$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft File: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft (raw, json) Hash identifier: 9u60whdwd0ZFkgr7rSjjtVYV8HsKM+tq+rN7qJuwQAA= Subject key identifier: 0D:DF:42:3C:DA:36:FE:C0:2C:F6:B8:5D:93:FB:F4:57:B0:DB:23:5B Authority key identifier: 81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 Certificate issuer: /CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Certificate serial: 2BA38CD38C00FDE2EE6E8CDE854B62AEA2DDC4D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:24:30 +0000 Manifest this update: Wed 17 Jun 2026 01:19:30 +0000 Manifest next update: Thu 18 Jun 2026 02:22:30 +0000 Files and hashes: 1: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl (hash: Fp4HPcp5y0ABjr+myEJhetaVcWhrQws/nW6p5RyJn40=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: 2pXek6gWnmZ3X1sQ40jRh2qfPg290PWebfx41xborSQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a3:8c:d3:8c:00:fd:e2:ee:6e:8c:de:85:4b:62:ae:a2:dd:c4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Validity Not Before: Jun 17 01:19:30 2026 GMT Not After : Jun 18 02:22:30 2026 GMT Subject: CN=0DDF423CDA36FEC02CF6B85D93FBF457B0DB235B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:e9:b5:73:95:5a:56:71:27:74:4a:3f:f2: b8:50:ba:c1:16:1e:07:c7:8c:74:13:82:51:be:97: 92:8a:10:f7:ed:f8:73:94:8b:42:97:de:dc:aa:4b: 27:c2:d3:39:a2:6b:83:85:5a:4c:5f:21:87:2b:7f: 9f:04:f6:90:f6:84:7c:ec:fd:a3:a5:34:b4:d7:5d: df:fc:7e:4d:42:ce:47:4d:0a:cf:07:09:2c:1c:87: fa:a3:15:36:ce:a3:d7:85:a3:a0:45:d5:07:b8:bf: 38:2c:04:52:ef:4e:eb:6a:04:c7:7e:41:a5:05:be: df:3a:d7:71:94:f4:3b:66:98:ee:c4:61:fb:b4:63: 13:6a:6d:ed:4c:41:1c:8d:78:39:ff:0c:89:48:b8: f8:fd:95:cd:a2:ce:4d:85:ef:d1:54:e2:a7:e0:dd: 62:80:86:2b:56:6d:e2:da:b0:cf:bf:c7:16:68:94: 44:41:32:28:48:7c:a5:18:3a:63:07:5f:d0:a1:01: 4a:b5:ab:5b:98:75:17:34:eb:cc:bb:30:5e:72:75: dd:1d:e0:d1:e9:13:7f:d9:63:eb:88:26:bc:e9:7b: a1:4c:0d:ba:5a:24:50:a9:bc:f7:34:2a:cc:74:b7: 70:27:d4:0a:04:d9:99:4b:da:04:17:b2:a0:3c:9a: a2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DF:42:3C:DA:36:FE:C0:2C:F6:B8:5D:93:FB:F4:57:B0:DB:23:5B X509v3 Authority Key Identifier: keyid:81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:59:ff:24:cd:03:42:5d:e4:f6:b6:e7:db:16:bc:f1:0f:4d: 41:d4:83:aa:76:a3:e6:8d:e2:ec:11:2a:61:8a:5f:ba:f8:f2: 3e:ea:e6:59:e6:9d:b7:b2:36:30:72:ca:c9:ea:fd:7b:85:c6: b1:d2:31:65:2d:40:6f:f8:3e:8d:9c:17:d0:69:45:fb:3e:29: 06:94:cb:a1:b4:b6:d5:e6:d6:44:04:f1:96:9f:8c:7d:e8:f4: 66:67:25:2b:93:8f:c5:ec:21:40:d3:6f:f9:e5:ab:da:92:64: 48:22:3b:46:a5:26:25:03:74:92:e8:f3:e6:19:ed:94:12:c3: ed:bf:a4:3c:e9:11:3a:4e:e6:34:d4:a4:a6:01:a1:1b:3e:66: 09:2f:50:63:39:9d:11:bc:65:26:63:d8:51:86:3d:c8:5d:a6: 92:3b:ad:31:2f:6a:4d:8f:57:8a:4b:30:eb:31:71:0a:89:ec: 74:4d:83:ee:73:9c:bb:13:73:64:be:bb:f3:aa:64:6f:13:ae: 9e:3a:2d:8f:ab:9a:3f:83:27:60:8e:c5:9a:1b:82:b4:73:61: d8:d9:15:55:24:53:94:27:e6:9a:7a:08:0a:72:cc:af:ec:cd: 1d:35:ae:a2:9f:41:84:19:05:1f:cd:e0:fb:b2:d6:04:0d:bf: 30:48:f2:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6OM04wA/eLubozehUtirqLdxNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMxNDky RDEyQzFDMzAeFw0yNjA2MTcwMTE5MzBaFw0yNjA2MTgwMjIyMzBaMDMxMTAvBgNV BAMTKDBEREY0MjNDREEzNkZFQzAyQ0Y2Qjg1RDkzRkJGNDU3QjBEQjIzNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLOm1c5VaVnEndEo/8rhQusEW HgfHjHQTglG+l5KKEPft+HOUi0KX3tyqSyfC0zmia4OFWkxfIYcrf58E9pD2hHzs /aOlNLTXXd/8fk1CzkdNCs8HCSwch/qjFTbOo9eFo6BF1Qe4vzgsBFLvTutqBMd+ QaUFvt8613GU9DtmmO7EYfu0YxNqbe1MQRyNeDn/DIlIuPj9lc2izk2F79FU4qfg 3WKAhitWbeLasM+/xxZolERBMihIfKUYOmMHX9ChAUq1q1uYdRc068y7MF5ydd0d 4NHpE3/ZY+uIJrzpe6FMDbpaJFCpvPc0Ksx0t3An1AoE2ZlL2gQXsqA8mqKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDd9CPNo2/sAs9rhdk/v0V7DbI1swHwYDVR0j BBgwFoAUgU18qPWoYohW1D0eIBoxSS0SwcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY1ZGQwYWEtZmE3YS00ZGE0LWExYzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThG NUE4NjI4ODU2RDQzRDFFMjAxQTMxNDkyRDEyQzFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTREN0NBOEY1QTg2Mjg4NTZENDNEMUUyMDFBMzE0OTJEMTJD MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMx NDkyRDEyQzFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO9Z/yTNA0Jd5Pa259sWvPEPTUHUg6p2o+aN 4uwRKmGKX7r48j7q5lnmnbeyNjByysnq/XuFxrHSMWUtQG/4Po2cF9BpRfs+KQaU y6G0ttXm1kQE8ZafjH3o9GZnJSuTj8XsIUDTb/nlq9qSZEgiO0alJiUDdJLo8+YZ 7ZQSw+2/pDzpETpO5jTUpKYBoRs+ZgkvUGM5nRG8ZSZj2FGGPchdppI7rTEvak2P V4pLMOsxcQqJ7HRNg+5znLsTc2S+u/OqZG8Trp46LY+rmj+DJ2COxZobgrRzYdjZ FVUkU5Qn5pp6CApyzK/szR01rqKfQYQZBR/N4Puy1gQNvzBI8j0= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:16 2026 by rpki-client