$ rpki-client -vvf rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft File: 14D784D8F19F00DFBA4C08757485032BE04603A3.mft (raw, json) Hash identifier: D0FnRjqjaVec6ZvOvD7bLo/BLEhDpWdcy/qfE4EFzSg= Subject key identifier: 6A:1D:F3:15:01:2B:C3:CD:78:36:32:C3:CB:D2:2A:6F:D6:FB:D6:F0 Authority key identifier: 14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3 Certificate issuer: /CN=14D784D8F19F00DFBA4C08757485032BE04603A3 Certificate serial: 0B7F7D286E8D9EF81A960D6806BAA2CDB12CD68B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:34:02 +0000 Manifest this update: Tue 12 May 2026 18:29:02 +0000 Manifest next update: Wed 13 May 2026 21:50:02 +0000 Files and hashes: 1: 14D784D8F19F00DFBA4C08757485032BE04603A3.crl (hash: g4Ks0DALzkgij0T6k3TyDd7rVeZsT4rgZxegzT+XBEc=) 2: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: rA6w7AOgQeO/23WQ9WTNvbNDGzSTa/seU2ViAzbcvrs=) 3: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: 4CcWucwvFiUbV7yGD9jF0QOdXA3+eK3AiJ4whM9p04M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7f:7d:28:6e:8d:9e:f8:1a:96:0d:68:06:ba:a2:cd:b1:2c:d6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14D784D8F19F00DFBA4C08757485032BE04603A3 Validity Not Before: May 12 18:29:02 2026 GMT Not After : May 13 21:50:02 2026 GMT Subject: CN=6A1DF315012BC3CD783632C3CBD22A6FD6FBD6F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:7c:29:15:e6:d5:26:b3:d6:3c:64:c7:d4: bb:dd:d5:fc:ef:d6:90:b0:05:dd:1c:7d:8e:af:56: 68:6d:d1:09:13:bd:19:b8:e0:14:25:a2:0b:7e:05: b9:9e:8d:9a:1b:14:16:45:77:d7:fa:23:43:84:3b: f9:19:ef:cf:77:95:fa:69:d6:3a:cb:19:25:db:e0: 47:b3:4f:90:c9:f8:27:7f:5f:11:0b:be:50:73:66: 83:6d:cc:9c:03:51:f5:71:30:e9:35:e2:0b:ef:88: 22:37:16:93:0e:4f:91:a0:9f:4a:d6:ba:46:f2:20: 6d:5a:ff:8d:80:e7:bf:f4:f8:df:59:0b:7c:2c:2a: c1:b3:62:c6:39:da:e7:40:f0:c1:46:f6:5a:1e:ff: 38:d8:a0:7f:fc:bd:3e:2e:08:45:ca:a0:de:d1:d0: d3:4c:d9:63:63:a6:e9:64:65:1b:78:12:8e:8c:86: f6:eb:19:c7:05:05:49:a4:28:15:b7:d7:cd:30:ce: 47:ee:2a:66:de:3f:59:b6:d5:a9:71:48:a3:62:ce: 4c:36:56:23:2f:83:d6:66:3a:d7:f2:ef:ad:f4:cd: 51:d7:ec:49:a5:2b:84:82:5f:ca:d4:c6:94:6c:a2: 69:dd:11:9a:a7:88:70:1f:e1:f0:40:d2:f1:5c:0f: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1D:F3:15:01:2B:C3:CD:78:36:32:C3:CB:D2:2A:6F:D6:FB:D6:F0 X509v3 Authority Key Identifier: keyid:14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c1:52:9b:05:f2:2f:7a:33:ca:8a:a0:49:9e:6c:b0:de:bb: 