$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft File: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft (raw, json) Hash identifier: 8GC+9HbQmt2EwugQDTmyczaXgHZVW/pXKAlRLJ5klPs= Subject key identifier: E4:76:4E:26:DA:9A:87:37:E7:E1:6B:EE:77:54:FE:4F:13:62:6F:65 Authority key identifier: 81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 Certificate issuer: /CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Certificate serial: 716ED1392006B64ABF32620D2E6A36BE13781245 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:09:46 +0000 Manifest this update: Tue 12 May 2026 15:04:46 +0000 Manifest next update: Wed 13 May 2026 18:03:46 +0000 Files and hashes: 1: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl (hash: eUl3jQ5j8uHU8HU5AvLyf9NwblmNtWkc/9HisH7Yrno=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: 2pXek6gWnmZ3X1sQ40jRh2qfPg290PWebfx41xborSQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6e:d1:39:20:06:b6:4a:bf:32:62:0d:2e:6a:36:be:13:78:12:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Validity Not Before: May 12 15:04:46 2026 GMT Not After : May 13 18:03:46 2026 GMT Subject: CN=E4764E26DA9A8737E7E16BEE7754FE4F13626F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:d2:5c:cc:a4:a0:9c:49:04:fa:54:28:fb: f8:67:9a:3c:5c:6d:e7:7c:99:4f:ce:fb:55:da:1a: 4f:27:c9:5a:78:02:f0:ab:49:7b:00:7a:f5:b9:0f: 72:16:d4:ae:a4:a4:c3:8a:45:8d:16:b4:cd:67:33: a7:6c:f4:f2:99:41:9f:53:8b:a8:15:e1:b9:14:43: a3:da:44:58:99:2e:2d:25:b8:82:16:d2:4f:11:26: 30:7e:9e:ff:10:c6:11:8f:45:c1:93:d9:71:7a:00: 85:a9:c6:fa:ed:8b:ba:a7:a2:f8:d7:b4:5f:7e:29: 1d:97:0e:ea:6d:06:15:2d:36:1a:92:ea:85:9e:2a: 76:70:c0:6a:cd:e7:57:fe:e7:83:a1:1f:54:43:bd: 00:86:cd:09:22:c3:e5:9f:de:fc:82:5c:35:02:91: 38:3a:be:87:3a:e5:1b:e4:d0:60:db:c2:08:78:fa: 0c:2b:b2:fd:ad:78:9f:7b:53:e6:e9:01:70:6c:ac: 6b:bf:c1:6c:30:cf:2d:b4:08:71:d2:b2:03:67:f0: 1c:d9:03:0c:65:d5:b2:aa:ba:2d:a2:de:30:28:08: 4c:45:05:59:e1:55:b7:b9:fe:70:a8:44:89:4a:d0: 78:4f:47:86:c6:ad:8c:2c:6c:8b:66:80:82:38:a2: 5e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:76:4E:26:DA:9A:87:37:E7:E1:6B:EE:77:54:FE:4F:13:62:6F:65 X509v3 Authority Key Identifier: keyid:81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:97:9a:97:03:0d:e7:d2:59:64:02:8c:6c:86:3e:3b:1d:5f: 5e:1b:be:fb:b6:98:d8:aa:e8:32:36:1a:84:66:5f:7e:17:c4: d3:df:29:ef:f1:67:8e:84:7a:de:1d:5e:b1:8e:d5:b7:46:d8: d4:31:3f:1a:26:cc:c6:26:16:a0:cc:8f:84:cc:d8:7b:c0:51: 10:d8:5b:c8:d4:d9:ba:ee:c7:c1:a1:e7:0c:d0:04:0b:3c:74: 7d:3f:84:e2:c8:bc:a6:c1:af:6b:df:39:5e:03:8e:8f:f8:8d: 5d:5e:89:29:ec:92:51:a8:f0:24:f9:f6:e0:44:80:8a:92:78: e5:4a:21:25:cf:09:a7:b4:4a:4a:be:2e:6e:8f:a6:c1:c1:7c: 90:72:dd:4a:9c:2c:2a:10:37:d7:f6:84:6b:64:95:6d:cb:f6: 66:d4:17:33:55:65:2f:e3:1a:d4:65:60:44:1f:c7:bd:28:3b: f1:af:05:7b:f5:ba:05:14:5a:5e:11:d1:5a:3e:07:03:ae:26: 98:d6:87:a5:26:c3:f5:30:f0:59:64:a5:80:a6:9f:55:22:38: 7d:23:3e:a4:ce:1f:07:33:c9:82:97:7c:11:e6:04:d0:3b:e8: 05:a6:9e:8e:f3:73:c9:e6:ad:6a:45:90:d2:81:d3:03:99:a1: 67:65:cb:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcW7ROSAGtkq/MmINLmo2vhN4EkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMxNDky RDEyQzFDMzAeFw0yNjA1MTIxNTA0NDZaFw0yNjA1MTMxODAzNDZaMDMxMTAvBgNV BAMTKEU0NzY0RTI2REE5QTg3MzdFN0UxNkJFRTc3NTRGRTRGMTM2MjZGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/l9JczKSgnEkE+lQo+/hnmjxc bed8mU/O+1XaGk8nyVp4AvCrSXsAevW5D3IW1K6kpMOKRY0WtM1nM6ds9PKZQZ9T i6gV4bkUQ6PaRFiZLi0luIIW0k8RJjB+nv8QxhGPRcGT2XF6AIWpxvrti7qnovjX tF9+KR2XDuptBhUtNhqS6oWeKnZwwGrN51f+54OhH1RDvQCGzQkiw+Wf3vyCXDUC kTg6voc65Rvk0GDbwgh4+gwrsv2teJ97U+bpAXBsrGu/wWwwzy20CHHSsgNn8BzZ Awxl1bKqui2i3jAoCExFBVnhVbe5/nCoRIlK0HhPR4bGrYwsbItmgII4ol6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5HZOJtqahzfn4Wvud1T+TxNib2UwHwYDVR0j BBgwFoAUgU18qPWoYohW1D0eIBoxSS0SwcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY1ZGQwYWEtZmE3YS00ZGE0LWExYzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThG NUE4NjI4ODU2RDQzRDFFMjAxQTMxNDkyRDEyQzFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTREN0NBOEY1QTg2Mjg4NTZENDNEMUUyMDFBMzE0OTJEMTJD MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMx NDkyRDEyQzFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOXmpcDDefSWWQCjGyGPjsdX14bvvu2mNiq 6DI2GoRmX34XxNPfKe/xZ46Eet4dXrGO1bdG2NQxPxomzMYmFqDMj4TM2HvAURDY W8jU2brux8Gh5wzQBAs8dH0/hOLIvKbBr2vfOV4Djo/4jV1eiSnsklGo8CT59uBE gIqSeOVKISXPCae0Skq+Lm6PpsHBfJBy3UqcLCoQN9f2hGtklW3L9mbUFzNVZS/j GtRlYEQfx70oO/GvBXv1ugUUWl4R0Vo+BwOuJpjWh6Umw/Uw8FlkpYCmn1UiOH0j PqTOHwczyYKXfBHmBNA76AWmno7zc8nmrWpFkNKB0wOZoWdly+k= -----END CERTIFICATE-----Generated at Tue May 12 22:32:41 2026 by rpki-client