$ rpki-client -vvvf rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft File: 14D784D8F19F00DFBA4C08757485032BE04603A3.mft (raw, json) Hash identifier: UUYKS4oH50PWRrIPo6zcfb08zE38oM7AYC3lraEWVXY= Subject key identifier: C8:62:97:8C:21:F5:E9:B9:3F:53:A5:E0:1D:78:CA:82:56:DE:C3:22 Authority key identifier: 14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3 Certificate issuer: /CN=14D784D8F19F00DFBA4C08757485032BE04603A3 Certificate serial: 27CF38D916BF1772864421CB9FF93B4BF17DB449 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:27:08 +0000 Manifest this update: Mon 21 Sep 2026 04:22:08 +0000 Manifest next update: Tue 22 Sep 2026 07:51:08 +0000 Files and hashes: 1: 14D784D8F19F00DFBA4C08757485032BE04603A3.crl (hash: GoSjN1u5U9yZJ/lSc/fjOyHzZlgNPdNWNBz5SzOJVGs=) 2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: 4CcWucwvFiUbV7yGD9jF0QOdXA3+eK3AiJ4whM9p04M=) 3: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: rA6w7AOgQeO/23WQ9WTNvbNDGzSTa/seU2ViAzbcvrs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cf:38:d9:16:bf:17:72:86:44:21:cb:9f:f9:3b:4b:f1:7d:b4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14D784D8F19F00DFBA4C08757485032BE04603A3 Validity Not Before: Sep 21 04:22:08 2026 GMT Not After : Sep 22 07:51:08 2026 GMT Subject: CN=C862978C21F5E9B93F53A5E01D78CA8256DEC322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:38:eb:bb:15:98:56:a0:23:c7:0d:1b:de: 39:d0:cf:2c:b4:ef:ab:58:ba:cf:59:ff:52:67:f8: 50:c6:64:10:1c:1d:c6:3b:ce:ea:30:d6:28:53:89: 40:96:69:34:cf:34:7c:b6:42:cb:d2:9f:e5:cd:8f: 7e:ff:05:8e:34:d4:8c:e0:41:10:ec:cb:74:f0:df: 8e:0e:00:33:f8:31:7e:ca:0d:a2:1c:19:db:82:4e: dc:cf:be:eb:dd:5e:f0:4e:d1:12:4a:52:0c:46:e9: 7e:23:d1:88:ae:67:7d:2e:99:fb:ca:c9:69:e1:b9: 1d:74:b9:69:bf:56:ae:62:8c:33:78:23:f1:2b:a8: be:37:0b:a5:ec:ec:99:0a:cb:13:cc:83:e0:a5:4a: 8a:ff:bb:0e:ae:e9:cc:1b:07:ae:2e:9c:fd:30:f4: 00:2c:db:5d:3a:2c:99:d9:52:0c:67:ca:76:f5:43: af:2f:27:73:f1:60:33:2b:85:fa:5f:d0:fe:c4:9d: fb:a7:9e:a4:8f:3d:15:f3:94:98:1c:41:17:77:3e: d0:96:6e:eb:24:36:99:77:95:44:1d:8a:3e:c1:ab: 68:2d:3e:97:38:f4:56:9c:aa:3f:af:a9:a6:ef:56: 04:2e:91:e3:84:d3:4b:d8:1f:c3:24:3e:2c:2a:f6: 92:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:62:97:8C:21:F5:E9:B9:3F:53:A5:E0:1D:78:CA:82:56:DE:C3:22 X509v3 Authority Key Identifier: keyid:14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6f:cb:be:ea:48:b8:62:78:96:29:e2:6c:3d:1f:76:2d:66: 