$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft File: 143B0FF235C900164875105AD0C37F3C7DB28151.mft (raw, json) Hash identifier: YQfzDMzGysRQzqLD/elJ6zvlVQSXY8LPGpi3lc6clAI= Subject key identifier: 19:47:92:7E:AB:10:F6:35:19:94:98:DB:9A:E4:07:D0:EF:92:8B:47 Authority key identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 Certificate issuer: /CN=143B0FF235C900164875105AD0C37F3C7DB28151 Certificate serial: 12A8CD7CF7746EB5E39C5888DD6A542840280326 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:05:03 +0000 Manifest this update: Wed 16 Sep 2026 21:00:03 +0000 Manifest next update: Thu 17 Sep 2026 23:38:03 +0000 Files and hashes: 1: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (hash: hD2c2fRRpw85nnii8gI6DgDgE1ceI1WBb5qAu0bq2pA=) 2: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (hash: nNVKvZ0ilopUJmLIwR3JaCCbYQBiWauo32pM1hDB2qM=) 3: 3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (hash: kEo9J9YDEfycsSJU6o/UUiHq399l3gpS8mmcj4dD7Es=) 4: 143B0FF235C900164875105AD0C37F3C7DB28151.crl (hash: oB8i+ewfyW8Q71O+FApyaR61DI6v2ygajOyRNvNC0IM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a8:cd:7c:f7:74:6e:b5:e3:9c:58:88:dd:6a:54:28:40:28:03:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143B0FF235C900164875105AD0C37F3C7DB28151 Validity Not Before: Sep 16 21:00:03 2026 GMT Not After : Sep 17 23:38:03 2026 GMT Subject: CN=1947927EAB10F635199498DB9AE407D0EF928B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:02:47:dd:d4:c1:28:bc:d0:39:f6:09:07:62: b0:55:9e:64:a9:e9:bc:ba:4c:7c:3f:af:13:d8:b5: 7b:d8:b9:b8:9e:af:ef:59:3b:51:7e:a4:18:ca:be: 6e:b5:84:79:f7:28:ed:d4:42:98:6f:fb:17:6c:15: 19:69:10:fd:a7:a6:21:ca:ca:ad:97:54:a7:da:76: 9c:ea:50:08:4e:ae:4d:29:b7:8c:35:5c:ca:01:2a: 90:ee:83:a3:00:66:e4:0a:21:ff:ef:94:62:7e:a6: 6c:d2:c7:79:28:be:ec:1b:2a:c5:02:c9:23:5b:2f: 29:f2:05:0f:8f:b0:07:ea:71:3f:3d:f5:50:cd:1d: a2:a2:e7:26:5f:37:11:bb:79:ab:67:58:47:d3:74: 98:8f:14:6b:c5:8a:43:b8:df:f7:bb:51:7f:cb:e5: f5:9b:32:13:53:f8:1d:ff:1b:88:d2:15:22:73:cd: 69:f8:2a:ef:e0:9e:3f:0b:92:1c:08:ab:3a:0a:c9: 33:d2:6e:98:e6:2c:78:60:19:75:0d:aa:67:a8:f4: ef:ce:94:3c:c6:e6:eb:db:aa:14:95:e8:ca:d8:fa: 91:3d:69:dc:ed:43:f5:bb:89:fb:16:09:d1:a4:d8: 8c:4a:1f:af:e0:ac:5a:b0:a3:3e:38:8b:95:5a:eb: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:47:92:7E:AB:10:F6:35:19:94:98:DB:9A:E4:07:D0:EF:92:8B:47 X509v3 Authority Key Identifier: keyid:14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:bd:8c:01:64:d4:27:7e:cc:ea:34:28:24:33:6c:60:37:7e: