$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft File: C21FB465A0510DBFCC14562C85738E9077EEC01A.mft (raw, json) Hash identifier: Pez+Z+uTtMywyawfM6567qStnnu+3LbydqA92F67Zig= Subject key identifier: DC:B7:9A:FE:70:A3:CB:67:9C:CE:2D:C9:B6:CA:20:0F:1B:DC:1E:F5 Authority key identifier: C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A Certificate issuer: /CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Certificate serial: 6ACB814544F381CF04F9E05D79C8F31716B84EA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 17:20:46 +0000 Manifest this update: Sat 24 Oct 2026 17:15:46 +0000 Manifest next update: Sun 25 Oct 2026 19:55:46 +0000 Files and hashes: 1: C21FB465A0510DBFCC14562C85738E9077EEC01A.crl (hash: HF3+vi0rUx7eOgwNhuDV+Dl6M+TxZkzRI9RrflJ4Hoc=) 2: 3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (hash: rtUbQHLZbaAGcuUEYQCtJGPoOA9/PGOEJnisZdWSck8=) 3: 3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (hash: Relrsr05v7o6LWUkvyj3CRc7sy187SltL/KM3/wqMnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:cb:81:45:44:f3:81:cf:04:f9:e0:5d:79:c8:f3:17:16:b8:4e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21FB465A0510DBFCC14562C85738E9077EEC01A Validity Not Before: Oct 24 17:15:46 2026 GMT Not After : Oct 25 19:55:46 2026 GMT Subject: CN=DCB79AFE70A3CB679CCE2DC9B6CA200F1BDC1EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:34:61:a2:9a:fe:22:cc:72:52:e9:4d:75: 98:0d:23:f6:ee:95:e0:d4:6b:c6:93:78:1d:68:29: a6:50:a6:e1:e4:e0:3e:b8:4e:fc:dc:33:f2:f6:a0: b1:56:18:78:c0:fa:97:e7:35:e5:cc:27:31:42:4e: 3b:f4:2b:ba:e1:dc:97:ae:8a:2f:d8:83:f1:35:39: 1e:e5:37:5c:73:d8:9f:b2:95:8b:37:a2:00:c6:97: 8c:22:ef:84:f6:09:d5:20:e7:71:cf:22:b6:3a:6a: a9:d8:97:ae:1b:7d:30:4e:3a:6c:a7:d3:b5:f1:51: ee:49:18:c5:49:52:5e:7b:92:52:d9:7c:19:31:ae: 52:06:9d:d9:81:46:9c:d2:4e:be:f7:db:1a:b0:73: f7:29:12:a8:04:71:77:da:f2:cd:3c:86:26:7e:f3: 92:7a:8b:6f:90:9c:22:63:3f:c2:ec:80:c8:56:26: c6:1c:69:10:36:9d:a8:38:e5:6b:15:cd:65:63:96: e9:24:02:d8:af:4b:a2:fd:fe:0d:99:d0:d1:fa:f1: 2b:e0:82:ac:1c:08:11:76:7b:9c:2f:d3:2c:ad:c9: c9:f9:e1:b5:15:8a:b8:23:5d:93:6b:6b:56:91:62: 75:ec:c1:15:f0:b9:ea:8d:a5:b9:15:f7:6b:e9:68: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B7:9A:FE:70:A3:CB:67:9C:CE:2D:C9:B6:CA:20:0F:1B:DC:1E:F5 X509v3 Authority Key Identifier: keyid:C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:61:09:f4:47:e4:f0:17:6b:31:cb:2d:d7:68:22:46:f5:44: 