$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft File: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft (raw, json) Hash identifier: Uqea9OuRgBeyK+qsiSb7HxGHyR+ZMQO7NsesLghSC30= Subject key identifier: 76:FB:63:07:F8:FC:BD:CC:BD:7C:99:8A:83:F9:45:24:0A:73:98:89 Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Certificate serial: 02A6B27C85E21A607E1A554EBA0E0397AEA3FFA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 10:59:46 +0000 Manifest this update: Wed 23 Sep 2026 10:54:46 +0000 Manifest next update: Thu 24 Sep 2026 14:30:46 +0000 Files and hashes: 1: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl (hash: 0YU8zbvcRE0ie/cPik7zrE6oUQv8Hbu9H2w47WL2Z7E=) 2: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: 2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=) 3: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=) 4: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a6:b2:7c:85:e2:1a:60:7e:1a:55:4e:ba:0e:03:97:ae:a3:ff:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Validity Not Before: Sep 23 10:54:46 2026 GMT Not After : Sep 24 14:30:46 2026 GMT Subject: CN=76FB6307F8FCBDCCBD7C998A83F945240A739889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:da:bc:32:70:49:0b:7b:b8:62:a4:04:7a: cf:15:6a:f0:9b:ae:c0:f3:c3:ee:1a:97:5f:dd:4a: fc:b2:5e:16:83:ad:59:51:8d:b4:4d:d8:21:62:21: a0:29:12:1a:c3:6f:a6:cc:ff:fa:e4:2c:b9:ca:2d: 15:35:dd:c3:5e:b6:25:da:3a:f2:b3:30:ac:ee:fa: 32:82:20:87:60:66:73:55:ec:37:93:f8:84:f3:a6: a8:24:a7:ca:ea:01:ce:b9:78:58:92:50:00:92:23: 1f:f3:93:cf:3c:50:8e:67:7b:80:44:c6:d9:c3:8a: 26:17:19:5a:2f:57:e5:17:fd:0d:07:7f:18:e6:7f: 23:f3:9a:25:2a:e1:18:ca:2a:52:be:ce:e5:56:59: cd:43:34:e2:21:a8:66:bc:18:58:d9:79:b5:5c:0e: b8:69:bd:91:6d:b0:fa:23:3f:0a:68:e9:97:cc:f3: e9:7f:0e:96:44:37:f8:15:b0:50:6f:1e:7e:19:60: 61:d1:01:4b:13:9d:d5:24:cd:fc:a1:46:ec:8f:70: 2e:dd:99:e7:43:f8:5b:e6:72:31:ed:91:fd:03:23: ad:d9:c1:d9:fe:56:36:0d:97:fb:59:46:1b:3b:63: bd:2f:83:e3:8f:28:a6:af:be:cc:d3:94:51:96:93: 03:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FB:63:07:F8:FC:BD:CC:BD:7C:99:8A:83:F9:45:24:0A:73:98:89 X509v3 Authority Key Identifier: keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:73:c0:2a:c1:57:6e:9e:75:00:2a:bf:a1:14:c1:06:57:32: 21:0b:1b:49:df:ee:79:0d:a7:52:f6:07:32:d7:72:f4:15:ef: 03:bb:af:dd:b8:ff:03:9c:d9:d4:e0:d3:bb:bd:1c:a8:b4:83: 73:0f:5f:b9:cb:56:80:87:af:97:67:7e:f9:79:8e:44:68:4e: c0:83:bd:bd:c6:96:57:aa:87:9f:9a:75:74:78:ab:3b:ea:cf: 16:ef:16:24:da:64:cb:cc:07:4c:89:c0:dd:fd:9b:5c:4d:5c: a5:34:c8:f7:d7:6c:ab:9c:50:fb:d2:f2:8f:40:b6:d3:d0:94: db:db:1a:d8:39:df:95:7d:57:23:b3:25:f5:6e:60:ac:ef:26: bc:7c:30:a9:63:41:42:e6:41:17:30:2b:fd:bc:b8:f7:29:09: 06:d0:77:09:ed:23:e3:59:a5:48:2c:19:e7:fe:db:cb:51:88: ec:d4:a2:34:e1:83:c0:8c:3e:f0:f0:a5:32:38:40:b5:eb:01: a2:c6:36:90:36:b3:f0:d4:8a:e3:57:08:ff:5a:67:0a:c5:c4: 5a:a2:de:2b:b0:51:7d:21:81:2f:e9:66:96:7a:ad:a9:50:81: 7d:34:c1:2a:3f:f3:d6:b4:d2:1e:1d:9a:82:63:2b:f7:9d:4e: b3:b9:d3:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqayfIXiGmB+GlVOug4Dl66j/6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdD OTFCOTAzMjAeFw0yNjA5MjMxMDU0NDZaFw0yNjA5MjQxNDMwNDZaMDMxMTAvBgNV BAMTKDc2RkI2MzA3RjhGQ0JEQ0NCRDdDOTk4QTgzRjk0NTI0MEE3Mzk4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaNq8MnBJC3u4YqQEes8VavCb rsDzw+4al1/dSvyyXhaDrVlRjbRN2CFiIaApEhrDb6bM//rkLLnKLRU13cNetiXa OvKzMKzu+jKCIIdgZnNV7DeT+ITzpqgkp8rqAc65eFiSUACSIx/zk888UI5ne4BE xtnDiiYXGVovV+UX/Q0HfxjmfyPzmiUq4RjKKlK+zuVWWc1DNOIhqGa8GFjZebVc DrhpvZFtsPojPwpo6ZfM8+l/DpZEN/gVsFBvHn4ZYGHRAUsTndUkzfyhRuyPcC7d medD+FvmcjHtkf0DI63Zwdn+VjYNl/tZRhs7Y70vg+OPKKavvszTlFGWkwMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdvtjB/j8vcy9fJmKg/lFJApzmIkwHwYDVR0j BBgwFoAU/+erKNJ3pa7EzUfaZX34F8kbkDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRjYzY5ZTktZWY3NC00YjgxLTkxZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhE Mjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdDOTFCOTAzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkU3QUIyOEQyNzdBNUFFQzRDRDQ3REE2NTdERjgxN0M5MUI5 MDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4 MTdDOTFCOTAzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhzwCrBV26edQAqv6EUwQZXMiELG0nf7nkN p1L2BzLXcvQV7wO7r924/wOc2dTg07u9HKi0g3MPX7nLVoCHr5dnfvl5jkRoTsCD vb3Glleqh5+adXR4qzvqzxbvFiTaZMvMB0yJwN39m1xNXKU0yPfXbKucUPvS8o9A ttPQlNvbGtg535V9VyOzJfVuYKzvJrx8MKljQULmQRcwK/28uPcpCQbQdwntI+NZ pUgsGef+28tRiOzUojThg8CMPvDwpTI4QLXrAaLGNpA2s/DUiuNXCP9aZwrFxFqi 3iuwUX0hgS/pZpZ6ralQgX00wSo/89a00h4dmoJjK/edTrO50+E= -----END CERTIFICATE-----Generated at Thu Sep 24 02:27:49 2026 by rpki-client