$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft (raw, json) Hash identifier: G09rP8jBH9oJvFwIvG+ueozaZ71c9aHfuKNeM/B2PLY= Subject key identifier: 1F:BA:9E:79:1A:E7:E2:3A:61:C5:D0:7A:96:D1:47:A2:34:DF:E4:E8 Authority key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Certificate issuer: /CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Certificate serial: 3445B493CE57C6C4E758A47505A290E8D599C22F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 16:39:41 +0000 Manifest this update: Wed 16 Sep 2026 16:34:41 +0000 Manifest next update: Thu 17 Sep 2026 18:39:41 +0000 Files and hashes: 1: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl (hash: nBiTqUo3KWrPadovgiSipsmRy4csZGxhK5MQ5ZOkv4I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:45:b4:93:ce:57:c6:c4:e7:58:a4:75:05:a2:90:e8:d5:99:c2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Validity Not Before: Sep 16 16:34:41 2026 GMT Not After : Sep 17 18:39:41 2026 GMT Subject: CN=1FBA9E791AE7E23A61C5D07A96D147A234DFE4E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:f7:80:37:97:22:86:31:e2:6f:a2:0f:2f: bd:60:5b:df:74:a1:d5:db:f8:b3:9e:2e:6d:e1:9d: d9:34:57:f2:02:1f:d4:8e:bd:45:b0:61:23:07:79: 3a:42:91:c8:c3:0b:1f:6d:8c:c7:61:93:eb:62:95: fa:84:40:26:d7:6e:60:cf:d2:25:9f:5b:03:22:a6: ff:7c:bf:59:7d:55:44:62:fd:b6:e3:d7:41:07:04: 52:ec:9a:75:4c:bf:f1:43:7d:bf:a1:75:a1:54:93: 17:f1:0d:0e:0d:3f:4d:7d:12:ba:16:fc:08:9a:ba: 49:e6:21:b9:58:75:7e:f0:0c:bd:e5:ee:34:1b:49: a1:16:d5:e7:0f:29:76:9b:68:1e:cb:f8:b0:bb:9b: 78:58:dc:63:5f:34:4e:c6:5c:cc:43:b9:c4:d5:78: 2c:71:aa:e7:91:9a:04:2c:f2:4c:23:f9:7f:cb:12: 34:9a:cf:5a:6e:b5:78:cf:a8:f9:4d:87:fb:76:d5: c6:25:4c:39:10:41:19:02:05:8f:d9:71:e8:e7:5e: b1:e5:a8:5e:fb:3d:ce:c1:25:84:bf:46:bc:4a:8d: 3d:a0:06:2a:3e:82:99:27:54:0a:91:05:6b:ee:4d: 76:24:ff:8b:d7:5b:19:44:3d:d1:d0:98:0e:02:db: 48:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BA:9E:79:1A:E7:E2:3A:61:C5:D0:7A:96:D1:47:A2:34:DF:E4:E8 X509v3 Authority Key Identifier: keyid:B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:18:63:a1:b8:4c:d3:f6:5a:84:fe:74:01:67:d0:30:02:b2: 9a:33:e9:e1:ee:f9:e5:d4:88:53:0b:cf:eb:10:6f:60:53:14: 4d:98:fe:2b:a6:08:0f:de:9a:de:06:07:f0:10:51:44:fb:79: a6:af:a9:03:8c:cd:24:8e:64:d4:82:c9:16:1f:18:5e:ae:ea: 5a:05:eb:57:41:4f:96:1c:f6:d1:e9:24:c9:a8:47:9f:ee:46: 14:d0:71:48:bf:b9:a1:39:a2:47:e7:0b:93:4c:e7:7a:66:8e: e3:04:54:c2:10:97:c3:cf:25:ba:50:5e:d2:ed:3c:2e:e2:b1: 17:3f:75:4f:5c:f2:fc:ad:85:2d:4a:8a:bd:b8:ef:70:39:a7: b1:f5:f0:79:da:1e:cd:92:4c:a6:20:52:51:67:48:ee:f1:a1: e6:18:aa:e9:a6:a7:69:28:93:b1:cc:34:38:36:7b:83:4d:78: 26:12:f5:7c:aa:38:c5:52:28:b0:65:40:77:db:a5:0a:17:a6: 73:ba:43:e8:66:e6:a6:87:22:ee:71:b0:b2:25:34:54:9f:16: 4c:7b:17:fe:6d:42:43:14:c0:c1:87:51:49:b2:df:d8:18:c0: ee:74:25:bd:ff:92:ed:49:8f:5f:83:80:f9:65:b1:be:c8:84: 9c:f5:f9:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEW0k85XxsTnWKR1BaKQ6NWZwi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBGQjAx RkM2NDNDMTAeFw0yNjA5MTYxNjM0NDFaFw0yNjA5MTcxODM5NDFaMDMxMTAvBgNV BAMTKDFGQkE5RTc5MUFFN0UyM0E2MUM1RDA3QTk2RDE0N0EyMzRERkU0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4u/eAN5cihjHib6IPL71gW990 odXb+LOeLm3hndk0V/ICH9SOvUWwYSMHeTpCkcjDCx9tjMdhk+tilfqEQCbXbmDP 0iWfWwMipv98v1l9VURi/bbj10EHBFLsmnVMv/FDfb+hdaFUkxfxDQ4NP019EroW /AiauknmIblYdX7wDL3l7jQbSaEW1ecPKXabaB7L+LC7m3hY3GNfNE7GXMxDucTV eCxxqueRmgQs8kwj+X/LEjSaz1putXjPqPlNh/t21cYlTDkQQRkCBY/ZcejnXrHl qF77Pc7BJYS/RrxKjT2gBio+gpknVAqRBWvuTXYk/4vXWxlEPdHQmA4C20iJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH7qeeRrn4jphxdB6ltFHojTf5OgwHwYDVR0j BBgwFoAUshIgoSddUCLcHjOQr4wPsB/GQ8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA4ODY0OGYtNWUwYi00MzM4LTkxMWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEy NzVENTAyMkRDMUUzMzkwQUY4QzBGQjAxRkM2NDNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMjEyMjBBMTI3NUQ1MDIyREMxRTMzOTBBRjhDMEZCMDFGQzY0 M0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBG QjAxRkM2NDNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4YY6G4TNP2WoT+dAFn0DACspoz6eHu+eXU iFMLz+sQb2BTFE2Y/iumCA/emt4GB/AQUUT7eaavqQOMzSSOZNSCyRYfGF6u6loF 61dBT5Yc9tHpJMmoR5/uRhTQcUi/uaE5okfnC5NM53pmjuMEVMIQl8PPJbpQXtLt PC7isRc/dU9c8vythS1Kir2473A5p7H18HnaHs2STKYgUlFnSO7xoeYYqummp2ko k7HMNDg2e4NNeCYS9XyqOMVSKLBlQHfbpQoXpnO6Q+hm5qaHIu5xsLIlNFSfFkx7 F/5tQkMUwMGHUUmy39gYwO50Jb3/ku1Jj1+DgPllsb7IhJz1+c4= -----END CERTIFICATE-----Generated at Thu Sep 17 13:08:58 2026 by rpki-client