
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json)
Hash identifier: fsGcgcU3dLd8sbsJ2+GMDNpHehabJk9ndp9zyi9DJgE=
Subject key identifier: 2A:1D:A0:3B:0A:3C:E8:62:3A:09:FC:12:84:2E:DC:74:BE:75:A8:17
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial: 5F64567F515EC81598DFC8F375C2654EBF952A9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
Manifest number: 75
Signing time: Mon 27 Jul 2026 19:21:26 +0000
Manifest this update: Mon 27 Jul 2026 19:16:26 +0000
Manifest next update: Tue 28 Jul 2026 23:20:26 +0000
Files and hashes: 1: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=)
2: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=)
3: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=)
4: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=)
5: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=)
6: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=)
7: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=)
8: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=)
9: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=)
10: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=)
11: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: o1z7lfy5lL5jdezsGI8CrihdeLCTmIom6WxnMKfLYXg=)
12: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=)
13: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=)
14: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=)
15: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=)
16: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: PgXL6WDq3i8tznZRJPtlrc9sUxZ4kDtxFC0zL6N0xy0=)
17: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=)
18: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=)
19: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=)
20: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 23:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:64:56:7f:51:5e:c8:15:98:df:c8:f3:75:c2:65:4e:bf:95:2a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Validity
Not Before: Jul 27 19:16:26 2026 GMT
Not After : Jul 28 23:20:26 2026 GMT
Subject: CN=2A1DA03B0A3CE8623A09FC12842EDC74BE75A817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:28:b0:c1:aa:a8:a2:84:c1:95:1d:0a:15:
2a:ac:be:15:a9:1b:93:ec:2f:5e:2b:6b:22:7f:f6:
00:ec:e6:e1:bf:fa:6f:9d:a5:f6:7c:7d:80:02:b1:
33:a4:90:76:b7:5b:a8:43:2c:8c:84:93:d1:78:aa:
bd:28:28:5b:bc:5b:97:2b:cf:3b:90:ba:dd:3e:c3:
0c:59:dc:b5:58:7c:2e:cf:a6:b5:0a:3f:46:28:78:
3c:0f:80:2b:75:cd:a2:72:6b:32:3b:db:bf:a0:79:
ad:1e:b3:da:e5:7d:fd:2b:1e:2c:79:a9:f7:11:b4:
de:cf:13:4b:f1:75:55:f1:14:b1:f3:2d:82:16:44:
8a:1a:c3:0d:78:a5:98:41:8b:6d:c7:e5:37:32:57:
d8:e4:ea:43:f2:9c:e2:ef:34:1b:e9:49:8c:35:ef:
41:49:b0:e5:a7:21:56:a5:a3:67:fa:d1:b8:ee:ff:
5f:54:18:d7:a3:f7:67:f1:01:fc:e8:ab:fc:f6:b7:
69:78:1a:37:8f:08:68:c5:72:9f:13:0e:fe:36:f5:
79:ad:a4:ea:e9:25:0f:be:93:0a:34:d5:6d:21:48:
d8:6f:70:90:1a:6d:5b:90:57:77:30:6a:87:7d:49:
04:a9:f1:ce:e1:36:09:59:db:00:e1:7c:36:cd:7f:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1D:A0:3B:0A:3C:E8:62:3A:09:FC:12:84:2E:DC:74:BE:75:A8:17
X509v3 Authority Key Identifier:
keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:df:f7:1c:64:74:9c:54:26:bb:bb:60:2f:dd:26:78:cd:4c:
0b:5b:6f:15:70:1a:b4:83:d8:9e:0b:1c:1b:5f:1d:71:3b:8f:
8f:34:84:a7:09:52:ee:46:c1:b7:49:de:ac:a7:9e:57:67:41:
50:95:17:d2:29:a6:fd:f6:62:f2:3a:13:94:73:18:09:72:c4:
a5:f0:5b:6c:f2:98:cc:26:8f:4f:d1:21:e9:af:86:21:64:6c:
58:2f:1b:c6:2a:b8:c4:d5:a9:de:8c:18:60:29:ac:74:15:c2:
5c:3d:e2:2a:a4:b0:bf:8e:37:8a:d1:29:ce:9c:64:34:61:82:
ef:ed:ad:ca:c6:a3:e8:00:4f:5a:ba:4b:30:bf:78:80:ba:61:
34:2c:74:55:f7:ce:7b:a9:bb:b6:1a:24:05:d5:80:82:93:9a:
e5:25:b0:c9:de:de:9b:01:ce:ed:54:ea:d0:b1:b8:11:ce:0e:
f1:b3:fa:5a:d0:1b:37:18:f0:70:c1:40:1e:de:1d:2a:8b:44:
f9:ba:40:02:66:2f:27:d2:f3:0a:13:95:2c:a2:f5:34:c4:1e:
48:bd:e6:90:19:f7:6c:45:d0:95:67:f3:a5:1e:3a:67:3c:d0:
97:da:f4:b5:2d:aa:75:49:bb:c8:9d:2c:f8:0b:4a:1d:92:ca:
70:78:8d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:45:50 2026 by rpki-client