$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft File: 2E714C194A9AD07684B017C191F12805054E1FC8.mft (raw, json) Hash identifier: ldqUF9ILUnks+HZ5gPajM7fhjguHQEoGcN7ank3zdPA= Subject key identifier: 5F:7D:A4:5B:CA:7A:D4:D8:D9:E8:0F:27:6F:CB:D4:B0:B9:C2:3D:F2 Authority key identifier: 2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 Certificate issuer: /CN=2E714C194A9AD07684B017C191F12805054E1FC8 Certificate serial: 784F0177230D27CBCF4B506BA826D955A8E1DBB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 04:44:21 +0000 Manifest this update: Thu 17 Sep 2026 04:39:21 +0000 Manifest next update: Fri 18 Sep 2026 07:54:21 +0000 Files and hashes: 1: 2E714C194A9AD07684B017C191F12805054E1FC8.crl (hash: MLZ1lZUv+sSSIt7twj/SeUqkz+QPT0a6hICQcyYKMjQ=) 2: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: pi7opShYJXpPoFXhyGT9aMrMLC59BMPBUsNaZoHvFnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4f:01:77:23:0d:27:cb:cf:4b:50:6b:a8:26:d9:55:a8:e1:db:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E714C194A9AD07684B017C191F12805054E1FC8 Validity Not Before: Sep 17 04:39:21 2026 GMT Not After : Sep 18 07:54:21 2026 GMT Subject: CN=5F7DA45BCA7AD4D8D9E80F276FCBD4B0B9C23DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7c:5b:05:b1:24:eb:3e:7f:5b:22:46:c8:d6: b8:13:29:aa:7c:c1:bd:bd:3a:ae:e1:e9:08:e9:4b: 47:3b:83:24:05:69:a4:dd:f3:2f:bf:dd:bf:90:3a: 8c:37:81:c6:ef:d0:8d:f5:f1:48:69:f1:05:93:36: 14:67:59:e3:2f:7b:02:9b:d7:aa:62:73:a5:04:0c: 49:2a:01:34:de:d1:18:9a:63:56:20:2b:d3:e5:c3: 63:0e:04:61:b4:48:99:52:3d:d8:38:9b:ca:34:a6: 3c:fb:c6:18:11:a6:8e:ef:62:23:4d:f9:cb:a7:a5: e2:b9:97:ee:92:8b:5e:15:e9:6e:ba:4f:8a:eb:1d: ac:94:04:8d:b2:19:95:66:cb:da:33:71:5b:6f:dc: 24:aa:66:26:14:c5:3e:4c:a1:dc:af:72:35:67:0f: da:42:76:00:ef:09:0d:fa:13:40:09:89:12:2d:d2: 26:bf:e1:8f:03:39:8e:07:94:ff:33:b2:e0:6a:d1: 9f:b7:70:7a:c0:2f:41:b0:f7:a7:da:7a:17:b2:60: cd:72:c5:d0:87:32:2a:90:92:9a:41:35:2d:ec:db: 39:b6:8c:d1:ec:62:db:a4:d3:75:1a:e6:bc:b7:67: 5d:07:6f:82:a7:96:7c:12:e8:b9:7f:34:b4:b8:19: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7D:A4:5B:CA:7A:D4:D8:D9:E8:0F:27:6F:CB:D4:B0:B9:C2:3D:F2 X509v3 Authority Key Identifier: keyid:2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b0:b4:09:e7:8f:1b:63:2c:6a:d9:30:3f:b8:39:21:7c:60: ca:81:16:ee:8e:a4:c3:37:3b:57:ca:d6:18:bd:3f:5f:e3:ae: 73:f7:c1:27:bb:bb:3b:cb:c4:65:dc:2e:40:62:b8:f9:8a:dc: 36:c6:0b:79:a3:fe:82:4c:5e:6b:2b:8e:a3:f3:31:ba:7f:a1: 34:0a:22:98:60:2e:f0:57:9b:e3:f8:7f:ee:3e:38:b8:99:1f: 85:c6:08:62:6b:93:b3:26:dc:e8:a3:d5:38:ff:bc:02:2a:6c: e4:08:66:1b:7c:38:d9:d8:e6:0c:39:6a:c4:6f:f4:a9:d6:36: 8d:37:14:0e:5e:99:9c:1c:f8:4d:ac:dd:a5:b7:98:37:0f:29: a6:58:db:08:84:79:75:ea:c8:6f:81:21:ce:b5:ea:92:a5:df: 34:2d:54:d7:32:12:37:e2:30:c8:f3:44:c4:d6:e6:c8:15:6d: 7c:4a:66:d1:d6:c7:03:43:40:b6:e3:3d:63:7a:f1:cc:c9:c2: ac:37:ba:c0:f6:0c:14:fc:a4:be:1a:22:2e:b4:27:ea:ff:91: ec:6d:41:72:ca:34:72:db:01:c6:a2:c8:77:af:22:f3:d2:a4: 14:85:5d:fb:7b:39:2f:50:9c:2c:61:84:a7:00:50:6a:e5:e4: d4:2b:b9:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeE8BdyMNJ8vPS1BrqCbZVajh27AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUw NTRFMUZDODAeFw0yNjA5MTcwNDM5MjFaFw0yNjA5MTgwNzU0MjFaMDMxMTAvBgNV BAMTKDVGN0RBNDVCQ0E3QUQ0RDhEOUU4MEYyNzZGQ0JENEIwQjlDMjNERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOfFsFsSTrPn9bIkbI1rgTKap8 wb29Oq7h6QjpS0c7gyQFaaTd8y+/3b+QOow3gcbv0I318Uhp8QWTNhRnWeMvewKb 16pic6UEDEkqATTe0RiaY1YgK9Plw2MOBGG0SJlSPdg4m8o0pjz7xhgRpo7vYiNN +cunpeK5l+6Si14V6W66T4rrHayUBI2yGZVmy9ozcVtv3CSqZiYUxT5ModyvcjVn D9pCdgDvCQ36E0AJiRIt0ia/4Y8DOY4HlP8zsuBq0Z+3cHrAL0Gw96faeheyYM1y xdCHMiqQkppBNS3s2zm2jNHsYtuk03Ua5ry3Z10Hb4KnlnwS6Ll/NLS4GbOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX32kW8p61NjZ6A8nb8vUsLnCPfIwHwYDVR0j BBgwFoAULnFMGUqa0HaEsBfBkfEoBQVOH8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NiM2IwMGItYWQ3Yi00ODQ5LWIwYjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0 QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUwNTRFMUZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTcxNEMxOTRBOUFEMDc2ODRCMDE3QzE5MUYxMjgwNTA1NEUx RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4 MDUwNTRFMUZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKwtAnnjxtjLGrZMD+4OSF8YMqBFu6OpMM3 O1fK1hi9P1/jrnP3wSe7uzvLxGXcLkBiuPmK3DbGC3mj/oJMXmsrjqPzMbp/oTQK IphgLvBXm+P4f+4+OLiZH4XGCGJrk7Mm3Oij1Tj/vAIqbOQIZht8ONnY5gw5asRv 9KnWNo03FA5emZwc+E2s3aW3mDcPKaZY2wiEeXXqyG+BIc616pKl3zQtVNcyEjfi MMjzRMTW5sgVbXxKZtHWxwNDQLbjPWN68czJwqw3usD2DBT8pL4aIi60J+r/kext QXLKNHLbAcaiyHevIvPSpBSFXft7OS9QnCxhhKcAUGrl5NQrub0= -----END CERTIFICATE-----Generated at Thu Sep 17 09:20:35 2026 by rpki-client