$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft File: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft (raw, json) Hash identifier: +wnVHtAilxWetIyNJiEa1TPqCTuVjfQAGL0Yogm44w4= Subject key identifier: F1:57:61:FC:E5:28:06:27:A3:8C:89:BB:4F:D6:38:8F:B0:68:32:19 Authority key identifier: 81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 Certificate issuer: /CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Certificate serial: 2F13E66CEAB27B06325D7584EB524BF731B98C41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:03:52 +0000 Manifest this update: Wed 16 Sep 2026 19:58:52 +0000 Manifest next update: Thu 17 Sep 2026 20:11:52 +0000 Files and hashes: 1: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: 2pXek6gWnmZ3X1sQ40jRh2qfPg290PWebfx41xborSQ=) 2: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl (hash: +4Lb/NFPnJB8A+l2W6aqPoVUiipZPfazv9UnzzcIrtM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:13:e6:6c:ea:b2:7b:06:32:5d:75:84:eb:52:4b:f7:31:b9:8c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Validity Not Before: Sep 16 19:58:52 2026 GMT Not After : Sep 17 20:11:52 2026 GMT Subject: CN=F15761FCE5280627A38C89BB4FD6388FB0683219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:77:1c:68:a6:ce:14:e3:25:f7:ad:20:42: 7e:99:6a:86:5c:4a:ec:09:34:27:89:36:e5:a7:a6: cb:cb:86:a3:5f:7d:01:17:c8:9a:ea:0e:28:82:5e: 45:51:b1:51:b1:93:88:02:be:77:a1:8a:aa:1d:f6: c7:f1:cc:76:a6:ed:9f:fb:48:ea:3d:24:21:d9:6d: 7a:28:96:c8:c2:99:07:29:c5:3b:70:8e:6e:15:b1: cc:12:a3:9f:5d:39:0c:b4:1c:a3:5f:de:61:68:a0: 81:08:fc:48:55:3b:22:d8:4f:e1:b1:99:ea:26:1c: e2:a3:ac:16:cd:b7:24:7c:69:50:dc:b7:53:6b:48: a2:65:91:4f:b4:ba:b0:92:a4:b1:05:46:d3:1c:68: ed:ce:73:24:f0:31:e6:d2:8a:3c:6c:eb:75:25:c2: f6:33:59:0e:d4:98:c6:f8:5e:de:fe:9a:ef:7a:11: 74:ec:a7:35:fb:1d:38:37:f5:35:17:4e:07:bc:e2: 3f:0d:df:04:ca:a6:f0:94:a7:c8:86:8f:a0:0a:3b: 36:65:b8:90:01:5b:25:0b:b7:a6:4c:25:82:5e:c2: ec:11:1c:71:9a:b0:89:62:67:5a:72:79:09:4a:96: 7e:7d:1d:d5:52:86:59:db:f1:74:f2:29:2d:82:2f: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:57:61:FC:E5:28:06:27:A3:8C:89:BB:4F:D6:38:8F:B0:68:32:19 X509v3 Authority Key Identifier: keyid:81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:d4:1a:1a:31:c9:05:84:f5:f4:a8:4b:fe:c6:30:29:42:f7: 0a:f4:c7:38:45:02:53:69:82:1c:c2:9a:ff:8c:99:c6:da:4b: 01:22:cd:c4:b2:a4:83:5c:99:ea:ec:f0:fc:e3:88:40:b1:8b: e2:ae:a3:ce:4f:91:99:12:c4:8f:51:b0:71:94:af:30:f6:4b: 19:8e:6e:56:79:7f:72:bb:59:e5:55:d7:f8:9e:cd:d5:1a:64: 12:f9:09:e5:a2:57:21:76:9b:8d:64:77:dd:c9:24:65:3e:e7: 3a:ce:5b:de:8c:e3:c8:2e:d6:0f:d2:5b:38:28:6f:0d:b5:b7: dc:fb:a1:56:0a:4c:1c:bb:18:20:d2:dd:b6:1e:fc:27:0c:cd: ed:6e:f4:cb:80:ae:1e:77:9d:36:15:90:8f:1d:62:07:36:ab: 73:55:6a:0b:ea:e1:ca:f2:85:bb:b1:fb:94:a4:42:e8:66:79: 5b:5d:54:b7:88:3d:92:72:31:9e:9b:66:d2:2a:84:3a:55:c7: e2:b9:a0:5f:c4:71:fb:d3:55:5a:87:7e:9f:79:9e:73:b6:fd: 93:e4:b6:02:49:9b:19:5d:f6:95:dc:8f:65:30:69:c0:2b:b3: 66:c1:82:7f:dd:e9:47:c4:60:7b:18:9d:3f:c4:6d:4e:5c:6c: 52:44:c0:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxPmbOqyewYyXXWE61JL9zG5jEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMxNDky RDEyQzFDMzAeFw0yNjA5MTYxOTU4NTJaFw0yNjA5MTcyMDExNTJaMDMxMTAvBgNV BAMTKEYxNTc2MUZDRTUyODA2MjdBMzhDODlCQjRGRDYzODhGQjA2ODMyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19HccaKbOFOMl960gQn6ZaoZc SuwJNCeJNuWnpsvLhqNffQEXyJrqDiiCXkVRsVGxk4gCvnehiqod9sfxzHam7Z/7 SOo9JCHZbXoolsjCmQcpxTtwjm4VscwSo59dOQy0HKNf3mFooIEI/EhVOyLYT+Gx meomHOKjrBbNtyR8aVDct1NrSKJlkU+0urCSpLEFRtMcaO3OcyTwMebSijxs63Ul wvYzWQ7UmMb4Xt7+mu96EXTspzX7HTg39TUXTge84j8N3wTKpvCUp8iGj6AKOzZl uJABWyULt6ZMJYJewuwRHHGasIliZ1pyeQlKln59HdVShlnb8XTyKS2CL2MNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Vdh/OUoBiejjIm7T9Y4j7BoMhkwHwYDVR0j BBgwFoAUgU18qPWoYohW1D0eIBoxSS0SwcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY1ZGQwYWEtZmE3YS00ZGE0LWExYzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThG NUE4NjI4ODU2RDQzRDFFMjAxQTMxNDkyRDEyQzFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTREN0NBOEY1QTg2Mjg4NTZENDNEMUUyMDFBMzE0OTJEMTJD MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMx NDkyRDEyQzFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANjUGhoxyQWE9fSoS/7GMClC9wr0xzhFAlNp ghzCmv+MmcbaSwEizcSypINcmers8PzjiECxi+Kuo85PkZkSxI9RsHGUrzD2SxmO blZ5f3K7WeVV1/iezdUaZBL5CeWiVyF2m41kd93JJGU+5zrOW96M48gu1g/SWzgo bw21t9z7oVYKTBy7GCDS3bYe/CcMze1u9MuArh53nTYVkI8dYgc2q3NVagvq4cry hbux+5SkQuhmeVtdVLeIPZJyMZ6bZtIqhDpVx+K5oF/EcfvTVVqHfp95nnO2/ZPk tgJJmxld9pXcj2UwacArs2bBgn/d6UfEYHsYnT/EbU5cbFJEwMw= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:27 2026 by rpki-client