$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft File: 914D306354D2880E2D8000A84096A7D0FD93DB6F.mft (raw, json) Hash identifier: wwIzkb1tC4DMGi4ixykoE/+wufhYL1OODSIatIXslZc= Subject key identifier: AC:95:6C:45:F1:49:51:19:5F:90:68:4E:6C:DA:C4:F3:3F:82:B7:47 Authority key identifier: 91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F Certificate issuer: /CN=914D306354D2880E2D8000A84096A7D0FD93DB6F Certificate serial: 182271C200BEDED8D33ED2B4DC70DC0E1D0DFB01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 20:46:44 +0000 Manifest this update: Wed 23 Sep 2026 20:41:44 +0000 Manifest next update: Thu 24 Sep 2026 23:45:44 +0000 Files and hashes: 1: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: kuGnEQzcoDJhm5rFlzTvBCAiLMXXIFxC7mIG7REa29w=) 2: 914D306354D2880E2D8000A84096A7D0FD93DB6F.crl (hash: iNwm9qr/fr/6+M9VrEFyw2OJR+/irTn8jDIb7wtwPKE=) 3: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: uK0BRaW/xJFX4xoOs5c+Wr7pOkzcDPXliVBiSDQWuQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:22:71:c2:00:be:de:d8:d3:3e:d2:b4:dc:70:dc:0e:1d:0d:fb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914D306354D2880E2D8000A84096A7D0FD93DB6F Validity Not Before: Sep 23 20:41:44 2026 GMT Not After : Sep 24 23:45:44 2026 GMT Subject: CN=AC956C45F14951195F90684E6CDAC4F33F82B747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:5c:2e:b8:d6:d4:37:78:82:ed:ec:9c:09: 5a:83:5e:a0:5b:18:c0:02:90:8f:d6:65:6c:53:e0: d3:f5:6c:5d:04:f3:59:ee:b8:4d:55:25:6f:af:38: 11:d5:8e:68:eb:87:a6:05:fe:19:8e:f7:f9:fa:70: 5c:ef:00:bf:73:bc:ea:9c:46:4b:92:b9:ec:10:46: 11:75:99:8b:ef:32:c9:51:6f:54:70:00:61:88:c1: 4d:58:3d:f4:5e:70:59:cb:a4:3a:3d:ed:c4:c0:b7: ad:6d:7c:da:7b:ed:56:90:8a:8c:9e:e6:66:40:3c: 6e:55:92:4a:7f:a9:e1:73:6d:ae:85:a8:f1:eb:65: b6:13:30:1b:43:a9:76:1d:c6:07:92:d1:e8:8a:10: c1:24:84:14:7c:59:41:9b:9d:09:c9:12:0a:55:25: 1e:53:44:d0:4a:91:15:fc:76:b3:69:d9:4b:c3:35: 37:26:5f:e9:df:da:63:80:49:f3:26:ff:4c:95:c1: 73:91:39:1a:e3:d2:9e:a5:52:4b:11:08:67:5e:67: 52:cd:74:88:64:a9:1d:ed:b9:2d:68:9f:34:e4:77: bc:08:64:85:c3:da:27:13:4e:39:9a:6d:b7:39:96: 6e:a3:93:de:2d:a9:ff:73:1e:e0:9d:20:05:7d:da: 54:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:95:6C:45:F1:49:51:19:5F:90:68:4E:6C:DA:C4:F3:3F:82:B7:47 X509v3 Authority Key Identifier: keyid:91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6f:45:c4:03:ea:97:70:2b:c1:70:c6:db:a2:e5:f3:29:29: d1:0c:5a:3e:76:e9:df:f7:c2:b3:17:32:25:1b:1b:8a:0f:a8: ea:f1:5c:7d:40:17:fb:cf:95:38:36:13:af:69:ce:2a:a8:c8: d8:45:06:8b:b5:f3:10:be:1b:e0:4a:60:55:72:50:6f:b6:83: e3:96:54:32:4a:6e:8e:ba:b3:00:b2:09:e1:0b:30:a5:b2:d1: e3:bc:cd:7d:57:0e:be:a8:74:36:48:2c:dd:34:81:2a:1a:49: 0a:92:d9:ff:14:bf:a6:d6:0f:9d:f4:c9:83:5d:55:7b:44:46: cc:29:0b:48:2b:5a:7d:52:bf:cc:f9:1e:36:35:5a:64:67:ca: bf:29:b5:df:5a:da:ef:b0:6f:c2:ac:48:93:4e:58:c7:aa:a2: 6f:20:16:dc:db:19:63:00:0b:71:3a:83:41:82:a4:ba:1e:1b: 63:32:30:ed:7e:83:f8:4a:5a:ca:8c:db:30:12:9d:3e:dc:8b: 04:7e:4b:b4:a5:6d:43:c4:a4:7f:f0:8c:33:c3:51:ac:90:29: 8d:77:3c:5d:5c:f8:fa:95:c6:79:23:ea:48:c3:ed:d3:83:3d: 9b:af:28:78:ea:6e:f7:48:34:fb:dd:86:67:41:fc:7f:df:3a: 31:cb:36:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGCJxwgC+3tjTPtK03HDcDh0N+wEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0RDMwNjM1NEQyODgwRTJEODAwMEE4NDA5NkE3RDBG RDkzREI2RjAeFw0yNjA5MjMyMDQxNDRaFw0yNjA5MjQyMzQ1NDRaMDMxMTAvBgNV BAMTKEFDOTU2QzQ1RjE0OTUxMTk1RjkwNjg0RTZDREFDNEYzM0Y4MkI3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/u1wuuNbUN3iC7eycCVqDXqBb GMACkI/WZWxT4NP1bF0E81nuuE1VJW+vOBHVjmjrh6YF/hmO9/n6cFzvAL9zvOqc RkuSuewQRhF1mYvvMslRb1RwAGGIwU1YPfRecFnLpDo97cTAt61tfNp77VaQioye 5mZAPG5Vkkp/qeFzba6FqPHrZbYTMBtDqXYdxgeS0eiKEMEkhBR8WUGbnQnJEgpV JR5TRNBKkRX8drNp2UvDNTcmX+nf2mOASfMm/0yVwXORORrj0p6lUksRCGdeZ1LN dIhkqR3tuS1onzTkd7wIZIXD2icTTjmabbc5lm6jk94tqf9zHuCdIAV92lRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrJVsRfFJURlfkGhObNrE8z+Ct0cwHwYDVR0j BBgwFoAUkU0wY1TSiA4tgACoQJan0P2T228wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVlMjA4OGEtYzlmZi00ZDg0LWJlNGUtMTQxZDViODBiNTQzLzAvOTE0RDMwNjM1 NEQyODgwRTJEODAwMEE4NDA5NkE3RDBGRDkzREI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTREMzA2MzU0RDI4ODBFMkQ4MDAwQTg0MDk2QTdEMEZEOTNE QjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvOTE0RDMwNjM1NEQyODgwRTJEODAwMEE4NDA5NkE3 RDBGRDkzREI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1vRcQD6pdwK8Fwxtui5fMpKdEMWj526d/3 wrMXMiUbG4oPqOrxXH1AF/vPlTg2E69pziqoyNhFBou18xC+G+BKYFVyUG+2g+OW VDJKbo66swCyCeELMKWy0eO8zX1XDr6odDZILN00gSoaSQqS2f8Uv6bWD530yYNd VXtERswpC0grWn1Sv8z5HjY1WmRnyr8ptd9a2u+wb8KsSJNOWMeqom8gFtzbGWMA C3E6g0GCpLoeG2MyMO1+g/hKWsqM2zASnT7ciwR+S7SlbUPEpH/wjDPDUayQKY13 PF1c+PqVxnkj6kjD7dODPZuvKHjqbvdINPvdhmdB/H/fOjHLNkQ= -----END CERTIFICATE-----Generated at Thu Sep 24 08:39:40 2026 by rpki-client