
$ rpki-client -vvf rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
File: 14D784D8F19F00DFBA4C08757485032BE04603A3.mft (raw, json)
Hash identifier: DXEdbz8VI1yGqp1TvMT9DTWiHFtgRkFa7aL9c66hFBA=
Subject key identifier: DF:8E:77:FB:7C:F6:11:EC:B4:30:E9:16:99:F3:56:E2:80:C1:18:48
Authority key identifier: 14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3
Certificate issuer: /CN=14D784D8F19F00DFBA4C08757485032BE04603A3
Certificate serial: 65DA2484C87E12C172CEDCEA28ABACC15083D677
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:00:12 +0000
Manifest this update: Wed 17 Jun 2026 01:55:12 +0000
Manifest next update: Thu 18 Jun 2026 03:12:12 +0000
Files and hashes: 1: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: 4CcWucwvFiUbV7yGD9jF0QOdXA3+eK3AiJ4whM9p04M=)
2: 14D784D8F19F00DFBA4C08757485032BE04603A3.crl (hash: dKHygFHpEd7h9zzkxnbV1zVdrEpv9Kv8sxmAGV6Quv0=)
3: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: rA6w7AOgQeO/23WQ9WTNvbNDGzSTa/seU2ViAzbcvrs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl
rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:da:24:84:c8:7e:12:c1:72:ce:dc:ea:28:ab:ac:c1:50:83:d6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14D784D8F19F00DFBA4C08757485032BE04603A3
Validity
Not Before: Jun 17 01:55:12 2026 GMT
Not After : Jun 18 03:12:12 2026 GMT
Subject: CN=DF8E77FB7CF611ECB430E91699F356E280C11848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:1e:d1:7b:05:ba:38:af:a9:f6:0c:f4:17:
7c:0d:51:77:df:31:29:0f:5f:76:e5:35:e0:bd:f2:
17:70:a2:c7:74:a5:f0:4b:fa:4e:32:97:bc:b4:44:
d0:fc:f7:e3:80:a0:b7:d4:59:1b:73:96:d7:fb:89:
30:55:3b:de:5a:7b:8a:0c:6f:50:b3:7d:6e:60:e8:
d4:af:9b:d7:46:6a:94:9f:dd:9d:06:b3:35:e8:da:
4c:ac:05:e3:bb:08:47:f5:03:75:c8:22:33:d3:aa:
02:88:15:e5:ed:0e:27:eb:0d:cd:55:f9:b0:e4:7a:
7b:54:c0:09:86:a0:a6:15:91:75:a7:e0:60:46:fc:
0d:54:6d:e5:e5:ae:c8:9b:99:ed:e1:5a:0f:c4:e8:
b9:47:2d:78:5d:ac:bc:4c:48:de:8a:0b:d5:62:13:
ca:77:98:c1:c3:45:b7:1b:31:53:4d:99:1d:8c:16:
9a:d7:b6:f4:d9:0e:56:a3:e8:65:2d:a5:c0:ba:64:
c9:d5:dc:6c:8e:a5:8f:5f:ae:cb:87:68:7a:15:1a:
c3:98:1f:ca:24:82:89:2a:dd:4d:5d:a0:1d:32:89:
f3:4c:31:c7:1b:7d:7c:56:72:ea:b5:df:9e:6a:95:
5f:a2:09:83:64:e2:7d:2f:7b:e9:af:b5:ac:4d:e4:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8E:77:FB:7C:F6:11:EC:B4:30:E9:16:99:F3:56:E2:80:C1:18:48
X509v3 Authority Key Identifier:
keyid:14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c1:85:6c:34:bd:04:c4:0d:cf:15:55:0d:cd:12:4f:02:6d:
