$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft File: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft (raw, json) Hash identifier: eOg+d6A1hRajDrJKurNtFtDsChXKX8oan/Q4nyagWkg= Subject key identifier: CD:29:E7:99:F5:5E:58:C7:01:FB:D1:1F:CD:5F:5C:B8:71:0C:4A:EF Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A Certificate issuer: /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A Certificate serial: 41CFB92AB26DC11A153F36E584AC7430007FCC36 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:54:54 +0000 Manifest this update: Mon 21 Sep 2026 14:49:54 +0000 Manifest next update: Tue 22 Sep 2026 16:21:54 +0000 Files and hashes: 1: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: an5beHJBQCXe1O6nJramlD3hI7Qm5QXG3JLpnD/aNxM=) 2: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: /fa1hwZEt68IrXwKEonGaCZwd1oMYZDyXJq4KeJo86E=) 3: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: a6L02/ltQd6+ySj9pYMUEWkvYU4L6ZYKU3OEQlZp5vg=) 4: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: 3Pur9J/K8W30/vvGHGXc6KHgwQgQ4wEAxcFN1o16NNI=) 5: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl (hash: 7bMz83ZoBA9fYWWocKNBNtIIon6N1/RLSMINldNlhU0=) 6: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: KWc9OTSiXvMZVJYcyeDQq+tc4s6Lq68tyd9neBf4i2s=) 7: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: a4IK1VqkQFifgbVqGFjspnePVTV/YkKjfKoaIwFfqZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cf:b9:2a:b2:6d:c1:1a:15:3f:36:e5:84:ac:74:30:00:7f:cc:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A Validity Not Before: Sep 21 14:49:54 2026 GMT Not After : Sep 22 16:21:54 2026 GMT Subject: CN=CD29E799F55E58C701FBD11FCD5F5CB8710C4AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:b7:43:e0:aa:e8:a9:0b:dc:fb:79:61:6a: be:d3:58:e6:61:09:b1:ee:1a:d5:58:c1:46:69:19: 93:e9:7b:cd:09:0a:fa:59:70:60:88:4f:f2:34:10: 48:62:a2:b5:16:04:45:37:ac:1a:7b:a7:80:52:55: 28:c2:69:52:cf:52:fa:3c:92:3e:65:c3:f9:bf:7d: 26:35:2e:52:0a:71:86:a0:de:85:31:bd:ef:be:60: 16:01:b7:fa:0d:66:a7:33:40:49:ca:e7:32:f3:32: 7c:ae:04:50:1c:04:3d:52:7c:d4:46:f0:4a:31:25: 6c:af:06:b9:2a:7e:44:03:4d:3d:a1:22:c2:c1:b1: 4c:ed:cb:ac:23:69:58:c3:86:5e:f9:85:9d:75:8d: f8:4e:aa:4a:94:bc:8b:c7:16:c6:46:fc:97:e3:4e: f2:df:02:87:72:56:40:28:3d:e5:88:80:15:1b:80: ae:ed:af:55:b7:ef:38:29:8e:2a:95:91:99:19:ae: ee:16:ad:be:18:12:d9:0b:94:a2:5e:bd:99:7b:fd: 5d:fc:ca:65:65:a5:95:ed:9d:58:02:41:89:e9:c8: 95:d1:b0:94:42:b9:a2:db:07:c2:ad:11:c0:aa:d7: 6b:a0:31:e1:2f:5a:23:b5:0f:69:6b:af:e4:c8:e6: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:29:E7:99:F5:5E:58:C7:01:FB:D1:1F:CD:5F:5C:B8:71:0C:4A:EF