$ rpki-client -vvf rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft (raw, json) Hash identifier: aUQeAAckGeDbWzLMhLugvJxTRaogjo+U6FEnZuYK1LA= Subject key identifier: 51:50:7E:17:67:18:E0:46:EE:AB:1C:02:BC:3C:E4:B9:DE:AF:11:96 Authority key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Certificate issuer: /CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Certificate serial: 7BC2047A5D085942478EC29E443239B7FFF94B39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 03:41:58 +0000 Manifest this update: Sun 02 Aug 2026 03:36:58 +0000 Manifest next update: Mon 03 Aug 2026 06:52:58 +0000 Files and hashes: 1: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl (hash: LN64QgfcY+u3aNcHtQBvsln3Qou05nhEISjOQuG3RdY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c2:04:7a:5d:08:59:42:47:8e:c2:9e:44:32:39:b7:ff:f9:4b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Validity Not Before: Aug 2 03:36:58 2026 GMT Not After : Aug 3 06:52:58 2026 GMT Subject: CN=51507E176718E046EEAB1C02BC3CE4B9DEAF1196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:5c:6a:71:d4:45:8b:21:49:85:37:3b:e9: 65:f7:fb:8c:a4:3e:e1:65:e8:47:9c:a6:21:e9:80: fb:8e:a9:30:b1:7b:57:39:5e:16:a1:b9:5a:0f:1f: 7b:d0:f8:da:01:77:c8:7e:0e:a9:28:88:3f:c4:42: 1f:b3:d2:01:1d:f0:d8:67:d7:dc:6f:c2:db:91:88: 43:96:fd:83:b7:dd:78:2d:5f:26:0e:13:8c:61:d4: 9c:e6:d5:14:c0:a9:3d:f3:71:2c:ea:5c:26:ea:76: 81:35:aa:be:75:cf:fb:6c:cc:92:1d:87:56:5b:d7: 06:22:ad:75:74:95:bc:20:dc:16:d1:49:c4:6f:03: 40:2b:96:af:5b:75:bf:bc:97:6c:5d:38:f8:39:68: 66:40:47:1f:2a:4f:2d:49:e6:bb:64:c6:d9:65:7d: 9b:95:41:87:24:2d:3a:8d:6b:f6:fe:bb:9f:d6:6c: f5:c8:f6:7f:84:c5:0f:60:5f:7a:a8:31:c6:25:1e: fe:4f:cf:c7:09:05:5c:f8:0a:2e:16:c5:5e:1a:dc: 1d:bf:62:40:f5:5a:47:92:4f:81:47:d8:bc:e7:57: c3:1b:07:e2:40:50:95:82:5b:52:f8:39:83:c1:fc: 62:f6:4f:b2:c7:b7:df:4b:b2:bb:4e:e0:3d:b1:d2: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:50:7E:17:67:18:E0:46:EE:AB:1C:02:BC:3C:E4:B9:DE:AF:11:96 X509v3 Authority Key Identifier: keyid:B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e5:99:ca:74:e9:63:e5:80:53:87:57:b8:35:85:53:e9:d4: 07:6e:e2:ee:08:ce:0e:a8:75:7a:35:48:e9:6e:23:f7:a5:6e: e9:19:72:38:b5:70:72:5b:12:43:bb:d8:3b:b9:eb:06:b5:83: d1:c8:ff:5a:79:fe:d3:bf:a0:72:ef:f6:e4:c5:f9:5c:a2:04: c2:b7:74:99:fb:02:ef:bc:6a:5b:b7:1b:de:72:17:00:2c:a5: d7:a3:43:31:66:1c:53:9e:89:45:0f:8a:d7:cd:49:5c:64:98: 62:44:9b:db:22:cc:2a:25:45:e7:99:ea:1c:c2:3b:ad:2e:e6: 30:39:d3:cc:9b:e8:ed:bf:1f:6a:4b:b9:2e:ce:4f:97:31:99: 36:72:be:dd:8a:5b:bd:a5:1d:c6:5b:1b:5a:d9:e3:65:48:29: df:df:60:fc:17:99:16:0c:fe:6d:cc:10:9d:e1:60:f0:ae:64: 5f:74:22:8e:59:8a:ae:e1:30:26:a6:37:b4:b5:c7:05:12:a3: 86:c3:52:52:cd:ce:27:35:ce:78:63:0b:04:51:e1:d3:9f:93: 14:6f:d3:ee:97:6b:1d:63:7b:f1:9c:99:44:d4:79:99:1a:9a: 3d:8d:19:f0:5b:eb:f1:51:29:ae:c6:30:87:e2:76:a6:e7:00: 6b:33:d4:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8IEel0IWUJHjsKeRDI5t//5SzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBGQjAx RkM2NDNDMTAeFw0yNjA4MDIwMzM2NThaFw0yNjA4MDMwNjUyNThaMDMxMTAvBgNV BAMTKDUxNTA3RTE3NjcxOEUwNDZFRUFCMUMwMkJDM0NFNEI5REVBRjExOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW6FxqcdRFiyFJhTc76WX3+4yk PuFl6EecpiHpgPuOqTCxe1c5XhahuVoPH3vQ+NoBd8h+DqkoiD/EQh+z0gEd8Nhn 19xvwtuRiEOW/YO33XgtXyYOE4xh1Jzm1RTAqT3zcSzqXCbqdoE1qr51z/tszJId h1Zb1wYirXV0lbwg3BbRScRvA0Arlq9bdb+8l2xdOPg5aGZARx8qTy1J5rtkxtll fZuVQYckLTqNa/b+u5/WbPXI9n+ExQ9gX3qoMcYlHv5Pz8cJBVz4Ci4WxV4a3B2/ YkD1WkeST4FH2LznV8MbB+JAUJWCW1L4OYPB/GL2T7LHt99LsrtO4D2x0oqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVB+F2cY4EbuqxwCvDzkud6vEZYwHwYDVR0j BBgwFoAUshIgoSddUCLcHjOQr4wPsB/GQ8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA4ODY0OGYtNWUwYi00MzM4LTkxMWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEy NzVENTAyMkRDMUUzMzkwQUY4QzBGQjAxRkM2NDNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMjEyMjBBMTI3NUQ1MDIyREMxRTMzOTBBRjhDMEZCMDFGQzY0 M0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvQjIxMjIwQTEyNzVENTAyMkRDMUUzMzkwQUY4QzBG QjAxRkM2NDNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDlmcp06WPlgFOHV7g1hVPp1Adu4u4Izg6o dXo1SOluI/elbukZcji1cHJbEkO72Du56wa1g9HI/1p5/tO/oHLv9uTF+VyiBMK3 dJn7Au+8alu3G95yFwAspdejQzFmHFOeiUUPitfNSVxkmGJEm9sizColReeZ6hzC O60u5jA508yb6O2/H2pLuS7OT5cxmTZyvt2KW72lHcZbG1rZ42VIKd/fYPwXmRYM /m3MEJ3hYPCuZF90Io5Ziq7hMCamN7S1xwUSo4bDUlLNzic1znhjCwRR4dOfkxRv 0+6Xax1je/GcmUTUeZkamj2NGfBb6/FRKa7GMIfidqbnAGsz1Oc= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:31 2026 by rpki-client