$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft File: 14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft (raw, json) Hash identifier: FjMDjXIYkuT35liwfkoCJYrGfTVW4fniL77SY9zQbLs= Subject key identifier: 70:AF:E8:0D:E2:E0:04:0F:78:FA:61:8E:37:D7:6B:61:14:29:79:5C Authority key identifier: 14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9 Certificate issuer: /CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9 Certificate serial: 0FD367337EADDC5E18F5383366DDA9E5B4789B6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:21:49 +0000 Manifest this update: Wed 16 Sep 2026 18:16:49 +0000 Manifest next update: Thu 17 Sep 2026 22:20:49 +0000 Files and hashes: 1: 14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl (hash: 4E5kIh9nyz03uHxiZ3nSd3gjlhbhaGblD0T2ejP9WvQ=) 2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: EJ6cvXJ/T86AFVCQoEqikidmMKscKfWsdPHD8vPB1Oc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d3:67:33:7e:ad:dc:5e:18:f5:38:33:66:dd:a9:e5:b4:78:9b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9 Validity Not Before: Sep 16 18:16:49 2026 GMT Not After : Sep 17 22:20:49 2026 GMT Subject: CN=70AFE80DE2E0040F78FA618E37D76B611429795C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4c:a5:db:f8:5c:7d:57:39:72:21:be:22:2d: ee:65:ca:c7:19:ef:9b:6d:d7:20:40:3f:1b:da:4c: b4:bc:e0:11:55:16:44:45:20:f2:47:3c:26:01:d7: e6:ed:3c:ad:d6:7a:31:e4:28:98:83:cf:09:10:5e: 99:54:91:b1:9f:16:c7:e6:06:cf:24:6e:7e:f2:3c: bb:b0:d8:98:ff:b7:d0:80:62:2c:d2:62:63:b4:ed: 1d:ed:98:8a:84:35:fe:3e:4b:b7:66:d9:a0:9b:8f: 41:14:9e:ec:39:18:f0:1c:fa:67:d6:28:48:db:5d: 9b:d0:ad:a3:16:32:55:2b:25:8e:69:39:66:6c:11: 6a:cf:7c:82:d8:c4:34:a7:5d:1f:60:75:6c:87:fd: 0d:fd:e5:62:ee:a1:49:42:50:52:d1:fd:03:e2:8f: 46:7c:96:39:61:53:4c:db:95:18:ff:a9:c6:7a:61: 86:61:19:6b:cb:37:8f:b5:75:dd:56:71:c7:bc:a8: ed:33:7f:70:4d:82:69:47:8c:cd:55:ac:7f:a6:62: 7c:e7:cc:27:63:3e:2c:9a:58:b7:57:15:fe:cc:2a: e5:25:7e:0f:f1:98:90:dd:c8:2e:a8:4b:ee:2e:45: 29:7e:4a:56:af:8b:9b:33:9e:63:91:9b:f8:ef:7b: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AF:E8:0D:E2:E0:04:0F:78:FA:61:8E:37:D7:6B:61:14:29:79:5C X509v3 Authority Key Identifier: keyid:14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f2:16:0a:6f:85:49:06:79:f0:b1:84:81:82:79:98:45:2f: 28:26:bf:7b:dd:27:a0:23:e7:23:7d:5b:ff:de:bd:06:8d:52: 58:09:5a:da:87:97:56:e5:b4:42:39:10:b3:fd:7d:ee:8b:de: 1e:9b:13:3f:a3:eb:51:d4:d1:4c:e6:0a:55:49:ac:ca:b3:39: b0:d7:a3:d3:0d:bc:97:da:ca:1c:72:f8:79:30:47:86:2c:83: 23:04:50:0f:87:05:3e:2d:01:5e:e1:2b:76:ff:b4:f9:e8:f3: ec:2c:f2:8e:7c:12:a5:b6:ed:93:28:1d:15:00:15:36:5f:2b: d5:4a:0f:30:12:20:ad:96:81:0d:55:cd:27:e7:35:dc:41:43: c5:98:41:2a:b3:40:a9:d3:7d:a1:a3:f3:c7:c6:dd:68:31:43: 87:79:2f:00:dc:7a:60:70:94:d0:1d:fa:5b:ab:0d:48:b9:8c: bf:b1:a9:79:90:36:5e:f8:87:4a:ea:dc:9d:10:82:c3:46:07: 90:30:2a:6e:d6:ea:1c:90:37:02:25:3e:fe:1c:64:de:3a:6b: f5:9d:88:a6:e1:7f:9c:02:be:77:25:44:9d:5c:d5:fe:80:fe: 46:6e:64:96:ca:47:43:75:9a:fb:35:a5:6b:3e:be:2a:98:ea: b0:76:59:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9NnM36t3F4Y9TgzZt2p5bR4m2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQzODRBNzdGQzFFMDNCQUJBQThEQjZFOTVGOTc5QjA4 RDE2REFCOTAeFw0yNjA5MTYxODE2NDlaFw0yNjA5MTcyMjIwNDlaMDMxMTAvBgNV BAMTKDcwQUZFODBERTJFMDA0MEY3OEZBNjE4RTM3RDc2QjYxMTQyOTc5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVTKXb+Fx9VzlyIb4iLe5lyscZ 75tt1yBAPxvaTLS84BFVFkRFIPJHPCYB1+btPK3WejHkKJiDzwkQXplUkbGfFsfm Bs8kbn7yPLuw2Jj/t9CAYizSYmO07R3tmIqENf4+S7dm2aCbj0EUnuw5GPAc+mfW KEjbXZvQraMWMlUrJY5pOWZsEWrPfILYxDSnXR9gdWyH/Q395WLuoUlCUFLR/QPi j0Z8ljlhU0zblRj/qcZ6YYZhGWvLN4+1dd1Wcce8qO0zf3BNgmlHjM1VrH+mYnzn zCdjPiyaWLdXFf7MKuUlfg/xmJDdyC6oS+4uRSl+Slavi5sznmORm/jve6DzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcK/oDeLgBA94+mGON9drYRQpeVwwHwYDVR0j BBgwFoAUFDhKd/weA7q6qNtulfl5sI0W2rkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDczMmYxOTEtZTM4MC00MDEzLWJjZTUtNDIxNWE0OTNhNzFkLzAvMTQzODRBNzdG QzFFMDNCQUJBQThEQjZFOTVGOTc5QjA4RDE2REFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDM4NEE3N0ZDMUUwM0JBQkFBOERCNkU5NUY5NzlCMDhEMTZE QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvMTQzODRBNzdGQzFFMDNCQUJBQThEQjZFOTVGOTc5 QjA4RDE2REFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPyFgpvhUkGefCxhIGCeZhFLygmv3vdJ6Aj 5yN9W//evQaNUlgJWtqHl1bltEI5ELP9fe6L3h6bEz+j61HU0UzmClVJrMqzObDX o9MNvJfayhxy+HkwR4YsgyMEUA+HBT4tAV7hK3b/tPno8+ws8o58EqW27ZMoHRUA FTZfK9VKDzASIK2WgQ1VzSfnNdxBQ8WYQSqzQKnTfaGj88fG3WgxQ4d5LwDcemBw lNAd+lurDUi5jL+xqXmQNl74h0rq3J0QgsNGB5AwKm7W6hyQNwIlPv4cZN46a/Wd iKbhf5wCvnclRJ1c1f6A/kZuZJbKR0N1mvs1pWs+viqY6rB2Wf8= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:05 2026 by rpki-client