$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft File: 914D306354D2880E2D8000A84096A7D0FD93DB6F.mft (raw, json) Hash identifier: doTqin7Y3viXQcznKCHPs2vut09vCpQFru5+uFhTDLk= Subject key identifier: A9:FF:D8:3C:B1:E8:EB:C3:18:4C:31:79:5F:EC:63:38:44:95:CD:6A Authority key identifier: 91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F Certificate issuer: /CN=914D306354D2880E2D8000A84096A7D0FD93DB6F Certificate serial: 2D2570ADBFF82048C67D01A9DF129086EADD7711 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft Manifest number: BC Signing time: Sun 20 Sep 2026 22:34:49 +0000 Manifest this update: Sun 20 Sep 2026 22:29:49 +0000 Manifest next update: Tue 22 Sep 2026 00:45:49 +0000 Files and hashes: 1: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: kuGnEQzcoDJhm5rFlzTvBCAiLMXXIFxC7mIG7REa29w=) 2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: uK0BRaW/xJFX4xoOs5c+Wr7pOkzcDPXliVBiSDQWuQY=) 3: 914D306354D2880E2D8000A84096A7D0FD93DB6F.crl (hash: pUjQ+syKs3hKZpjHr9pPw6hxCQu8IoOVoUU1GFrKEsM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:25:70:ad:bf:f8:20:48:c6:7d:01:a9:df:12:90:86:ea:dd:77:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914D306354D2880E2D8000A84096A7D0FD93DB6F Validity Not Before: Sep 20 22:29:49 2026 GMT Not After : Sep 22 00:45:49 2026 GMT Subject: CN=A9FFD83CB1E8EBC3184C31795FEC63384495CD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:33:09:a0:65:df:53:34:ec:55:9b:f1:04:0e: ff:5a:72:9d:54:67:a6:bb:ac:6d:6d:ce:ee:f8:b8: 55:43:fb:37:fc:c1:da:27:cc:aa:52:07:f4:77:39: 5e:29:f4:f1:7f:05:2d:9a:e9:90:df:f2:2b:bb:17: 40:2f:f1:00:11:55:0a:11:4f:c6:4b:ff:37:ff:2c: 51:d6:90:d9:bd:c9:8e:0a:fd:c7:f2:f3:35:e5:23: 9f:56:31:52:6b:62:b9:24:b3:bf:1f:06:a9:72:66: fc:2a:14:e2:2f:64:5e:c6:94:ac:85:09:52:b2:5e: 3b:91:ac:d2:b3:82:57:9f:a4:84:bd:23:b7:12:66: f4:26:82:6f:b3:cb:ca:a1:bf:41:0b:1b:6e:ef:5d: d6:ad:e2:f9:52:d8:b3:d7:c3:53:24:9e:b7:e5:8a: 05:c8:6c:8f:37:bd:5b:1c:90:91:8e:3c:39:56:c4: 76:05:44:0c:b1:b3:66:7a:4b:38:b5:1a:f5:0a:7a: 72:e7:96:8c:dd:c3:9c:fc:0c:29:4a:f8:8a:bb:6d: 6b:07:f3:90:61:97:09:41:15:08:0b:c8:17:3d:65: 20:89:1d:94:f8:48:3a:21:53:96:8f:d9:bc:b6:4e: 54:24:fe:96:76:42:d0:c5:8c:17:f4:d8:c7:73:78: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FF:D8:3C:B1:E8:EB:C3:18:4C:31:79:5F:EC:63:38:44:95:CD:6A X509v3 Authority Key Identifier: keyid:91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:8d:25:d3:91:2d:4f:02:36:97:a3:84:9c:a3:44:dc:13:b5: 