$ rpki-client -vvvf rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft File: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft (raw, json) Hash identifier: qp2Bh+exaMwyippM5bwIUhoKAtg2aQEKq7jbnzqgd34= Subject key identifier: 27:3B:FC:14:D2:56:20:AF:BD:7A:31:89:73:26:88:42:A8:0B:86:3E Authority key identifier: 31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 Certificate issuer: /CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Certificate serial: 298D80F568E7D55CF18EE8C5C020B887CB9B3362 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:17:59 +0000 Manifest this update: Mon 21 Sep 2026 09:12:59 +0000 Manifest next update: Tue 22 Sep 2026 09:24:59 +0000 Files and hashes: 1: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: FR/6TdAfo1P3iR6uXvmbo5xbGJoxQcFRkSBLcjXonAU=) 2: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl (hash: AalD/HiViTKjAcAEl7w8z/PqhveslVLQAoFFJBR2SIM=) 3: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: Q63O5LgByYAATkaug4pVt8bzE+ZHKwWLFzPYd2unh+E=) 4: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: KtHFgiZtCU/Oo5xwU2fpqeHLtCGkwIQI7UNolZenHzM=) 5: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: JHt7Y4sfZDXhljzVs+do4tcZibHDOYboGApg1o5d8oY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8d:80:f5:68:e7:d5:5c:f1:8e:e8:c5:c0:20:b8:87:cb:9b:33:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Validity Not Before: Sep 21 09:12:59 2026 GMT Not After : Sep 22 09:24:59 2026 GMT Subject: CN=273BFC14D25620AFBD7A318973268842A80B863E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:fb:62:99:39:af:cd:8e:9b:6f:73:24:e4: 38:6d:b8:d8:55:a8:5b:f6:16:2e:3d:23:7f:49:24: 56:aa:25:af:cb:3f:98:54:4f:c3:9c:b0:be:5a:f0: b9:ce:ac:b0:8b:07:f3:cd:f9:ca:ad:84:60:0c:93: 67:53:57:e3:ba:5d:0a:91:9e:12:a7:ef:1c:16:6d: 75:ed:d4:6d:06:84:2e:14:5c:ab:9f:6a:ad:e9:6c: 56:e9:2e:4d:2c:76:9f:b6:ec:9c:07:63:79:dc:72: f6:46:f5:e0:04:85:09:e0:6e:65:9f:a8:ef:ce:c0: 81:92:83:05:48:c6:f0:64:af:c2:94:d8:ed:99:fa: ad:f1:b7:0d:0a:bc:8f:81:ff:6f:7d:6a:ef:28:81: 45:17:b8:42:ab:06:87:e1:94:40:6d:2b:c3:9a:86: d6:c4:e2:89:23:02:d1:0a:ca:51:cc:6c:e7:cf:24: bf:9c:3e:32:d3:1b:28:c3:59:a2:50:12:c8:30:dd: 03:ca:4c:1e:23:ff:03:19:a8:b4:52:dd:b1:a3:4c: 20:4d:84:6d:7d:61:99:d4:19:fd:d4:24:e7:30:10: 31:65:c2:f4:b6:f2:c5:73:cd:a2:53:48:ef:4d:03: 2a:5e:99:5c:fd:ee:34:10:7d:8e:ac:6c:64:93:41: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3B:FC:14:D2:56:20:AF:BD:7A:31:89:73:26:88:42:A8:0B:86:3E X509v3 Authority Key Identifier: keyid:31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9b:5d:04:b1:d5:3c:35:8e:a7:d1:32:59:79:60:98:58:21: 95:3f:4c:fd:5b:40:b8:65:61:de:dc:6a:93:ea:b4:63:9d:ac: fb:af:34:4d:6f:3e:e3:5e:2d:13:6c:32:26:5f:c4:c0:67:6e: 8d:5b:ee:71:54:8f:10:8d:21:09:1d:bb:37:ec:e0:85:22:74: e3:13:eb:80:e0:74:b9:36:dc:20:9a:30:c2:4e:15:4a:88:8e: 0e:d4:43:4e:12:3b:70:f4:2e:60:81:3b:71:b2:45:26:8b:34: 3e:9c:dc:7f:bb:3a:b7:cf:ec:97:7a:54:6b:dd:6f:fe:1b:b4: 27:d1:d1:54:c4:b0:9c:bf:49:19:ff:c3:92:13:f5:7a:11:f7: 4a:9a:b9:e2:0f:de:1d:50:5a:81:24:da:b9:55:7b:50:b3:db: d2:74:fc:2b:8f:f7:64:7b:32:6b:08:53:59:de:ad:47:2a:d5: 09:08:3d:7d:36:4f:b5:ab:e9:7a:4c:98:61:d4:fc:cd:28:24: 78:55:31:83:1b:e3:aa:0c:b8:4b:ec:73:23:fa:98:8b:7a:54: 49:6b:16:be:63:ac:54:39:23:37:c8:3f:bd:4d:89:e4:12:09: 8c:1f:81:5f:74:0b:d4:0f:a4:7d:bd:9a:ad:e5:ec:a4:48:20: 00:9d:30:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKY2A9Wjn1VzxjujFwCC4h8ubM2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEy RkVFM0ZBMjAeFw0yNjA5MjEwOTEyNTlaFw0yNjA5MjIwOTI0NTlaMDMxMTAvBgNV BAMTKDI3M0JGQzE0RDI1NjIwQUZCRDdBMzE4OTczMjY4ODQyQTgwQjg2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXPtimTmvzY6bb3Mk5DhtuNhV qFv2Fi49I39JJFaqJa/LP5hUT8OcsL5a8LnOrLCLB/PN+cqthGAMk2dTV+O6XQqR nhKn7xwWbXXt1G0GhC4UXKufaq3pbFbpLk0sdp+27JwHY3nccvZG9eAEhQngbmWf qO/OwIGSgwVIxvBkr8KU2O2Z+q3xtw0KvI+B/299au8ogUUXuEKrBofhlEBtK8Oa htbE4okjAtEKylHMbOfPJL+cPjLTGyjDWaJQEsgw3QPKTB4j/wMZqLRS3bGjTCBN hG19YZnUGf3UJOcwEDFlwvS28sVzzaJTSO9NAypemVz97jQQfY6sbGSTQTC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJzv8FNJWIK+9ejGJcyaIQqgLhj4wHwYDVR0j BBgwFoAUMRT+ooIGFLbov+MPs+Dk4S/uP6IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA3NjA4Y2UtYzNmOC00NGViLWFlZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4 MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEyRkVFM0ZBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTE0RkVBMjgyMDYxNEI2RThCRkUzMEZCM0UwRTRFMTJGRUUz RkEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0 RTEyRkVFM0ZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2bXQSx1Tw1jqfRMll5YJhYIZU/TP1bQLhl Yd7capPqtGOdrPuvNE1vPuNeLRNsMiZfxMBnbo1b7nFUjxCNIQkduzfs4IUidOMT 64DgdLk23CCaMMJOFUqIjg7UQ04SO3D0LmCBO3GyRSaLND6c3H+7OrfP7Jd6VGvd b/4btCfR0VTEsJy/SRn/w5IT9XoR90qaueIP3h1QWoEk2rlVe1Cz29J0/CuP92R7 MmsIU1nerUcq1QkIPX02T7Wr6XpMmGHU/M0oJHhVMYMb46oMuEvscyP6mIt6VElr Fr5jrFQ5IzfIP71NieQSCYwfgV90C9QPpH29mq3l7KRIIACdMBU= -----END CERTIFICATE-----Generated at Mon Sep 21 13:39:15 2026 by rpki-client