$ rpki-client -vvf rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft File: 14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft (raw, json) Hash identifier: 7bTqe3Vjii5CeiSxb8ZQhVew47A/2rXJ/iZgokbBxcA= Subject key identifier: 3F:07:B4:E2:A8:00:75:B5:FF:99:0A:B2:1B:A1:3F:73:74:DD:DD:62 Authority key identifier: 14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9 Certificate issuer: /CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9 Certificate serial: 336E8BF066A4396E6E0033835527CE9A72AA8730 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:23:39 +0000 Manifest this update: Tue 12 May 2026 07:18:39 +0000 Manifest next update: Wed 13 May 2026 11:06:39 +0000 Files and hashes: 1: 14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl (hash: MR/rpeq5q3GUNvhQfzeS2J1X+7Xuja5Ru1Ey3B8htIk=) 2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: EJ6cvXJ/T86AFVCQoEqikidmMKscKfWsdPHD8vPB1Oc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:6e:8b:f0:66:a4:39:6e:6e:00:33:83:55:27:ce:9a:72:aa:87:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9 Validity Not Before: May 12 07:18:39 2026 GMT Not After : May 13 11:06:39 2026 GMT Subject: CN=3F07B4E2A80075B5FF990AB21BA13F7374DDDD62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:44:79:93:54:97:16:84:7f:46:77:8b:f1:ae: dc:84:39:5c:04:f4:56:76:17:a0:cf:ea:ad:68:d5: 05:9f:03:b9:b9:25:50:ff:bb:93:11:76:3d:18:ee: bd:4b:29:a7:2a:da:a1:53:6c:fc:61:29:38:d9:dc: d7:e7:f0:3f:c2:24:3d:81:ea:b8:a6:bc:f1:1a:e3: bf:0f:b6:f4:8f:ce:8d:88:3d:89:c6:c6:d6:08:20: 56:82:fe:64:32:cb:60:39:5c:ee:5b:e8:80:ff:77: 84:9e:89:52:24:7e:cd:2c:39:d4:be:13:bb:4e:88: 33:eb:2c:fa:b5:ef:07:84:71:56:d0:93:58:12:70: 01:97:be:35:a0:ed:91:57:25:44:6b:2a:9f:9e:a1: 56:ed:d0:18:e6:29:59:e9:9f:d3:4b:d6:ea:1a:7a: 50:10:d8:55:54:48:d4:c1:ca:f4:c1:27:47:31:c4: b2:08:fc:fd:09:7a:fd:97:8a:c4:5c:45:6d:73:76: 14:c8:f7:f5:cb:43:92:ec:4f:8d:bd:38:c4:ab:cf: f2:20:6f:fe:5a:00:4b:b1:76:8a:f1:af:bd:39:c4: f2:dd:6a:54:cd:2b:8b:96:2a:ae:e4:15:87:96:07: 89:62:e5:de:f5:e7:4c:51:03:3c:7e:18:e4:fe:06: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:07:B4:E2:A8:00:75:B5:FF:99:0A:B2:1B:A1:3F:73:74:DD:DD:62 X509v3 Authority Key Identifier: keyid:14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:93:76:d5:56:e0:36:41:ff:f1:9b:84:07:4c:b6:91:a5:85: fa:83:bc:84:a7:0d:36:07:63:09:46:32:c4:1d:9e:90:69:87: bf:0c:27:fd:de:57:9f:44:59:f5:df:97:9a:ba:4b:16:91:d3: 3b:27:12:25:ce:b9:d2:2e:33:e2:ab:4c:97:51:54:6b:c6:1d: 84:9a:c7:62:de:b8:d1:e9:b9:f0:6c:8a:ff:96:a5:ea:f4:7b: b9:d4:2c:e5:75:62:a1:7e:a9:96:01:63:30:fa:96:fa:36:59: 47:4b:f9:2a:8d:8f:ca:55:6c:9a:39:b6:a1:3e:af:8d:35:e5: 19:cc:d9:b8:82:30:26:46:4a:d4:8a:12:b3:93:8c:33:d8:10: 9b:5d:fb:66:22:21:43:75:cb:48:36:54:fb:5e:46:e1:12:d2: a8:b1:3f:69:a6:b7:73:34:4b:d1:9f:12:2f:44:0b:26:90:2b: 96:20:2d:6b:fe:91:e0:3e:02:df:98:27:88:eb:0b:13:ca:a8: e4:99:08:b7:f0:53:de:61:4e:01:76:bb:7d:73:e0:8e:15:1e: 82:88:7a:07:45:5c:50:fc:88:16:87:00:98:ab:a5:7e:af:9c: ef:8c:73:28:fb:54:76:8e:de:4b:88:fb:31:9b:54:94:a2:36: 2a:53:b5:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM26L8GakOW5uADODVSfOmnKqhzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQzODRBNzdGQzFFMDNCQUJBQThEQjZFOTVGOTc5QjA4 RDE2REFCOTAeFw0yNjA1MTIwNzE4MzlaFw0yNjA1MTMxMTA2MzlaMDMxMTAvBgNV BAMTKDNGMDdCNEUyQTgwMDc1QjVGRjk5MEFCMjFCQTEzRjczNzRERERENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcRHmTVJcWhH9Gd4vxrtyEOVwE 9FZ2F6DP6q1o1QWfA7m5JVD/u5MRdj0Y7r1LKacq2qFTbPxhKTjZ3Nfn8D/CJD2B 6rimvPEa478PtvSPzo2IPYnGxtYIIFaC/mQyy2A5XO5b6ID/d4SeiVIkfs0sOdS+ E7tOiDPrLPq17weEcVbQk1gScAGXvjWg7ZFXJURrKp+eoVbt0BjmKVnpn9NL1uoa elAQ2FVUSNTByvTBJ0cxxLII/P0Jev2XisRcRW1zdhTI9/XLQ5LsT429OMSrz/Ig b/5aAEuxdorxr705xPLdalTNK4uWKq7kFYeWB4li5d7150xRAzx+GOT+BrifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPwe04qgAdbX/mQqyG6E/c3Td3WIwHwYDVR0j BBgwFoAUFDhKd/weA7q6qNtulfl5sI0W2rkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDczMmYxOTEtZTM4MC00MDEzLWJjZTUtNDIxNWE0OTNhNzFkLzAvMTQzODRBNzdG QzFFMDNCQUJBQThEQjZFOTVGOTc5QjA4RDE2REFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDM4NEE3N0ZDMUUwM0JBQkFBOERCNkU5NUY5NzlCMDhEMTZE QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvMTQzODRBNzdGQzFFMDNCQUJBQThEQjZFOTVGOTc5 QjA4RDE2REFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmTdtVW4DZB//GbhAdMtpGlhfqDvISnDTYH YwlGMsQdnpBph78MJ/3eV59EWfXfl5q6SxaR0zsnEiXOudIuM+KrTJdRVGvGHYSa x2LeuNHpufBsiv+Wper0e7nULOV1YqF+qZYBYzD6lvo2WUdL+SqNj8pVbJo5tqE+ r4015RnM2biCMCZGStSKErOTjDPYEJtd+2YiIUN1y0g2VPteRuES0qixP2mmt3M0 S9GfEi9ECyaQK5YgLWv+keA+At+YJ4jrCxPKqOSZCLfwU95hTgF2u31z4I4VHoKI egdFXFD8iBaHAJirpX6vnO+Mcyj7VHaO3kuI+zGbVJSiNipTtZc= -----END CERTIFICATE-----Generated at Wed May 13 00:21:12 2026 by rpki-client