X509v3 Authority Key Identifier: keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b5:a4:ae:96:06:2f:87:21:37:58:57:9b:98:7f:c6:33:d8: 39:03:e0:73:9e:fd:77:d7:ab:f8:8c:6a:cf:ff:01:a1:7c:e5: 9f:dc:b2:6b:ac:a5:44:db:ea:e6:9c:06:06:17:11:36:4b:bb: 45:fe:0a:bb:2a:a4:c5:db:a6:fa:7c:1b:7c:bc:31:69:c7:45: 6b:29:8f:cf:a8:d6:7b:57:c5:ff:d5:d2:23:46:a4:5a:27:16: d3:31:dc:07:f0:05:c6:ce:a9:df:34:78:99:18:ea:f7:dc:b6: c7:7f:2b:e6:a6:ea:5a:a0:26:c7:ea:a6:2e:84:e0:80:c4:a6: ab:12:28:32:3d:13:8a:dd:d4:1f:74:b6:0b:7c:27:08:dd:79: 83:89:2f:44:a6:b2:b3:cc:40:d2:0d:05:d0:41:76:13:76:e9: a5:2d:25:e4:3c:7b:22:f9:56:90:f4:ac:a3:44:c3:b3:db:6f: 73:89:08:02:76:96:e8:07:4f:8e:d0:a0:8a:2d:04:ac:53:e3: 89:5d:40:56:da:f3:b5:b6:8e:bf:30:6d:a2:91:d1:b0:4a:7e: 72:3a:c2:8b:15:a4:c2:ff:04:cf:c4:61:39:f0:db:0f:2b:04: a8:a2:07:88:c1:c6:58:f9:35:3c:19:06:f2:02:69:4a:c5:04: e9:22:82:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQc+5KrJtwRoVPzblhKx0MAB/zDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYxNDg0OUEzMEM5OEMxRjAxNjIwRTRDNUVDQkFERERG NTA5OTkyQTAeFw0yNjA5MjExNDQ5NTRaFw0yNjA5MjIxNjIxNTRaMDMxMTAvBgNV BAMTKENEMjlFNzk5RjU1RTU4QzcwMUZCRDExRkNENUY1Q0I4NzEwQzRBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGq7dD4KroqQvc+3lhar7TWOZh CbHuGtVYwUZpGZPpe80JCvpZcGCIT/I0EEhiorUWBEU3rBp7p4BSVSjCaVLPUvo8 kj5lw/m/fSY1LlIKcYag3oUxve++YBYBt/oNZqczQEnK5zLzMnyuBFAcBD1SfNRG 8EoxJWyvBrkqfkQDTT2hIsLBsUzty6wjaVjDhl75hZ11jfhOqkqUvIvHFsZG/Jfj TvLfAodyVkAoPeWIgBUbgK7tr1W37zgpjiqVkZkZru4Wrb4YEtkLlKJevZl7/V38 ymVlpZXtnVgCQYnpyJXRsJRCuaLbB8KtEcCq12ugMeEvWiO1D2lrr+TI5hRtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSnnmfVeWMcB+9EfzV9cuHEMSu8wHwYDVR0j BBgwFoAUHxSEmjDJjB8BYg5MXsut3fUJmSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NmNjhhYmEtOTUxNS00ZDEyLWFhYzItOGNlZTVkYjJhNDhmLzAvMUYxNDg0OUEz MEM5OEMxRjAxNjIwRTRDNUVDQkFERERGNTA5OTkyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjE0ODQ5QTMwQzk4QzFGMDE2MjBFNEM1RUNCQUREREY1MDk5 OTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvMUYxNDg0OUEzMEM5OEMxRjAxNjIwRTRDNUVDQkFE RERGNTA5OTkyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADS1pK6WBi+HITdYV5uYf8Yz2DkD4HOe/XfX q/iMas//AaF85Z/csmuspUTb6uacBgYXETZLu0X+CrsqpMXbpvp8G3y8MWnHRWsp j8+o1ntXxf/V0iNGpFonFtMx3AfwBcbOqd80eJkY6vfctsd/K+am6lqgJsfqpi6E 4IDEpqsSKDI9E4rd1B90tgt8JwjdeYOJL0SmsrPMQNINBdBBdhN26aUtJeQ8eyL5 VpD0rKNEw7Pbb3OJCAJ2lugHT47QoIotBKxT44ldQFba87W2jr8wbaKR0bBKfnI6 wosVpML/BM/EYTnw2w8rBKiiB4jBxlj5NTwZBvICaUrFBOkigks= -----END CERTIFICATE-----Generated at Mon Sep 21 20:56:59 2026 by rpki-client