wed 14 Oct 2026 00:36:02 +0000 Manifest this update: Wed 14 Oct 2026 00:31:02 +0000 Manifest next update: Thu 15 Oct 2026 04:21:02 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) 2: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) 3: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) 4: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: v8CisDEjLmfQ8ya4ccrsRFyOYCGQkDgAOALww4d1BCs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 04:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:90:d4:cd:ce:30:fc:9e:b7:d0:ec:f0:78:3b:bf:0f:42:bf:40:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Oct 14 00:31:02 2026 GMT Not After : Oct 15 04:21:02 2026 GMT Subject: CN=F4CDEF0470BB415B047DA0D0BF9954FB20B52365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:5d:4a:63:cc:b8:82:74:c3:5e:42:ba:b2: ad:65:5a:4f:92:b8:5e:de:66:02:d0:8f:4d:11:50: d6:ef:d2:5e:b6:b3:ec:fa:b8:d9:5f:76:ee:e1:9b: 6f:f3:fa:ab:89:3b:f5:20:da:84:8f:4d:7b:14:c9: 3c:1d:0b:f7:c2:3a:50:91:08:b5:a6:72:38:ab:47: c6:dd:cd:6f:85:77:63:97:33:ea:fd:59:42:4a:f9: 4a:27:83:40:ec:ee:6d:1d:cd:b0:20:8d:a3:74:57: d4:7c:e4:fa:4e:15:5e:62:d6:6f:fb:43:3e:f6:1d: 7d:17:9d:6a:7e:07:92:94:bc:83:e6:c6:57:7d:60: 01:49:6e:f6:bc:f5:b6:b4:c3:06:a5:d7:34:30:1e: 99:25:60:82:ca:b7:77:b9:09:05:8e:6e:3b:7e:b0: 53:3c:95:01:8c:16:e4:9d:53:d6:72:0a:5b:15:62: 6e:29:49:77:76:00:61:a0:86:f8:dc:6b:8c:45:78: a2:68:d4:51:e3:99:1e:46:7e:38:a4:f2:fc:a1:c5: 4c:5a:76:14:9c:e1:2b:47:6c:50:12:50:9f:a6:bb: ef:9f:34:e9:44:e4:f8:11:ce:ff:09:86:c2:01:21: 36:6d:78:21:f6:74:2e:ef:6a:f8:af:8d:10:23:4f: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CD:EF:04:70:BB:41:5B:04:7D:A0:D0:BF:99:54:FB:20:B5:23:65 X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:91:16:68:b6:07:8a:73:69:e8:22:09:08:73:8f:4c:0c:4d: b8:a2:fa:2f:30:13:65:23:71:86:0b:6d:9e:6b:85:6d:2e:99: 9e:88:46:23:fc:27:5d:3f:ef:c9:1b:e8:4d:3e:bf:69:61:38: 50:ab:6a:bb:46:35:d0:3c:7a:28:27:b0:9f:ef:57:c1:9c:42: c2:0d:2d:dc:ba:50:ae:8f:5d:ea:4c:42:3c:6c:74:bc:76:a2: 71:85:25:2b:21:6e:7b:85:7b:7d:00:8d:73:47:4d:5e:19:42: d7:49:71:b6:4c:23:89:d7:d2:ec:e2:5e:d8:37:eb:13:ea:2c: 4e:9e:2d:3b:b9:5b:6c:a3:5e:f4:c1:0b:06:cf:9e:27:e1:dd: 7c:2f:b4:00:aa:78:cd:08:42:03:3a:f2:b8:75:e2:6c:d1:46: b9:c8:9c:3c:ed:68:a5:63:18:f7:69:dd:3a:64:09:34:00:3b: c9:ec:71:a5:1b:74:1c:bd:ac:2f:4f:cc:8f:d1:67:0f:e4:b8: ff:86:50:09:fa:4c:34:83:6b:c0:a8:9c:e3:67:5b:15:c6:ff: d9:4b:bb:38:1d:ad:1e:c3:40:2a:52:a2:e8:d4:3f:eb:7a:fd: d8:e6:5b:da:50:cb:7d:de:80:ac:2e:60:5e:40:90:74:8d:cb: 4d:dd:39:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZDUzc4w/J630OzweDu/D0K/QCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjEwMTQwMDMxMDJaFw0yNjEwMTUwNDIxMDJaMDMxMTAvBgNV BAMTKEY0Q0RFRjA0NzBCQjQxNUIwNDdEQTBEMEJGOTk1NEZCMjBCNTIzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHFV1KY8y4gnTDXkK6sq1lWk+S uF7eZgLQj00RUNbv0l62s+z6uNlfdu7hm2/z+quJO/Ug2oSPTXsUyTwdC/fCOlCR CLWmcjirR8bdzW+Fd2OXM+r9WUJK+Uong0Ds7m0dzbAgjaN0V9R85PpOFV5i1m/7 Qz72HX0XnWp+B5KUvIPmxld9YAFJbva89ba0wwal1zQwHpklYILKt3e5CQWObjt+ sFM8lQGMFuSdU9ZyClsVYm4pSXd2AGGghvjca4xFeKJo1FHjmR5Gfjik8vyhxUxa dhSc4StHbFASUJ+mu++fNOlE5PgRzv8JhsIBITZteCH2dC7vavivjRAjT6NhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9M3vBHC7QVsEfaDQv5lU+yC1I2UwHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKRFmi2B4pzaegiCQhzj0wMTbii+i8wE2Uj cYYLbZ5rhW0umZ6IRiP8J10/78kb6E0+v2lhOFCrartGNdA8eignsJ/vV8GcQsIN Ldy6UK6PXepMQjxsdLx2onGFJSshbnuFe30AjXNHTV4ZQtdJcbZMI4nX0uziXtg3 6xPqLE6eLTu5W2yjXvTBCwbPnifh3XwvtACqeM0IQgM68rh14mzRRrnInDztaKVj GPdp3TpkCTQAO8nscaUbdBy9rC9PzI/RZw/kuP+GUAn6TDSDa8ConONnWxXG/9lL uzgdrR7DQCpSoujUP+t6/djmW9pQy33egKwuYF5AkHSNy03dOX0= -----END CERTIFICATE-----Generated at Wed Oct 14 11:50:52 2026 by rpki-client