
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json)
Hash identifier: daXZfH5AF4R560BORLXjCoi+gw4mCMxxc9CiPgwwwNA=
Subject key identifier: 08:79:D7:CF:48:5F:F6:C8:88:00:F7:BD:E0:8F:42:0F:AD:50:FD:46
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial: 226DF0D9A22AE0410CFC5504E7684B88E829A002
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
Manifest number: 37
Signing time: Thu 11 Jun 2026 16:57:03 +0000
Manifest this update: Thu 11 Jun 2026 16:52:03 +0000
Manifest next update: Fri 12 Jun 2026 17:27:03 +0000
Files and hashes: 1: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: YogvL5vWvXt7bd+QcKz6i7m+9qaz071KBefuuink4sQ=)
2: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=)
3: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=)
4: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=)
5: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=)
6: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=)
7: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=)
8: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=)
9: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=)
10: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=)
11: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=)
12: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=)
13: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=)
14: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=)
15: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=)
16: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=)
17: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: PgXL6WDq3i8tznZRJPtlrc9sUxZ4kDtxFC0zL6N0xy0=)
18: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=)
19: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=)
20: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 17:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:6d:f0:d9:a2:2a:e0:41:0c:fc:55:04:e7:68:4b:88:e8:29:a0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Validity
Not Before: Jun 11 16:52:03 2026 GMT
Not After : Jun 12 17:27:03 2026 GMT
Subject: CN=0879D7CF485FF6C88800F7BDE08F420FAD50FD46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:fe:df:1c:a2:dc:63:14:b1:60:ec:99:17:
26:9e:2d:eb:ac:e9:e5:fa:3f:51:63:71:e0:a3:87:
0c:de:36:22:ad:f7:f7:20:5c:47:c9:7b:04:57:4a:
58:99:75:41:40:9c:bd:80:d1:eb:57:2e:5f:f3:6e:
c0:f7:5a:75:f2:40:8e:d6:c7:9d:7e:9f:16:dd:2b:
bd:26:73:fe:ac:3f:ee:8a:64:b9:2a:ef:56:a1:b9:
66:19:b3:9f:e1:d7:61:a2:99:f3:49:75:f8:fa:d7:
e7:d6:cc:e4:5d:65:a0:96:42:c4:ad:cb:8b:43:4d:
e3:94:5b:28:c6:52:61:5f:e3:84:82:09:e9:80:f6:
45:4a:5c:77:de:bc:ad:f6:0d:40:d6:db:76:9a:e8:
e8:cd:8e:8d:b5:8c:d4:ed:32:0e:ee:f0:04:66:fe:
0e:3f:8d:50:5d:bf:22:ea:5b:7e:60:ab:de:e2:92:
29:d0:06:bf:1c:71:f9:b9:ba:2e:fb:d9:41:5d:ed:
58:b1:e9:b9:6d:4b:d8:5a:58:ff:d7:06:2f:89:97:
31:81:97:70:86:d7:69:6e:b7:e0:80:68:40:47:8e:
74:50:a9:35:09:6d:6d:53:24:df:81:2a:b6:c6:8d:
3e:de:57:d7:f7:7b:78:e4:e2:54:ec:81:54:69:10:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:D7:CF:48:5F:F6:C8:88:00:F7:BD:E0:8F:42:0F:AD:50:FD:46
X509v3 Authority Key Identifier:
keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dd:9a:59:70:7c:0d:97:87:d1:9c:64:73:6c:23:6b:62:2e:
11:5f:da:6e:b8:4b:7b:a1:dd:b1:e1:7d:7a:5d:63:20:c6:05:
5a:6b:73:77:bc:9b:0b:d8:3d:bb:8a:2b:3d:f3:f0:7d:82:95:
64:96:cb:62:8b:49:74:ae:72:6c:09:33:9e:7a:8a:6b:fd:41:
15:2d:c0:91:59:ee:77:e6:d6:04:0e:39:e3:3b:66:55:b8:f9:
17:ff:a3:75:f3:51:d3:86:c3:91:cb:36:0f:ca:55:1a:ea:68:
f5:2a:df:76:02:9c:fb:63:66:f5:c7:77:a5:83:36:35:d6:e9:
39:aa:dc:e7:cb:91:10:5a:bf:9e:8a:7c:c2:be:4d:14:ca:77:
2b:8e:51:69:f6:05:d2:32:0d:75:6d:ea:f1:9d:6e:a4:d0:d4:
92:af:61:53:8b:de:73:cc:ab:32:40:22:b7:0d:f4:6a:7b:f1:
21:59:74:aa:e8:b5:c2:2b:45:34:69:b0:75:1d:f0:54:46:39:
0d:aa:4f:9d:19:5a:fc:72:14:18:3d:79:b1:a9:cb:41:3c:0c:
c1:d6:1f:26:79:bb:d1:6b:a3:bd:ba:65:df:5e:d2:b0:2a:25:
fc:b5:9f:39:82:23:8a:ac:16:66:d6:b3:00:dd:92:fd:8e:e8:
85:b0:eb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:21:02 2026 by rpki-client