
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json)
Hash identifier: sqdXrUfapU2R+Ao2iU4K59IRkbYc8SD+rmvtUMZNy4E=
Subject key identifier: 99:95:53:A3:F0:35:0B:CF:BB:DD:48:8F:B8:2E:23:18:53:45:C2:1C
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial: 24957D9FA0A7D08E3C53A723D660F280A1B0F962
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
Manifest number: F6
Signing time: Sat 31 Oct 2026 21:03:58 +0000
Manifest this update: Sat 31 Oct 2026 20:58:58 +0000
Manifest next update: Sun 01 Nov 2026 21:04:58 +0000
Files and hashes: 1: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=)
2: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=)
3: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: mSNprUshIOpOHqVyirazxm7s2IVOL7TvebeyrNIXX5Q=)
4: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=)
5: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=)
6: 3131302e37362e3135312e302f32342d3234203d3e20313331373036.roa (hash: zktLOhstP59QX+/pVkdSod5es8p+nQ/YXOdOkcdCrEE=)
7: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=)
8: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=)
9: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=)
10: 3131302e37362e3135302e302f32332d3234203d3e20313331373036.roa (hash: eIeeAogwPWqdsxBa/LDDrPIQ2YgZ4wEqVY2TiS9bi9w=)
11: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=)
12: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=)
13: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=)
14: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=)
15: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=)
16: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=)
17: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=)
18: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=)
19: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=)
20: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=)
21: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 21:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:95:7d:9f:a0:a7:d0:8e:3c:53:a7:23:d6:60:f2:80:a1:b0:f9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Validity
Not Before: Oct 31 20:58:58 2026 GMT
Not After : Nov 1 21:04:58 2026 GMT
Subject: CN=999553A3F0350BCFBBDD488FB82E23185345C21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:8c:9f:7c:ec:eb:9b:d6:70:b5:8f:2b:53:
6d:a9:d3:6d:03:5e:54:c2:36:28:02:a6:0b:81:48:
72:7b:bd:2b:1b:9e:64:64:d7:7b:da:b7:d5:26:8d:
cf:b6:a8:d2:bb:f0:41:9c:d3:6c:7b:ee:e3:58:54:
aa:6d:ed:fd:ac:b0:e2:3c:49:3b:11:60:c0:e6:6c:
b8:fd:96:70:a8:a6:dc:7a:6f:e4:b7:f6:b7:fd:2e:
bc:d6:f1:ba:85:16:89:ed:dc:e8:30:d1:a3:4a:1f:
14:97:da:1a:04:48:2b:53:b9:cd:1c:b4:5f:ff:e9:
34:91:b0:cb:ac:9d:fe:a7:28:9f:8f:d4:f6:ec:89:
34:44:48:c9:77:63:02:73:c0:b4:23:94:e4:5b:01:
be:50:25:88:52:3c:ec:64:4c:1f:9f:e9:0f:41:41:
8e:21:e5:4d:27:96:de:04:56:be:03:49:34:77:62:
d9:a7:ed:08:b8:86:cd:b2:44:04:a3:13:7b:94:57:
18:9b:3b:67:76:17:3c:74:5f:66:47:7b:22:6a:07:
50:5e:09:49:cb:15:68:f1:43:09:37:76:d0:77:f3:
3e:eb:3e:62:5e:62:a8:7d:e0:64:42:d8:11:95:26:
ec:eb:04:32:39:c3:a1:8e:85:54:cf:79:af:1b:c5:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:95:53:A3:F0:35:0B:CF:BB:DD:48:8F:B8:2E:23:18:53:45:C2:1C
X509v3 Authority Key Identifier:
keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:05:ee:19:57:7b:1a:fe:27:a7:4e:c1:df:2d:46:3f:09:c9:
0f:e8:15:18:0a:37:bb:d4:42:98:19:72:e5:ee:f7:a5:61:50:
60:d9:12:e4:07:32:03:76:bb:bf:f4:8e:fa:40:64:f5:dd:e2:
e5:82:47:91:e2:c8:48:6c:e5:b6:a3:42:da:73:a5:39:ea:bb:
50:a5:65:51:cf:53:06:00:e6:cf:f5:4c:fc:d1:66:e1:4b:3e:
a6:c8:c4:21:f2:06:3c:63:24:1b:7c:e2:33:13:fe:85:4f:07:
df:f8:6b:4a:3e:fd:07:3d:90:e7:b6:0d:c5:58:4a:4f:42:9a:
e7:e5:6c:a0:66:84:09:37:f2:5e:1e:8e:83:d7:05:54:99:13:
8e:b1:51:f3:6e:56:d0:ed:40:b3:69:10:fb:05:2b:70:71:93:
20:d1:d2:61:8d:ed:1a:62:3b:45:74:0f:83:e5:14:77:56:f4:
63:f6:d4:31:d6:91:6f:ef:41:f8:6a:af:3e:3d:ee:40:9e:cd:
d5:b7:52:8b:21:70:79:6f:9b:12:7d:72:ce:2c:5d:c4:87:4c:
18:1c:34:0e:bd:fd:28:e4:1b:00:cd:4e:8a:a4:03:5f:1d:bc:
32:87:0e:a4:cd:7c:0c:b2:fe:65:f7:ab:ec:ec:eb:67:5c:2f:
b8:69:1d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:25 2026 by rpki-client