9c:41:d2:eb:da:d5:9c:76:68:de:79:f0:8a:7c:26:49:01:88: 1d:b6:00:7f:c6:26:dc:1f:0b:15:10:61:bb:c4:d9:c6:f3:ed: 16:01:70:44:46:21:67:8f:26:d3:e7:a0:0d:88:49:f3:c7:54: f7:8b:27:b1:e4:b0:8c:03:5a:b7:e5:ee:28:b2:8d:3b:a5:dd: 18:00:ce:b2:11:c2:05:4f:84:5f:d7:f6:70:8e:3e:26:38:ad: 75:b3:5f:28:4b:56:d6:31:80:34:5d:df:a1:9b:a5:f9:61:55: b0:2d:1b:89:e2:b0:ca:c1:7e:8d:b7:7a:10:d5:ee:04:03:95: 10:73:39:1c:14:86:25:a6:87:eb:0e:0e:7a:42:0e:9f:5d:e9: 94:50:40:4a:ff:3c:f3:4b:03:7b:72:8a:12:6d:5b:13:4a:fb: 48:96:12:cd:ff:b8:2b:5e:00:d0:f2:55:ef:9f:45:63:83:1e: fc:63:1c:ac:16:50:c6:98:b7:80:88:40:c7:69:65:81:82:10: 2c:88:45:50:60:47:db:55:a5:47:27:3a:9a:8a:60:03:11:84: 83:a8:41:0a:6b:4d:c4:ec:99:25:11:29:b2:74:2b:b3:ba:ad: 29:70:80:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasuBRUTzgc8E+eBdecjzFxa4TqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3 N0VFQzAxQTAeFw0yNjEwMjQxNzE1NDZaFw0yNjEwMjUxOTU1NDZaMDMxMTAvBgNV BAMTKERDQjc5QUZFNzBBM0NCNjc5Q0NFMkRDOUI2Q0EyMDBGMUJEQzFFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCokDRhopr+IsxyUulNdZgNI/bu leDUa8aTeB1oKaZQpuHk4D64TvzcM/L2oLFWGHjA+pfnNeXMJzFCTjv0K7rh3Jeu ii/Yg/E1OR7lN1xz2J+ylYs3ogDGl4wi74T2CdUg53HPIrY6aqnYl64bfTBOOmyn 07XxUe5JGMVJUl57klLZfBkxrlIGndmBRpzSTr732xqwc/cpEqgEcXfa8s08hiZ+ 85J6i2+QnCJjP8LsgMhWJsYcaRA2nag45WsVzWVjlukkAtivS6L9/g2Z0NH68Svg gqwcCBF2e5wv0yytycn54bUVirgjXZNra1aRYnXswRXwueqNpbkV92vpaP/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Lea/nCjy2eczi3JtsogDxvcHvUwHwYDVR0j BBgwFoAUwh+0ZaBRDb/MFFYshXOOkHfuwBowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJiY2JmZDktNTdkZi00OTBjLTg4ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVB MDUxMERCRkNDMTQ1NjJDODU3MzhFOTA3N0VFQzAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjFGQjQ2NUEwNTEwREJGQ0MxNDU2MkM4NTczOEU5MDc3RUVD MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJiY2JmZDktNTdkZi00OTBjLTg4 ZmMtMDBkMzYwMDcwNjUxLzAvQzIxRkI0NjVBMDUxMERCRkNDMTQ1NjJDODU3MzhF OTA3N0VFQzAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1hCfRH5PAXazHLLddoIkb1RJxB0uva1Zx2 aN558Ip8JkkBiB22AH/GJtwfCxUQYbvE2cbz7RYBcERGIWePJtPnoA2ISfPHVPeL J7HksIwDWrfl7iiyjTul3RgAzrIRwgVPhF/X9nCOPiY4rXWzXyhLVtYxgDRd36Gb pflhVbAtG4nisMrBfo23ehDV7gQDlRBzORwUhiWmh+sODnpCDp9d6ZRQQEr/PPNL A3tyihJtWxNK+0iWEs3/uCteANDyVe+fRWODHvxjHKwWUMaYt4CIQMdpZYGCECyI RVBgR9tVpUcnOpqKYAMRhIOoQQprTcTsmSURKbJ0K7O6rSlwgOo= -----END CERTIFICATE-----Generated at Sun Oct 25 06:06:59 2026 by rpki-client