$ rpki-client -vvvf rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft File: 14D784D8F19F00DFBA4C08757485032BE04603A3.mft (raw, json) Hash identifier: jbMiLp0LoB/qZtYpv2XMuBHlMPKPDgUjq83frFmrnlc= Subject key identifier: 62:5D:6A:20:1C:5C:15:B5:C2:A3:A5:66:25:58:B7:8A:23:EF:40:56 Authority key identifier: 14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3 Certificate issuer: /CN=14D784D8F19F00DFBA4C08757485032BE04603A3 Certificate serial: 05CD8A3E269BDE6563947EC1E058B73E24363070 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:19:47 +0000 Manifest this update: Thu 24 Sep 2026 07:14:47 +0000 Manifest next update: Fri 25 Sep 2026 08:20:47 +0000 Files and hashes: 1: 14D784D8F19F00DFBA4C08757485032BE04603A3.crl (hash: AEdIH+m9MUYjsLDJCHlBVvaITIHBj49rPLpmBeeK0zA=) 2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: 4CcWucwvFiUbV7yGD9jF0QOdXA3+eK3AiJ4whM9p04M=) 3: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: rA6w7AOgQeO/23WQ9WTNvbNDGzSTa/seU2ViAzbcvrs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:cd:8a:3e:26:9b:de:65:63:94:7e:c1:e0:58:b7:3e:24:36:30:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14D784D8F19F00DFBA4C08757485032BE04603A3 Validity Not Before: Sep 24 07:14:47 2026 GMT Not After : Sep 25 08:20:47 2026 GMT Subject: CN=625D6A201C5C15B5C2A3A5662558B78A23EF4056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:a0:9e:c8:9e:11:05:43:39:67:0e:45:53: 17:e9:56:59:6f:fa:2a:f0:23:9d:a1:26:3a:f6:d9: 58:ea:3a:8f:ed:3c:9e:4f:04:08:44:29:a6:88:f1: 3b:b9:bb:04:77:39:31:1e:d5:f7:8b:c0:bb:7b:1e: 39:89:2c:c5:55:2b:26:f2:b8:9a:69:02:b2:cd:ee: 5e:8e:b8:10:ba:c4:06:04:99:7a:c6:d2:39:fb:e9: 72:76:17:37:02:70:15:59:57:da:9d:7a:59:39:da: c3:8c:35:d1:f6:24:81:3b:60:fc:71:ed:fe:0c:bc: 3a:e2:91:38:11:9c:b0:7e:ae:1c:e7:6b:43:e6:30: a9:ba:2a:f0:e1:4f:14:60:46:59:91:bf:5b:2a:84: 5c:8f:56:c0:50:dc:05:a4:62:15:a8:d9:ad:f7:1d: 40:69:1e:8f:90:80:23:8c:c4:6d:b3:71:17:94:55: f6:0c:ad:aa:ea:76:6a:78:67:a6:50:b8:33:1c:07: 98:f8:d8:a3:50:97:75:60:c7:86:5a:b3:a4:1f:b0: ac:69:49:f5:7b:4d:a2:cf:71:79:08:97:1d:27:cb: 6b:3b:b7:24:76:1d:e6:45:14:b3:e3:2a:9f:fb:78: 2a:2d:b4:42:67:7d:a6:24:e4:23:2d:82:5b:23:51: 94:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5D:6A:20:1C:5C:15:B5:C2:A3:A5:66:25:58:B7:8A:23:EF:40:56 X509v3 Authority Key Identifier: keyid:14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:10:99:1f:b1:be:5d:f9:8f:17:88:c6:fa:9d:c3:3c:17:73: c1:9e:d3:3c:b9:01:7c:2d:20:0e:e8:c5:cf:6d:4f:f2:b7:95: dc:fc:63:87:69:73:dd:3e:82:41:63:22:ba:0a:3d:a4:ee:b2: 67:11:27:46:f9:18:0d:82:67:c6:da:e7:13:80:50:91:a0:98: 90:f7:ef:56:ca:04:25:e5:b3:2c:7b:01:0f:bb:70:23:8c:2b: 0b:f8:4d:b6:10:75:d3:55:65:d5:9e:6c:3a:a8:95:21:a7:88: b6:f0:dd:4c:f6:a9:95:3c:90:56:46:db:a2:b5:c1:7a:fd:58: b5:c8:4e:63:73:6f:7c:e9:dd:a7:96:45:6e:7e:a5:32:57:2b: 55:a6:81:78:f9:fe:54:1e:88:c0:b1:ea:c7:2c:c7:1a:95:28: 92:4e:49:e6:3d:9b:a3:d3:c8:bf:97:22:9f:92:5e:a4:8d:06: f3:a4:79:5b:62:6f:2f:8b:4b:da:8a:98:d4:aa:e6:30:ce:bf: 8f:63:2e:db:62:35:16:16:b3:6f:f9:1c:27:0e:09:0d:80:e7: de:af:08:a4:98:8e:35:45:b5:e5:5a:bc:cc:91:21:41:0a:a4: 54:3a:35:6d:2a:ea:d0:ca:47:a9:37:6c:d4:5d:60:52:3e:81: f2:50:cd:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBc2KPiab3mVjlH7B4Fi3PiQ2MHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRENzg0RDhGMTlGMDBERkJBNEMwODc1NzQ4NTAzMkJF MDQ2MDNBMzAeFw0yNjA5MjQwNzE0NDdaFw0yNjA5MjUwODIwNDdaMDMxMTAvBgNV BAMTKDYyNUQ2QTIwMUM1QzE1QjVDMkEzQTU2NjI1NThCNzhBMjNFRjQwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vKCeyJ4RBUM5Zw5FUxfpVllv +irwI52hJjr22VjqOo/tPJ5PBAhEKaaI8Tu5uwR3OTEe1feLwLt7HjmJLMVVKyby uJppArLN7l6OuBC6xAYEmXrG0jn76XJ2FzcCcBVZV9qdelk52sOMNdH2JIE7YPxx 7f4MvDrikTgRnLB+rhzna0PmMKm6KvDhTxRgRlmRv1sqhFyPVsBQ3AWkYhWo2a33 HUBpHo+QgCOMxG2zcReUVfYMrarqdmp4Z6ZQuDMcB5j42KNQl3Vgx4Zas6QfsKxp SfV7TaLPcXkIlx0ny2s7tyR2HeZFFLPjKp/7eCottEJnfaYk5CMtglsjUZSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYl1qIBxcFbXCo6VmJVi3iiPvQFYwHwYDVR0j BBgwFoAUFNeE2PGfAN+6TAh1dIUDK+BGA6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYwNzQ0YjEtMjUyOS00YWUyLWI1ZDUtNWQ0OTlkM2Y1MmMyLzAvMTRENzg0RDhG MTlGMDBERkJBNEMwODc1NzQ4NTAzMkJFMDQ2MDNBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNEQ3ODREOEYxOUYwMERGQkE0QzA4NzU3NDg1MDMyQkUwNDYw M0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvMTRENzg0RDhGMTlGMDBERkJBNEMwODc1NzQ4NTAz MkJFMDQ2MDNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8QmR+xvl35jxeIxvqdwzwXc8Ge0zy5AXwt IA7oxc9tT/K3ldz8Y4dpc90+gkFjIroKPaTusmcRJ0b5GA2CZ8ba5xOAUJGgmJD3 71bKBCXlsyx7AQ+7cCOMKwv4TbYQddNVZdWebDqolSGniLbw3Uz2qZU8kFZG26K1 wXr9WLXITmNzb3zp3aeWRW5+pTJXK1WmgXj5/lQeiMCx6scsxxqVKJJOSeY9m6PT yL+XIp+SXqSNBvOkeVtiby+LS9qKmNSq5jDOv49jLttiNRYWs2/5HCcOCQ2A596v CKSYjjVFteVavMyRIUEKpFQ6NW0q6tDKR6k3bNRdYFI+gfJQzeg= -----END CERTIFICATE-----Generated at Thu Sep 24 10:54:45 2026 by rpki-client