fc:30:66:d1:8c:3d:31:de:fd:53:98:88:e1:55:51:22:9d:42: 0c:3e:01:75:33:4d:58:1d:d1:a6:9f:a5:32:62:09:d3:c7:e5: 2b:9c:1a:e2:48:48:d3:ca:8d:8f:67:c6:3a:c1:f7:f5:7c:cb: d4:72:b6:d5:1a:4f:e9:3d:22:60:9e:cb:62:2f:2f:10:e1:63: fa:f2:a4:d7:c5:3c:eb:94:75:5b:8a:03:88:d8:13:e1:7e:66: 12:07:c8:a3:b5:bc:90:b7:b1:bf:33:4e:5a:c3:cd:1e:be:bd: c3:d6:50:77:a0:a6:b5:24:ef:a5:32:f1:d5:80:78:d6:15:e8: 01:40:41:2e:74:ab:de:5b:2a:57:49:a9:4c:c2:fe:93:ab:cd: 88:03:cf:e9:d0:cf:56:c2:72:b4:61:c8:49:7f:78:65:a9:60: ea:7d:f1:1c:2f:66:5c:89:43:c6:e2:40:97:11:43:d1:58:2c: dc:d2:8f:6c:60:8f:a1:d2:8a:b3:b4:72:55:d5:ad:16:02:b1: cf:98:75:ee:de:8c:e6:ef:2c:f3:75:8c:fc:ab:f1:96:16:7c: 5b:82:7e:90:29:77:cc:a5:b1:76:7f:aa:57:1f:66:9a:67:59: de:8d:0e:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqjNfPd0brXjnFiI3WpUKEAoAyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQzQjBGRjIzNUM5MDAxNjQ4NzUxMDVBRDBDMzdGM0M3 REIyODE1MTAeFw0yNjA5MTYyMTAwMDNaFw0yNjA5MTcyMzM4MDNaMDMxMTAvBgNV BAMTKDE5NDc5MjdFQUIxMEY2MzUxOTk0OThEQjlBRTQwN0QwRUY5MjhCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAkfd1MEovNA59gkHYrBVnmSp 6by6THw/rxPYtXvYubier+9ZO1F+pBjKvm61hHn3KO3UQphv+xdsFRlpEP2npiHK yq2XVKfadpzqUAhOrk0pt4w1XMoBKpDug6MAZuQKIf/vlGJ+pmzSx3kovuwbKsUC ySNbLynyBQ+PsAfqcT899VDNHaKi5yZfNxG7eatnWEfTdJiPFGvFikO43/e7UX/L 5fWbMhNT+B3/G4jSFSJzzWn4Ku/gnj8LkhwIqzoKyTPSbpjmLHhgGXUNqmeo9O/O lDzG5uvbqhSV6MrY+pE9adztQ/W7ifsWCdGk2IxKH6/grFqwoz44i5Va6513AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUeSfqsQ9jUZlJjbmuQH0O+Si0cwHwYDVR0j BBgwFoAUFDsP8jXJABZIdRBa0MN/PH2ygVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTFjMWQ1NmUtMTVjNi00YjY1LWE5YTgtZjkwYWQ2ZmJhMDkwLzAvMTQzQjBGRjIz NUM5MDAxNjQ4NzUxMDVBRDBDMzdGM0M3REIyODE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDNCMEZGMjM1QzkwMDE2NDg3NTEwNUFEMEMzN0YzQzdEQjI4 MTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTFjMWQ1NmUtMTVjNi00YjY1LWE5 YTgtZjkwYWQ2ZmJhMDkwLzAvMTQzQjBGRjIzNUM5MDAxNjQ4NzUxMDVBRDBDMzdG M0M3REIyODE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADi9jAFk1Cd+zOo0KCQzbGA3fvwwZtGMPTHe /VOYiOFVUSKdQgw+AXUzTVgd0aafpTJiCdPH5SucGuJISNPKjY9nxjrB9/V8y9Ry ttUaT+k9ImCey2IvLxDhY/rypNfFPOuUdVuKA4jYE+F+ZhIHyKO1vJC3sb8zTlrD zR6+vcPWUHegprUk76Uy8dWAeNYV6AFAQS50q95bKldJqUzC/pOrzYgDz+nQz1bC crRhyEl/eGWpYOp98RwvZlyJQ8biQJcRQ9FYLNzSj2xgj6HSirO0clXVrRYCsc+Y de7ejObvLPN1jPyr8ZYWfFuCfpApd8ylsXZ/qlcfZppnWd6NDuo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:45 2026 by rpki-client