$ rpki-client -vvvf rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft File: 14D784D8F19F00DFBA4C08757485032BE04603A3.mft (raw, json) Hash identifier: ERogKK1JKOpvSov1Wm7yd6i0vRTVZ7DmVTNeFbjki/Q= Subject key identifier: 9D:B6:5F:6C:D9:A3:34:94:D2:B9:45:4D:28:C2:6F:7A:12:78:29:6C Authority key identifier: 14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3 Certificate issuer: /CN=14D784D8F19F00DFBA4C08757485032BE04603A3 Certificate serial: 1F71E447B1623C9E78B19C3203C72C4489F92AF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 18:30:44 +0000 Manifest this update: Tue 03 Nov 2026 18:25:44 +0000 Manifest next update: Wed 04 Nov 2026 19:35:44 +0000 Files and hashes: 1: 14D784D8F19F00DFBA4C08757485032BE04603A3.crl (hash: 4g2rreHphFRe6G6CsAvFo012uHT9018HCUK0VFmkRsk=) 2: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: rA6w7AOgQeO/23WQ9WTNvbNDGzSTa/seU2ViAzbcvrs=) 3: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: 4CcWucwvFiUbV7yGD9jF0QOdXA3+eK3AiJ4whM9p04M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 19:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:71:e4:47:b1:62:3c:9e:78:b1:9c:32:03:c7:2c:44:89:f9:2a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14D784D8F19F00DFBA4C08757485032BE04603A3 Validity Not Before: Nov 3 18:25:44 2026 GMT Not After : Nov 4 19:35:44 2026 GMT Subject: CN=9DB65F6CD9A33494D2B9454D28C26F7A1278296C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:51:61:f1:b6:3a:8e:f8:02:69:62:0f:93: c6:70:8e:c5:cc:77:49:d6:4d:cc:2e:5a:63:78:e7: 6b:bc:9a:c2:f4:27:08:a9:3b:64:80:e4:a9:e0:ae: c6:db:71:aa:b4:e5:bf:7b:9a:03:fc:5c:63:b1:7f: 5f:1d:52:69:5d:1e:75:42:84:4f:d7:6d:0d:d5:55: 03:24:17:e4:5c:55:8c:b0:02:d0:f9:3d:16:71:93: 88:01:d0:85:31:31:9f:0a:99:a2:1e:43:47:bc:01: 42:5c:ef:9d:1a:e5:12:5b:e9:ce:2e:af:0d:9e:6e: bf:22:92:76:74:cb:66:25:5a:c4:b9:8d:06:90:41: 2e:e4:da:39:ef:64:1c:59:93:0b:b2:83:8f:24:cf: d5:f6:e8:5c:12:ac:fe:35:65:0c:a9:ca:ec:2c:b7: da:ce:72:bd:89:2c:70:3f:86:fe:8b:f2:81:67:82: ab:0b:01:87:d5:87:95:47:71:dc:ea:eb:c1:c8:2d: 94:ba:eb:78:73:63:82:c3:4c:68:c0:de:fa:dc:a9: 80:6f:a8:76:23:34:8a:d7:5a:01:a5:57:23:18:ff: ad:9e:f1:dd:65:b2:cb:e8:eb:62:45:c7:8c:3c:aa: ea:43:a2:fa:e8:21:c3:ff:31:78:76:d4:88:ab:c8: 95:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B6:5F:6C:D9:A3:34:94:D2:B9:45:4D:28:C2:6F:7A:12:78:29:6C X509v3 Authority Key Identifier: keyid:14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f8:7b:88:97:03:5e:6f:45:4d:c1:8f:11:75:da:37:84:a1: 