$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft File: 14649B106FA0C411D7FCD73A4B0147226E8A8454.mft (raw, json) Hash identifier: r0HP9nKgZNvjVkSWHYJcAZT84hIvyruSivy3lg1gBUU= Subject key identifier: 1F:2F:61:49:71:C5:38:C0:BA:2A:0F:85:63:5C:93:51:1D:0A:2E:7D Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Certificate serial: 6E99A4EE9BD987250C4A3A305CE601AF73E7BA7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 13:18:11 +0000 Manifest this update: Thu 03 Sep 2026 13:13:11 +0000 Manifest next update: Fri 04 Sep 2026 13:21:11 +0000 Files and hashes: 1: 14649B106FA0C411D7FCD73A4B0147226E8A8454.crl (hash: PsYBzHB7P0YVk+WCODDgnH6hU2n9ShELi5KGzVSQFdI=) 2: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: HpCznd8LAemIm49TlwLV1GhAVKIU4sZ5BY+7TeR1EA4=) 3: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: j+ssfk4JgFO6Pb/CGHEOZfos8czQhoSwZB6YERcUzUI=) 4: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: eR7s3iDJUbgwn7vG0iEll3YQrHiAYjHNsvD28zhjxXY=) 5: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: O5MLHMcohhvApO1/L1RvpM2jYbsZVQ8eLBzNQkddTHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:99:a4:ee:9b:d9:87:25:0c:4a:3a:30:5c:e6:01:af:73:e7:ba:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Validity Not Before: Sep 3 13:13:11 2026 GMT Not After : Sep 4 13:21:11 2026 GMT Subject: CN=1F2F614971C538C0BA2A0F85635C93511D0A2E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:48:2e:ea:90:d1:32:72:95:34:cd:5d:c4:9c: a5:ab:98:49:7c:1a:08:c4:b9:73:f5:2d:b2:7d:a4: 91:49:e2:40:05:2c:38:1c:0e:fe:c3:16:b0:95:a0: 4c:0a:cf:de:01:b9:8f:11:c7:17:82:4d:f9:aa:a0: 08:ef:96:53:09:ae:33:81:9c:35:49:a7:b6:87:1a: 6e:8b:d2:32:da:76:14:50:4e:9b:6d:af:3a:79:1d: a3:a8:a2:fc:63:45:01:7f:7b:ed:2f:86:c0:bf:45: cf:6b:7c:60:c7:1f:b8:67:21:4b:94:1c:7a:8c:6b: 3e:5c:2f:d3:da:d5:5a:33:6a:43:da:f5:0d:3a:fd: 5c:4f:0a:65:5d:74:e9:b5:85:5c:7e:3b:8b:dc:1d: 4a:27:60:5f:c9:bf:a2:75:e7:11:c0:74:d8:1b:ec: 79:a0:51:49:d2:6a:f6:3e:9b:c3:63:00:7d:60:a8: 8e:6d:a8:e1:21:92:ed:68:b0:f6:d7:fe:89:3c:ba: 0f:13:92:f9:2f:4b:76:a8:f9:d3:df:18:81:0f:c2: 89:e2:dc:53:a9:a3:ed:60:ec:b3:dc:c8:2a:c4:3d: 84:4c:92:62:f9:09:08:ff:b1:b4:d8:c3:c3:cb:6b: 2b:e4:d5:9f:0b:0d:fc:ee:b9:3a:3d:55:b6:2f:a7: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2F:61:49:71:C5:38:C0:BA:2A:0F:85:63:5C:93:51:1D:0A:2E:7D X509v3 Authority Key Identifier: keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:88:c5:99:71:cb:0c:5e:ee:82:f2:99:08:e2:31:d7:01:c1: 