$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft File: 914D306354D2880E2D8000A84096A7D0FD93DB6F.mft (raw, json) Hash identifier: 6Shuna1gPpGnHpQgjftx/5xiaQwtzqM6MgN8NxTkTRA= Subject key identifier: 7C:43:C1:8B:65:57:38:84:B0:4E:32:7E:68:52:E0:EF:6B:5A:2B:E6 Authority key identifier: 91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F Certificate issuer: /CN=914D306354D2880E2D8000A84096A7D0FD93DB6F Certificate serial: 4B6ACEB4ABBB4F947805B3790B9C9BADC6FC8628 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 18:32:15 +0000 Manifest this update: Sat 24 Oct 2026 18:27:15 +0000 Manifest next update: Sun 25 Oct 2026 19:54:15 +0000 Files and hashes: 1: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: kuGnEQzcoDJhm5rFlzTvBCAiLMXXIFxC7mIG7REa29w=) 2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: uK0BRaW/xJFX4xoOs5c+Wr7pOkzcDPXliVBiSDQWuQY=) 3: 914D306354D2880E2D8000A84096A7D0FD93DB6F.crl (hash: KlljiYIl7uDxTUgEmZCNBZiXocUVMgWYPoRxp+E2MC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6a:ce:b4:ab:bb:4f:94:78:05:b3:79:0b:9c:9b:ad:c6:fc:86:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914D306354D2880E2D8000A84096A7D0FD93DB6F Validity Not Before: Oct 24 18:27:15 2026 GMT Not After : Oct 25 19:54:15 2026 GMT Subject: CN=7C43C18B65573884B04E327E6852E0EF6B5A2BE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6e:3b:a2:2e:b3:82:a0:aa:26:53:5d:57:49: 84:37:d8:1d:07:88:df:89:b0:8e:e8:54:22:f8:b4: 87:55:48:7a:f1:c6:4b:3c:d6:c7:ca:c6:bf:87:18: 0c:f6:df:36:06:aa:49:0d:0f:fb:37:01:d9:d8:28: c6:e5:ee:84:5c:c5:65:cc:ea:49:51:d0:a9:6d:19: 04:4d:56:94:15:95:24:96:0b:52:64:48:18:26:57: fb:b6:77:9b:d2:21:c3:be:6e:7d:02:83:3f:cc:7b: 9a:e8:99:62:00:3c:11:99:cd:6b:21:ee:de:81:28: f0:20:c0:07:a3:85:cd:c9:ac:c4:1c:28:f9:de:d2: 87:b0:24:58:ce:8c:ae:9e:5d:de:b1:ce:43:0e:b8: ab:e8:2c:7a:0f:88:86:cc:24:7f:30:a3:c0:93:5f: 00:5e:21:89:85:0c:3a:9f:af:c5:5e:75:84:6c:09: 87:1a:0e:05:4b:7a:8d:f6:7a:3a:45:95:ba:13:c6: ad:10:d4:a6:af:de:47:ad:1f:21:0c:fa:72:b3:68: 58:61:e5:26:d2:f8:f0:9f:7e:bb:cb:3d:3b:c6:d1: b1:eb:b7:9b:2a:29:47:40:f3:3e:8b:40:45:77:df: 50:94:da:49:c5:d4:41:83:35:2d:da:8b:38:76:64: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:43:C1:8B:65:57:38:84:B0:4E:32:7E:68:52:E0:EF:6B:5A:2B:E6 X509v3 Authority Key Identifier: keyid:91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:46:b8:7d:b5:13:bf:9d:c4:35:40:8f:f2:59:05:78:15:8e: 