$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft File: 14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft (raw, json) Hash identifier: e6QMaysQAfXbzzyB9BH08aInoE7qSFqDhYgLisagpWI= Subject key identifier: 2D:3D:74:3B:A9:CB:90:32:3C:06:29:74:DA:BC:A0:1E:05:D9:1A:0D Authority key identifier: 14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9 Certificate issuer: /CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9 Certificate serial: 6C469FC0026BE04497D762222C2FAA3D0D6EF6E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:57:34 +0000 Manifest this update: Mon 21 Sep 2026 08:52:34 +0000 Manifest next update: Tue 22 Sep 2026 09:18:34 +0000 Files and hashes: 1: 14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl (hash: 0Dg5G7RKBNdtj1hwEdAx8LtxpFmnjW4nuZtrAmyhf1g=) 2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: EJ6cvXJ/T86AFVCQoEqikidmMKscKfWsdPHD8vPB1Oc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:46:9f:c0:02:6b:e0:44:97:d7:62:22:2c:2f:aa:3d:0d:6e:f6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9 Validity Not Before: Sep 21 08:52:34 2026 GMT Not After : Sep 22 09:18:34 2026 GMT Subject: CN=2D3D743BA9CB90323C062974DABCA01E05D91A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:97:37:0a:e9:07:24:3c:08:e9:2a:91:65: a4:74:f6:7d:a7:4b:ae:12:bb:3c:de:04:ab:68:20: 2c:99:03:17:1f:07:d5:81:6f:37:f8:26:25:be:9c: a0:cc:b5:ac:72:d4:f0:6b:58:eb:6b:b0:22:3b:05: d9:3c:33:ab:a0:20:11:0e:9e:f8:64:53:fd:87:c8: cd:72:99:7a:6a:71:db:49:e7:24:8a:88:68:8c:18: 8b:92:20:34:64:55:1e:0d:c6:99:1e:33:e2:ca:e8: 28:0a:3f:82:f7:22:d3:4b:a0:31:3e:b0:9f:e5:ab: e9:c3:e7:a8:26:0b:bc:74:f4:48:29:ff:02:90:e8: 6e:24:30:1d:15:61:15:59:77:dd:1e:4b:fc:0c:f7: d7:54:b4:73:f7:93:49:61:7c:1e:39:b6:e8:2a:a8: d1:1b:0f:69:e7:99:a1:48:b5:0a:23:d7:f2:4f:f3: 6d:db:da:c0:36:a8:05:f2:e0:2a:f0:1d:ee:5a:61: 5e:f3:02:87:e4:d1:5c:fa:8d:9d:d8:fa:c5:87:79: 64:09:ff:04:03:20:53:21:a5:c1:7d:8e:f1:54:6c: 25:19:1a:62:92:73:15:e7:1a:55:b7:8e:07:1b:df: c7:7e:a0:ce:a7:0e:78:af:ce:00:b2:c1:bc:c3:7d: c5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3D:74:3B:A9:CB:90:32:3C:06:29:74:DA:BC:A0:1E:05:D9:1A:0D X509v3 Authority Key Identifier: keyid:14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:30:13:24:37:77:1f:a5:48:af:6f:19:6b:72:38:a1:a5:b2: 93:21:b6:0c:18:86:c3:cc:62:45:14:c2:87:53:e7:4f:2b:42: 99:73:83:b6:4d:f5:6d:7c:36:b3:55:20:a7:5d:d3:77:ab:05: 86:63:e6:5d:28:21:d0:39:54:ff:91:eb:a6:16:23:24:f0:ac: d7:be:50:89:6a:19:f9:3c:4d:12:4d:cd:17:62:43:0e:94:85: a1:83:88:18:08:a2:f9:6d:ac:52:f6:4c:58:0f:b7:1a:32:8e: 68:09:a3:70:60:a8:0c:d0:bf:c2:3b:60:b1:d8:bc:32:d1:85: 22:89:1f:1f:6b:07:55:68:7b:16:3a:8a:0d:45:b4:52:9e:29: 36:03:29:51:14:05:d8:d9:78:1d:d4:62:3e:29:77:cd:e1:92: 2b:7e:17:48:bb:52:3f:b9:04:c8:eb:3f:f0:2a:24:ca:1a:a1: 79:7c:a9:30:b6:da:e4:1f:3b:7e:67:f5:77:0a:77:ea:27:ed: 88:f7:5f:12:fd:e2:8e:5a:c8:9d:01:72:21:db:81:e2:a1:7b: a8:35:75:1c:94:24:71:0e:71:c9:e8:7e:29:09:6a:27:ac:51: dc:52:17:30:24:17:72:11:da:30:20:ee:12:6a:bc:0f:4c:37: f0:07:ab:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEafwAJr4ESX12IiLC+qPQ1u9uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQzODRBNzdGQzFFMDNCQUJBQThEQjZFOTVGOTc5QjA4 RDE2REFCOTAeFw0yNjA5MjEwODUyMzRaFw0yNjA5MjIwOTE4MzRaMDMxMTAvBgNV BAMTKDJEM0Q3NDNCQTlDQjkwMzIzQzA2Mjk3NERBQkNBMDFFMDVEOTFBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3Jc3CukHJDwI6SqRZaR09n2n S64SuzzeBKtoICyZAxcfB9WBbzf4JiW+nKDMtaxy1PBrWOtrsCI7Bdk8M6ugIBEO nvhkU/2HyM1ymXpqcdtJ5ySKiGiMGIuSIDRkVR4NxpkeM+LK6CgKP4L3ItNLoDE+ sJ/lq+nD56gmC7x09Egp/wKQ6G4kMB0VYRVZd90eS/wM99dUtHP3k0lhfB45tugq qNEbD2nnmaFItQoj1/JP823b2sA2qAXy4CrwHe5aYV7zAofk0Vz6jZ3Y+sWHeWQJ /wQDIFMhpcF9jvFUbCUZGmKScxXnGlW3jgcb38d+oM6nDnivzgCywbzDfcXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULT10O6nLkDI8Bil02rygHgXZGg0wHwYDVR0j BBgwFoAUFDhKd/weA7q6qNtulfl5sI0W2rkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDczMmYxOTEtZTM4MC00MDEzLWJjZTUtNDIxNWE0OTNhNzFkLzAvMTQzODRBNzdG QzFFMDNCQUJBQThEQjZFOTVGOTc5QjA4RDE2REFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDM4NEE3N0ZDMUUwM0JBQkFBOERCNkU5NUY5NzlCMDhEMTZE QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvMTQzODRBNzdGQzFFMDNCQUJBQThEQjZFOTVGOTc5 QjA4RDE2REFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEwEyQ3dx+lSK9vGWtyOKGlspMhtgwYhsPM YkUUwodT508rQplzg7ZN9W18NrNVIKdd03erBYZj5l0oIdA5VP+R66YWIyTwrNe+ UIlqGfk8TRJNzRdiQw6UhaGDiBgIovltrFL2TFgPtxoyjmgJo3BgqAzQv8I7YLHY vDLRhSKJHx9rB1VoexY6ig1FtFKeKTYDKVEUBdjZeB3UYj4pd83hkit+F0i7Uj+5 BMjrP/AqJMoaoXl8qTC22uQfO35n9XcKd+on7Yj3XxL94o5ayJ0BciHbgeKhe6g1 dRyUJHEOccnofikJaiesUdxSFzAkF3IR2jAg7hJqvA9MN/AHq9I= -----END CERTIFICATE-----Generated at Mon Sep 21 17:51:25 2026 by rpki-client