$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft File: C21FB465A0510DBFCC14562C85738E9077EEC01A.mft (raw, json) Hash identifier: fpA6+fQOJF8rHiX3llHYV3UE7REk3imJL7f4SLpX0hQ= Subject key identifier: 42:AE:07:D4:70:91:32:13:C0:AF:12:5F:70:D7:B7:99:CA:77:35:08 Authority key identifier: C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A Certificate issuer: /CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Certificate serial: 6C566F46EEF1CBD5B17FBF536A67038EC0CFFB3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 14:13:00 +0000 Manifest this update: Fri 19 Jun 2026 14:08:00 +0000 Manifest next update: Sat 20 Jun 2026 16:07:00 +0000 Files and hashes: 1: C21FB465A0510DBFCC14562C85738E9077EEC01A.crl (hash: xkmX1xsaAvUM+pt8RwwBEkCRbt2sR+sJDzkW+sIdgkk=) 2: 3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (hash: Relrsr05v7o6LWUkvyj3CRc7sy187SltL/KM3/wqMnY=) 3: 3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (hash: rtUbQHLZbaAGcuUEYQCtJGPoOA9/PGOEJnisZdWSck8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 16:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:56:6f:46:ee:f1:cb:d5:b1:7f:bf:53:6a:67:03:8e:c0:cf:fb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Validity Not Before: Jun 19 14:08:00 2026 GMT Not After : Jun 20 16:07:00 2026 GMT Subject: CN=42AE07D470913213C0AF125F70D7B799CA773508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f8:e6:32:e6:ef:b4:12:14:38:af:db:60:ff: 24:a6:ef:6f:7f:f5:3b:0f:b2:57:e4:5c:cb:e0:9e: 53:01:f2:b3:aa:b1:e0:c7:7d:3d:13:d1:ea:27:c3: e8:4e:d7:64:59:8e:7f:b6:cf:f3:f3:72:da:6f:08: f7:d6:2c:a9:88:ef:2b:52:4d:97:2e:fc:08:55:56: 5c:08:85:7a:b1:9c:01:55:64:67:96:7f:ad:94:c3: 52:30:b1:80:e9:31:52:ee:fc:fa:eb:b1:a4:51:dc: d2:ed:5c:0c:f7:0e:2a:72:76:c2:90:a2:1f:80:7d: fb:ca:80:12:79:fc:2b:4b:cc:e4:74:1a:29:7e:5c: 95:ed:a6:6f:43:e0:d6:df:ef:dc:1c:5a:80:fe:6a: 0b:cc:62:d5:2d:78:73:bd:f3:3c:9d:96:f7:39:f8: ba:97:f7:13:27:77:2d:88:6b:27:6a:67:b5:b0:9f: 3b:77:94:65:ee:ae:57:88:35:47:1a:e9:a9:d9:75: b4:46:06:59:16:71:15:6b:d1:39:b1:ca:fc:79:58: 36:9c:c3:db:9d:9e:7c:43:e7:03:20:4a:4f:cc:ce: 54:e4:f0:ab:53:81:b8:fa:03:bd:34:40:62:2e:43: 6e:d9:d4:c2:74:15:7b:ef:07:6c:0f:b1:00:13:d0: 88:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AE:07:D4:70:91:32:13:C0:AF:12:5F:70:D7:B7:99:CA:77:35:08 X509v3 Authority Key Identifier: keyid:C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:82:fb:ac:d9:7c:44:fb:9d:03:6e:24:cf:30:75:3d:81:9a: cf:2d:8e:31:04:67:aa:42:f8:ef:cb:7f:8e:80:21:92:62:55: 7b:5f:30:53:28:42:e3:82:b3:55:2f:88:af:00:aa:17:aa:1a: 07:c2:7f:2f:4e:a9:3c:f9:1c:19:08:c8:cc:e8:48:e0:39:35: 70:d1:ee:0d:d2:30:08:7c:e3:ac:e1:a5:73:ac:e2:0d:d8:93: 5a:9e:18:90:3e:e9:61:56:19:84:7e:1c:8c:cc:c0:d6:5f:63: 6b:86:46:2f:91:0e:6f:d9:50:4e:5d:e9:0d:a6:b5:44:ef:3b: e2:d0:9b:1a:34:65:66:b3:97:da:08:ec:37:49:12:2a:5a:30: ae:0c:96:5c:ad:ce:6f:99:e0:94:d6:c5:58:87:a6:35:ab:be: 85:f9:b9:02:25:f8:6f:a2:70:a6:c3:3c:34:10:ff:1d:ee:93: 3e:a4:91:2a:a3:79:84:3c:48:bc:5d:f7:71:a8:b4:ec:22:05: 91:3a:f4:f4:64:25:ec:52:af:1a:61:cc:e5:e7:4a:c8:74:e0: b9:93:2d:ea:20:58:81:a9:e8:b7:bc:ea:bc:c9:6d:d5:46:e4: 67:71:e4:17:71:00:d3:86:55:43:a3:fc:4c:c3:c3:f8:c0:e8: df:d7:cf:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFZvRu7xy9Wxf79TamcDjsDP+z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3 N0VFQzAxQTAeFw0yNjA2MTkxNDA4MDBaFw0yNjA2MjAxNjA3MDBaMDMxMTAvBgNV BAMTKDQyQUUwN0Q0NzA5MTMyMTNDMEFGMTI1RjcwRDdCNzk5Q0E3NzM1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+OYy5u+0EhQ4r9tg/ySm729/ 9TsPslfkXMvgnlMB8rOqseDHfT0T0eonw+hO12RZjn+2z/PzctpvCPfWLKmI7ytS TZcu/AhVVlwIhXqxnAFVZGeWf62Uw1IwsYDpMVLu/PrrsaRR3NLtXAz3DipydsKQ oh+AffvKgBJ5/CtLzOR0Gil+XJXtpm9D4Nbf79wcWoD+agvMYtUteHO98zydlvc5 +LqX9xMndy2IaydqZ7Wwnzt3lGXurleINUca6anZdbRGBlkWcRVr0Tmxyvx5WDac w9udnnxD5wMgSk/MzlTk8KtTgbj6A700QGIuQ27Z1MJ0FXvvB2wPsQAT0Ih3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQq4H1HCRMhPArxJfcNe3mcp3NQgwHwYDVR0j BBgwFoAUwh+0ZaBRDb/MFFYshXOOkHfuwBowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJiY2JmZDktNTdkZi00OTBjLTg4ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVB MDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3N0VFQzAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjFGQjQ2NUEwNTEwREJGQ0MxNDU2MkM4NTczOEU5MDc3RUVD MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJiY2JmZDktNTdkZi00OTBjLTg4 ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhF OTA3N0VFQzAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGC+6zZfET7nQNuJM8wdT2Bms8tjjEEZ6pC +O/Lf46AIZJiVXtfMFMoQuOCs1UviK8AqheqGgfCfy9OqTz5HBkIyMzoSOA5NXDR 7g3SMAh846zhpXOs4g3Yk1qeGJA+6WFWGYR+HIzMwNZfY2uGRi+RDm/ZUE5d6Q2m tUTvO+LQmxo0ZWazl9oI7DdJEipaMK4Mllytzm+Z4JTWxViHpjWrvoX5uQIl+G+i cKbDPDQQ/x3ukz6kkSqjeYQ8SLxd93GotOwiBZE69PRkJexSrxphzOXnSsh04LmT LeogWIGp6Le86rzJbdVG5Gdx5BdxANOGVUOj/EzDw/jA6N/Xzzk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:10 2026 by rpki-client