$ rpki-client -vvvf rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft File: D14C74B06D9A4D3A47662DA76625CD3537D00471.mft (raw, json) Hash identifier: unuR6N3gPWfSVbAOAR368JoNkjyAkNa4YVzGqXNDxvM= Subject key identifier: 3C:8C:69:17:80:F9:11:3F:2A:BE:D3:9A:35:17:E0:1D:AA:F5:D8:AC Authority key identifier: D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 Certificate issuer: /CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Certificate serial: 6E4BC08E7154B8BE31C8BF5B1EC3A40B61AC23A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 10:45:23 +0000 Manifest this update: Thu 03 Sep 2026 10:40:23 +0000 Manifest next update: Fri 04 Sep 2026 11:29:23 +0000 Files and hashes: 1: D14C74B06D9A4D3A47662DA76625CD3537D00471.crl (hash: 0o8UzCXRlvPDiahOH6JTi29kE/+6LDTRZrwueGvtzH8=) 2: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: juHK8q2FxwMCfB0XDh4dieyd+WbhEL+tRuypaniEX8M=) 3: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: x+7pzkIkAAYum6CK13j4jNfXi0Fn68V8sWzEUq8++EQ=) 4: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: sR5YvjfokmmdEnTZTCAPYVCi8TZ9C5R9A7CXeqBE8Bo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4b:c0:8e:71:54:b8:be:31:c8:bf:5b:1e:c3:a4:0b:61:ac:23:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Validity Not Before: Sep 3 10:40:23 2026 GMT Not After : Sep 4 11:29:23 2026 GMT Subject: CN=3C8C691780F9113F2ABED39A3517E01DAAF5D8AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:e2:40:5c:64:02:01:3b:db:5a:12:48:32: a2:be:3c:1d:a5:5c:4d:11:bf:ea:a5:f2:3a:ba:2f: 01:e6:7f:78:77:31:2a:b0:00:09:2b:44:a7:d9:90: 4e:32:02:56:95:26:01:06:3e:9b:8d:2f:2e:17:1d: de:9f:3f:b5:96:98:b5:19:d6:d6:2c:4a:3f:7b:73: 35:70:a1:9f:99:25:8f:ec:08:9b:54:23:53:ef:08: b3:ad:46:78:14:5c:c8:68:08:82:e9:d8:04:73:a6: 59:fc:44:2f:99:80:d9:8c:27:3d:66:d5:e4:f8:ac: 4c:79:57:e8:0b:ed:e6:29:7f:83:b3:e1:c1:73:78: 1d:1d:d7:88:15:82:fc:a7:95:5e:fe:6c:95:8a:02: cd:0a:9e:ad:f6:d8:f3:5a:6f:e8:2e:8f:2c:16:81: 19:c1:93:a4:e8:b2:1c:39:25:88:ec:cc:b5:9b:14: 32:39:d9:ff:83:64:bc:63:35:01:a8:e5:b3:61:90: c8:3c:01:c6:59:f2:5a:27:64:25:13:d2:4b:7e:7e: 4c:43:8d:e9:b4:dc:7b:41:19:52:24:04:ab:77:a3: a3:df:b4:d0:d7:97:e6:15:19:61:00:2a:80:f1:f6: e7:74:7b:bf:d9:8f:56:7f:05:5f:34:1a:9c:45:80: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8C:69:17:80:F9:11:3F:2A:BE:D3:9A:35:17:E0:1D:AA:F5:D8:AC X509v3 Authority Key Identifier: