$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft File: 7114DCC67CA188857960AB8205FF64878ABC3A2C.mft (raw, json) Hash identifier: BkiYo44omRq7yrCrGhY/WFO2CXaHpH5T4KtwlaH7QFM= Subject key identifier: D8:04:2E:FD:33:DB:F3:C7:E5:8F:2C:20:25:49:5D:BD:8A:73:7E:FE Authority key identifier: 71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C Certificate issuer: /CN=7114DCC67CA188857960AB8205FF64878ABC3A2C Certificate serial: 7E49F265864E900CAF807E5583B631D203EA4AD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 23:09:13 +0000 Manifest this update: Thu 24 Sep 2026 23:04:13 +0000 Manifest next update: Sat 26 Sep 2026 01:24:13 +0000 Files and hashes: 1: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: dM86g1KJjcw4ZcRJ1Gbl9gY8oFj7Vsah0QHgp5jAvIU=) 2: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: XXL+jrySck8YOfCgNHqgkAmnQwL01WtL6AIXMhWluBI=) 3: 7114DCC67CA188857960AB8205FF64878ABC3A2C.crl (hash: y3i2iLzjux2EO/r91GBqlggnneyntcjfBwx20p8yEvw=) 4: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: VGYEwzCU0pJcRwa77WfjBRiXp9jxpBahdWP554wfxNw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:49:f2:65:86:4e:90:0c:af:80:7e:55:83:b6:31:d2:03:ea:4a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7114DCC67CA188857960AB8205FF64878ABC3A2C Validity Not Before: Sep 24 23:04:13 2026 GMT Not After : Sep 26 01:24:13 2026 GMT Subject: CN=D8042EFD33DBF3C7E58F2C2025495DBD8A737EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:7b:68:f7:d0:3a:58:89:f9:85:48:7b:bf: 1b:c3:76:c9:b0:60:46:f7:2c:91:9b:8b:c4:98:50: 8e:b7:b1:b0:f8:1b:8e:9c:fc:56:83:a0:b6:d5:3c: 0d:cc:fd:97:b1:2d:fd:d1:2f:e1:c3:e2:91:09:a6: 02:4e:63:b3:07:b9:1e:36:b1:56:e7:6f:47:fc:fc: 1e:78:c6:71:ca:71:5b:e5:86:ba:f6:1a:7c:40:6c: 36:ae:22:de:9d:b4:1c:da:55:1c:db:a8:d9:9c:0b: 78:be:96:a3:c4:67:df:15:b3:17:31:81:af:7e:d0: 74:a5:4a:e5:95:55:38:4f:ff:30:79:3d:47:d1:ed: 9c:0e:42:a0:15:f8:8a:df:3d:4a:7e:76:4a:7b:21: d1:dd:bc:16:f0:8e:93:f4:5a:92:30:ec:f6:b2:b5: aa:4c:40:d6:50:f4:39:cc:3a:02:6d:20:20:69:ea: d4:cb:0c:27:a3:b8:78:e1:3e:ce:ca:55:f6:a2:64: 48:37:4a:5a:d7:65:3e:35:7f:ab:4a:01:46:b4:a0: 20:69:ff:90:2a:33:b3:a0:a5:49:a8:fb:63:01:91: 9c:c4:e9:a4:5a:d5:03:13:60:4b:d7:09:b0:2c:6f: 2b:ee:24:5c:06:da:39:4f:a3:ec:1c:b4:af:ce:9f: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:04:2E:FD:33:DB:F3:C7:E5:8F:2C:20:25:49:5D:BD:8A:73:7E:FE X509v3 Authority Key Identifier: keyid:71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a0:8d:a6:7b:b9:8d:bf:39:b4:f9:f3:39:be:bb:4b:1a:7b: 