$ rpki-client -vvvf rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft File: D14C74B06D9A4D3A47662DA76625CD3537D00471.mft (raw, json) Hash identifier: lckT8tGA+mto5nKlILrvMX/sCMrE04+RWwZCupbvb+s= Subject key identifier: A1:D1:9B:8A:E0:BF:5C:01:36:2C:A1:30:D4:E3:11:8C:B8:E6:B4:31 Authority key identifier: D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 Certificate issuer: /CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Certificate serial: 3A626BB14855FD43A5A849144A13A698FA13B68E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:16:53 +0000 Manifest this update: Mon 21 Sep 2026 00:11:53 +0000 Manifest next update: Tue 22 Sep 2026 03:57:53 +0000 Files and hashes: 1: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: x+7pzkIkAAYum6CK13j4jNfXi0Fn68V8sWzEUq8++EQ=) 2: D14C74B06D9A4D3A47662DA76625CD3537D00471.crl (hash: BqjaT1nVqDPapbK45III6346K7v1//7SsaUp85fldV4=) 3: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: juHK8q2FxwMCfB0XDh4dieyd+WbhEL+tRuypaniEX8M=) 4: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: sR5YvjfokmmdEnTZTCAPYVCi8TZ9C5R9A7CXeqBE8Bo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:62:6b:b1:48:55:fd:43:a5:a8:49:14:4a:13:a6:98:fa:13:b6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Validity Not Before: Sep 21 00:11:53 2026 GMT Not After : Sep 22 03:57:53 2026 GMT Subject: CN=A1D19B8AE0BF5C01362CA130D4E3118CB8E6B431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:77:8e:ca:8a:57:e2:18:cf:ab:9c:74:0f:bf: 80:db:0f:04:12:77:4a:b3:07:f3:dc:3b:65:91:3d: ea:12:6b:f6:f9:82:1d:7b:b5:a6:f1:fc:cd:85:b6: ee:c5:86:b2:15:c2:c8:8f:69:48:fe:ae:40:1f:57: 79:ee:c1:30:dc:5d:b4:68:54:84:f1:89:d3:53:66: 5d:78:a3:eb:2c:7e:e9:dc:fa:c8:b4:ff:b1:4c:1f: b2:b9:d0:3d:84:ea:29:86:82:0b:07:93:07:92:0f: 20:de:d9:97:b1:1a:62:5f:37:fa:1a:ec:f6:ee:77: 01:1b:2e:43:fb:1d:77:7e:46:15:72:35:7f:63:7b: f9:29:11:85:20:8a:1e:b6:4d:e2:a7:6c:eb:29:94: 44:d4:08:dc:0c:bb:95:84:6b:75:07:92:1d:2f:1f: e5:81:d2:c6:12:3f:b5:c6:7f:dd:e8:5c:85:da:c3: de:72:41:1b:b6:27:f8:61:d0:b7:c8:09:ef:53:e7: f5:df:33:5f:20:80:58:15:49:41:c3:66:9f:97:7c: 32:3d:17:22:c8:a6:c5:5b:6a:12:65:a0:8a:23:4b: 9a:a1:26:e7:fa:c1:00:cf:a8:52:8c:9e:b8:05:33: 22:cf:31:a5:2e:e8:95:39:33:00:49:44:df:58:20: d8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D1:9B:8A:E0:BF:5C:01:36:2C:A1:30:D4:E3:11:8C:B8:E6:B4:31 X509v3 Authority Key Identifier: keyid:D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:68:1e:e0:f7:06:aa:bf:3b:ae:1e:91:f7:f2:25:dc:2c:e2: 57:55:a6:22:8d:07:c4:02:28:7b:3f:39:aa:8d:37:cd:f0:af: 3c:50:d2:0c:fd:3a:85:3e:19:f0:ca:a3:b7:2a:29:01:1a:11: 51:61:81:b7:69:cd:95:8e:36:93:05:fd:50:b0:13:72:60:4c: d5:db:bd:2a:17:fb:32:b9:93:5e:64:1f:f4:31:08:93:84:10: bb:08:81:43:57:e6:35:65:93:4d:90:79:8b:4f:2c:c4:ab:53: f9:ce:c2:a0:a5:3b:27:28:68:2b:bc:78:38:ff:8a:ff:3f:01: 68:99:5a:2a:b2:ac:b1:7d:67:e6:0c:1e:8c:d4:36:df:e6:55: 01:43:3f:f6:0e:d7:a0:38:2f:89:bb:e8:80:f4:11:27:33:5e: b8:f0:9d:33:ed:c8:b7:d4:85:83:4f:01:a2:ae:8c:7d:aa:a8: 2f:33:72:b5:80:af:b7:3a:4d:82:f6:ad:96:c7:5a:2c:15:ad: 12:16:8c:00:4c:39:8b:c7:a2:db:66:a9:bf:6b:45:85:75:6a: 6e:c0:ea:09:ae:6f:f2:eb:73:f8:98:97:d3:98:89:3f:88:76: 7e:d7:67:ea:3f:ed:17:07:bb:6b:eb:51:f1:fe:a0:24:6f:ef: a4:13:8c:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmJrsUhV/UOlqEkUShOmmPoTto4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUz N0QwMDQ3MTAeFw0yNjA5MjEwMDExNTNaFw0yNjA5MjIwMzU3NTNaMDMxMTAvBgNV BAMTKEExRDE5QjhBRTBCRjVDMDEzNjJDQTEzMEQ0RTMxMThDQjhFNkI0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtd47KilfiGM+rnHQPv4DbDwQS d0qzB/PcO2WRPeoSa/b5gh17tabx/M2Ftu7FhrIVwsiPaUj+rkAfV3nuwTDcXbRo VITxidNTZl14o+ssfunc+si0/7FMH7K50D2E6imGggsHkweSDyDe2ZexGmJfN/oa 7PbudwEbLkP7HXd+RhVyNX9je/kpEYUgih62TeKnbOsplETUCNwMu5WEa3UHkh0v H+WB0sYSP7XGf93oXIXaw95yQRu2J/hh0LfICe9T5/XfM18ggFgVSUHDZp+XfDI9 FyLIpsVbahJloIojS5qhJuf6wQDPqFKMnrgFMyLPMaUu6JU5MwBJRN9YINgrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUodGbiuC/XAE2LKEw1OMRjLjmtDEwHwYDVR0j BBgwFoAU0Ux0sG2aTTpHZi2nZiXNNTfQBHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzYyYmFjYzktZDI1ZC00NjEwLWFlZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2 RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUzN0QwMDQ3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMTRDNzRCMDZEOUE0RDNBNDc2NjJEQTc2NjI1Q0QzNTM3RDAw NDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNE MzUzN0QwMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJoHuD3Bqq/O64ekffyJdws4ldVpiKNB8QC KHs/OaqNN83wrzxQ0gz9OoU+GfDKo7cqKQEaEVFhgbdpzZWONpMF/VCwE3JgTNXb vSoX+zK5k15kH/QxCJOEELsIgUNX5jVlk02QeYtPLMSrU/nOwqClOycoaCu8eDj/ iv8/AWiZWiqyrLF9Z+YMHozUNt/mVQFDP/YO16A4L4m76ID0ESczXrjwnTPtyLfU hYNPAaKujH2qqC8zcrWAr7c6TYL2rZbHWiwVrRIWjABMOYvHottmqb9rRYV1am7A 6gmub/Lrc/iYl9OYiT+Idn7XZ+o/7RcHu2vrUfH+oCRv76QTjC8= -----END CERTIFICATE-----Generated at Mon Sep 21 13:25:10 2026 by rpki-client