$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft File: 2E714C194A9AD07684B017C191F12805054E1FC8.mft (raw, json) Hash identifier: ZwjAmorUzeI/aOKzYGVRD3V33nUDxBs4XB0lS7A68KA= Subject key identifier: 39:9D:1B:F6:73:98:3A:A0:47:FD:0A:70:C4:E3:A3:A5:20:61:FF:EA Authority key identifier: 2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 Certificate issuer: /CN=2E714C194A9AD07684B017C191F12805054E1FC8 Certificate serial: 5D509B63D86E43A64B6B6335E7A02CA95725EF15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:56:29 +0000 Manifest this update: Sun 20 Sep 2026 23:51:29 +0000 Manifest next update: Tue 22 Sep 2026 00:46:29 +0000 Files and hashes: 1: 2E714C194A9AD07684B017C191F12805054E1FC8.crl (hash: 2IJkWQYY+2c23DrlUzq/s6N+g/Kux+2cpWNcten0TK8=) 2: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: pi7opShYJXpPoFXhyGT9aMrMLC59BMPBUsNaZoHvFnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:50:9b:63:d8:6e:43:a6:4b:6b:63:35:e7:a0:2c:a9:57:25:ef:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E714C194A9AD07684B017C191F12805054E1FC8 Validity Not Before: Sep 20 23:51:29 2026 GMT Not After : Sep 22 00:46:29 2026 GMT Subject: CN=399D1BF673983AA047FD0A70C4E3A3A52061FFEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:da:57:3f:9f:3e:af:ca:de:f9:01:91:92: 4f:fe:9f:05:b1:09:36:b5:34:54:a6:86:7a:a7:25: ba:74:90:2c:9e:ef:ab:e1:e8:e6:f3:18:14:22:d9: ce:ef:3d:f5:0e:8f:46:a9:82:0a:5f:9b:83:a0:5c: 3e:63:83:cf:50:ab:2d:2e:b0:7f:d2:65:aa:24:03: 8d:dc:3f:f7:33:e0:31:c5:cd:ab:9a:c8:67:ee:df: 68:4a:8d:74:da:fa:61:75:07:fd:cb:c2:3a:5f:57: 2d:5a:0d:99:d1:33:3b:ae:29:8a:32:cc:2e:0b:d1: 2f:3b:36:16:05:a0:1a:cc:c2:87:ce:b9:cb:34:41: c8:7f:9e:11:5b:88:7b:1b:6d:76:3f:4c:1f:08:2c: 35:13:c2:fa:fa:c0:f5:cb:0a:10:e4:d1:fd:6e:4b: 61:9b:b0:ec:cf:7b:d1:8a:25:94:00:76:80:1f:e0: f2:68:e3:68:b8:a1:e7:e2:7e:27:2f:9b:53:7a:67: 38:d0:9a:75:b3:d6:5e:57:33:97:8e:e4:54:48:02: bf:e5:b2:0c:78:ad:bd:00:4d:bb:c7:4e:1b:c9:ff: 38:ce:1b:59:7e:b3:79:75:88:de:5e:70:4b:32:8a: 81:72:18:73:5c:61:5f:a9:73:07:2a:77:72:76:34: 9a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9D:1B:F6:73:98:3A:A0:47:FD:0A:70:C4:E3:A3:A5:20:61:FF:EA X509v3 Authority Key Identifier: keyid:2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a8:35:67:e0:b0:92:15:30:34:4f:bc:b9:8a:0e:38:7f:ee: 0f:47:24:c0:a3:bd:97:db:11:bd:0d:cb:8a:1b:f0:62:80:ce: 5c:2d:25:db:8e:84:30:b7:ca:a6:f1:d2:37:f5:bf:3e:b4:32: ea:5a:af:ff:a8:81:5c:66:12:80:00:f8:c6:24:6f:6d:fd:95: 5e:7c:ad:ee:5b:af:38:87:67:b2:22:f2:a8:9a:29:39:2d:a1: 29:f3:0a:6a:92:9e:eb:bc:db:eb:9f:38:ac:a7:31:81:b2:7f: 54:32:bc:31:1f:6e:4b:96:9f:16:ce:b2:3e:a5:a4:99:8c:53: e7:68:d8:e8:cd:8d:bc:d4:6b:22:52:f7:86:5c:b0:ff:1e:0c: 87:c6:fd:a0:bb:39:13:b9:ec:10:68:cc:9e:85:d9:5f:bf:31: 57:9e:9b:49:e0:8f:44:fc:ea:74:9a:45:a2:50:8a:1f:03:0e: 2a:2d:e7:b0:9e:52:b9:75:e6:06:0e:21:55:a0:db:2e:5c:d8: fe:1a:81:dd:23:99:0f:69:dd:ac:79:f3:da:35:fb:54:76:93: 5a:2f:e9:89:b1:d7:87:32:46:10:c5:a9:89:e8:8a:30:ab:bf: 9a:bd:88:4e:38:50:8c:ec:08:89:9e:6a:86:98:ae:19:57:eb: fc:65:8e:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVCbY9huQ6ZLa2M156AsqVcl7xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUw NTRFMUZDODAeFw0yNjA5MjAyMzUxMjlaFw0yNjA5MjIwMDQ2MjlaMDMxMTAvBgNV BAMTKDM5OUQxQkY2NzM5ODNBQTA0N0ZEMEE3MEM0RTNBM0E1MjA2MUZGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8dpXP58+r8re+QGRkk/+nwWx CTa1NFSmhnqnJbp0kCye76vh6ObzGBQi2c7vPfUOj0apggpfm4OgXD5jg89Qqy0u sH/SZaokA43cP/cz4DHFzauayGfu32hKjXTa+mF1B/3LwjpfVy1aDZnRMzuuKYoy zC4L0S87NhYFoBrMwofOucs0Qch/nhFbiHsbbXY/TB8ILDUTwvr6wPXLChDk0f1u S2GbsOzPe9GKJZQAdoAf4PJo42i4oefificvm1N6ZzjQmnWz1l5XM5eO5FRIAr/l sgx4rb0ATbvHThvJ/zjOG1l+s3l1iN5ecEsyioFyGHNcYV+pcwcqd3J2NJrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZ0b9nOYOqBH/QpwxOOjpSBh/+owHwYDVR0j BBgwFoAULnFMGUqa0HaEsBfBkfEoBQVOH8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NiM2IwMGItYWQ3Yi00ODQ5LWIwYjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0 QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUwNTRFMUZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTcxNEMxOTRBOUFEMDc2ODRCMDE3QzE5MUYxMjgwNTA1NEUx RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4 MDUwNTRFMUZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2oNWfgsJIVMDRPvLmKDjh/7g9HJMCjvZfb Eb0Ny4ob8GKAzlwtJduOhDC3yqbx0jf1vz60Mupar/+ogVxmEoAA+MYkb239lV58 re5brziHZ7Ii8qiaKTktoSnzCmqSnuu82+ufOKynMYGyf1QyvDEfbkuWnxbOsj6l pJmMU+do2OjNjbzUayJS94ZcsP8eDIfG/aC7ORO57BBozJ6F2V+/MVeem0ngj0T8 6nSaRaJQih8DDiot57CeUrl15gYOIVWg2y5c2P4agd0jmQ9p3ax589o1+1R2k1ov 6Ymx14cyRhDFqYnoijCrv5q9iE44UIzsCImeaoaYrhlX6/xljuY= -----END CERTIFICATE-----Generated at Mon Sep 21 17:34:24 2026 by rpki-client