1e:63:95:a1:02:9a:fa:7b:75:f8:27:09:80:3f:66:3d:86:ec:
e1:3d:ea:a2:49:a9:7c:ec:f3:38:7b:40:2b:e9:9e:bf:2f:ae:
b8:a5:e3:09:5f:de:dc:23:83:54:fb:fc:3a:d2:93:21:a8:83:
7f:d9:58:17:f7:4c:53:76:b0:c0:9c:d4:01:75:81:e0:6d:e5:
59:6b:7c:35:79:ca:98:20:75:c7:85:93:79:ea:25:ad:5e:52:
9a:d7:45:a0:97:d6:81:de:6d:2b:7e:13:ec:dd:6a:a4:63:36:
53:5c:8c:7c:f8:b7:09:b8:39:96:61:63:58:8e:e5:36:0d:f2:
3e:35:33:07:c4:4e:09:93:7a:bf:93:2d:64:bb:ad:80:5f:cf:
30:19:88:b9:bd:79:4c:9b:95:47:56:8a:ce:7f:0f:d7:88:31:
8d:62:b4:4f:45:82:db:52:7b:b8:26:76:df:ca:3a:65:22:00:
c3:fb:77:0b:40:02:9e:25:aa:4c:34:f1:16:df:a9:e8:36:fb:
87:8b:01:6e:e4:cb:5d:76:62:b1:ec:7e:9d:52:49:ef:e0:c0:
a9:c5:c6:a4:08:15:5e:71:27:9e:6b:ff:50:b4:8e:06:eb:66:
66:6e:5a:05
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZdokhMh+EsFyztzqKKuswVCD1ncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRENzg0RDhGMTlGMDBERkJBNEMwODc1NzQ4NTAzMkJF
MDQ2MDNBMzAeFw0yNjA2MTcwMTU1MTJaFw0yNjA2MTgwMzEyMTJaMDMxMTAvBgNV
BAMTKERGOEU3N0ZCN0NGNjExRUNCNDMwRTkxNjk5RjM1NkUyODBDMTE4NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJh7RewW6OK+p9gz0F3wNUXff
MSkPX3blNeC98hdwosd0pfBL+k4yl7y0RND89+OAoLfUWRtzltf7iTBVO95ae4oM
b1CzfW5g6NSvm9dGapSf3Z0GszXo2kysBeO7CEf1A3XIIjPTqgKIFeXtDifrDc1V
+bDkentUwAmGoKYVkXWn4GBG/A1UbeXlrsibme3hWg/E6LlHLXhdrLxMSN6KC9Vi
E8p3mMHDRbcbMVNNmR2MFprXtvTZDlaj6GUtpcC6ZMnV3GyOpY9frsuHaHoVGsOY
H8okgokq3U1doB0yifNMMccbfXxWcuq1355qlV+iCYNk4n0ve+mvtaxN5E1zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3453+3z2Eey0MOkWmfNW4oDBGEgwHwYDVR0j
BBgwFoAUFNeE2PGfAN+6TAh1dIUDK+BGA6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDYwNzQ0YjEtMjUyOS00YWUyLWI1ZDUtNWQ0OTlkM2Y1MmMyLzAvMTRENzg0RDhG
MTlGMDBERkJBNEMwODc1NzQ4NTAzMkJFMDQ2MDNBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNEQ3ODREOEYxOUYwMERGQkE0QzA4NzU3NDg1MDMyQkUwNDYw
M0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1
ZDUtNWQ0OTlkM2Y1MmMyLzAvMTRENzg0RDhGMTlGMDBERkJBNEMwODc1NzQ4NTAz
MkJFMDQ2MDNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIbBhWw0vQTEDc8VVQ3NEk8CbR5jlaECmvp7
dfgnCYA/Zj2G7OE96qJJqXzs8zh7QCvpnr8vrril4wlf3twjg1T7/DrSkyGog3/Z
WBf3TFN2sMCc1AF1geBt5VlrfDV5ypggdceFk3nqJa1eUprXRaCX1oHebSt+E+zd
aqRjNlNcjHz4twm4OZZhY1iO5TYN8j41MwfETgmTer+TLWS7rYBfzzAZiLm9eUyb
lUdWis5/D9eIMY1itE9FgttSe7gmdt/KOmUiAMP7dwtAAp4lqkw08Rbfqeg2+4eL
AW7ky112YrHsfp1SSe/gwKnFxqQIFV5xJ55r/1C0jgbrZmZuWgU=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:42:02 2026 by rpki-client