$ rpki-client -vvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft File: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft (raw, json) Hash identifier: W0M/lxaUE09y0d650dRP8/JL6h5Vsnb/tBv5jxZgRWA= Subject key identifier: 9E:5E:30:4F:B5:AF:73:E0:A9:82:CC:90:D6:07:26:4B:5B:1F:89:30 Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Certificate serial: 1959521AB3AA4BC13309FD5182F6C4541389BEA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:36:13 +0000 Manifest this update: Tue 12 May 2026 16:31:13 +0000 Manifest next update: Wed 13 May 2026 16:39:13 +0000 Files and hashes: 1: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=) 2: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: 2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=) 3: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=) 4: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl (hash: kYT9xA73GF7mmKt5F4Ev0X8URRd5OQsQBV5/zgCoQtQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:59:52:1a:b3:aa:4b:c1:33:09:fd:51:82:f6:c4:54:13:89:be:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Validity Not Before: May 12 16:31:13 2026 GMT Not After : May 13 16:39:13 2026 GMT Subject: CN=9E5E304FB5AF73E0A982CC90D607264B5B1F8930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:65:80:34:ed:29:22:26:1e:b8:d7:24:bc: 28:7d:3c:b3:0c:22:c4:5b:be:1c:85:c8:ac:ed:2b: cf:c2:64:95:64:90:64:02:80:e2:27:f3:89:8c:67: 39:07:e4:5a:40:cf:33:2d:7c:02:d8:9b:de:61:7e: 82:e6:fd:42:55:dd:a5:b9:83:13:a9:d4:4e:5f:0f: d6:dd:2a:0e:a3:01:a7:f4:63:43:17:a0:bb:32:8c: 84:d9:26:17:ce:f6:ef:d8:a1:18:43:23:8e:af:4a: 14:c6:aa:5d:b7:11:91:8a:36:8c:09:98:a5:c5:d7: a6:77:e0:f0:2e:d6:9c:c6:6e:52:82:d9:29:20:8c: d2:7c:cc:a7:c1:3a:11:fc:14:ad:63:aa:ad:16:e3: 0d:05:79:fd:53:18:a3:cd:0b:cb:4e:eb:0e:ae:f0: 51:72:c8:0d:4b:11:eb:22:43:97:0d:7f:2f:e2:76: 4e:73:06:68:ee:2e:ec:16:6c:ff:bc:84:4d:a8:a1: d7:1e:db:94:03:f9:00:af:e4:df:6c:97:49:5b:50: ad:be:be:0e:2a:23:6f:73:7d:dd:14:09:2b:d0:0d: 94:c3:7f:d2:be:08:b9:63:94:c1:06:6f:27:0d:48: 6c:cf:f8:57:81:99:35:47:3b:9a:c1:a8:41:bb:45: e3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5E:30:4F:B5:AF:73:E0:A9:82:CC:90:D6:07:26:4B:5B:1F:89:30 X509v3 Authority Key Identifier: keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e4:dc:d0:62:78:3c:a2:53:c2:24:06:af:d8:94:e6:d9:1d: 2d:84:67:9a:3e:2f:76:c0:8d:4b:42:81:40:92:3b:db:04:9f: 91:42:69:63:13:c7:ab:5e:21:3d:fb:0c:1b:91:fa:a3:11:67: 1e:4c:06:0c:37:d8:f4:33:66:d8:72:22:c5:5a:7e:1b:02:0e: 4d:31:de:67:86:04:60:1e:a1:df:97:7c:bd:20:e8:fa:54:6e: 6e:0f:fd:59:d0:66:0a:01:ff:b5:01:bd:63:d8:d1:b9:72:3e: 38:a4:2b:cb:41:96:d4:d8:af:38:cc:c1:83:6e:b8:63:18:c5: cb:dd:13:68:28:39:d7:0b:37:83:b1:e9:78:f5:73:ee:fe:b3: d4:24:07:31:2e:90:de:91:e8:2c:90:88:95:02:63:7e:70:a0: 8a:5b:7b:f2:b3:24:cc:62:4c:d7:2a:77:89:61:bc:20:92:e5: 28:b1:97:72:af:b3:07:35:49:a2:9d:b6:29:eb:7f:b6:37:2b: 44:62:ce:9b:f4:ba:36:47:d2:32:09:72:d0:b5:ae:60:e1:45: 81:d4:2b:3a:e9:39:62:77:45:a5:7e:95:5d:de:d9:dd:e7:0b: 9e:13:d5:8a:7d:67:d2:2e:d2:c5:8a:06:d8:26:53:2a:27:d6: 41:42:0c:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVlSGrOqS8EzCf1RgvbEVBOJvqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdD OTFCOTAzMjAeFw0yNjA1MTIxNjMxMTNaFw0yNjA1MTMxNjM5MTNaMDMxMTAvBgNV BAMTKDlFNUUzMDRGQjVBRjczRTBBOTgyQ0M5MEQ2MDcyNjRCNUIxRjg5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeumWANO0pIiYeuNckvCh9PLMM IsRbvhyFyKztK8/CZJVkkGQCgOIn84mMZzkH5FpAzzMtfALYm95hfoLm/UJV3aW5 gxOp1E5fD9bdKg6jAaf0Y0MXoLsyjITZJhfO9u/YoRhDI46vShTGql23EZGKNowJ mKXF16Z34PAu1pzGblKC2SkgjNJ8zKfBOhH8FK1jqq0W4w0Fef1TGKPNC8tO6w6u 8FFyyA1LEesiQ5cNfy/idk5zBmjuLuwWbP+8hE2oodce25QD+QCv5N9sl0lbUK2+ vg4qI29zfd0UCSvQDZTDf9K+CLljlMEGbycNSGzP+FeBmTVHO5rBqEG7ReOhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnl4wT7Wvc+CpgsyQ1gcmS1sfiTAwHwYDVR0j BBgwFoAU/+erKNJ3pa7EzUfaZX34F8kbkDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRjYzY5ZTktZWY3NC00YjgxLTkxZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhE Mjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdDOTFCOTAzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkU3QUIyOEQyNzdBNUFFQzRDRDQ3REE2NTdERjgxN0M5MUI5 MDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4 MTdDOTFCOTAzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADk3NBieDyiU8IkBq/YlObZHS2EZ5o+L3bA jUtCgUCSO9sEn5FCaWMTx6teIT37DBuR+qMRZx5MBgw32PQzZthyIsVafhsCDk0x 3meGBGAeod+XfL0g6PpUbm4P/VnQZgoB/7UBvWPY0blyPjikK8tBltTYrzjMwYNu uGMYxcvdE2goOdcLN4Ox6Xj1c+7+s9QkBzEukN6R6CyQiJUCY35woIpbe/KzJMxi TNcqd4lhvCCS5Sixl3Kvswc1SaKdtinrf7Y3K0Rizpv0ujZH0jIJctC1rmDhRYHU KzrpOWJ3RaV+lV3e2d3nC54T1Yp9Z9Iu0sWKBtgmUyon1kFCDLs= -----END CERTIFICATE-----Generated at Wed May 13 01:07:00 2026 by rpki-client