$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft File: 5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft (raw, json) Hash identifier: Zdk2qdRo5y8H7/s80iE2df8Kv6/SOKXct0pGSBHAeUE= Subject key identifier: 8F:01:46:73:BF:F8:F0:02:A0:BA:27:C8:D9:45:C1:6B:AF:4D:14:8E Authority key identifier: 53:38:90:49:40:BF:82:A8:EF:F3:71:62:A1:BA:E6:B9:1F:CB:67:3C Certificate issuer: /CN=5338904940BF82A8EFF37162A1BAE6B91FCB673C Certificate serial: 34F5E98A67C057B420FD17DDB27A942800A5AD5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft Manifest number: BF Signing time: Mon 21 Sep 2026 17:38:27 +0000 Manifest this update: Mon 21 Sep 2026 17:33:27 +0000 Manifest next update: Tue 22 Sep 2026 19:28:27 +0000 Files and hashes: 1: 5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl (hash: 6MGeLvIHrYykDXAD354rqMpsybkJy8SJql8H/6aALJA=) 2: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: ln/cutFyRprFz8dtBUFO3cjX8Yn8fKNHUiK0Pk7iFOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f5:e9:8a:67:c0:57:b4:20:fd:17:dd:b2:7a:94:28:00:a5:ad:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5338904940BF82A8EFF37162A1BAE6B91FCB673C Validity Not Before: Sep 21 17:33:27 2026 GMT Not After : Sep 22 19:28:27 2026 GMT Subject: CN=8F014673BFF8F002A0BA27C8D945C16BAF4D148E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:ab:98:5b:e7:6e:3d:bf:e6:ea:97:73:0f: 5b:ce:1c:bf:09:78:c3:7e:00:0e:a2:e1:1c:49:93: be:65:ee:a5:25:dc:8c:11:4e:87:e8:98:8a:35:45: 49:17:f9:90:f7:bc:1f:59:b9:68:d3:d3:7a:1c:82: 63:39:65:03:c5:bf:7c:d8:aa:33:86:fa:ef:3b:e4: 6c:1a:f4:25:51:12:05:64:01:56:71:a5:a4:43:a3: 20:d0:0f:ec:1d:93:b7:5f:dc:38:6f:f0:d2:2b:63: a9:7c:83:d6:fc:48:66:5f:45:81:fe:33:9d:74:e4: d2:60:fa:b1:04:5e:c3:25:99:16:ed:63:48:d3:eb: 54:34:0a:67:02:e7:00:3e:d4:1f:18:2f:81:c8:53: 8f:53:95:d1:4e:c7:7c:f2:e7:49:60:e1:4a:81:78: 33:e5:a8:b7:e5:0c:9d:07:a1:c2:61:51:5c:95:bb: de:fd:bf:ff:18:55:b8:6f:0e:77:be:54:b8:0a:0b: 3d:2d:e8:8b:d7:ee:55:01:a6:6c:ba:27:91:08:53: b3:44:f7:62:88:1a:a7:a8:9e:0c:02:28:9b:b6:05: 83:82:f6:2c:50:9f:57:1b:3b:09:ec:7d:1d:c2:02: f6:9d:77:ba:59:ad:19:bb:38:27:dd:ab:90:89:01: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:01:46:73:BF:F8:F0:02:A0:BA:27:C8:D9:45:C1:6B:AF:4D:14:8E X509v3 Authority Key Identifier: keyid:53:38:90:49:40:BF:82:A8:EF:F3:71:62:A1:BA:E6:B9:1F:CB:67:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:43:02:49:9d:76:59:6a:d8:4d:8a:89:f7:55:67:69:b7:6a: 