$ rpki-client -vvvf rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft File: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft (raw, json) Hash identifier: n6N6MhwAY0FXgtPATAJSTHAoBamoF60Ge0M+u8W8gLE= Subject key identifier: 20:36:47:E7:77:AB:A2:27:75:B5:46:49:88:CA:4C:B1:8A:64:3F:78 Authority key identifier: 31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 Certificate issuer: /CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Certificate serial: 3D0ADE4575091AE48F27FDA36D408B8AAC8E4CC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 07:02:06 +0000 Manifest this update: Wed 04 Nov 2026 06:57:06 +0000 Manifest next update: Thu 05 Nov 2026 08:59:06 +0000 Files and hashes: 1: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: FR/6TdAfo1P3iR6uXvmbo5xbGJoxQcFRkSBLcjXonAU=) 2: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: KtHFgiZtCU/Oo5xwU2fpqeHLtCGkwIQI7UNolZenHzM=) 3: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl (hash: Z1tK9auJEt128v71GIXez94aFTHwx38HF+sWG6sdfBY=) 4: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: Q63O5LgByYAATkaug4pVt8bzE+ZHKwWLFzPYd2unh+E=) 5: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: JHt7Y4sfZDXhljzVs+do4tcZibHDOYboGApg1o5d8oY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 08:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0a:de:45:75:09:1a:e4:8f:27:fd:a3:6d:40:8b:8a:ac:8e:4c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Validity Not Before: Nov 4 06:57:06 2026 GMT Not After : Nov 5 08:59:06 2026 GMT Subject: CN=203647E777ABA22775B5464988CA4CB18A643F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:29:81:75:10:d3:0b:cd:72:8f:e7:75:23: 48:73:33:4a:47:6f:9d:ab:93:a9:10:79:e9:4d:65: 68:28:66:b2:da:24:e2:62:9b:c2:4d:16:35:32:ce: 5a:1b:de:2c:0a:c3:84:f8:00:15:d0:ee:86:dd:04: 30:c1:59:0c:3c:df:03:b0:47:31:54:ca:39:81:bf: d7:bc:f3:8c:4f:60:2f:39:fb:d8:d9:2d:85:33:41: 86:0a:9a:93:34:b2:18:b3:1a:98:2c:58:66:57:25: 04:34:2f:f2:e4:20:07:65:c2:ce:ad:05:98:f1:06: 02:0e:a5:31:a6:7e:d7:2d:ee:83:5f:32:7d:3b:a4: 4e:21:ac:ba:49:cb:f5:97:b0:e1:ff:f4:48:4e:b1: 0a:5a:fd:0b:42:29:d4:4a:be:65:ba:7a:9e:2c:fb: 56:89:30:ae:0c:20:71:b4:1b:8e:02:64:5d:a9:29: 61:b8:cf:d1:33:82:12:28:e2:92:0e:1c:e4:3d:7c: 6e:24:3b:84:1c:a0:9f:8e:15:f6:bb:c8:4b:74:ce: 27:31:5f:27:e2:74:69:65:8c:0f:d3:5e:1a:b2:50: c3:e0:af:24:e0:76:61:4a:cb:dd:9a:c1:91:bd:79: d5:bd:3b:c1:71:53:6c:49:5e:40:84:ef:1b:a1:2b: ac:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:36:47:E7:77:AB:A2:27:75:B5:46:49:88:CA:4C:B1:8A:64:3F:78 X509v3 Authority Key Identifier: keyid:31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:fe:02:7d:3f:27:6f:59:80:ad:eb:e3:d8:c3:79:76:f2:98: 55:fd:d6:06:8b:08:e9:1b:b2:1d:c4:c8:5c:15:e9:8f:8d:a9: c7:da:82:26:b0:b6:48:ba:11:13:3f:4c:ca:d1:19:51:f6:ab: 1e:0a:a3:84:fc:67:3d:b8:32:ce:ce:31:f6:2f:fd:fb:21:fa: bf:01:db:2a:de:7d:ae:f0:8a:27:c9:a3:4d:d8:8a:6b:ee:13: 5a:f6:e4:ea:01:15:e5:cd:29:c7:cd:67:28:dc:94:99:8a:c8: 9f:c0:83:ec:e5:2f:18:b1:23:55:72:59:39:37:a4:24:17:c9: 8e:c9:26:56:8e:18:36:1c:a4:5a:02:24:9b:3e:94:59:5b:20: 55:13:6c:85:0b:a3:fa:4d:33:60:fb:84:a1:af:ec:72:d1:43: 13:99:0e:f8:ad:88:25:53:b3:f0:f6:a5:c2:24:a7:d2:b4:9c: bb:10:91:a4:b2:53:ee:e3:37:36:f0:b6:bc:4d:3a:28:0c:60: b7:f8:d2:6b:13:e8:99:ec:b1:4a:c3:b9:52:20:8a:d1:19:84: e9:e4:80:db:80:4e:c8:89:87:12:02:21:4e:16:03:d0:59:14: 5a:d2:ba:b7:55:87:ee:46:a5:ac:dd:a6:50:51:3d:0a:42:64: 0d:52:d4:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQreRXUJGuSPJ/2jbUCLiqyOTMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEy RkVFM0ZBMjAeFw0yNjExMDQwNjU3MDZaFw0yNjExMDUwODU5MDZaMDMxMTAvBgNV BAMTKDIwMzY0N0U3NzdBQkEyMjc3NUI1NDY0OTg4Q0E0Q0IxOEE2NDNGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCurimBdRDTC81yj+d1I0hzM0pH b52rk6kQeelNZWgoZrLaJOJim8JNFjUyzlob3iwKw4T4ABXQ7obdBDDBWQw83wOw RzFUyjmBv9e884xPYC85+9jZLYUzQYYKmpM0shizGpgsWGZXJQQ0L/LkIAdlws6t BZjxBgIOpTGmftct7oNfMn07pE4hrLpJy/WXsOH/9EhOsQpa/QtCKdRKvmW6ep4s +1aJMK4MIHG0G44CZF2pKWG4z9EzghIo4pIOHOQ9fG4kO4QcoJ+OFfa7yEt0zicx XyfidGlljA/TXhqyUMPgryTgdmFKy92awZG9edW9O8FxU2xJXkCE7xuhK6xzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIDZH53eroid1tUZJiMpMsYpkP3gwHwYDVR0j BBgwFoAUMRT+ooIGFLbov+MPs+Dk4S/uP6IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA3NjA4Y2UtYzNmOC00NGViLWFlZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4 MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEyRkVFM0ZBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTE0RkVBMjgyMDYxNEI2RThCRkUzMEZCM0UwRTRFMTJGRUUz RkEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0 RTEyRkVFM0ZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj+An0/J29ZgK3r49jDeXbymFX91gaLCOkb sh3EyFwV6Y+Nqcfagiawtki6ERM/TMrRGVH2qx4Ko4T8Zz24Ms7OMfYv/fsh+r8B 2yrefa7wiifJo03YimvuE1r25OoBFeXNKcfNZyjclJmKyJ/Ag+zlLxixI1VyWTk3 pCQXyY7JJlaOGDYcpFoCJJs+lFlbIFUTbIULo/pNM2D7hKGv7HLRQxOZDvitiCVT s/D2pcIkp9K0nLsQkaSyU+7jNzbwtrxNOigMYLf40msT6JnssUrDuVIgitEZhOnk gNuATsiJhxICIU4WA9BZFFrSurdVh+5GpazdplBRPQpCZA1S1KM= -----END CERTIFICATE-----Generated at Wed Nov 4 17:08:16 2026 by rpki-client