$ rpki-client -vvf rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft (raw, json) Hash identifier: E5iZ7nfth+4jtpJBzqn0i2luS3El6+NWBtdx0b8pgA0= Subject key identifier: 0E:88:2B:36:0F:FE:80:D1:E8:91:F5:F0:B3:E4:E7:B1:FE:86:85:95 Authority key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Certificate issuer: /CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Certificate serial: 2839F441303E80A0CB8D0683D51C4ECEAB3BDE11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 12:11:44 +0000 Manifest this update: Thu 18 Jun 2026 12:06:44 +0000 Manifest next update: Fri 19 Jun 2026 15:27:44 +0000 Files and hashes: 1: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl (hash: VfNHdrLbBwLuSPgbGgkbvKuv5psLNl5U5z1TxJtJfhY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:39:f4:41:30:3e:80:a0:cb:8d:06:83:d5:1c:4e:ce:ab:3b:de:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Validity Not Before: Jun 18 12:06:44 2026 GMT Not After : Jun 19 15:27:44 2026 GMT Subject: CN=0E882B360FFE80D1E891F5F0B3E4E7B1FE868595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:c5:e5:e8:29:91:bb:c6:94:f8:4c:d0:00: d2:d3:f9:9c:75:e6:49:25:55:58:fc:4f:49:79:87: 1c:c4:6a:fe:12:c0:d0:31:60:81:b5:14:4c:5b:62: 24:bd:30:b4:e7:4b:5e:f4:c8:f4:e1:42:ce:b0:ec: 54:a1:b3:50:da:6f:ec:c8:5a:3e:e6:7e:0d:f1:d6: 74:72:44:a6:ad:4c:3c:72:02:13:54:f6:6c:29:53: a4:60:a0:b5:f8:d3:c2:85:a5:de:ff:ec:25:d0:72: 6f:24:f0:1f:2d:f8:9f:cc:b2:2c:8c:06:69:b9:1a: 38:3f:a4:5c:29:48:9e:f6:58:82:87:98:45:e2:cc: b4:ac:c7:c6:1b:5f:45:04:7e:2e:21:46:0b:f5:df: 81:e9:44:56:4b:37:2f:5f:ca:67:4d:ce:2a:3e:0e: 62:af:ae:c3:30:36:94:84:41:fe:d1:6d:49:e9:58: d2:c2:b4:47:7a:50:9c:77:a3:e4:2c:d1:68:f6:9a: 50:63:03:d3:24:4d:fe:69:b0:23:1f:b7:95:bd:cc: cc:32:34:dd:ba:2b:57:e4:22:8a:46:ef:2c:83:10: 8c:69:70:d8:21:7c:d6:f8:21:fa:29:fe:05:56:15: da:a5:61:9c:88:a5:79:25:e8:80:1e:bd:19:37:21: 38:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:88:2B:36:0F:FE:80:D1:E8:91:F5:F0:B3:E4:E7:B1:FE:86:85:95 X509v3 Authority Key Identifier: keyid:B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:64:08:d6:3e:92:ba:cc:5e:e8:08:54:7a:bd:b8:e9:e6:52: 86:6f:22:2e:28:d2:4a:c9:cb:10:90:1b:95:94:7d:8d:35:c3: 4c:e2:d8:32:64:27:7a:16:00:22:ba:d3:8c:27:cb:30:57:01: f6:e3:93:90:b0:da:de:a6:f7:cf:c1:3a:83:e6:c5:03:fc:07: 0c:36:e0:1d:19:1e:36:25:d9:6f:8c:15:ab:db:32:c6:70:51: b1:bf:b2:05:f0:95:56:0d:d7:06:b3:4b:8b:32:bf:41:65:76: 69:8c:82:6a:47:5c:3b:58:27:29:9b:a0:16:0a:46:5f:d0:55: 5a:27:91:d8:62:09:b6:ca:e2:63:d4:9e:3e:7d:b0:4f:da:1c: 26:38:5c:c9:0c:e0:48:af:55:3d:4b:52:70:7e:94:4c:f7:dd: ef:8f:5b:12:90:6c:4f:34:a7:63:80:e6:79:90:52:e9:57:2c: a0:c1:79:eb:31:ef:a4:a5:fb:61:8f:0a:e6:ca:d7:77:ad:d9: eb:0c:67:4e:ce:ef:4d:1e:86:62:03:de:35:29:41:14:76:5e: 12:07:df:e3:88:83:d4:b3:d3:a7:2d:69:c6:59:1d:08:3d:97: 63:7e:8f:9e:df:55:e1:20:e4:1e:cc:b7:13:d1:6e:35:26:3b: 2c:1b:3c:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKDn0QTA+gKDLjQaD1RxOzqs73hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBGQjAx RkM2NDNDMTAeFw0yNjA2MTgxMjA2NDRaFw0yNjA2MTkxNTI3NDRaMDMxMTAvBgNV BAMTKDBFODgyQjM2MEZGRTgwRDFFODkxRjVGMEIzRTRFN0IxRkU4Njg1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+38Xl6CmRu8aU+EzQANLT+Zx1 5kklVVj8T0l5hxzEav4SwNAxYIG1FExbYiS9MLTnS170yPThQs6w7FShs1Dab+zI Wj7mfg3x1nRyRKatTDxyAhNU9mwpU6RgoLX408KFpd7/7CXQcm8k8B8t+J/MsiyM Bmm5Gjg/pFwpSJ72WIKHmEXizLSsx8YbX0UEfi4hRgv134HpRFZLNy9fymdNzio+ DmKvrsMwNpSEQf7RbUnpWNLCtEd6UJx3o+Qs0Wj2mlBjA9MkTf5psCMft5W9zMwy NN26K1fkIopG7yyDEIxpcNghfNb4Ifop/gVWFdqlYZyIpXkl6IAevRk3IThrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDogrNg/+gNHokfXws+Tnsf6GhZUwHwYDVR0j BBgwFoAUshIgoSddUCLcHjOQr4wPsB/GQ8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA4ODY0OGYtNWUwYi00MzM4LTkxMWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEy NzVENTAyMkRDMUUzMzkwQUY4QzBGQjAxRkM2NDNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMjEyMjBBMTI3NUQ1MDIyREMxRTMzOTBBRjhDMEZCMDFGQzY0 M0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBG QjAxRkM2NDNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNkCNY+krrMXugIVHq9uOnmUoZvIi4o0krJ yxCQG5WUfY01w0zi2DJkJ3oWACK604wnyzBXAfbjk5Cw2t6m98/BOoPmxQP8Bww2 4B0ZHjYl2W+MFavbMsZwUbG/sgXwlVYN1wazS4syv0FldmmMgmpHXDtYJymboBYK Rl/QVVonkdhiCbbK4mPUnj59sE/aHCY4XMkM4EivVT1LUnB+lEz33e+PWxKQbE80 p2OA5nmQUulXLKDBeesx76Sl+2GPCubK13et2esMZ07O700ehmID3jUpQRR2XhIH 3+OIg9Sz06ctacZZHQg9l2N+j57fVeEg5B7MtxPRbjUmOywbPM8= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:54 2026 by rpki-client