0f:42:eb:0b:82:0c:c8:14:41:68:a1:f6:2e:ac:89:63:01:da: 60:ae:3e:fb:cc:0b:73:eb:e1:4c:b6:bb:54:a7:41:ab:c1:b5: 1b:02:28:96:ec:36:69:9a:52:a3:1d:0a:f3:d3:7a:0d:2d:48: 45:27:a4:d7:25:76:da:e2:d3:80:34:ba:0c:ef:99:63:c4:51: 7d:d8:5d:bf:23:d5:79:e4:9c:1c:39:19:50:8c:00:db:a5:12: d9:00:4b:03:3b:9f:63:d8:4c:7b:09:42:4b:fe:6c:4c:37:ce: eb:84:60:84:b4:7a:60:c0:db:6d:18:12:b6:da:4c:2c:2d:e6: c9:60:bf:a1:b4:5e:30:95:6e:f3:f5:cc:6c:62:1a:a8:e6:dd: c4:9d:07:f4:62:46:a1:5c:fc:34:df:5b:80:79:f8:24:e9:36: f4:9a:fd:71:42:7b:fc:56:67:b9:2b:5e:8a:66:34:83:7a:4a: 93:61:6a:25:b7:3a:3d:cf:26:e8:0d:95:cb:17:01:2a:fd:97: 92:66:93:e4:9f:d2:3e:0c:3b:bf:84:8b:26:8e:89:28:b7:bc: b0:9a:60:cf:7b:6c:2e:ae:af:ab:fa:15:33:d6:21:9b:0a:4a: 81:c3:fd:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfknyZYZOkAyvgH5Vg7Yx0gPqStkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzExNERDQzY3Q0ExODg4NTc5NjBBQjgyMDVGRjY0ODc4 QUJDM0EyQzAeFw0yNjA5MjQyMzA0MTNaFw0yNjA5MjYwMTI0MTNaMDMxMTAvBgNV BAMTKEQ4MDQyRUZEMzNEQkYzQzdFNThGMkMyMDI1NDk1REJEOEE3MzdFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFInto99A6WIn5hUh7vxvDdsmw YEb3LJGbi8SYUI63sbD4G46c/FaDoLbVPA3M/ZexLf3RL+HD4pEJpgJOY7MHuR42 sVbnb0f8/B54xnHKcVvlhrr2GnxAbDauIt6dtBzaVRzbqNmcC3i+lqPEZ98Vsxcx ga9+0HSlSuWVVThP/zB5PUfR7ZwOQqAV+IrfPUp+dkp7IdHdvBbwjpP0WpIw7Pay tapMQNZQ9DnMOgJtICBp6tTLDCejuHjhPs7KVfaiZEg3SlrXZT41f6tKAUa0oCBp /5AqM7OgpUmo+2MBkZzE6aRa1QMTYEvXCbAsbyvuJFwG2jlPo+wctK/On7CnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2AQu/TPb88fljywgJUldvYpzfv4wHwYDVR0j BBgwFoAUcRTcxnyhiIV5YKuCBf9kh4q8OiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNhNzlkOTUtNjRhOS00ODA5LTk0YjItNjJkZTI0MTkyMjQ1LzAvNzExNERDQzY3 Q0ExODg4NTc5NjBBQjgyMDVGRjY0ODc4QUJDM0EyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTE0RENDNjdDQTE4ODg1Nzk2MEFCODIwNUZGNjQ4NzhBQkMz QTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvNzExNERDQzY3Q0ExODg4NTc5NjBBQjgyMDVGRjY0 ODc4QUJDM0EyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOgjaZ7uY2/ObT58zm+u0saew9C6wuCDMgU QWih9i6siWMB2mCuPvvMC3Pr4Uy2u1SnQavBtRsCKJbsNmmaUqMdCvPTeg0tSEUn pNcldtri04A0ugzvmWPEUX3YXb8j1XnknBw5GVCMANulEtkASwM7n2PYTHsJQkv+ bEw3zuuEYIS0emDA220YErbaTCwt5slgv6G0XjCVbvP1zGxiGqjm3cSdB/RiRqFc /DTfW4B5+CTpNvSa/XFCe/xWZ7krXopmNIN6SpNhaiW3Oj3PJugNlcsXASr9l5Jm k+Sf0j4MO7+EiyaOiSi3vLCaYM97bC6ur6v6FTPWIZsKSoHD/bg= -----END CERTIFICATE-----Generated at Fri Sep 25 08:58:08 2026 by rpki-client