$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft File: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft (raw, json) Hash identifier: c4hHg2DUJxz6uB3ormuOb1NJmzaVihL5csPQa2DT0K0= Subject key identifier: BC:05:CA:B7:DE:3E:41:35:93:C5:B7:06:2C:ED:EA:58:19:77:BE:62 Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A Certificate issuer: /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A Certificate serial: 0170A69BDD2D07A6B7F885F6FCA49A17E98550F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 13:27:26 +0000 Manifest this update: Thu 24 Sep 2026 13:22:26 +0000 Manifest next update: Fri 25 Sep 2026 14:53:26 +0000 Files and hashes: 1: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: KWc9OTSiXvMZVJYcyeDQq+tc4s6Lq68tyd9neBf4i2s=) 2: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: a6L02/ltQd6+ySj9pYMUEWkvYU4L6ZYKU3OEQlZp5vg=) 3: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: a4IK1VqkQFifgbVqGFjspnePVTV/YkKjfKoaIwFfqZw=) 4: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: an5beHJBQCXe1O6nJramlD3hI7Qm5QXG3JLpnD/aNxM=) 5: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl (hash: +vmY8CYJlT6IOq5kdL3APKDKt9Yc9npUoaKSGtqtgD8=) 6: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: /fa1hwZEt68IrXwKEonGaCZwd1oMYZDyXJq4KeJo86E=) 7: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: 3Pur9J/K8W30/vvGHGXc6KHgwQgQ4wEAxcFN1o16NNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:70:a6:9b:dd:2d:07:a6:b7:f8:85:f6:fc:a4:9a:17:e9:85:50:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A Validity Not Before: Sep 24 13:22:26 2026 GMT Not After : Sep 25 14:53:26 2026 GMT Subject: CN=BC05CAB7DE3E413593C5B7062CEDEA581977BE62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:1a:19:db:4e:39:a5:fa:03:79:3d:14:4c: cd:e4:b2:78:d0:b1:34:2a:76:90:c7:9f:e6:76:e0: 56:d9:72:a9:c4:02:0b:9d:87:5d:95:4e:e9:fc:36: 4b:2e:b2:d6:a4:34:6a:6f:d7:f1:fa:4a:2a:6c:cf: 5f:49:c0:81:35:66:c7:76:5f:47:4d:e0:42:d4:9d: af:f3:d5:a5:4e:fc:14:6e:df:48:0c:c7:e5:fd:17: a0:0b:2c:af:08:5b:4a:fb:0d:0e:e4:32:7b:99:5a: 0b:2e:cd:f2:15:79:27:26:37:6a:d3:f3:23:7f:36: 2d:97:0a:6d:43:49:2c:1b:4c:4e:18:aa:73:66:68: 12:5a:67:46:7d:24:5a:f9:67:f1:db:88:6c:3c:f1: a8:e2:aa:7d:73:96:52:d9:8e:ce:18:a4:ea:29:ec: 93:b3:2b:87:70:04:3a:2f:56:9b:9e:5b:29:5c:c5: 30:11:fd:80:7b:a0:5d:40:bf:43:5f:80:57:eb:ae: c4:fb:3e:4f:8b:4d:02:58:fd:40:2c:32:f2:01:2f: 05:e3:f5:bf:bd:1a:bf:e4:cd:44:72:4f:60:7b:c5: 20:ad:ee:de:63:a3:c3:6a:5f:e6:1b:12:3e:c1:f4: b7:fd:95:de:01:81:49:3c:5c:cc:77:a4:bf:03:f9: db:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:05:CA:B7:DE:3E:41:35:93:C5:B7:06:2C:ED:EA:58:19:77:BE:62 