$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft File: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft (raw, json) Hash identifier: /UQAPuJXnDm6ArktKwc4c0gXiO/4jXlWRSBmR7UFlkw= Subject key identifier: 46:18:81:FE:15:18:6D:E1:0A:ED:4E:30:44:56:9D:50:AC:5E:D5:10 Authority key identifier: 81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 Certificate issuer: /CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Certificate serial: 5A7E723FA4CAAC81BE135DC0145B07003B2949C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:48:01 +0000 Manifest this update: Thu 23 Jul 2026 18:43:01 +0000 Manifest next update: Fri 24 Jul 2026 20:14:01 +0000 Files and hashes: 1: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl (hash: L5OKCosBqJ3JciTyOOZatvczXSAmhGYowNt95xlSxCs=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: 2pXek6gWnmZ3X1sQ40jRh2qfPg290PWebfx41xborSQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7e:72:3f:a4:ca:ac:81:be:13:5d:c0:14:5b:07:00:3b:29:49:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Validity Not Before: Jul 23 18:43:01 2026 GMT Not After : Jul 24 20:14:01 2026 GMT Subject: CN=461881FE15186DE10AED4E3044569D50AC5ED510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:60:d3:75:19:95:2f:21:b4:9e:a5:aa:94: 30:ca:a4:2e:64:72:9d:d2:41:23:57:91:07:a9:a7: 9c:a6:c5:1c:46:00:e8:d1:02:44:45:5a:e3:be:c9: d0:d3:65:3e:30:dc:a0:f8:9a:45:58:93:ed:c3:75: dc:79:a0:45:38:8d:ac:f4:16:f7:dc:34:b0:c0:0e: 96:81:6e:e0:0d:15:d9:ac:51:ab:a4:33:5c:78:54: 3d:11:80:8f:bc:ac:37:4c:59:02:55:33:ae:f1:67: 92:c9:ba:0c:99:b2:74:63:14:b3:b7:f8:8f:ca:09: 68:57:53:0d:51:94:7c:0e:a9:32:26:08:ac:1b:be: aa:2b:27:fc:1f:4e:38:fa:82:fb:b4:41:3c:0d:61: 6f:ba:76:1e:3c:33:1c:da:34:28:60:0b:43:82:65: 3b:c6:f4:eb:7d:85:e3:6a:b3:64:91:4d:da:2c:ee: 38:3b:98:59:cb:c4:db:0c:d3:53:5b:d2:1a:8a:b1: 9d:8c:01:0a:37:61:4a:d9:02:fe:aa:17:9b:83:e7: c1:6a:2c:c7:09:7f:5c:39:8f:8d:51:d8:cb:3a:c5: dd:d5:f4:30:8d:d7:87:7b:d2:d5:be:58:49:c3:ec: d2:26:ea:4b:6e:c3:15:5f:6c:db:fe:89:1c:a0:a5: 49:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:18:81:FE:15:18:6D:E1:0A:ED:4E:30:44:56:9D:50:AC:5E:D5:10 X509v3 Authority Key Identifier: keyid:81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6c:7f:3b:e4:59:d9:ac:f1:d3:88:98:7f:43:df:39:3a:c4: 98:67:b1:24:f2:e4:8f:c1:38:57:f6:20:19:b8:97:83:36:26: 7a:9a:5d:cc:66:07:8f:d1:99:ba:15:f3:f3:25:da:81:5b:86: 5a:15:6c:3f:55:df:c1:7c:20:54:5b:13:fc:ce:d3:7f:65:c7: 3c:70:b0:6c:47:0a:28:d8:ad:63:a8:8c:1e:c5:50:ec:34:eb: ee:89:4f:6b:bf:9f:26:f3:6d:36:1d:45:da:a7:2c:eb:3e:4a: 13:94:61:eb:93:7d:bd:e6:72:b1:ae:2a:9c:ee:2b:21:aa:78: b6:e5:c8:d8:46:01:21:d5:4a:ec:fd:a2:90:53:ba:3f:27:1f: 55:64:30:95:69:83:c1:13:1d:e6:4b:b9:5c:6a:5c:c6:8c:71: c7:20:68:45:c1:e4:27:6b:87:62:ff:bf:2d:92:2a:a5:a0:88: c4:35:3e:61:ba:70:37:c0:c8:f3:03:b7:a0:2c:46:0f:1c:fa: e5:22:a6:ec:93:51:db:38:5e:b1:7c:0a:e4:3b:8f:0f:7a:3e: 9b:6d:f7:80:f4:3d:e7:2f:fc:8a:8f:e9:e6:1d:75:82:25:99: f0:df:d3:0b:d1:d3:fa:52:24:61:79:5f:b6:59:36:07:5c:68: 95:7f:7c:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWn5yP6TKrIG+E13AFFsHADspScgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMxNDky RDEyQzFDMzAeFw0yNjA3MjMxODQzMDFaFw0yNjA3MjQyMDE0MDFaMDMxMTAvBgNV BAMTKDQ2MTg4MUZFMTUxODZERTEwQUVENEUzMDQ0NTY5RDUwQUM1RUQ1MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK6mDTdRmVLyG0nqWqlDDKpC5k cp3SQSNXkQepp5ymxRxGAOjRAkRFWuO+ydDTZT4w3KD4mkVYk+3Dddx5oEU4jaz0 FvfcNLDADpaBbuANFdmsUaukM1x4VD0RgI+8rDdMWQJVM67xZ5LJugyZsnRjFLO3 +I/KCWhXUw1RlHwOqTImCKwbvqorJ/wfTjj6gvu0QTwNYW+6dh48MxzaNChgC0OC ZTvG9Ot9heNqs2SRTdos7jg7mFnLxNsM01Nb0hqKsZ2MAQo3YUrZAv6qF5uD58Fq LMcJf1w5j41R2Ms6xd3V9DCN14d70tW+WEnD7NIm6ktuwxVfbNv+iRygpUlLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURhiB/hUYbeEK7U4wRFadUKxe1RAwHwYDVR0j BBgwFoAUgU18qPWoYohW1D0eIBoxSS0SwcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY1ZGQwYWEtZmE3YS00ZGE0LWExYzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThG NUE4NjI4ODU2RDQzRDFFMjAxQTMxNDkyRDEyQzFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTREN0NBOEY1QTg2Mjg4NTZENDNEMUUyMDFBMzE0OTJEMTJD MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMx NDkyRDEyQzFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5sfzvkWdms8dOImH9D3zk6xJhnsSTy5I/B OFf2IBm4l4M2JnqaXcxmB4/RmboV8/Ml2oFbhloVbD9V38F8IFRbE/zO039lxzxw sGxHCijYrWOojB7FUOw06+6JT2u/nybzbTYdRdqnLOs+ShOUYeuTfb3mcrGuKpzu KyGqeLblyNhGASHVSuz9opBTuj8nH1VkMJVpg8ETHeZLuVxqXMaMcccgaEXB5Cdr h2L/vy2SKqWgiMQ1PmG6cDfAyPMDt6AsRg8c+uUipuyTUds4XrF8CuQ7jw96Pptt 94D0Pecv/IqP6eYddYIlmfDf0wvR0/pSJGF5X7ZZNgdcaJV/fDs= -----END CERTIFICATE-----Generated at Fri Jul 24 06:22:45 2026 by rpki-client