$ rpki-client -vvf rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft File: 914D306354D2880E2D8000A84096A7D0FD93DB6F.mft (raw, json) Hash identifier: X1pbWfPDi7ja8BKil9M8Wv4txDB/7b4VrU0G1Mex73k= Subject key identifier: 8B:17:AD:D5:21:3F:CE:CF:B6:40:5B:8D:74:4F:97:A8:B7:C2:EE:8A Authority key identifier: 91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F Certificate issuer: /CN=914D306354D2880E2D8000A84096A7D0FD93DB6F Certificate serial: 7714A11397EDC2458EDDE2D63DE42EFD0AF216C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 00:10:06 +0000 Manifest this update: Sat 20 Jun 2026 00:05:06 +0000 Manifest next update: Sun 21 Jun 2026 03:26:06 +0000 Files and hashes: 1: 914D306354D2880E2D8000A84096A7D0FD93DB6F.crl (hash: tQKOXHNA6q3xDeBfgNDpTZMezBimTwXGaULjOXm8l64=) 2: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: kuGnEQzcoDJhm5rFlzTvBCAiLMXXIFxC7mIG7REa29w=) 3: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: uK0BRaW/xJFX4xoOs5c+Wr7pOkzcDPXliVBiSDQWuQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:14:a1:13:97:ed:c2:45:8e:dd:e2:d6:3d:e4:2e:fd:0a:f2:16:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914D306354D2880E2D8000A84096A7D0FD93DB6F Validity Not Before: Jun 20 00:05:06 2026 GMT Not After : Jun 21 03:26:06 2026 GMT Subject: CN=8B17ADD5213FCECFB6405B8D744F97A8B7C2EE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c0:46:50:99:ca:f5:35:d0:ed:19:bd:a8:38: c4:b7:13:00:a0:b7:17:a7:dd:fd:d1:17:e4:e2:24: 55:47:55:c1:c5:b8:97:94:14:04:0d:4a:c7:ac:61: 6e:6a:fc:c6:6a:e4:2e:f4:97:e1:3c:e6:34:cf:e2: aa:bc:06:42:5a:81:d2:87:66:77:fb:a5:f9:3e:90: 03:8c:0a:8e:7f:de:3a:95:2f:70:77:ce:7e:1c:ec: 09:0f:58:89:74:e7:93:3c:8a:6e:8b:c0:ea:ff:d1: 60:07:94:17:3f:47:1c:29:75:23:ab:2f:73:17:46: 20:d8:67:e1:6f:aa:b7:d5:60:08:3f:e9:db:ae:59: 4e:ef:41:f0:c0:5c:6d:23:3b:84:3e:89:54:6d:c4: a7:a1:dc:e5:2f:6c:2f:cf:27:28:60:ba:e0:db:e2: 99:0f:8c:fd:4d:22:1b:22:06:0a:da:86:97:5e:85: 3c:bf:81:fb:dd:eb:86:05:d6:30:5f:0d:4e:b9:81: 2c:fb:9f:71:c0:b1:17:e1:a4:6f:c5:74:b0:d2:d1: ff:ef:62:3e:ff:7a:b4:61:ec:47:fa:fb:b1:c1:06: 93:17:8b:16:e1:78:fa:8e:c2:7b:5a:71:01:b2:66: 7a:55:50:2b:3c:11:ce:aa:4a:c5:e3:6d:0d:46:db: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:17:AD:D5:21:3F:CE:CF:B6:40:5B:8D:74:4F:97:A8:B7:C2:EE:8A X509v3 Authority Key Identifier: keyid:91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f7:74:06:17:59:02:e4:f1:dc:27:dd:bd:cc:f6:67:cf:d0: 