$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json) Hash identifier: XwFLrFhIH0ExHMMQiDpjGKeI6cKKaEJsxRrpfwROVPM= Subject key identifier: 57:94:86:3A:40:FA:F1:DD:BC:8E:AA:DF:DA:BA:82:7F:6C:93:BF:36 Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Certificate serial: 677AAE20E3751AA1CE9A53D8E3BFB8105EEE2BD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft Manifest number: F4 Signing time: Fri 30 Oct 2026 08:35:57 +0000 Manifest this update: Fri 30 Oct 2026 08:30:57 +0000 Manifest next update: Sat 31 Oct 2026 12:30:57 +0000 Files and hashes: 1: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=) 2: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=) 3: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=) 4: 3131302e37362e3135312e302f32342d3234203d3e20313331373036.roa (hash: zktLOhstP59QX+/pVkdSod5es8p+nQ/YXOdOkcdCrEE=) 5: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=) 6: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=) 7: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=) 8: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: NZOX1czqUzI4pPmtiLoV94g5OyeboAj7e7MG4b16i5U=) 9: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=) 10: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=) 11: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=) 12: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=) 13: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=) 14: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=) 15: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=) 16: 3131302e37362e3135302e302f32332d3234203d3e20313331373036.roa (hash: eIeeAogwPWqdsxBa/LDDrPIQ2YgZ4wEqVY2TiS9bi9w=) 17: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=) 18: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=) 19: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=) 20: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=) 21: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 11:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7a:ae:20:e3:75:1a:a1:ce:9a:53:d8:e3:bf:b8:10:5e:ee:2b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Validity Not Before: Oct 30 08:30:57 2026 GMT Not After : Oct 31 12:30:57 2026 GMT Subject: CN=5794863A40FAF1DDBC8EAADFDABA827F6C93BF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cf:9e:8c:6d:47:af:33:54:73:0b:ef:9e:0c: 8b:b3:7b:7f:2f:f8:7c:b8:e7:f5:88:92:62:dc:ca: 88:44:31:5e:45:7e:ca:fc:63:42:76:3d:16:63:4a: 3c:bc:37:27:b3:fb:96:a7:c2:ab:12:c8:52:ef:f6: 5d:1e:72:2d:bd:df:27:a0:48:e7:bf:9f:1e:00:65: 34:8f:ed:cf:79:fa:6c:1d:7f:ca:15:b2:23:0e:01: 4a:a2:d3:57:d3:bb:63:1c:eb:79:77:b8:8e:a9:4f: 96:07:f0:cd:3b:5a:31:90:4d:3e:dc:7f:4e:bd:bf: d7:3a:9f:e5:20:db:88:94:97:c6:b1:6d:2e:fc:47: 0b:2b:55:e1:7f:22:38:7d:94:0c:77:55:7b:90:62: 18:18:cb:dd:64:da:97:b8:d7:f9:59:77:5a:ac:63: b6:96:ec:59:3f:7f:22:5f:93:63:d4:f4:42:76:6f: 