$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft File: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft (raw, json) Hash identifier: 6awa5EJRIPckbTOMmtRxobm0lc5iFQu0WGSq9HFY5DQ= Subject key identifier: F6:5E:44:70:A3:E3:52:17:01:16:BF:8C:B1:C8:9B:19:37:53:77:6F Authority key identifier: 81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 Certificate issuer: /CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Certificate serial: 3C8B527A6715DD129B78AD5AA2E439CCFBC22483 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:43:33 +0000 Manifest this update: Mon 21 Sep 2026 09:38:33 +0000 Manifest next update: Tue 22 Sep 2026 10:35:33 +0000 Files and hashes: 1: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl (hash: RU3MGVKYWlbX+ZWYGoqeSwv7JSGvmGLiAJpNIfjXB6g=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: 2pXek6gWnmZ3X1sQ40jRh2qfPg290PWebfx41xborSQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 10:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8b:52:7a:67:15:dd:12:9b:78:ad:5a:a2:e4:39:cc:fb:c2:24:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Validity Not Before: Sep 21 09:38:33 2026 GMT Not After : Sep 22 10:35:33 2026 GMT Subject: CN=F65E4470A3E352170116BF8CB1C89B193753776F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:ff:32:25:4c:7e:ab:9d:9e:8e:36:8c:95: ce:76:0f:3f:69:f4:78:07:27:c1:bf:af:20:dd:41: dc:28:24:d0:b1:68:f9:24:55:3c:e5:b4:76:6b:8f: 1d:c5:5e:40:e5:3c:52:25:3c:94:d0:d7:44:34:9f: e7:f4:79:7f:9c:8b:67:59:60:4e:dd:21:f2:68:23: 4f:78:5a:af:04:78:20:72:73:b0:f8:4a:fc:f9:30: 2c:0e:aa:41:31:70:a7:94:80:42:f7:5e:d6:4b:82: 35:91:59:92:e1:1e:5f:47:c1:f7:65:dd:b2:d1:f3: e2:b2:fd:fb:07:4d:a1:06:51:fb:93:14:75:31:d6: 20:26:d1:ec:d4:a9:3a:5d:67:7c:03:d2:7e:eb:08: e2:8f:00:88:d2:83:3c:2f:ec:67:08:7f:4b:af:96: 32:a6:a8:94:4c:5f:50:79:01:76:8f:97:24:84:23: 5d:4c:bc:8a:bf:9d:0a:23:9f:03:23:4d:dd:1b:34: 72:7f:a5:e6:cd:38:92:d0:a2:19:ff:e2:6d:86:77: 6c:59:51:cf:bc:5c:c3:2a:18:24:a2:25:25:44:d8: 10:71:96:4e:78:ef:b3:c3:80:9e:0a:c3:33:7a:81: 29:02:3f:98:a9:a7:12:8d:e0:72:44:32:7f:62:4b: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5E:44:70:A3:E3:52:17:01:16:BF:8C:B1:C8:9B:19:37:53:77:6F X509v3 Authority Key Identifier: keyid:81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:70:3d:fe:f5:f6:f8:39:da:c5:46:b5:3b:9a:3c:c5:a3:21: 47:af:44:75:42:91:56:71:cf:f1:e1:8f:69:e0:12:e1:e7:7c: 1c:e7:d2:14:e7:95:48:cd:8d:fd:13:05:b3:5b:5c:5d:88:7c: a6:cc:bb:31:f8:30:0f:ea:e2:2c:be:6d:8b:d1:0e:db:2a:6c: 80:57:24:18:ab:35:ed:29:1e:4d:70:61:f1:18:0f:cd:11:e8: 74:6c:1f:7a:76:2a:a8:69:cb:44:6a:68:9f:a0:c9:81:2e:74: 17:d5:73:72:e0:1c:f5:30:31:5e:25:7d:f1:aa:f0:83:23:6c: 09:91:10:0f:8a:87:e8:f3:04:6b:97:36:fe:96:24:27:ce:b3: e0:a4:d6:24:42:fd:d5:1d:cf:e9:76:35:05:b2:be:55:f8:0d: 14:c8:cf:e5:2a:eb:90:7d:60:b1:a7:45:ea:02:98:89:21:22: a9:e9:72:cf:28:70:83:b8:5b:b9:fb:67:49:ec:b1:de:42:f9: 60:d5:77:48:2c:3a:15:2a:d0:cb:57:50:c0:9d:c0:ce:5e:ef: f8:a3:a9:aa:4e:1d:32:65:b7:44:ee:bb:b5:b6:2c:95:89:78: 6c:bc:66:b5:cf:26:b7:9a:95:59:80:6c:78:ce:2a:c3:14:21: 38:9d:98:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPItSemcV3RKbeK1aouQ5zPvCJIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMxNDky RDEyQzFDMzAeFw0yNjA5MjEwOTM4MzNaFw0yNjA5MjIxMDM1MzNaMDMxMTAvBgNV BAMTKEY2NUU0NDcwQTNFMzUyMTcwMTE2QkY4Q0IxQzg5QjE5Mzc1Mzc3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Qv8yJUx+q52ejjaMlc52Dz9p 9HgHJ8G/ryDdQdwoJNCxaPkkVTzltHZrjx3FXkDlPFIlPJTQ10Q0n+f0eX+ci2dZ YE7dIfJoI094Wq8EeCByc7D4Svz5MCwOqkExcKeUgEL3XtZLgjWRWZLhHl9Hwfdl 3bLR8+Ky/fsHTaEGUfuTFHUx1iAm0ezUqTpdZ3wD0n7rCOKPAIjSgzwv7GcIf0uv ljKmqJRMX1B5AXaPlySEI11MvIq/nQojnwMjTd0bNHJ/pebNOJLQohn/4m2Gd2xZ Uc+8XMMqGCSiJSVE2BBxlk5477PDgJ4KwzN6gSkCP5ippxKN4HJEMn9iSyVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9l5EcKPjUhcBFr+MscibGTdTd28wHwYDVR0j BBgwFoAUgU18qPWoYohW1D0eIBoxSS0SwcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY1ZGQwYWEtZmE3YS00ZGE0LWExYzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThG NUE4NjI4ODU2RDQzRDFFMjAxQTMxNDkyRDEyQzFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTREN0NBOEY1QTg2Mjg4NTZENDNEMUUyMDFBMzE0OTJEMTJD MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMx NDkyRDEyQzFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAORwPf719vg52sVGtTuaPMWjIUevRHVCkVZx z/Hhj2ngEuHnfBzn0hTnlUjNjf0TBbNbXF2IfKbMuzH4MA/q4iy+bYvRDtsqbIBX JBirNe0pHk1wYfEYD80R6HRsH3p2Kqhpy0RqaJ+gyYEudBfVc3LgHPUwMV4lffGq 8IMjbAmREA+Kh+jzBGuXNv6WJCfOs+Ck1iRC/dUdz+l2NQWyvlX4DRTIz+Uq65B9 YLGnReoCmIkhIqnpcs8ocIO4W7n7Z0nssd5C+WDVd0gsOhUq0MtXUMCdwM5e7/ij qapOHTJlt0Tuu7W2LJWJeGy8ZrXPJrealVmAbHjOKsMUITidmL4= -----END CERTIFICATE-----Generated at Tue Sep 22 01:03:52 2026 by rpki-client