3d:06:b8:03:db:f5:89:a8:99:bd:03:80:a6:4e:5c:1c:2f:e2: c3:dd:9c:0e:65:b3:d3:90:1c:0e:ea:c8:71:bf:28:64:76:ce: c7:4a:73:7c:c8:4a:96:10:b3:f5:8e:bc:0b:3a:97:25:63:9d: f6:15:1e:10:90:e9:dc:df:18:c3:dc:2c:eb:ca:f8:14:29:69: a0:c9:c7:87:67:7d:fc:44:99:66:10:b6:b9:42:7b:94:8e:b9: 05:d9:78:c3:63:a7:7d:26:b3:40:43:51:9b:c8:95:17:23:4b: 84:21:63:47:fb:a0:9c:d2:f4:94:21:e7:80:0d:b6:d8:3e:f2: 77:47:8f:33:04:e0:8c:88:61:a8:1c:c6:97:c9:d9:67:1b:44: 05:5a:f5:bc:18:1c:aa:ca:f5:f4:70:9c:6a:73:ca:1f:b2:9f: 56:8f:d6:54:7e:85:d6:8d:2a:69:8f:d6:12:6a:76:d8:99:3f: 92:1f:49:d6:9c:56:75:4e:fb:a9:bb:c0:3d:59:fb:9e:7c:a5: 2e:1e:01:7d:bb:94:44:01:af:98:2d:aa:11:8c:7a:32:f3:8f: c4:50:21:d3:a1:6c:9a:b1:53:83:07:44:4e:3a:6f:b0:d4:95: a0:45:7a:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpmk7pvZhyUMSjowXOYBr3PnunswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2 RThBODQ1NDAeFw0yNjA5MDMxMzEzMTFaFw0yNjA5MDQxMzIxMTFaMDMxMTAvBgNV BAMTKDFGMkY2MTQ5NzFDNTM4QzBCQTJBMEY4NTYzNUM5MzUxMUQwQTJFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSC7qkNEycpU0zV3EnKWrmEl8 GgjEuXP1LbJ9pJFJ4kAFLDgcDv7DFrCVoEwKz94BuY8RxxeCTfmqoAjvllMJrjOB nDVJp7aHGm6L0jLadhRQTpttrzp5HaOoovxjRQF/e+0vhsC/Rc9rfGDHH7hnIUuU HHqMaz5cL9Pa1VozakPa9Q06/VxPCmVddOm1hVx+O4vcHUonYF/Jv6J15xHAdNgb 7HmgUUnSavY+m8NjAH1gqI5tqOEhku1osPbX/ok8ug8TkvkvS3ao+dPfGIEPwoni 3FOpo+1g7LPcyCrEPYRMkmL5CQj/sbTYw8PLayvk1Z8LDfzuuTo9VbYvp/hbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHy9hSXHFOMC6Kg+FY1yTUR0KLn0wHwYDVR0j BBgwFoAUFGSbEG+gxBHX/Nc6SwFHIm6KhFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQxNzZkZGQtYTk4MC00M2Q2LTk0YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2 RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2RThBODQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDY0OUIxMDZGQTBDNDExRDdGQ0Q3M0E0QjAxNDcyMjZFOEE4 NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3 MjI2RThBODQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWIxZlxywxe7oLymQjiMdcBwT0GuAPb9Ymo mb0DgKZOXBwv4sPdnA5ls9OQHA7qyHG/KGR2zsdKc3zISpYQs/WOvAs6lyVjnfYV HhCQ6dzfGMPcLOvK+BQpaaDJx4dnffxEmWYQtrlCe5SOuQXZeMNjp30ms0BDUZvI lRcjS4QhY0f7oJzS9JQh54ANttg+8ndHjzME4IyIYagcxpfJ2WcbRAVa9bwYHKrK 9fRwnGpzyh+yn1aP1lR+hdaNKmmP1hJqdtiZP5IfSdacVnVO+6m7wD1Z+558pS4e AX27lEQBr5gtqhGMejLzj8RQIdOhbJqxU4MHRE46b7DUlaBFetY= -----END CERTIFICATE-----Generated at Thu Sep 3 18:13:57 2026 by rpki-client