91:8e:a2:e0:de:1d:41:6e:64:78:81:75:ae:6f:64: 0d:fb:c6:10:ed:45:7c:6c:09:f9:04:23:c5:6a:b5: 4e:09:43:09:90:bb:b1:8e:1c:b2:8b:df:25:94:2d: 75:80:54:d6:f7:07:97:cc:8e:fc:15:40:8b:eb:eb: b8:85:b1:c6:bc:30:db:c6:4f:7d:1e:6f:58:eb:39: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:94:86:3A:40:FA:F1:DD:BC:8E:AA:DF:DA:BA:82:7F:6C:93:BF:36 X509v3 Authority Key Identifier: keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ba:3c:42:fe:2a:61:81:a8:e7:a8:20:07:98:35:36:94:e3: 0c:11:49:cd:7a:8a:60:26:d9:65:fc:5b:5a:e6:d1:b0:9d:12: 3f:e1:2b:c3:20:c3:8f:c9:fd:f4:18:0f:5e:50:3c:9f:26:5c: d2:70:ff:95:1e:89:80:2f:9f:11:be:c1:1b:b6:d7:a7:3e:ee: a2:1f:50:d3:d6:08:fb:c6:3e:71:62:61:d6:02:81:a6:2d:9a: bd:d6:4e:f4:96:5a:51:7b:00:b0:d4:9f:58:3e:f0:75:1e:36: 3e:7a:7b:e9:ab:83:63:1f:5b:7c:49:1d:ef:20:1e:26:1b:c1: f5:78:5f:ec:46:f6:08:bd:f2:af:d4:77:e0:25:74:5b:31:23: 68:2d:8e:b7:a7:eb:a8:5c:5a:3b:db:7e:fc:78:ed:76:73:04: 1b:20:2c:ed:a8:ee:4e:49:de:f4:87:85:3c:55:72:ae:7f:43: 42:62:64:e1:4d:60:dc:0c:3e:4d:df:2b:61:b7:00:d5:09:cf: b7:68:62:ad:1b:a2:63:20:0b:ab:08:c8:5f:1f:17:37:4e:12: 94:e6:d2:07:22:7e:ff:0b:11:64:df:00:0c:b3:9e:a9:8e:31: c9:26:28:b5:13:70:f3:04:29:91:79:81:76:24:bd:26:4b:8b: e0:06:70:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3quION1GqHOmlPY47+4EF7uK9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEz RUI2NDQ1QjAeFw0yNjEwMzAwODMwNTdaFw0yNjEwMzExMjMwNTdaMDMxMTAvBgNV BAMTKDU3OTQ4NjNBNDBGQUYxRERCQzhFQUFERkRBQkE4MjdGNkM5M0JGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzz56MbUevM1RzC++eDIuze38v +Hy45/WIkmLcyohEMV5Ffsr8Y0J2PRZjSjy8Nyez+5anwqsSyFLv9l0eci293yeg SOe/nx4AZTSP7c95+mwdf8oVsiMOAUqi01fTu2Mc63l3uI6pT5YH8M07WjGQTT7c f069v9c6n+Ug24iUl8axbS78RwsrVeF/Ijh9lAx3VXuQYhgYy91k2pe41/lZd1qs Y7aW7Fk/fyJfk2PU9EJ2b5GOouDeHUFuZHiBda5vZA37xhDtRXxsCfkEI8VqtU4J QwmQu7GOHLKL3yWULXWAVNb3B5fMjvwVQIvr67iFsca8MNvGT30eb1jrOf3nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV5SGOkD68d28jqrf2rqCf2yTvzYwHwYDVR0j BBgwFoAUIaGvE4IP7KrIced7pwbfkT62RFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI1NDhiYWQtN2ZlZC00MWZkLWI0MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4 MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEzRUI2NDQ1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUExQUYxMzgyMEZFQ0FBQzg3MUU3N0JBNzA2REY5MTNFQjY0 NDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRG OTEzRUI2NDQ1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ26PEL+KmGBqOeoIAeYNTaU4wwRSc16imAm 2WX8W1rm0bCdEj/hK8Mgw4/J/fQYD15QPJ8mXNJw/5UeiYAvnxG+wRu216c+7qIf UNPWCPvGPnFiYdYCgaYtmr3WTvSWWlF7ALDUn1g+8HUeNj56e+mrg2MfW3xJHe8g HiYbwfV4X+xG9gi98q/Ud+AldFsxI2gtjren66hcWjvbfvx47XZzBBsgLO2o7k5J 3vSHhTxVcq5/Q0JiZOFNYNwMPk3fK2G3ANUJz7doYq0bomMgC6sIyF8fFzdOEpTm 0gcifv8LEWTfAAyznqmOMckmKLUTcPMEKZF5gXYkvSZLi+AGcIU= -----END CERTIFICATE-----Generated at Fri Oct 30 14:21:56 2026 by rpki-client