77:c0:05:3d:12:b7:4f:35:c2:b1:1a:61:35:58:10:5d:b2:5f: 9a:b5:0e:a1:84:e2:9a:d0:e3:38:6a:cd:9e:4b:40:7c:41:37: 40:c5:da:96:20:db:e4:1d:23:68:43:57:dc:25:a7:8f:c9:1a: c9:ad:e5:e7:e2:2f:ef:f2:8d:8b:60:9f:e0:78:e9:07:32:16: bb:67:f3:10:2a:e7:51:6d:3a:42:b5:7f:81:72:3e:33:8c:7b: 4e:3a:03:1e:cf:ac:3d:2d:0b:1c:e4:f4:60:8c:4f:ac:6b:45: c6:89:3a:66:d2:ce:d0:22:d2:9b:15:bd:31:10:47:11:a7:74: 1e:38:c8:4d:cb:76:92:e1:4c:8e:fd:ec:0d:f0:8e:51:23:28: ea:64:83:50:60:6d:51:7f:e2:33:69:5d:3c:a4:03:62:74:b4: f0:82:be:72:a2:de:ed:aa:e4:57:bf:33:47:0c:0d:3d:0b:92: 72:44:98:bc:35:bd:db:f9:ee:70:44:d8:b8:13:b7:ef:ed:e1: 03:8a:8f:96:16:1b:e4:4a:63:e7:8c:6b:d4:24:e8:6e:20:7b: b4:31:fb:15:10:46:86:e7:9e:6a:f7:a2:5e:42:d7:74:1a:68: 86:9d:4d:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSVwrb/4IEjGfQGp3xKQhurddxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0RDMwNjM1NEQyODgwRTJEODAwMEE4NDA5NkE3RDBG RDkzREI2RjAeFw0yNjA5MjAyMjI5NDlaFw0yNjA5MjIwMDQ1NDlaMDMxMTAvBgNV BAMTKEE5RkZEODNDQjFFOEVCQzMxODRDMzE3OTVGRUM2MzM4NDQ5NUNENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqMwmgZd9TNOxVm/EEDv9acp1U Z6a7rG1tzu74uFVD+zf8wdonzKpSB/R3OV4p9PF/BS2a6ZDf8iu7F0Av8QARVQoR T8ZL/zf/LFHWkNm9yY4K/cfy8zXlI59WMVJrYrkks78fBqlyZvwqFOIvZF7GlKyF CVKyXjuRrNKzglefpIS9I7cSZvQmgm+zy8qhv0ELG27vXdat4vlS2LPXw1Mknrfl igXIbI83vVsckJGOPDlWxHYFRAyxs2Z6Szi1GvUKenLnlozdw5z8DClK+Iq7bWsH 85BhlwlBFQgLyBc9ZSCJHZT4SDohU5aP2by2TlQk/pZ2QtDFjBf02MdzeDh9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqf/YPLHo68MYTDF5X+xjOESVzWowHwYDVR0j BBgwFoAUkU0wY1TSiA4tgACoQJan0P2T228wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVlMjA4OGEtYzlmZi00ZDg0LWJlNGUtMTQxZDViODBiNTQzLzAvOTE0RDMwNjM1 NEQyODgwRTJEODAwMEE4NDA5NkE3RDBGRDkzREI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTREMzA2MzU0RDI4ODBFMkQ4MDAwQTg0MDk2QTdEMEZEOTNE QjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvOTE0RDMwNjM1NEQyODgwRTJEODAwMEE4NDA5NkE3 RDBGRDkzREI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWNJdORLU8CNpejhJyjRNwTtXfABT0St081 wrEaYTVYEF2yX5q1DqGE4prQ4zhqzZ5LQHxBN0DF2pYg2+QdI2hDV9wlp4/JGsmt 5efiL+/yjYtgn+B46QcyFrtn8xAq51FtOkK1f4FyPjOMe046Ax7PrD0tCxzk9GCM T6xrRcaJOmbSztAi0psVvTEQRxGndB44yE3LdpLhTI797A3wjlEjKOpkg1BgbVF/ 4jNpXTykA2J0tPCCvnKi3u2q5Fe/M0cMDT0LknJEmLw1vdv57nBE2LgTt+/t4QOK j5YWG+RKY+eMa9Qk6G4ge7Qx+xUQRobnnmr3ol5C13QaaIadTQQ= -----END CERTIFICATE-----Generated at Mon Sep 21 10:42:16 2026 by rpki-client