$ rpki-client -vvvf rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft File: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft (raw, json) Hash identifier: O0lvwu9GjGPJt+fnhdaGSiJM3zNl3/8Co3y5rkk/xcE= Subject key identifier: C2:46:D5:22:EB:54:CC:19:7A:2F:EE:D3:DD:4E:04:FF:43:87:1F:D3 Authority key identifier: 31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 Certificate issuer: /CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Certificate serial: 063C236F0A03B2B9FD12023EC8E992DA0728A9A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:53:27 +0000 Manifest this update: Wed 16 Sep 2026 23:48:27 +0000 Manifest next update: Thu 17 Sep 2026 23:57:27 +0000 Files and hashes: 1: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl (hash: Iuw6El/bWjObUAi3RK0CpKWXCzFOZ0tdCcGWPtrlZws=) 2: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: KtHFgiZtCU/Oo5xwU2fpqeHLtCGkwIQI7UNolZenHzM=) 3: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: JHt7Y4sfZDXhljzVs+do4tcZibHDOYboGApg1o5d8oY=) 4: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: Q63O5LgByYAATkaug4pVt8bzE+ZHKwWLFzPYd2unh+E=) 5: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: FR/6TdAfo1P3iR6uXvmbo5xbGJoxQcFRkSBLcjXonAU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3c:23:6f:0a:03:b2:b9:fd:12:02:3e:c8:e9:92:da:07:28:a9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Validity Not Before: Sep 16 23:48:27 2026 GMT Not After : Sep 17 23:57:27 2026 GMT Subject: CN=C246D522EB54CC197A2FEED3DD4E04FF43871FD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:32:df:6d:f6:af:d0:a2:f5:d0:e9:66:f8: f7:40:26:db:37:8f:60:ea:0b:84:bb:be:e4:80:f2: 31:5e:3b:89:49:99:96:af:45:69:e3:20:c5:45:2b: 40:71:86:29:e4:48:29:26:9f:e7:58:47:18:44:11: 10:df:1b:56:16:1c:61:f8:e4:76:a5:20:a2:bb:95: 2c:8f:5a:27:77:9f:25:51:18:91:ac:fc:05:0d:1b: 59:e7:13:a8:f1:10:82:83:a0:eb:e1:6c:74:8c:2d: 4e:be:16:83:7c:28:c2:0c:65:d6:cd:fc:fe:70:c0: 7e:5a:9e:86:48:43:84:0a:7e:82:fe:f3:a3:88:23: 7f:33:aa:44:5c:2b:91:f5:4a:fa:c0:87:7e:43:77: 6e:42:0c:69:03:8c:55:75:e1:f5:a0:06:c1:42:0c: b6:df:9d:a2:e8:f9:65:20:84:96:00:ac:bf:52:85: bb:83:2b:ae:c1:1e:40:8b:df:23:23:60:60:bd:41: 51:10:83:2f:a3:5d:3d:e4:fa:28:32:9d:a1:8d:77: 78:be:88:4f:38:74:1a:11:b0:1e:6b:ae:f4:a3:ee: 7e:8e:01:15:66:93:de:22:fe:51:14:c3:64:8a:5f: 7c:7b:d6:f4:89:1e:1a:d4:91:ee:12:60:ac:3a:b4: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:46:D5:22:EB:54:CC:19:7A:2F:EE:D3:DD:4E:04:FF:43:87:1F:D3 X509v3 Authority Key Identifier: keyid:31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e2:4b:01:1c:00:63:d2:21:29:74:ea:03:ae:f7:a6:b0:7c: 7b:d1:a7:f1:1f:2d:23:b1:67:66:54:32:32:61:84:5e:31:4c: 43:b4:9c:fc:03:9c:bd:d3:c3:62:fb:5c:a4:c4:11:c1:d6:76: 95:c4:75:b4:2c:d8:ae:3a:2b:aa:17:8e:34:df:25:8b:48:73: 72:cf:11:d9:e2:87:5a:5b:40:a4:1f:c7:3a:24:ff:09:33:5b: a4:19:d9:22:f7:59:e9:36:1f:79:24:1c:3f:9a:f5:6a:82:70: f1:0b:96:77:da:a5:86:2f:98:44:91:45:5c:b1:57:0d:05:52: 04:20:fa:46:d5:b5:64:4e:90:ea:aa:1d:d9:35:7f:f0:f4:0c: 35:0d:d4:00:5e:c6:c9:17:00:15:6c:62:48:b4:6c:ef:5c:3b: 12:40:fa:ad:1e:44:78:01:34:b3:7d:3e:8c:38:04:b3:a9:85: af:6b:f3:69:99:e6:25:0b:97:b1:e1:64:40:b4:99:53:66:7b: 6a:18:38:69:56:ec:c3:95:69:b7:58:88:fe:f5:df:c1:ca:03: df:96:c9:c5:d6:b5:9b:48:de:4a:22:00:dc:1b:5a:98:22:b5: e6:b4:e0:dd:45:20:83:90:2c:85:22:9a:59:f0:dd:b7:73:d1: 7b:d9:a3:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjwjbwoDsrn9EgI+yOmS2gcoqacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEy RkVFM0ZBMjAeFw0yNjA5MTYyMzQ4MjdaFw0yNjA5MTcyMzU3MjdaMDMxMTAvBgNV BAMTKEMyNDZENTIyRUI1NENDMTk3QTJGRUVEM0RENEUwNEZGNDM4NzFGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSDLfbfav0KL10Olm+PdAJts3 j2DqC4S7vuSA8jFeO4lJmZavRWnjIMVFK0BxhinkSCkmn+dYRxhEERDfG1YWHGH4 5HalIKK7lSyPWid3nyVRGJGs/AUNG1nnE6jxEIKDoOvhbHSMLU6+FoN8KMIMZdbN /P5wwH5anoZIQ4QKfoL+86OII38zqkRcK5H1SvrAh35Dd25CDGkDjFV14fWgBsFC DLbfnaLo+WUghJYArL9ShbuDK67BHkCL3yMjYGC9QVEQgy+jXT3k+igynaGNd3i+ iE84dBoRsB5rrvSj7n6OARVmk94i/lEUw2SKX3x71vSJHhrUke4SYKw6tApHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwkbVIutUzBl6L+7T3U4E/0OHH9MwHwYDVR0j BBgwFoAUMRT+ooIGFLbov+MPs+Dk4S/uP6IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA3NjA4Y2UtYzNmOC00NGViLWFlZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4 MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEyRkVFM0ZBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTE0RkVBMjgyMDYxNEI2RThCRkUzMEZCM0UwRTRFMTJGRUUz RkEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0 RTEyRkVFM0ZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXiSwEcAGPSISl06gOu96awfHvRp/EfLSOx Z2ZUMjJhhF4xTEO0nPwDnL3Tw2L7XKTEEcHWdpXEdbQs2K46K6oXjjTfJYtIc3LP Ednih1pbQKQfxzok/wkzW6QZ2SL3Wek2H3kkHD+a9WqCcPELlnfapYYvmESRRVyx Vw0FUgQg+kbVtWROkOqqHdk1f/D0DDUN1ABexskXABVsYki0bO9cOxJA+q0eRHgB NLN9Pow4BLOpha9r82mZ5iULl7HhZEC0mVNme2oYOGlW7MOVabdYiP7138HKA9+W ycXWtZtI3koiANwbWpgitea04N1FIIOQLIUimlnw3bdz0XvZo7M= -----END CERTIFICATE-----Generated at Thu Sep 17 09:25:39 2026 by rpki-client