$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft File: C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft (raw, json) Hash identifier: HlhRAxAhFo4KVJ0Jwuub/KN4wSjQ3pOnRftvnlfppMw= Subject key identifier: 53:DE:91:45:77:65:9C:F8:3A:1D:21:00:AC:02:4D:4B:27:11:6A:E1 Authority key identifier: C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 Certificate issuer: /CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Certificate serial: 2C7114C17752572438FC8A99805C4277A29FE025 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:02:13 +0000 Manifest this update: Thu 17 Sep 2026 06:57:13 +0000 Manifest next update: Fri 18 Sep 2026 07:13:13 +0000 Files and hashes: 1: C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl (hash: 7VMoQLm9Rl7ZN7pORi24OyJ+jhLNCG45ZE0HYipAbxc=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: fRCVhusGzoRmw1xVyCKp1DarroNp+AXJavllcEzpEYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:71:14:c1:77:52:57:24:38:fc:8a:99:80:5c:42:77:a2:9f:e0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Validity Not Before: Sep 17 06:57:13 2026 GMT Not After : Sep 18 07:13:13 2026 GMT Subject: CN=53DE914577659CF83A1D2100AC024D4B27116AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:74:e7:fb:a4:8a:ae:c5:d5:2f:c8:85:3b:2c: cb:b4:4a:57:5d:9b:60:f0:b7:13:43:1b:5d:84:69: 41:c5:4e:21:6a:75:c3:25:14:b5:d6:ab:7b:85:e1: 07:1e:f5:a5:bf:74:0d:b5:da:56:f7:92:cb:1a:d3: 8f:de:57:b9:d7:c4:87:9e:a0:79:5f:0b:f0:56:99: 33:a7:20:a3:92:6e:2d:80:56:a9:50:7c:6f:50:27: fd:03:0a:a7:3b:49:63:fd:53:d6:96:4e:4d:c4:0f: 48:b5:54:f5:1a:45:ed:c4:70:f8:cd:ed:24:4b:1c: 68:ba:60:64:5d:97:74:4d:b8:27:17:d5:89:2b:bf: 50:aa:54:1d:ba:be:9f:3f:4f:75:0a:20:16:e2:42: ec:e6:42:94:5a:17:ff:d7:4e:b7:c5:0e:ed:7a:05: a1:9d:66:1e:8d:19:15:d3:da:54:42:de:82:03:c1: cc:b2:ff:77:cc:11:5e:af:ca:8b:0e:6c:22:b9:f9: 20:3f:c7:63:80:cd:23:c0:1d:7c:4b:29:83:a8:c3: 9e:42:7e:64:9f:e4:0f:50:eb:d9:74:48:b1:f6:44: fd:47:dd:b4:43:ff:e3:f2:eb:f2:c3:d8:40:a3:31: 09:fd:c0:10:f1:74:00:9b:30:4d:f2:ad:9c:8f:a6: 7d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DE:91:45:77:65:9C:F8:3A:1D:21:00:AC:02:4D:4B:27:11:6A:E1 X509v3 Authority Key Identifier: keyid:C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:17:55:40:7e:be:bd:16:8f:af:ef:89:dc:c7:89:52:c4:aa: a5:fb:70:ab:21:04:ab:1b:4f:20:bf:e7:a4:c7:76:c0:b8:0d: 0d:50:3b:a8:fb:4f:83:61:df:6b:5d:bb:49:3d:91:8e:76:50: 29:3c:3a:f8:c8:7e:ba:31:f5:68:d6:28:d5:86:c4:ec:c0:5c: 36:1c:fb:04:d8:62:97:e7:74:02:4d:0a:80:7d:7b:a8:01:19: fb:40:d3:8f:80:49:78:f1:1f:11:e4:d4:27:30:d6:d0:91:d9: 14:42:88:3d:55:fb:68:77:43:52:dd:0f:fa:52:12:97:c9:c1: bd:08:bc:ef:dc:d3:9c:dc:80:d9:02:14:08:b3:e7:a8:cb:4b: e3:29:dd:21:c5:0b:14:ac:16:a4:d1:17:28:90:a0:63:aa:07: 15:ed:64:9c:fe:3c:a9:bb:63:14:87:6d:9d:d7:f3:84:f3:7a: 79:02:a5:27:9b:a2:ae:13:b4:2b:97:90:68:d2:4d:63:2d:40: e4:d0:8d:79:74:e0:1d:9c:f4:3d:85:28:8b:64:96:22:46:33: a6:ff:fb:cb:1c:3b:4c:25:f8:40:10:57:9f:00:54:7e:8a:18: c6:2e:ac:b3:58:e1:da:33:2c:24:7d:c9:d6:81:cd:3d:af:c5: 6a:91:2f:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHEUwXdSVyQ4/IqZgFxCd6Kf4CUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RC MUZBN0EzMTAeFw0yNjA5MTcwNjU3MTNaFw0yNjA5MTgwNzEzMTNaMDMxMTAvBgNV BAMTKDUzREU5MTQ1Nzc2NTlDRjgzQTFEMjEwMEFDMDI0RDRCMjcxMTZBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdOf7pIquxdUvyIU7LMu0Sldd m2DwtxNDG12EaUHFTiFqdcMlFLXWq3uF4Qce9aW/dA212lb3kssa04/eV7nXxIee oHlfC/BWmTOnIKOSbi2AVqlQfG9QJ/0DCqc7SWP9U9aWTk3ED0i1VPUaRe3EcPjN 7SRLHGi6YGRdl3RNuCcX1Ykrv1CqVB26vp8/T3UKIBbiQuzmQpRaF//XTrfFDu16 BaGdZh6NGRXT2lRC3oIDwcyy/3fMEV6vyosObCK5+SA/x2OAzSPAHXxLKYOow55C fmSf5A9Q69l0SLH2RP1H3bRD/+Py6/LD2ECjMQn9wBDxdACbME3yrZyPpn3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU96RRXdlnPg6HSEArAJNSycRauEwHwYDVR0j BBgwFoAUwhZJsOkoMYw1YY7hl91dzbH6ejEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4M2IyN2MtYTczMC00MDAyLTkxYjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBF OTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RCMUZBN0EzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjE2NDlCMEU5MjgzMThDMzU2MThFRTE5N0RENURDREIxRkE3 QTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVE Q0RCMUZBN0EzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIXVUB+vr0Wj6/vidzHiVLEqqX7cKshBKsb TyC/56THdsC4DQ1QO6j7T4Nh32tdu0k9kY52UCk8OvjIfrox9WjWKNWGxOzAXDYc +wTYYpfndAJNCoB9e6gBGftA04+ASXjxHxHk1Ccw1tCR2RRCiD1V+2h3Q1LdD/pS EpfJwb0IvO/c05zcgNkCFAiz56jLS+Mp3SHFCxSsFqTRFyiQoGOqBxXtZJz+PKm7 YxSHbZ3X84TzenkCpSeboq4TtCuXkGjSTWMtQOTQjXl04B2c9D2FKItkliJGM6b/ +8scO0wl+EAQV58AVH6KGMYurLNY4dozLCR9ydaBzT2vxWqRL14= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:52 2026 by rpki-client