$ rpki-client -vvvf rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft File: D14C74B06D9A4D3A47662DA76625CD3537D00471.mft (raw, json) Hash identifier: d7njUDw92y/8k9iR7hfX2p+fGo1z6srwbmCUVqElr60= Subject key identifier: 83:54:C0:80:35:A2:EE:C6:D9:6D:E0:99:CD:25:36:FF:BC:C8:34:40 Authority key identifier: D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 Certificate issuer: /CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Certificate serial: 76A2084948D1890734D4B74F3353B7B0AD88CE18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft Manifest number: E9 Signing time: Fri 23 Oct 2026 23:33:37 +0000 Manifest this update: Fri 23 Oct 2026 23:28:37 +0000 Manifest next update: Sun 25 Oct 2026 02:30:37 +0000 Files and hashes: 1: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: x+7pzkIkAAYum6CK13j4jNfXi0Fn68V8sWzEUq8++EQ=) 2: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: juHK8q2FxwMCfB0XDh4dieyd+WbhEL+tRuypaniEX8M=) 3: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: sR5YvjfokmmdEnTZTCAPYVCi8TZ9C5R9A7CXeqBE8Bo=) 4: D14C74B06D9A4D3A47662DA76625CD3537D00471.crl (hash: U9ULaIIFlK3pzAx9khKNR83ae1ns6HchS3BbTmG1Qug=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 02:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a2:08:49:48:d1:89:07:34:d4:b7:4f:33:53:b7:b0:ad:88:ce:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Validity Not Before: Oct 23 23:28:37 2026 GMT Not After : Oct 25 02:30:37 2026 GMT Subject: CN=8354C08035A2EEC6D96DE099CD2536FFBCC83440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:70:bc:c4:82:ac:d8:32:02:62:d1:b0:41: 95:50:45:0b:ec:cf:cd:d7:bf:2d:64:38:da:82:05: 9e:a6:01:de:28:50:a0:ff:25:14:69:a2:59:c7:6d: 73:f3:79:19:91:80:de:e3:44:64:0f:42:8a:98:98: 05:ae:34:3a:85:e8:98:c8:38:d6:ab:dc:e9:ee:ee: 57:4e:b8:8d:15:2b:87:90:bf:3e:eb:27:95:e7:e8: 97:63:36:5a:15:51:6c:5a:f7:25:93:eb:ca:6f:c9: 7a:21:0f:a1:e8:8b:5e:9d:35:60:71:86:9f:94:48: 3a:e8:15:f6:39:20:e0:75:4f:a3:50:99:77:b4:78: d5:48:1c:f6:78:93:a4:b2:7f:ae:f6:60:f3:c3:2f: 77:d0:6b:09:13:31:a6:d4:23:04:f7:bd:73:31:c0: 52:22:7e:20:62:5f:b1:ac:63:71:7a:48:1a:b5:43: 65:d6:1c:7e:3f:02:49:f1:ce:d8:68:bd:6d:24:d7: 81:03:f6:ff:54:5a:8b:fc:a4:bc:55:94:4e:56:eb: 3c:83:68:c8:91:94:e1:33:d5:9a:c3:a8:5c:ef:a5: 73:2b:d4:27:9f:17:a6:26:31:1e:ee:4f:35:ea:ac: ea:95:83:87:89:a3:2d:48:d1:51:a3:81:2e:70:f7: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:54:C0:80:35:A2:EE:C6:D9:6D:E0:99:CD:25:36:FF:BC:C8:34:40 X509v3 Authority Key