keyid:D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:0d:6b:67:11:3e:4e:9d:f3:40:ae:f5:90:e6:21:fb:c5:f5: 87:37:a1:7e:de:d9:2b:e4:90:19:9d:2b:a8:c2:bc:16:1e:0e: 93:66:57:36:87:09:bf:0d:9a:a6:4a:bf:54:8d:f4:f6:6e:a0: 0d:ba:c5:e2:53:fd:6d:20:04:2d:f6:47:ce:bf:b9:4d:73:ef: 6f:04:aa:02:02:d3:04:17:6c:6e:45:30:c2:c2:f4:a2:67:7a: b0:8d:e5:01:4e:94:66:47:82:1a:74:7f:95:fd:45:10:4e:ae: 37:0c:58:f9:7e:e1:b1:1b:82:1c:4b:40:da:c2:70:1a:33:a4: d3:3c:b5:c3:0b:0f:5d:da:74:98:8c:84:ef:0c:77:76:aa:7d: 39:dc:c8:6d:4f:f3:c8:5d:80:df:03:e3:22:af:fd:7c:b9:16: e5:e4:8f:86:5a:e7:73:a9:6c:8a:48:9a:b1:01:cd:16:6b:ce: 7c:57:03:49:70:57:1b:d8:fc:a4:8c:fb:a6:5f:a9:58:23:f3: 03:51:00:c1:b4:ac:7d:10:20:3e:c0:c6:74:cc:dd:0f:57:fa: a8:0e:5a:e9:12:0b:ed:42:4d:1f:3a:fb:46:aa:83:e0:95:d9: 5d:c5:11:31:c0:ff:14:a8:bb:1c:f4:93:5c:7e:45:6f:9c:5c: 23:cd:85:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbkvAjnFUuL4xyL9bHsOkC2GsI6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUz N0QwMDQ3MTAeFw0yNjA5MDMxMDQwMjNaFw0yNjA5MDQxMTI5MjNaMDMxMTAvBgNV BAMTKDNDOEM2OTE3ODBGOTExM0YyQUJFRDM5QTM1MTdFMDFEQUFGNUQ4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JuJAXGQCATvbWhJIMqK+PB2l XE0Rv+ql8jq6LwHmf3h3MSqwAAkrRKfZkE4yAlaVJgEGPpuNLy4XHd6fP7WWmLUZ 1tYsSj97czVwoZ+ZJY/sCJtUI1PvCLOtRngUXMhoCILp2ARzpln8RC+ZgNmMJz1m 1eT4rEx5V+gL7eYpf4Oz4cFzeB0d14gVgvynlV7+bJWKAs0Knq322PNab+gujywW gRnBk6Toshw5JYjszLWbFDI52f+DZLxjNQGo5bNhkMg8AcZZ8lonZCUT0kt+fkxD jem03HtBGVIkBKt3o6PftNDXl+YVGWEAKoDx9ud0e7/Zj1Z/BV80GpxFgNbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPIxpF4D5ET8qvtOaNRfgHar12KwwHwYDVR0j BBgwFoAU0Ux0sG2aTTpHZi2nZiXNNTfQBHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzYyYmFjYzktZDI1ZC00NjEwLWFlZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2 RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUzN0QwMDQ3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMTRDNzRCMDZEOUE0RDNBNDc2NjJEQTc2NjI1Q0QzNTM3RDAw NDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNE MzUzN0QwMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoNa2cRPk6d80Cu9ZDmIfvF9Yc3oX7e2Svk kBmdK6jCvBYeDpNmVzaHCb8NmqZKv1SN9PZuoA26xeJT/W0gBC32R86/uU1z728E qgIC0wQXbG5FMMLC9KJnerCN5QFOlGZHghp0f5X9RRBOrjcMWPl+4bEbghxLQNrC cBozpNM8tcMLD13adJiMhO8Md3aqfTncyG1P88hdgN8D4yKv/Xy5FuXkj4Za53Op bIpImrEBzRZrznxXA0lwVxvY/KSM+6ZfqVgj8wNRAMG0rH0QID7AxnTM3Q9X+qgO WukSC+1CTR86+0aqg+CV2V3FETHA/xSouxz0k1x+RW+cXCPNhd4= -----END CERTIFICATE-----Generated at Thu Sep 3 19:23:22 2026 by rpki-client