$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json) Hash identifier: DB5GI62a6Dbf6ffvqPb16kp/o2GoUiFGiY96eB4HRHY= Subject key identifier: B3:2C:9F:B6:82:55:99:B8:FA:33:70:CB:D7:2A:6F:CD:BD:CE:0E:6F Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Certificate serial: 79E5E37704526302198D8471E5746E2E7D767D87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft Manifest number: B0 Signing time: Thu 10 Sep 2026 20:47:25 +0000 Manifest this update: Thu 10 Sep 2026 20:42:25 +0000 Manifest next update: Sat 12 Sep 2026 00:41:25 +0000 Files and hashes: 1: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=) 2: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=) 3: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=) 4: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=) 5: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=) 6: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=) 7: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=) 8: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=) 9: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: PgXL6WDq3i8tznZRJPtlrc9sUxZ4kDtxFC0zL6N0xy0=) 10: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=) 11: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=) 12: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: bC6/tRMHt59aren1wh4awjuPeIzFK05/aCf4oKk5+9w=) 13: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=) 14: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=) 15: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=) 16: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=) 17: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=) 18: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=) 19: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=) 20: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e5:e3:77:04:52:63:02:19:8d:84:71:e5:74:6e:2e:7d:76:7d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Validity Not Before: Sep 10 20:42:25 2026 GMT Not After : Sep 12 00:41:25 2026 GMT Subject: CN=B32C9FB6825599B8FA3370CBD72A6FCDBDCE0E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:49:6f:95:06:57:ab:50:e1:8f:68:66:24: fd:90:64:af:4c:3a:d2:07:fd:17:a4:20:37:dc:46: af:f0:43:31:fd:36:88:5c:92:4a:ad:81:af:fb:cd: 53:df:4b:91:57:7c:6c:07:c8:e6:77:cd:2e:e4:a3: 59:9f:7d:a6:56:19:0e:df:f6:bf:08:c4:8e:58:93: a5:9d:de:ff:d2:6d:78:41:84:56:b0:09:ce:43:82: 1f:ae:e6:03:8b:c8:65:27:e8:bf:21:48:eb:4b:ef: de:2a:6a:33:cb:26:f7:40:1b:31:21:19:2c:ee:9b: 2a:6d:d1:52:76:50:f2:56:df:d4:81:ba:0f:ac:98: 49:5a:c8:6f:54:91:a4:15:9d:29:96:a6:35:6c:3e: 3f:69:09:5c:18:13:66:e5:90:3e:bc:f3:95:44:5c: 70:29:b9:6c:4b:81:98:ea:01:c6:bc:00:cd:de:1c: e0:ac:82:e5:f5:34:48:b8:61:06:53:c1:ea:28:10: fc:b8:4d:d9:a5:c9:27:e9:6f:7f:9f:b2:58:69:3b: cb:cb:71:0e:f4:2d:ac:62:f5:d0:6f:53:8a:54:ca: 5d:19:07:a6:ef:23:7d:b1:06:08:5b:1a:7f:c1:c8: 89:28:27:a5:88:22:66:17:21:b4:4b:c8:b0:91:81: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2C:9F:B6:82:55:99:B8:FA:33:70:CB:D7:2A:6F:CD:BD:CE:0E:6F X509v3 Authority Key Identifier: keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ed:84:0f:66:63:65:5d:ae:9a:92:66:69:c7:e3:9b:6f:51: c6:b3:47:4a:b2:67:bb:f1:a4:16:a6:a8:18:e8:76:47:1f:81: c6:e6:3c:43:0f:dd:37:0a:a8:de:9f:50:61:7a:ea:b2:6d:18: b4:1b:ad:81:2b:05:e0:dc:a5:e1:26:b8:ca:2e:29:50:2c:be: 14:10:7c:59:de:68:f7:cb:8a:3f:f4:22:df:ee:1b:04:07:55: b4:60:46:f3:c8:c1:1a:d8:29:14:19:04:dc:35:fd:b0:0e:93: 8a:bb:4c:a2:17:d9:77:3b:0c:a5:0b:45:b9:92:e6:27:ad:69: c5:68:ed:db:8d:d3:6b:cf:cc:d6:b5:da:c3:af:13:6b:7a:c7: f1:97:0e:9a:1c:07:08:c6:35:d1:c5:e8:b5:c1:65:8a:6b:d1: 56:28:f1:0c:4f:9d:0e:1e:6c:47:97:b3:12:da:45:67:a2:39: fe:79:32:49:ca:1d:45:13:f2:2a:a9:01:be:55:09:1a:3d:be: d3:40:22:ce:11:b9:47:d3:84:f7:0b:cd:6b:22:80:67:fd:9c: db:a5:70:11:4b:57:d3:6b:fd:dd:ef:01:77:b8:3f:8b:51:44: 30:53:49:4b:a1:5c:57:f8:74:88:89:a7:24:45:22:a1:56:1f: 0d:53:10:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeeXjdwRSYwIZjYRx5XRuLn12fYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEz RUI2NDQ1QjAeFw0yNjA5MTAyMDQyMjVaFw0yNjA5MTIwMDQxMjVaMDMxMTAvBgNV BAMTKEIzMkM5RkI2ODI1NTk5QjhGQTMzNzBDQkQ3MkE2RkNEQkRDRTBFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15klvlQZXq1Dhj2hmJP2QZK9M OtIH/RekIDfcRq/wQzH9Nohckkqtga/7zVPfS5FXfGwHyOZ3zS7ko1mffaZWGQ7f 9r8IxI5Yk6Wd3v/SbXhBhFawCc5Dgh+u5gOLyGUn6L8hSOtL794qajPLJvdAGzEh GSzumypt0VJ2UPJW39SBug+smElayG9UkaQVnSmWpjVsPj9pCVwYE2blkD6885VE XHApuWxLgZjqAca8AM3eHOCsguX1NEi4YQZTweooEPy4TdmlySfpb3+fslhpO8vL cQ70Laxi9dBvU4pUyl0ZB6bvI32xBghbGn/ByIkoJ6WIImYXIbRLyLCRgQuHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsyyftoJVmbj6M3DL1ypvzb3ODm8wHwYDVR0j BBgwFoAUIaGvE4IP7KrIced7pwbfkT62RFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI1NDhiYWQtN2ZlZC00MWZkLWI0MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4 MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEzRUI2NDQ1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUExQUYxMzgyMEZFQ0FBQzg3MUU3N0JBNzA2REY5MTNFQjY0 NDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRG OTEzRUI2NDQ1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3thA9mY2VdrpqSZmnH45tvUcazR0qyZ7vx pBamqBjodkcfgcbmPEMP3TcKqN6fUGF66rJtGLQbrYErBeDcpeEmuMouKVAsvhQQ fFneaPfLij/0It/uGwQHVbRgRvPIwRrYKRQZBNw1/bAOk4q7TKIX2Xc7DKULRbmS 5ietacVo7duN02vPzNa12sOvE2t6x/GXDpocBwjGNdHF6LXBZYpr0VYo8QxPnQ4e bEeXsxLaRWeiOf55MknKHUUT8iqpAb5VCRo9vtNAIs4RuUfThPcLzWsigGf9nNul cBFLV9Nr/d3vAXe4P4tRRDBTSUuhXFf4dIiJpyRFIqFWHw1TENw= -----END CERTIFICATE-----Generated at Fri Sep 11 06:49:41 2026 by rpki-client