$ rpki-client -vvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json) Hash identifier: 4US5dr7qoReh3uqTMGJ+tuQ688SzbOXxsjFlxQqJLfQ= Subject key identifier: EF:02:3E:F9:5E:CA:01:D8:0C:88:F4:0C:6B:F8:BE:41:FD:8D:97:88 Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD Certificate serial: 6A9B7F37EA978D7BE9A12C2487470ACAA13DC5F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft Manifest number: 93 Signing time: Wed 19 Aug 2026 18:36:29 +0000 Manifest this update: Wed 19 Aug 2026 18:31:29 +0000 Manifest next update: Thu 20 Aug 2026 20:10:29 +0000 Files and hashes: 1: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=) 2: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: g0OdKdnT7jFu0vSDRw123bMu5OqrfitCxg4/Elo5D/Q=) 3: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=) 4: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 20:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:9b:7f:37:ea:97:8d:7b:e9:a1:2c:24:87:47:0a:ca:a1:3d:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD Validity Not Before: Aug 19 18:31:29 2026 GMT Not After : Aug 20 20:10:29 2026 GMT Subject: CN=EF023EF95ECA01D80C88F40C6BF8BE41FD8D9788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:bc:84:72:90:00:93:fc:79:29:13:a9:b4: 83:63:fc:74:27:9e:5a:f7:d4:6a:35:fe:cd:8f:8b: 54:86:c6:c7:3e:7f:69:fe:b2:fb:ec:dd:fe:ac:07: 0f:80:cd:a8:b3:b8:d1:e1:63:be:21:43:fc:27:05: 06:83:ac:7a:03:bd:a3:70:66:9c:74:8a:d2:fd:49: e2:a3:37:d9:2d:1d:2e:10:59:7e:b6:ff:98:36:89: be:9c:75:2c:53:29:b5:d3:42:81:a7:9f:94:22:25: c2:0e:92:fe:67:9b:b6:0a:2a:42:55:6d:20:65:9a: 0e:dd:28:16:fa:85:24:a9:54:0a:e9:0a:c4:cf:91: 45:71:1f:2d:70:63:63:1a:11:6e:3d:0a:3d:d0:45: da:b4:bc:b2:c7:ec:5d:e0:fa:de:b9:ad:86:d8:73: 23:6b:77:91:0c:d9:e3:24:cd:9e:b1:80:4c:92:66: b7:c6:0c:19:54:9f:5d:81:cd:6c:87:ee:e1:70:4d: 33:fe:74:6a:07:07:1d:e1:69:6a:80:c2:d2:bf:da: f2:25:1f:ba:ac:89:64:11:89:0a:49:0e:2d:05:49: 7a:35:b4:8e:66:18:9d:13:77:61:99:f7:1f:62:67: c3:ab:d3:c9:ae:db:be:31:e0:82:2e:55:35:a9:8b: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:02:3E:F9:5E:CA:01:D8:0C:88:F4:0C:6B:F8:BE:41:FD:8D:97:88 X509v3 Authority Key Identifier: keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:b9:4d:ba:b5:5c:4a:20:0f:66:f5:40:aa:16:db:82:5e:62: 7e:95:28:1d:8a:96:ee:26:8a:48:77:6d:6e:fb:7f:4a:91:2e: 38:e5:8b:c7:ad:81:c4:9c:cd:9e:1a:f8:46:2b:1b:98:5e:c7: 4a:a1:9f:e6:bd:5d:91:a3:e9:f0:81:b7:13:77:f8:7a:4e:72: a7:f5:98:d8:be:4e:9d:f0:32:3d:25:af:d2:ec:bc:84:a7:5a: 99:fb:36:7a:3a:05:8b:5c:ef:0e:be:73:95:21:cd:71:95:8b: eb:ec:b8:0f:d4:7b:c2:c7:60:b5:60:a6:e1:d9:cc:f4:af:f3: b2:46:53:2a:35:96:ba:f1:12:f1:1a:b0:1a:64:72:ee:a1:8c: fc:87:33:c3:9d:05:2b:fd:aa:c9:3a:09:da:ef:92:de:b6:2b: 76:b9:82:5e:df:95:0f:e6:98:37:e3:3f:33:6f:f3:8e:da:5c: 83:d5:d9:cd:a0:32:37:f0:bc:34:98:b0:91:c9:ec:06:79:b9: fe:12:b6:da:63:3a:0c:91:37:40:05:4b:dc:f7:cc:23:bb:5f: 04:1e:f6:ed:dd:ba:48:37:27:18:83:98:8b:30:0d:a3:94:39: bf:04:b3:36:c5:f1:f4:72:29:35:d5:5e:ff:34:75:89:d3:d9: 17:80:e6:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUapt/N+qXjXvpoSwkh0cKyqE9xfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5 OUUwNzJDRDAeFw0yNjA4MTkxODMxMjlaFw0yNjA4MjAyMDEwMjlaMDMxMTAvBgNV BAMTKEVGMDIzRUY5NUVDQTAxRDgwQzg4RjQwQzZCRjhCRTQxRkQ4RDk3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnlbyEcpAAk/x5KROptINj/HQn nlr31Go1/s2Pi1SGxsc+f2n+svvs3f6sBw+AzaizuNHhY74hQ/wnBQaDrHoDvaNw Zpx0itL9SeKjN9ktHS4QWX62/5g2ib6cdSxTKbXTQoGnn5QiJcIOkv5nm7YKKkJV bSBlmg7dKBb6hSSpVArpCsTPkUVxHy1wY2MaEW49Cj3QRdq0vLLH7F3g+t65rYbY cyNrd5EM2eMkzZ6xgEySZrfGDBlUn12BzWyH7uFwTTP+dGoHBx3haWqAwtK/2vIl H7qsiWQRiQpJDi0FSXo1tI5mGJ0Td2GZ9x9iZ8Or08mu274x4IIuVTWpi/1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7wI++V7KAdgMiPQMa/i+Qf2Nl4gwHwYDVR0j BBgwFoAUBCHHbpY5cmW/thdNmNNUG5ngcs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFhYjhhNTgtZjEzZi00ZjcxLTlkZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5 NjM5NzI2NUJGQjYxNzREOThEMzU0MUI5OUUwNzJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDIxQzc2RTk2Mzk3MjY1QkZCNjE3NEQ5OEQzNTQxQjk5RTA3 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvMDQyMUM3NkU5NjM5NzI2NUJGQjYxNzREOThEMzU0 MUI5OUUwNzJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMi5Tbq1XEogD2b1QKoW24JeYn6VKB2Klu4m ikh3bW77f0qRLjjli8etgcSczZ4a+EYrG5hex0qhn+a9XZGj6fCBtxN3+HpOcqf1 mNi+Tp3wMj0lr9LsvISnWpn7Nno6BYtc7w6+c5UhzXGVi+vsuA/Ue8LHYLVgpuHZ zPSv87JGUyo1lrrxEvEasBpkcu6hjPyHM8OdBSv9qsk6Cdrvkt62K3a5gl7flQ/m mDfjPzNv847aXIPV2c2gMjfwvDSYsJHJ7AZ5uf4SttpjOgyRN0AFS9z3zCO7XwQe 9u3dukg3JxiDmIswDaOUOb8EszbF8fRyKTXVXv80dYnT2ReA5qw= -----END CERTIFICATE-----Generated at Thu Aug 20 07:04:40 2026 by rpki-client