1d:99:4a:fc:e3:52:ca:42:e8:5a:6f:07:10:b2:7a:1f:6b:d8: e3:94:c9:da:18:1c:69:89:7e:2e:e9:bf:a8:66:16:ed:67:fb: 9f:2e:55:a5:66:2d:68:81:59:0c:01:c9:10:cf:2f:39:fd:c6: b2:98:cf:02:38:1d:fe:c6:83:9e:c1:13:7c:66:47:7f:d5:6a: 84:ba:70:3f:44:48:50:af:3a:65:f5:40:23:e3:59:4b:e7:70: aa:bb:62:9e:4d:dc:95:46:95:2f:81:4f:40:ae:23:92:40:6f: ed:ef:fe:00:98:a2:68:e4:21:42:cf:23:c3:d7:a7:68:8e:d7: 7d:d9:0f:03:81:8f:32:67:dd:06:25:a3:1d:5e:90:c7:cd:45: 15:d6:10:54:fc:28:4d:8e:53:6c:30:d7:55:6e:21:1a:a2:93: 7d:24:ce:78:b5:a1:53:79:b0:cd:f9:23:51:29:c8:3c:ec:bd: e8:fc:af:89:5d:1c:8a:e4:c0:c5:aa:f4:1e:fe:bf:1f:de:8f: 9c:13:f9:98:fb:a0:d4:25:a1:7f:0e:6d:1a:68:41:c7:f4:ce: b3:3f:ec:5b:f7:79:96:bf:3c:86:33:ac:8c:08:79:08:e9:54: d3:d3:d4:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3HkR7FiPJ54sZwyA8csRIn5KvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRENzg0RDhGMTlGMDBERkJBNEMwODc1NzQ4NTAzMkJF MDQ2MDNBMzAeFw0yNjExMDMxODI1NDRaFw0yNjExMDQxOTM1NDRaMDMxMTAvBgNV BAMTKDlEQjY1RjZDRDlBMzM0OTREMkI5NDU0RDI4QzI2RjdBMTI3ODI5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/FFh8bY6jvgCaWIPk8ZwjsXM d0nWTcwuWmN452u8msL0JwipO2SA5Kngrsbbcaq05b97mgP8XGOxf18dUmldHnVC hE/XbQ3VVQMkF+RcVYywAtD5PRZxk4gB0IUxMZ8KmaIeQ0e8AUJc750a5RJb6c4u rw2ebr8iknZ0y2YlWsS5jQaQQS7k2jnvZBxZkwuyg48kz9X26FwSrP41ZQypyuws t9rOcr2JLHA/hv6L8oFngqsLAYfVh5VHcdzq68HILZS663hzY4LDTGjA3vrcqYBv qHYjNIrXWgGlVyMY/62e8d1lssvo62JFx4w8qupDovroIcP/MXh21IiryJW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnbZfbNmjNJTSuUVNKMJvehJ4KWwwHwYDVR0j BBgwFoAUFNeE2PGfAN+6TAh1dIUDK+BGA6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYwNzQ0YjEtMjUyOS00YWUyLWI1ZDUtNWQ0OTlkM2Y1MmMyLzAvMTRENzg0RDhG MTlGMDBERkJBNEMwODc1NzQ4NTAzMkJFMDQ2MDNBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNEQ3ODREOEYxOUYwMERGQkE0QzA4NzU3NDg1MDMyQkUwNDYw M0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvMTRENzg0RDhGMTlGMDBERkJBNEMwODc1NzQ4NTAz MkJFMDQ2MDNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABn4e4iXA15vRU3BjxF12jeEoR2ZSvzjUspC 6FpvBxCyeh9r2OOUydoYHGmJfi7pv6hmFu1n+58uVaVmLWiBWQwByRDPLzn9xrKY zwI4Hf7Gg57BE3xmR3/VaoS6cD9ESFCvOmX1QCPjWUvncKq7Yp5N3JVGlS+BT0Cu I5JAb+3v/gCYomjkIULPI8PXp2iO133ZDwOBjzJn3QYlox1ekMfNRRXWEFT8KE2O U2ww11VuIRqik30kzni1oVN5sM35I1EpyDzsvej8r4ldHIrkwMWq9B7+vx/ej5wT +Zj7oNQloX8ObRpoQcf0zrM/7Fv3eZa/PIYzrIwIeQjpVNPT1IE= -----END CERTIFICATE-----Generated at Wed Nov 4 09:32:06 2026 by rpki-client