53:79:22:d0:20:97:26:1c:08:0f:52:ca:43:c5:43:27:47:a1: 49:7b:b0:c3:26:47:69:69:8d:d0:3c:37:d4:b6:61:19:4c:bc: 03:67:e5:d2:e7:a7:c7:4e:5c:81:cb:92:26:b3:a0:cb:3a:40: ac:e4:32:aa:08:09:bf:cb:c2:03:c8:3f:86:18:7e:de:c7:ef: 81:d3:c9:c2:46:c3:81:83:c8:1c:af:d5:90:4e:1c:b0:71:de: e6:d8:21:a4:7c:72:27:ec:23:17:0e:f4:f3:6b:50:90:5f:b4: e5:ce:8b:69:c0:fa:97:92:e0:69:e8:16:18:14:17:e3:8e:89: 87:40:3a:d8:84:e7:f8:02:ae:f9:2f:d6:f6:66:50:f8:cd:0c: dd:2a:bd:aa:1d:68:bf:9a:45:a3:8f:f2:cd:11:be:cf:7e:58: da:f2:cb:8b:f5:98:22:34:5f:77:a9:aa:00:b7:a4:52:f3:97: a7:c2:1f:a8:18:b3:c0:ee:3f:c9:cc:87:ce:37:8c:95:ce:b6: 9d:17:7f:01:83:36:51:53:58:a0:66:9d:01:bc:06:71:a5:78: 86:35:18:3a:67:2e:84:77:bf:05:aa:43:d0:63:b8:3a:ee:13: db:45:38:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPXpimfAV7Qg/RfdsnqUKAClrVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzODkwNDk0MEJGODJBOEVGRjM3MTYyQTFCQUU2Qjkx RkNCNjczQzAeFw0yNjA5MjExNzMzMjdaFw0yNjA5MjIxOTI4MjdaMDMxMTAvBgNV BAMTKDhGMDE0NjczQkZGOEYwMDJBMEJBMjdDOEQ5NDVDMTZCQUY0RDE0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavKuYW+duPb/m6pdzD1vOHL8J eMN+AA6i4RxJk75l7qUl3IwRTofomIo1RUkX+ZD3vB9ZuWjT03ocgmM5ZQPFv3zY qjOG+u875Gwa9CVREgVkAVZxpaRDoyDQD+wdk7df3Dhv8NIrY6l8g9b8SGZfRYH+ M5105NJg+rEEXsMlmRbtY0jT61Q0CmcC5wA+1B8YL4HIU49TldFOx3zy50lg4UqB eDPlqLflDJ0HocJhUVyVu979v/8YVbhvDne+VLgKCz0t6IvX7lUBpmy6J5EIU7NE 92KIGqeongwCKJu2BYOC9ixQn1cbOwnsfR3CAvadd7pZrRm7OCfdq5CJAdHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjwFGc7/48AKguifI2UXBa69NFI4wHwYDVR0j BBgwFoAUUziQSUC/gqjv83FiobrmuR/LZzwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzEvNTMzODkwNDk0 MEJGODJBOEVGRjM3MTYyQTFCQUU2QjkxRkNCNjczQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzM4OTA0OTQwQkY4MkE4RUZGMzcxNjJBMUJBRTZCOTFGQ0I2 NzNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzEvNTMzODkwNDk0MEJGODJBOEVGRjM3MTYyQTFCQUU2 QjkxRkNCNjczQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJDAkmddllq2E2KifdVZ2m3alN5ItAglyYc CA9SykPFQydHoUl7sMMmR2lpjdA8N9S2YRlMvANn5dLnp8dOXIHLkiazoMs6QKzk MqoICb/LwgPIP4YYft7H74HTycJGw4GDyByv1ZBOHLBx3ubYIaR8cifsIxcO9PNr UJBftOXOi2nA+peS4GnoFhgUF+OOiYdAOtiE5/gCrvkv1vZmUPjNDN0qvaodaL+a RaOP8s0Rvs9+WNryy4v1mCI0X3epqgC3pFLzl6fCH6gYs8DuP8nMh843jJXOtp0X fwGDNlFTWKBmnQG8BnGleIY1GDpnLoR3vwWqQ9BjuDruE9tFON8= -----END CERTIFICATE-----Generated at Tue Sep 22 13:33:48 2026 by rpki-client