8c:19:93:f4:82:56:4d:63:d6:5c:5f:b6:9d:4b:b5:3b:44:63: 88:7f:5b:88:f9:c1:0b:5e:8f:bd:08:6c:f0:18:fa:a4:30:c0: 71:4d:eb:cd:9d:9d:8e:c7:3b:7d:7a:47:d4:be:6e:3a:57:cf: 09:b1:76:36:09:e1:d1:6c:34:ea:82:5f:51:cc:45:bb:f6:e8: cd:e5:cc:d5:af:85:22:10:14:f4:68:de:b6:2e:38:c9:e7:e5: ef:bf:8f:a5:a5:27:ab:3e:f0:ec:93:80:c0:fe:6c:a0:f3:64: 05:6c:d3:ad:ac:f9:85:4a:ac:c2:a7:16:11:86:82:60:69:70: a9:8e:f4:ce:50:36:5c:8e:af:e8:64:85:4c:f0:57:9d:c5:5c: 06:46:e7:02:1a:51:1e:8d:7a:6f:10:88:eb:c8:7a:13:33:c6: 59:27:81:0c:fd:e4:25:33:dc:63:b0:f4:da:6c:ee:c0:12:3e: 5f:e1:89:45:57:43:be:5d:45:92:ab:7b:3a:4e:9b:be:ca:85: fc:19:e8:10:5f:be:5c:36:89:d6:45:e3:12:fc:23:0c:ce:90: 5d:5d:73:74:8e:fc:83:15:c0:cd:99:a2:f7:b8:39:d1:75:ba: cc:d0:27:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8842Ra/F3KGRCHLn/k7S/F9tEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRENzg0RDhGMTlGMDBERkJBNEMwODc1NzQ4NTAzMkJF MDQ2MDNBMzAeFw0yNjA5MjEwNDIyMDhaFw0yNjA5MjIwNzUxMDhaMDMxMTAvBgNV BAMTKEM4NjI5NzhDMjFGNUU5QjkzRjUzQTVFMDFENzhDQTgyNTZERUMzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaDjruxWYVqAjxw0b3jnQzyy0 76tYus9Z/1Jn+FDGZBAcHcY7zuow1ihTiUCWaTTPNHy2QsvSn+XNj37/BY401Izg QRDsy3Tw344OADP4MX7KDaIcGduCTtzPvuvdXvBO0RJKUgxG6X4j0YiuZ30umfvK yWnhuR10uWm/Vq5ijDN4I/ErqL43C6Xs7JkKyxPMg+ClSor/uw6u6cwbB64unP0w 9AAs2106LJnZUgxnynb1Q68vJ3PxYDMrhfpf0P7EnfunnqSPPRXzlJgcQRd3PtCW buskNpl3lUQdij7Bq2gtPpc49Facqj+vqabvVgQukeOE00vYH8MkPiwq9pJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyGKXjCH16bk/U6XgHXjKglbewyIwHwYDVR0j BBgwFoAUFNeE2PGfAN+6TAh1dIUDK+BGA6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYwNzQ0YjEtMjUyOS00YWUyLWI1ZDUtNWQ0OTlkM2Y1MmMyLzAvMTRENzg0RDhG MTlGMDBERkJBNEMwODc1NzQ4NTAzMkJFMDQ2MDNBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNEQ3ODREOEYxOUYwMERGQkE0QzA4NzU3NDg1MDMyQkUwNDYw M0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvMTRENzg0RDhGMTlGMDBERkJBNEMwODc1NzQ4NTAz MkJFMDQ2MDNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhvy77qSLhieJYp4mw9H3YtZowZk/SCVk1j 1lxftp1LtTtEY4h/W4j5wQtej70IbPAY+qQwwHFN682dnY7HO316R9S+bjpXzwmx djYJ4dFsNOqCX1HMRbv26M3lzNWvhSIQFPRo3rYuOMnn5e+/j6WlJ6s+8OyTgMD+ bKDzZAVs062s+YVKrMKnFhGGgmBpcKmO9M5QNlyOr+hkhUzwV53FXAZG5wIaUR6N em8QiOvIehMzxlkngQz95CUz3GOw9Nps7sASPl/hiUVXQ75dRZKrezpOm77KhfwZ 6BBfvlw2idZF4xL8IwzOkF1dc3SO/IMVwM2Zove4OdF1uszQJxA= -----END CERTIFICATE-----Generated at Mon Sep 21 14:29:31 2026 by rpki-client