$ rpki-client -vvf rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft File: D14C74B06D9A4D3A47662DA76625CD3537D00471.mft (raw, json) Hash identifier: hLfRmzkG+yafPwHdzx4aM+EA/LW4cc3nr+j5lBfxWc0= Subject key identifier: 87:E7:08:C5:64:03:23:C2:61:01:40:28:59:EE:C5:50:89:90:10:C2 Authority key identifier: D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 Certificate issuer: /CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Certificate serial: 2F5E0E2406825103B5589C061A281F094E28F9DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:24:13 +0000 Manifest this update: Tue 12 May 2026 04:19:13 +0000 Manifest next update: Wed 13 May 2026 05:36:13 +0000 Files and hashes: 1: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: juHK8q2FxwMCfB0XDh4dieyd+WbhEL+tRuypaniEX8M=) 2: D14C74B06D9A4D3A47662DA76625CD3537D00471.crl (hash: J3rO9GrqodOzj2fSVohNWfZoDDjTYdElh8z6tMOMt58=) 3: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: sR5YvjfokmmdEnTZTCAPYVCi8TZ9C5R9A7CXeqBE8Bo=) 4: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: x+7pzkIkAAYum6CK13j4jNfXi0Fn68V8sWzEUq8++EQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5e:0e:24:06:82:51:03:b5:58:9c:06:1a:28:1f:09:4e:28:f9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Validity Not Before: May 12 04:19:13 2026 GMT Not After : May 13 05:36:13 2026 GMT Subject: CN=87E708C5640323C26101402859EEC550899010C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:aa:52:c9:61:d5:39:a9:6b:37:b7:a0:fc: d9:70:57:7a:59:10:b7:ca:2a:f7:02:08:f9:4a:0d: ea:1c:22:a6:77:3b:09:94:a0:10:45:54:ca:8a:12: a1:92:48:61:f4:0b:92:15:7b:9e:92:c2:d4:21:ee: 80:49:88:d7:ed:be:6c:29:29:43:ef:12:ca:88:c1: 1f:0a:e5:99:93:f8:b6:78:7f:69:c4:41:80:3b:15: a5:6f:93:f2:0b:08:45:6b:7d:6c:40:21:f7:31:a5: 63:73:4e:35:4f:24:8b:38:bc:ab:4c:1c:d6:92:8b: c4:ec:5c:33:69:c1:a0:05:cd:99:a3:cf:eb:b0:62: 8e:01:ad:59:72:3e:7e:eb:7f:4e:98:96:2b:8d:9f: 25:be:12:fd:15:1e:fc:38:2b:5b:a3:e8:80:cf:29: 8e:43:bc:9e:f4:98:76:ef:bb:78:1a:98:5d:b5:5f: 25:21:f2:86:45:d6:0e:b2:73:17:27:9c:ab:cd:7e: 97:72:46:2a:b0:29:c7:34:f9:00:e5:0f:fa:d9:db: 85:d2:ba:60:00:b0:04:71:78:03:56:60:e7:85:db: c7:2c:f0:73:65:48:62:6a:d3:0e:50:89:94:dd:42: 08:1b:df:e2:28:2b:c3:a9:59:02:96:0d:82:4f:13: 3e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E7:08:C5:64:03:23:C2:61:01:40:28:59:EE:C5:50:89:90:10:C2 X509v3 Authority Key Identifier: keyid:D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4b:a2:dc:c2:f6:16:6f:94:43:0b:53:03:c4:89:ad:2b:07: 50:24:45:02:d9:3d:b5:ef:68:d6:77:78:82:5a:36:6f:7e:de: f2:08:3c:6a:e9:f5:29:d5:8c:31:cc:a5:18:a4:9d:f1:f5:5e: 96:0d:c6:5e:29:62:cb:eb:66:6e:8c:9e:f2:9c:ce:39:d7:e7: e7:86:92:04:3f:59:d0:51:6d:f2:72:d4:18:9b:5d:1f:f9:7f: c3:62:7c:33:c5:8c:b3:d0:04:c0:79:0d:9c:8e:08:24:98:fb: d3:00:0e:98:fe:28:62:52:ab:0c:21:80:e8:6c:6a:92:24:3d: 8c:18:b1:67:83:16:f8:db:d0:92:cd:d8:b3:b0:90:55:c6:f1: f1:ef:10:fc:82:3a:44:37:49:28:0f:9b:cb:fe:af:dc:1a:4b: 37:60:b0:a3:a8:f3:3f:9a:8b:3b:5a:a3:75:8e:0f:fe:61:9c: 78:30:e3:57:1c:a2:9a:fe:26:0a:bb:8e:2d:60:7d:98:11:e5: 39:b1:ae:24:bb:f4:ca:6a:11:51:73:94:a5:44:45:73:a6:3e: 63:1a:e8:9d:1d:b8:94:2b:50:44:af:1d:15:45:d3:1b:6e:7b: 3f:bd:2d:f1:7e:4d:2b:f5:f6:cc:8d:e3:bf:3f:b9:b3:be:26: 19:f5:c2:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL14OJAaCUQO1WJwGGigfCU4o+dowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUz N0QwMDQ3MTAeFw0yNjA1MTIwNDE5MTNaFw0yNjA1MTMwNTM2MTNaMDMxMTAvBgNV BAMTKDg3RTcwOEM1NjQwMzIzQzI2MTAxNDAyODU5RUVDNTUwODk5MDEwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyn6pSyWHVOalrN7eg/NlwV3pZ ELfKKvcCCPlKDeocIqZ3OwmUoBBFVMqKEqGSSGH0C5IVe56SwtQh7oBJiNftvmwp KUPvEsqIwR8K5ZmT+LZ4f2nEQYA7FaVvk/ILCEVrfWxAIfcxpWNzTjVPJIs4vKtM HNaSi8TsXDNpwaAFzZmjz+uwYo4BrVlyPn7rf06YliuNnyW+Ev0VHvw4K1uj6IDP KY5DvJ70mHbvu3gamF21XyUh8oZF1g6ycxcnnKvNfpdyRiqwKcc0+QDlD/rZ24XS umAAsARxeANWYOeF28cs8HNlSGJq0w5QiZTdQggb3+IoK8OpWQKWDYJPEz6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh+cIxWQDI8JhAUAoWe7FUImQEMIwHwYDVR0j BBgwFoAU0Ux0sG2aTTpHZi2nZiXNNTfQBHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzYyYmFjYzktZDI1ZC00NjEwLWFlZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2 RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUzN0QwMDQ3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMTRDNzRCMDZEOUE0RDNBNDc2NjJEQTc2NjI1Q0QzNTM3RDAw NDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNE MzUzN0QwMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5LotzC9hZvlEMLUwPEia0rB1AkRQLZPbXv aNZ3eIJaNm9+3vIIPGrp9SnVjDHMpRiknfH1XpYNxl4pYsvrZm6MnvKczjnX5+eG kgQ/WdBRbfJy1BibXR/5f8NifDPFjLPQBMB5DZyOCCSY+9MADpj+KGJSqwwhgOhs apIkPYwYsWeDFvjb0JLN2LOwkFXG8fHvEPyCOkQ3SSgPm8v+r9waSzdgsKOo8z+a iztao3WOD/5hnHgw41ccopr+Jgq7ji1gfZgR5TmxriS79MpqEVFzlKVERXOmPmMa 6J0duJQrUESvHRVF0xtuez+9LfF+TSv19syN478/ubO+Jhn1wtg= -----END CERTIFICATE-----Generated at Tue May 12 22:19:32 2026 by rpki-client