Identifier: keyid:D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:d6:14:e1:d5:63:51:27:5b:6b:e9:ab:45:4f:c5:91:62:ed: 44:a0:41:e9:95:f6:6a:37:c7:6d:d9:5a:5b:f7:49:ec:00:84: d0:a6:02:ba:98:aa:e0:d0:18:05:ec:49:8d:b2:f1:57:80:ed: 00:ff:5a:90:57:f7:aa:8e:db:a0:b3:42:50:65:ec:fd:ff:81: a1:ae:66:6b:15:ee:0e:94:c8:0f:7b:73:74:f3:33:4a:cd:96: 6e:fe:cd:a7:a0:e4:ba:76:ab:f2:c9:99:b1:a7:77:2e:85:63: 56:ee:02:38:d6:4f:47:0e:15:c0:e5:f0:4c:ff:01:b5:a9:25: 85:cc:8d:0a:94:1c:9e:7a:90:26:7c:5b:ac:f4:87:97:26:20: 72:a8:0f:87:19:f8:7f:da:f6:ef:c0:55:7c:a2:79:96:16:2d: e0:15:fc:c4:a2:d2:04:0f:d9:49:0e:75:89:45:ec:d6:59:20: 08:91:e0:b0:aa:5a:2d:f4:24:12:ea:00:03:15:86:9b:f1:02: dc:3a:50:2c:02:76:2d:1a:dd:7d:a1:35:e6:c3:d3:09:20:c9: 71:e4:b0:f5:e2:d1:2f:14:78:a7:b2:74:94:82:a8:2d:25:f5: 82:01:7d:f4:cd:a5:97:a6:e6:98:85:0d:98:e2:71:da:e7:f1: ea:bf:1c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqIISUjRiQc01LdPM1O3sK2IzhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUz N0QwMDQ3MTAeFw0yNjEwMjMyMzI4MzdaFw0yNjEwMjUwMjMwMzdaMDMxMTAvBgNV BAMTKDgzNTRDMDgwMzVBMkVFQzZEOTZERTA5OUNEMjUzNkZGQkNDODM0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtonC8xIKs2DICYtGwQZVQRQvs z83Xvy1kONqCBZ6mAd4oUKD/JRRpolnHbXPzeRmRgN7jRGQPQoqYmAWuNDqF6JjI ONar3Onu7ldOuI0VK4eQvz7rJ5Xn6JdjNloVUWxa9yWT68pvyXohD6Hoi16dNWBx hp+USDroFfY5IOB1T6NQmXe0eNVIHPZ4k6Syf672YPPDL3fQawkTMabUIwT3vXMx wFIifiBiX7GsY3F6SBq1Q2XWHH4/AknxzthovW0k14ED9v9UWov8pLxVlE5W6zyD aMiRlOEz1ZrDqFzvpXMr1CefF6YmMR7uTzXqrOqVg4eJoy1I0VGjgS5w94kJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg1TAgDWi7sbZbeCZzSU2/7zINEAwHwYDVR0j BBgwFoAU0Ux0sG2aTTpHZi2nZiXNNTfQBHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzYyYmFjYzktZDI1ZC00NjEwLWFlZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2 RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUzN0QwMDQ3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMTRDNzRCMDZEOUE0RDNBNDc2NjJEQTc2NjI1Q0QzNTM3RDAw NDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNE MzUzN0QwMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANXWFOHVY1EnW2vpq0VPxZFi7USgQemV9mo3 x23ZWlv3SewAhNCmArqYquDQGAXsSY2y8VeA7QD/WpBX96qO26CzQlBl7P3/gaGu ZmsV7g6UyA97c3TzM0rNlm7+zaeg5Lp2q/LJmbGndy6FY1buAjjWT0cOFcDl8Ez/ AbWpJYXMjQqUHJ56kCZ8W6z0h5cmIHKoD4cZ+H/a9u/AVXyieZYWLeAV/MSi0gQP 2UkOdYlF7NZZIAiR4LCqWi30JBLqAAMVhpvxAtw6UCwCdi0a3X2hNebD0wkgyXHk sPXi0S8UeKeydJSCqC0l9YIBffTNpZem5piFDZjicdrn8eq/HOU= -----END CERTIFICATE-----Generated at Sat Oct 24 10:13:53 2026 by rpki-client