83:2c:67:06:5c:7d:d9:1f:72:3e:4d:08:a8:7f:f5:17:e9:d7: 22:62:b8:54:a8:cd:17:f1:7c:47:5b:37:bc:90:41:c5:f1:ea: 48:79:16:76:48:d9:4a:9e:08:fc:92:05:71:26:21:53:05:7c: 0e:d7:aa:22:e5:7b:78:6a:41:69:67:22:20:31:35:13:ac:cd: f6:4d:00:08:ae:c8:dd:f5:7d:96:8a:61:22:4b:93:f0:bc:10: 6c:bd:0b:a9:8e:5d:d4:0e:e1:18:31:3e:75:89:56:43:9f:44: 63:af:da:64:8b:10:11:4b:06:80:13:b1:3b:e1:de:7a:09:79: a9:c6:c6:52:f3:e3:ac:95:b4:35:36:14:dc:5b:c7:96:88:a5: 32:50:c7:de:19:18:ef:c5:30:0f:de:01:e4:ed:61:54:0f:ad: 8f:bc:ef:e0:79:db:6b:0e:ab:75:d2:ac:33:2b:79:9a:36:39: 1f:67:ba:d9:2e:fb:3d:28:27:15:43:35:29:43:65:00:b3:f1: 4e:57:71:ae:07:c9:c9:c2:f0:81:5f:0c:36:c3:94:37:df:7f: 1a:2b:63:c9:07:5f:ee:19:ef:6f:d0:ea:9e:3d:b5:15:6f:a1: 80:96:f2:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxShE5ftwkWO3eLWPeQu/QryFsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0RDMwNjM1NEQyODgwRTJEODAwMEE4NDA5NkE3RDBG RDkzREI2RjAeFw0yNjA2MjAwMDA1MDZaFw0yNjA2MjEwMzI2MDZaMDMxMTAvBgNV BAMTKDhCMTdBREQ1MjEzRkNFQ0ZCNjQwNUI4RDc0NEY5N0E4QjdDMkVFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8wEZQmcr1NdDtGb2oOMS3EwCg txen3f3RF+TiJFVHVcHFuJeUFAQNSsesYW5q/MZq5C70l+E85jTP4qq8BkJagdKH Znf7pfk+kAOMCo5/3jqVL3B3zn4c7AkPWIl055M8im6LwOr/0WAHlBc/RxwpdSOr L3MXRiDYZ+FvqrfVYAg/6duuWU7vQfDAXG0jO4Q+iVRtxKeh3OUvbC/PJyhguuDb 4pkPjP1NIhsiBgrahpdehTy/gfvd64YF1jBfDU65gSz7n3HAsRfhpG/FdLDS0f/v Yj7/erRh7Ef6+7HBBpMXixbhePqOwntacQGyZnpVUCs8Ec6qSsXjbQ1G2++tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUixet1SE/zs+2QFuNdE+XqLfC7oowHwYDVR0j BBgwFoAUkU0wY1TSiA4tgACoQJan0P2T228wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVlMjA4OGEtYzlmZi00ZDg0LWJlNGUtMTQxZDViODBiNTQzLzAvOTE0RDMwNjM1 NEQyODgwRTJEODAwMEE4NDA5NkE3RDBGRDkzREI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTREMzA2MzU0RDI4ODBFMkQ4MDAwQTg0MDk2QTdEMEZEOTNE QjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvOTE0RDMwNjM1NEQyODgwRTJEODAwMEE4NDA5NkE3 RDBGRDkzREI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKP3dAYXWQLk8dwn3b3M9mfP0IMsZwZcfdkf cj5NCKh/9Rfp1yJiuFSozRfxfEdbN7yQQcXx6kh5FnZI2UqeCPySBXEmIVMFfA7X qiLle3hqQWlnIiAxNROszfZNAAiuyN31fZaKYSJLk/C8EGy9C6mOXdQO4RgxPnWJ VkOfRGOv2mSLEBFLBoATsTvh3noJeanGxlLz46yVtDU2FNxbx5aIpTJQx94ZGO/F MA/eAeTtYVQPrY+87+B522sOq3XSrDMreZo2OR9nutku+z0oJxVDNSlDZQCz8U5X ca4HycnC8IFfDDbDlDfffxorY8kHX+4Z72/Q6p49tRVvoYCW8kA= -----END CERTIFICATE-----Generated at Sat Jun 20 08:56:47 2026 by rpki-client