$ rpki-client -vvvf rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft File: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft (raw, json) Hash identifier: ChHvOyAQMRxttjvt6JWLJv01JzqPEe9nMkF7TQDiJgw= Subject key identifier: A0:2E:8D:85:3A:85:AE:04:8D:2C:7F:03:3B:96:E2:A8:D8:68:D4:1A Authority key identifier: 31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 Certificate issuer: /CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Certificate serial: 2FBFCFAA2F0A7F13B368E2F2C93848C95C962EE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:27:27 +0000 Manifest this update: Thu 24 Sep 2026 05:22:27 +0000 Manifest next update: Fri 25 Sep 2026 06:09:27 +0000 Files and hashes: 1: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: Q63O5LgByYAATkaug4pVt8bzE+ZHKwWLFzPYd2unh+E=) 2: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: FR/6TdAfo1P3iR6uXvmbo5xbGJoxQcFRkSBLcjXonAU=) 3: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: JHt7Y4sfZDXhljzVs+do4tcZibHDOYboGApg1o5d8oY=) 4: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl (hash: Y+061mXtW4r3/6TZJ3AJ6YhL5gJX8oW1Zdxj/oMOo/U=) 5: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: KtHFgiZtCU/Oo5xwU2fpqeHLtCGkwIQI7UNolZenHzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bf:cf:aa:2f:0a:7f:13:b3:68:e2:f2:c9:38:48:c9:5c:96:2e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Validity Not Before: Sep 24 05:22:27 2026 GMT Not After : Sep 25 06:09:27 2026 GMT Subject: CN=A02E8D853A85AE048D2C7F033B96E2A8D868D41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e7:38:bd:ab:6e:f6:7a:e1:24:0c:5a:06:51: 2c:ec:e2:d2:a0:ea:4a:b8:b8:6a:6c:34:e3:3e:62: 09:3e:cb:55:c4:5b:f7:9c:29:48:a9:f7:22:66:db: b7:fd:f6:f6:15:ef:f4:cb:77:19:84:bd:07:02:e0: e1:3c:f7:53:69:80:0d:97:49:3a:bd:85:84:b7:af: a7:bd:eb:0e:82:ad:72:a8:26:02:63:19:28:90:32: 92:49:d0:64:ec:8a:ca:37:e7:46:e8:d7:e1:b9:80: 55:d9:78:c2:7e:62:02:fe:7e:72:d5:76:cf:92:2f: 02:e9:c2:61:89:5e:83:7f:57:f9:c4:0b:f2:b5:ca: 73:ed:85:86:08:a1:35:4a:ae:07:7b:aa:59:bc:a2: 4d:e5:cf:5d:3f:06:16:04:01:9b:94:77:00:ee:71: c7:e2:d0:c4:6e:ec:54:a3:95:1e:5a:97:d8:67:cc: 98:a3:2d:64:f2:be:d2:86:a6:44:fa:8c:1d:bd:cb: 44:9f:b8:62:1c:96:1d:6a:f5:2d:03:8f:e7:68:75: 79:55:75:23:47:d6:74:96:17:98:3e:be:f7:e5:9d: 53:a6:32:78:ca:08:ec:71:06:28:15:dc:20:1d:99: 2d:ec:9b:b8:3d:ac:d4:84:08:ee:d4:8c:48:1e:99: 22:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2E:8D:85:3A:85:AE:04:8D:2C:7F:03:3B:96:E2:A8:D8:68:D4:1A X509v3 Authority Key Identifier: keyid:31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fe:bd:85:65:17:7f:d7:32:b0:ff:95:b9:4c:c6:e3:d8:11: 22:30:e3:b4:74:d2:d0:13:ec:f3:41:91:6c:c7:a7:32:2a:80: 42:28:42:65:e9:ee:76:78:83:97:8e:4e:a8:c6:6e:7e:be:fd: 9a:d1:a4:a9:7f:ba:91:81:01:5c:bc:5f:56:87:c0:be:fa:50: 28:63:65:18:38:0f:12:cd:26:a0:23:6a:a1:c2:ef:00:33:82: 4d:ed:8d:7d:2f:45:9d:02:32:dc:af:8c:23:42:80:0c:69:a4: da:63:50:c6:f4:f5:08:82:95:e9:f1:23:49:13:c5:c1:63:e7: 4d:bc:4b:7b:1c:28:00:8f:3a:ed:83:37:af:8b:00:51:e6:2d: 21:73:30:e5:14:a8:95:79:03:1e:95:53:94:de:e2:b1:a4:8b: 28:6b:fa:2c:db:77:80:43:06:5e:eb:28:f5:8c:9b:8d:bb:68: 0f:51:b0:ef:ae:af:4d:cb:70:cf:38:61:b4:7e:7d:2e:65:8a: e3:e9:38:2f:98:f9:96:ee:56:59:b4:e9:cb:e7:98:25:69:66: 34:2a:fc:16:17:57:ba:3b:8f:f1:fd:a7:7d:7d:42:77:ef:80: 2f:35:b1:0e:7d:2f:29:a9:f4:32:62:32:35:b1:9f:12:b9:98: 92:18:7e:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7/Pqi8KfxOzaOLyyThIyVyWLuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEy RkVFM0ZBMjAeFw0yNjA5MjQwNTIyMjdaFw0yNjA5MjUwNjA5MjdaMDMxMTAvBgNV BAMTKEEwMkU4RDg1M0E4NUFFMDQ4RDJDN0YwMzNCOTZFMkE4RDg2OEQ0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh5zi9q272euEkDFoGUSzs4tKg 6kq4uGpsNOM+Ygk+y1XEW/ecKUip9yJm27f99vYV7/TLdxmEvQcC4OE891NpgA2X STq9hYS3r6e96w6CrXKoJgJjGSiQMpJJ0GTsiso350bo1+G5gFXZeMJ+YgL+fnLV ds+SLwLpwmGJXoN/V/nEC/K1ynPthYYIoTVKrgd7qlm8ok3lz10/BhYEAZuUdwDu ccfi0MRu7FSjlR5al9hnzJijLWTyvtKGpkT6jB29y0SfuGIclh1q9S0Dj+dodXlV dSNH1nSWF5g+vvflnVOmMnjKCOxxBigV3CAdmS3sm7g9rNSECO7UjEgemSKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoC6NhTqFrgSNLH8DO5biqNho1BowHwYDVR0j BBgwFoAUMRT+ooIGFLbov+MPs+Dk4S/uP6IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA3NjA4Y2UtYzNmOC00NGViLWFlZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4 MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEyRkVFM0ZBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTE0RkVBMjgyMDYxNEI2RThCRkUzMEZCM0UwRTRFMTJGRUUz RkEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0 RTEyRkVFM0ZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn+vYVlF3/XMrD/lblMxuPYESIw47R00tAT 7PNBkWzHpzIqgEIoQmXp7nZ4g5eOTqjGbn6+/ZrRpKl/upGBAVy8X1aHwL76UChj ZRg4DxLNJqAjaqHC7wAzgk3tjX0vRZ0CMtyvjCNCgAxppNpjUMb09QiClenxI0kT xcFj5028S3scKACPOu2DN6+LAFHmLSFzMOUUqJV5Ax6VU5Te4rGkiyhr+izbd4BD Bl7rKPWMm427aA9RsO+ur03LcM84YbR+fS5liuPpOC+Y+ZbuVlm06cvnmCVpZjQq /BYXV7o7j/H9p319QnfvgC81sQ59Lymp9DJiMjWxnxK5mJIYfgE= -----END CERTIFICATE-----Generated at Thu Sep 24 10:43:25 2026 by rpki-client