X509v3 Authority Key Identifier: keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9f:e0:d6:57:ba:2c:dd:1e:3a:a7:bc:1d:d0:b6:0b:a1:1e: 80:2c:bf:f0:e1:e6:e7:85:0c:82:23:0b:76:a9:e7:53:5b:1f: df:74:84:5e:2b:5e:aa:92:1e:f7:8a:b7:6a:0d:01:87:4a:4a: 35:dd:a9:a9:ba:27:16:35:27:f8:e3:6a:e6:3d:88:1a:65:6a: 4d:25:d9:74:1e:1d:72:4c:17:3f:63:c6:55:2e:d5:e1:cf:32: b6:c7:d2:21:6f:b6:33:a1:d1:fd:5a:6c:b0:76:4c:b9:26:6f: 74:9d:e6:92:90:09:6b:45:f0:05:86:9a:b9:e6:98:63:eb:f2: 43:6e:34:21:1f:32:74:b6:d9:29:ac:a5:f7:2c:6f:28:f9:d3: 27:6d:7f:2d:73:0b:b9:52:93:05:04:fa:55:f0:16:15:ec:4b: c4:f9:90:8c:fc:d0:92:ca:30:ff:53:15:04:98:19:6e:f6:12: fc:82:5d:1f:53:30:ed:50:8f:e4:93:a5:4c:99:a6:c8:96:9e: be:2e:38:71:e3:eb:48:c5:3f:dd:01:b5:7b:6e:1c:85:f1:c3: e7:fe:e6:c5:50:7c:18:62:f5:c7:8b:08:88:55:c0:13:3a:5a: 8c:1c:cb:88:99:62:24:b7:7a:65:20:d3:a5:b8:57:a6:ff:a8: 35:bb:64:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXCmm90tB6a3+IX2/KSaF+mFUPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYxNDg0OUEzMEM5OEMxRjAxNjIwRTRDNUVDQkFERERG NTA5OTkyQTAeFw0yNjA5MjQxMzIyMjZaFw0yNjA5MjUxNDUzMjZaMDMxMTAvBgNV BAMTKEJDMDVDQUI3REUzRTQxMzU5M0M1QjcwNjJDRURFQTU4MTk3N0JFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIhoZ2045pfoDeT0UTM3ksnjQ sTQqdpDHn+Z24FbZcqnEAgudh12VTun8NksustakNGpv1/H6Sipsz19JwIE1Zsd2 X0dN4ELUna/z1aVO/BRu30gMx+X9F6ALLK8IW0r7DQ7kMnuZWgsuzfIVeScmN2rT 8yN/Ni2XCm1DSSwbTE4YqnNmaBJaZ0Z9JFr5Z/HbiGw88ajiqn1zllLZjs4YpOop 7JOzK4dwBDovVpueWylcxTAR/YB7oF1Av0NfgFfrrsT7Pk+LTQJY/UAsMvIBLwXj 9b+9Gr/kzURyT2B7xSCt7t5jo8NqX+YbEj7B9Lf9ld4BgUk8XMx3pL8D+dv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvAXKt94+QTWTxbcGLO3qWBl3vmIwHwYDVR0j BBgwFoAUHxSEmjDJjB8BYg5MXsut3fUJmSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NmNjhhYmEtOTUxNS00ZDEyLWFhYzItOGNlZTVkYjJhNDhmLzAvMUYxNDg0OUEz MEM5OEMxRjAxNjIwRTRDNUVDQkFERERGNTA5OTkyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjE0ODQ5QTMwQzk4QzFGMDE2MjBFNEM1RUNCQUREREY1MDk5 OTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvMUYxNDg0OUEzMEM5OEMxRjAxNjIwRTRDNUVDQkFE RERGNTA5OTkyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJef4NZXuizdHjqnvB3QtguhHoAsv/Dh5ueF DIIjC3ap51NbH990hF4rXqqSHveKt2oNAYdKSjXdqam6JxY1J/jjauY9iBplak0l 2XQeHXJMFz9jxlUu1eHPMrbH0iFvtjOh0f1abLB2TLkmb3Sd5pKQCWtF8AWGmrnm mGPr8kNuNCEfMnS22Smspfcsbyj50ydtfy1zC7lSkwUE+lXwFhXsS8T5kIz80JLK MP9TFQSYGW72EvyCXR9TMO1Qj+STpUyZpsiWnr4uOHHj60jFP90BtXtuHIXxw+f+ 5sVQfBhi9ceLCIhVwBM6Wowcy4iZYiS3emUg06W4V6b/qDW7ZF8= -----END CERTIFICATE-----Generated at Thu Sep 24 20:51:37 2026 by rpki-client