$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft File: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft (raw, json) Hash identifier: cxK3qROwzMz3EeJ9kubKhq6s+6CN4tlDGuVSERVlZIk= Subject key identifier: 35:F4:4C:9D:E0:76:9E:1D:08:77:0D:35:A4:99:F7:28:01:B5:B1:5B Authority key identifier: 81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 Certificate issuer: /CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Certificate serial: 321FF60BA29ECE179EF87885D797976829B5AD02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:59:23 +0000 Manifest this update: Thu 24 Sep 2026 06:54:23 +0000 Manifest next update: Fri 25 Sep 2026 08:17:23 +0000 Files and hashes: 1: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl (hash: jbmEZAukAhE4XypLOeqVNHlP8LXQ+SHB87Ss20dR6SA=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: 2pXek6gWnmZ3X1sQ40jRh2qfPg290PWebfx41xborSQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1f:f6:0b:a2:9e:ce:17:9e:f8:78:85:d7:97:97:68:29:b5:ad:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Validity Not Before: Sep 24 06:54:23 2026 GMT Not After : Sep 25 08:17:23 2026 GMT Subject: CN=35F44C9DE0769E1D08770D35A499F72801B5B15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:e2:05:fa:e0:f9:d0:de:4a:8f:88:3c:da: 00:b6:ef:66:7d:13:54:1d:65:e4:03:18:7a:b4:29: 9f:c0:c3:a0:5c:1e:ea:f2:cc:73:bd:33:ba:5f:c0: 19:2a:15:29:c7:af:89:92:dc:5f:f9:a0:f2:e2:c2: fb:bd:a0:bf:32:39:ac:ef:d5:1d:8d:7c:60:b0:b7: 44:08:65:ca:eb:40:c7:f3:2b:48:30:6f:b1:79:cc: ec:7b:a2:d5:fc:25:21:b8:a8:a5:fe:8e:f7:4a:5f: 5a:29:63:42:d6:3b:78:f0:eb:c4:7f:8a:bd:97:2a: d8:5c:dd:b9:64:03:4b:89:42:3a:bf:18:53:a1:d3: 0f:af:5d:e1:82:03:ff:bd:cf:83:1d:3b:a7:6b:fa: 78:89:a4:7d:98:4f:ef:9c:76:80:33:51:17:a3:92: 3d:60:78:3b:d7:58:73:3e:d0:b1:13:d9:22:57:09: 4d:fe:b4:df:4d:95:ac:76:28:47:0d:9c:cf:83:e5: 01:cb:e7:f1:d5:59:26:58:df:d0:1d:95:b4:da:8a: 32:38:e6:a9:39:2c:06:49:36:1e:b7:ec:8d:8a:14: e5:4a:d2:90:c0:fc:a3:37:45:4c:1e:ff:1d:9f:12: 78:a9:e3:a5:25:78:1b:79:47:28:c6:00:36:5a:25: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F4:4C:9D:E0:76:9E:1D:08:77:0D:35:A4:99:F7:28:01:B5:B1:5B X509v3 Authority Key Identifier: keyid:81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c7:a2:c0:73:3c:60:42:0f:0d:88:2f:ee:a1:1a:2d:be:72: 4e:81:fc:56:90:a9:b6:57:d2:ea:98:3e:23:42:c7:e0:db:8a: 87:05:60:ed:85:3a:a4:32:20:a4:02:5c:6a:e8:c0:34:63:d7: 02:39:58:65:0a:3e:4e:52:b7:75:f9:93:b9:35:69:39:b7:85: c9:ea:5d:9e:06:08:f2:9f:b3:ef:ce:33:6d:6a:e0:19:e9:84: 41:3d:c5:b1:76:ff:8f:b2:c5:ac:fa:e9:45:76:ef:98:52:5d: f9:24:48:79:30:f3:dd:04:c2:88:1c:01:bb:35:c1:7e:b6:0a: 53:2f:b5:6d:2f:ef:32:d2:59:bf:de:4f:c1:53:d3:05:ef:ff: 79:55:49:52:bb:c1:91:e2:e3:81:de:35:8d:55:51:71:f9:7b: 46:c7:36:c3:05:ed:87:92:ff:58:14:02:5a:f5:7f:e8:5c:2a: c3:e9:7c:8a:e2:b7:4a:04:9b:ea:b1:20:8a:57:53:bc:8a:f1: 69:f0:c7:cb:ae:84:e2:81:45:12:8a:3e:2f:45:a9:b7:49:ed: 6f:5d:1f:78:d8:c3:d7:28:90:e7:69:c7:96:3c:6e:36:69:60: 40:41:2f:88:0b:09:a9:03:4a:9b:15:47:21:9d:c7:21:2c:8e: 60:ba:19:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMh/2C6Kezhee+HiF15eXaCm1rQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMxNDky RDEyQzFDMzAeFw0yNjA5MjQwNjU0MjNaFw0yNjA5MjUwODE3MjNaMDMxMTAvBgNV BAMTKDM1RjQ0QzlERTA3NjlFMUQwODc3MEQzNUE0OTlGNzI4MDFCNUIxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNeIF+uD50N5Kj4g82gC272Z9 E1QdZeQDGHq0KZ/Aw6BcHuryzHO9M7pfwBkqFSnHr4mS3F/5oPLiwvu9oL8yOazv 1R2NfGCwt0QIZcrrQMfzK0gwb7F5zOx7otX8JSG4qKX+jvdKX1opY0LWO3jw68R/ ir2XKthc3blkA0uJQjq/GFOh0w+vXeGCA/+9z4MdO6dr+niJpH2YT++cdoAzURej kj1geDvXWHM+0LET2SJXCU3+tN9Nlax2KEcNnM+D5QHL5/HVWSZY39AdlbTaijI4 5qk5LAZJNh637I2KFOVK0pDA/KM3RUwe/x2fEnip46UleBt5RyjGADZaJT4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNfRMneB2nh0Idw01pJn3KAG1sVswHwYDVR0j BBgwFoAUgU18qPWoYohW1D0eIBoxSS0SwcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY1ZGQwYWEtZmE3YS00ZGE0LWExYzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThG NUE4NjI4ODU2RDQzRDFFMjAxQTMxNDkyRDEyQzFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTREN0NBOEY1QTg2Mjg4NTZENDNEMUUyMDFBMzE0OTJEMTJD MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMx NDkyRDEyQzFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDHosBzPGBCDw2IL+6hGi2+ck6B/FaQqbZX 0uqYPiNCx+DbiocFYO2FOqQyIKQCXGrowDRj1wI5WGUKPk5St3X5k7k1aTm3hcnq XZ4GCPKfs+/OM21q4BnphEE9xbF2/4+yxaz66UV275hSXfkkSHkw890EwogcAbs1 wX62ClMvtW0v7zLSWb/eT8FT0wXv/3lVSVK7wZHi44HeNY1VUXH5e0bHNsMF7YeS /1gUAlr1f+hcKsPpfIrit0oEm+qxIIpXU7yK8Wnwx8uuhOKBRRKKPi9FqbdJ7W9d H3jYw9cokOdpx5Y8bjZpYEBBL4gLCakDSpsVRyGdxyEsjmC6GeA= -----END CERTIFICATE-----Generated at Thu Sep 24 17:06:15 2026 by rpki-client