$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft File: D21FEA1A58BBE03288B8857877AB42210C1B816B.mft (raw, json) Hash identifier: /ZsmXUzo6npxsbDI++tGbf3qxXNQvBbWYqc6haVLRRw= Subject key identifier: 22:DC:58:8B:6F:C9:AA:F7:0A:AE:4F:43:1F:35:9B:69:1A:46:B7:C1 Authority key identifier: D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B Certificate issuer: /CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Certificate serial: 029332400FBFC387ADE037F128AE58B1E47E86ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 11:32:53 +0000 Manifest this update: Thu 17 Sep 2026 11:27:53 +0000 Manifest next update: Fri 18 Sep 2026 12:31:53 +0000 Files and hashes: 1: D21FEA1A58BBE03288B8857877AB42210C1B816B.crl (hash: 61QTsZB/zzrtXGQg6yvZGFOUQRM7P5OKOQtSVllIqaI=) 2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: n/NFSto6DR1M2MbEoIzv13Er2v00d7K3BFa5q9qEbBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:93:32:40:0f:bf:c3:87:ad:e0:37:f1:28:ae:58:b1:e4:7e:86:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Validity Not Before: Sep 17 11:27:53 2026 GMT Not After : Sep 18 12:31:53 2026 GMT Subject: CN=22DC588B6FC9AAF70AAE4F431F359B691A46B7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:3a:39:4c:03:f7:d7:19:61:7e:13:90:0a: f2:03:fa:a1:91:b3:23:02:4d:c2:7e:00:c8:a5:95: 1a:21:52:2e:e1:94:30:32:10:47:e5:b9:30:bb:29: 8a:5b:ee:ca:47:fe:2e:e8:e7:eb:a5:90:16:3d:38: 9a:d6:94:66:6c:3a:79:e4:32:ab:2f:11:0b:98:c1: 60:e4:70:d4:c0:88:a9:95:94:2d:23:fa:b7:18:e8: 79:7e:66:fe:56:b5:22:c1:df:83:ec:6f:7c:57:2b: 7d:e2:63:34:d4:b1:0d:09:f2:7e:12:58:b2:b7:12: 3d:1b:b2:53:96:64:ac:e1:5a:5c:12:5a:d6:e2:07: 3d:60:8a:20:26:8b:84:90:e8:b9:e1:00:fd:43:11: c7:a3:b0:af:e3:14:5b:12:91:32:cd:c3:2a:fb:f4: b5:dd:36:85:33:b2:c4:cb:7a:f2:40:71:21:9a:37: 43:e3:a2:5e:7a:92:24:ff:82:13:fd:bf:a8:9f:97: 4a:e5:0a:37:f1:65:a8:e2:8c:c7:ae:ab:7c:b7:37: db:60:28:f5:e5:16:44:99:9d:e0:dd:e8:35:bf:75: 25:6c:6b:f9:e3:c5:76:3b:3b:88:ed:43:85:f8:e1: 09:c8:bc:df:e1:e9:e2:5e:7d:52:a1:6c:3a:09:75: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DC:58:8B:6F:C9:AA:F7:0A:AE:4F:43:1F:35:9B:69:1A:46:B7:C1 X509v3 Authority Key Identifier: keyid:D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a4:16:2f:4a:f2:c6:bb:2e:59:0b:91:ac:a5:bc:d3:23:52: 6f:08:1e:34:d2:f2:71:54:4f:4a:ed:18:7c:8b:e0:f3:77:cc: de:88:4e:7c:84:d6:1f:9b:c4:b5:6b:7a:8b:60:4c:eb:a9:33: 88:e5:e4:2b:d6:04:55:43:d0:48:ee:57:6e:e9:b5:0a:d6:f0: a5:d0:d0:b2:24:47:1c:05:36:57:4e:ae:84:fe:98:ee:10:6e: e1:16:6d:4d:f0:e2:1e:44:96:9a:e2:82:a8:52:27:37:fb:ca: 59:bb:87:8e:70:73:ea:35:2a:d3:1d:07:7a:2b:fa:b2:01:20: f5:f3:a5:c9:0a:9a:d8:9a:4d:fe:84:8c:82:43:c7:f8:a1:41: 15:50:ad:cf:28:9a:d0:af:da:bc:eb:6c:e0:a0:5f:5a:03:1a: c1:1d:fd:d6:df:b5:cd:07:f4:06:8a:35:7a:0f:fd:60:94:aa: 52:85:cd:79:fe:25:11:5a:c0:a5:89:fd:48:af:e6:37:72:c0: 17:69:7b:ec:90:e5:b7:ea:c1:02:c4:ed:b5:51:b0:6d:fd:93: 77:66:f8:7b:1a:92:3e:ac:53:43:b3:82:3c:19:6f:25:8c:ba: dc:f8:c6:ca:1d:db:96:00:11:c6:a1:11:1c:f4:d0:6a:d1:58: ea:98:62:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApMyQA+/w4et4DfxKK5YseR+hu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEw QzFCODE2QjAeFw0yNjA5MTcxMTI3NTNaFw0yNjA5MTgxMjMxNTNaMDMxMTAvBgNV BAMTKDIyREM1ODhCNkZDOUFBRjcwQUFFNEY0MzFGMzU5QjY5MUE0NkI3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sjo5TAP31xlhfhOQCvID+qGR syMCTcJ+AMillRohUi7hlDAyEEfluTC7KYpb7spH/i7o5+ulkBY9OJrWlGZsOnnk MqsvEQuYwWDkcNTAiKmVlC0j+rcY6Hl+Zv5WtSLB34Psb3xXK33iYzTUsQ0J8n4S WLK3Ej0bslOWZKzhWlwSWtbiBz1giiAmi4SQ6LnhAP1DEcejsK/jFFsSkTLNwyr7 9LXdNoUzssTLevJAcSGaN0Pjol56kiT/ghP9v6ifl0rlCjfxZajijMeuq3y3N9tg KPXlFkSZneDd6DW/dSVsa/njxXY7O4jtQ4X44QnIvN/h6eJefVKhbDoJdWXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUItxYi2/JqvcKrk9DHzWbaRpGt8EwHwYDVR0j BBgwFoAU0h/qGli74DKIuIV4d6tCIQwbgWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkYWUwYTUtYjRmNi00ZTA4LThiZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1 OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEwQzFCODE2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjFGRUExQTU4QkJFMDMyODhCODg1Nzg3N0FCNDIyMTBDMUI4 MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQy MjEwQzFCODE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCkFi9K8sa7LlkLkaylvNMjUm8IHjTS8nFU T0rtGHyL4PN3zN6ITnyE1h+bxLVreotgTOupM4jl5CvWBFVD0EjuV27ptQrW8KXQ 0LIkRxwFNldOroT+mO4QbuEWbU3w4h5ElprigqhSJzf7ylm7h45wc+o1KtMdB3or +rIBIPXzpckKmtiaTf6EjIJDx/ihQRVQrc8omtCv2rzrbOCgX1oDGsEd/dbftc0H 9AaKNXoP/WCUqlKFzXn+JRFawKWJ/Uiv5jdywBdpe+yQ5bfqwQLE7bVRsG39k3dm +Hsakj6sU0OzgjwZbyWMutz4xsod25YAEcahERz00GrRWOqYYn4= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:57 2026 by rpki-client