19:fb:07:f6:2e:b0:c2:d1:b4:1c:86:4b:ca:14:20:0f:de:e6: a2:e4:ec:cf:29:fa:d6:4a:2f:59:bd:73:62:d6:fd:4e:35:80: 81:99:92:eb:4f:1f:eb:37:d7:9a:1f:e0:60:ca:17:13:dd:0c: 7e:c6:0d:5b:90:72:41:5f:5f:d1:e2:e6:76:81:bd:ed:d0:5d: e6:42:7d:7a:c0:d8:a5:ce:d8:9c:73:23:87:ca:25:25:71:57: 69:8a:08:30:46:07:d9:8d:3f:e6:bd:b4:4e:03:96:8a:27:8c: 95:69:b6:60:bc:cc:94:a7:49:b0:3c:19:06:d1:1e:d8:a9:d9: 90:c5:59:24:3a:3a:f2:b2:66:c3:33:93:27:cb:ce:ff:b7:2e: 0d:5a:47:9b:3f:26:5d:e6:5b:b6:7c:16:78:51:65:e5:6d:46: 53:a0:5c:4f:de:54:61:1c:ed:c7:fc:b7:b2:93:c9:e8:b6:81: 70:5c:ca:e2:79:9b:3c:b8:14:44:3f:97:85:34:e8:52:10:33: 5a:f3:19:a8:5b:fd:80:13:12:f0:08:e8:df:4e:58:ad:ac:22: 40:d9:ec:83:cd:c1:2c:8b:4c:30:56:a2:22:e6:75:32:d5:75: 2a:0c:a8:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2rOtKu7T5R4BbN5C5ybrcb8higwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0RDMwNjM1NEQyODgwRTJEODAwMEE4NDA5NkE3RDBG RDkzREI2RjAeFw0yNjEwMjQxODI3MTVaFw0yNjEwMjUxOTU0MTVaMDMxMTAvBgNV BAMTKDdDNDNDMThCNjU1NzM4ODRCMDRFMzI3RTY4NTJFMEVGNkI1QTJCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabjuiLrOCoKomU11XSYQ32B0H iN+JsI7oVCL4tIdVSHrxxks81sfKxr+HGAz23zYGqkkND/s3AdnYKMbl7oRcxWXM 6klR0KltGQRNVpQVlSSWC1JkSBgmV/u2d5vSIcO+bn0Cgz/Me5romWIAPBGZzWsh 7t6BKPAgwAejhc3JrMQcKPne0oewJFjOjK6eXd6xzkMOuKvoLHoPiIbMJH8wo8CT XwBeIYmFDDqfr8VedYRsCYcaDgVLeo32ejpFlboTxq0Q1Kav3ketHyEM+nKzaFhh 5SbS+PCffrvLPTvG0bHrt5sqKUdA8z6LQEV331CU2knF1EGDNS3aizh2ZAb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfEPBi2VXOISwTjJ+aFLg72taK+YwHwYDVR0j BBgwFoAUkU0wY1TSiA4tgACoQJan0P2T228wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVlMjA4OGEtYzlmZi00ZDg0LWJlNGUtMTQxZDViODBiNTQzLzAvOTE0RDMwNjM1 NEQyODgwRTJEODAwMEE4NDA5NkE3RDBGRDkzREI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTREMzA2MzU0RDI4ODBFMkQ4MDAwQTg0MDk2QTdEMEZEOTNE QjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvOTE0RDMwNjM1NEQyODgwRTJEODAwMEE4NDA5NkE3 RDBGRDkzREI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBGuH21E7+dxDVAj/JZBXgVjhn7B/YusMLR tByGS8oUIA/e5qLk7M8p+tZKL1m9c2LW/U41gIGZkutPH+s315of4GDKFxPdDH7G DVuQckFfX9Hi5naBve3QXeZCfXrA2KXO2JxzI4fKJSVxV2mKCDBGB9mNP+a9tE4D loonjJVptmC8zJSnSbA8GQbRHtip2ZDFWSQ6OvKyZsMzkyfLzv+3Lg1aR5s/Jl3m W7Z8FnhRZeVtRlOgXE/eVGEc7cf8t7KTyei2gXBcyuJ5mzy4FEQ/l4U06FIQM1rz Gahb/YATEvAI6N9OWK2sIkDZ7IPNwSyLTDBWoiLmdTLVdSoMqCc= -----END CERTIFICATE-----Generated at Sun Oct 25 06:06:08 2026 by rpki-client