94:7b:3f:37:8c:b5:9b:d6:77:7e:fc:b3:8f:b8:06:26:cb:a6: bd:27:31:81:e1:83:25:f1:4d:cd:15:07:a2:80:05:59:dc:91: ee:9a:ba:9a:2c:f0:69:10:2f:fb:48:5f:dd:b7:09:13:fe:63: fc:05:d0:c8:f1:d7:82:7c:4c:63:9b:f6:07:99:fd:11:56:b1: aa:08:42:14:8c:07:61:66:0e:be:48:b0:33:42:5f:a7:61:93: 4b:1e:2c:6a:b4:a9:6a:e4:fd:3c:8d:38:01:14:cf:04:e1:4d: 08:77:4d:e3:f1:0a:ca:bd:e1:12:3a:f3:5f:6b:c3:08:00:b1: 5c:c8:9c:7b:3c:6f:bd:57:ef:32:3f:95:0a:18:9d:a0:bd:bb: 7b:cd:ab:71:9e:51:6d:8d:a0:bb:b5:b7:8b:a2:eb:b3:d6:5b: 38:a7:74:d1:ef:d1:e1:9b:0c:dc:56:8d:1f:41:d8:9b:54:5a: a9:d4:8d:48:e7:88:ab:35:d2:90:c4:4a:7e:50:d5:dd:b5:b3: 29:84:b8:19:7a:fa:b9:a2:76:f3:a1:fe:9b:66:c4:c6:b0:b3: 4c:96:10:76:9b:e9:4b:77:f2:40:16:70:14:b1:2e:a5:92:af: b2:d7:36:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC399KG6Nnvgalg1oBrqizbEs1oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRENzg0RDhGMTlGMDBERkJBNEMwODc1NzQ4NTAzMkJF MDQ2MDNBMzAeFw0yNjA1MTIxODI5MDJaFw0yNjA1MTMyMTUwMDJaMDMxMTAvBgNV BAMTKDZBMURGMzE1MDEyQkMzQ0Q3ODM2MzJDM0NCRDIyQTZGRDZGQkQ2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCus3wpFebVJrPWPGTH1Lvd1fzv 1pCwBd0cfY6vVmht0QkTvRm44BQlogt+BbmejZobFBZFd9f6I0OEO/kZ7893lfpp 1jrLGSXb4EezT5DJ+Cd/XxELvlBzZoNtzJwDUfVxMOk14gvviCI3FpMOT5Ggn0rW ukbyIG1a/42A57/0+N9ZC3wsKsGzYsY52udA8MFG9loe/zjYoH/8vT4uCEXKoN7R 0NNM2WNjpulkZRt4Eo6MhvbrGccFBUmkKBW3180wzkfuKmbeP1m21alxSKNizkw2 ViMvg9ZmOtfy7630zVHX7EmlK4SCX8rUxpRsomndEZqniHAf4fBA0vFcD4/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUah3zFQErw814NjLDy9Iqb9b71vAwHwYDVR0j BBgwFoAUFNeE2PGfAN+6TAh1dIUDK+BGA6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYwNzQ0YjEtMjUyOS00YWUyLWI1ZDUtNWQ0OTlkM2Y1MmMyLzAvMTRENzg0RDhG MTlGMDBERkJBNEMwODc1NzQ4NTAzMkJFMDQ2MDNBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNEQ3ODREOEYxOUYwMERGQkE0QzA4NzU3NDg1MDMyQkUwNDYw M0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvMTRENzg0RDhGMTlGMDBERkJBNEMwODc1NzQ4NTAz MkJFMDQ2MDNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXBUpsF8i96M8qKoEmebLDeu5R7PzeMtZvW d378s4+4BibLpr0nMYHhgyXxTc0VB6KABVncke6aupos8GkQL/tIX923CRP+Y/wF 0Mjx14J8TGOb9geZ/RFWsaoIQhSMB2FmDr5IsDNCX6dhk0seLGq0qWrk/TyNOAEU zwThTQh3TePxCsq94RI6819rwwgAsVzInHs8b71X7zI/lQoYnaC9u3vNq3GeUW2N oLu1t4ui67PWWzindNHv0eGbDNxWjR9B2JtUWqnUjUjniKs10pDESn5Q1d21symE uBl6+rmidvOh/ptmxMaws0yWEHab6Ut38kAWcBSxLqWSr7LXNiQ= -----END CERTIFICATE-----Generated at Wed May 13 00:44:03 2026 by rpki-client