$ rpki-client -vvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft File: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft (raw, json) Hash identifier: S31rJ0wH+6/75xOhiZdB+NsDvTskfdMAyAZqOcOndXE= Subject key identifier: BF:78:E7:8A:2B:18:03:00:48:A9:BD:AC:82:20:29:C5:51:DE:54:16 Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Certificate serial: 03215429FD37A7F3F046DF75E4CEC31202E72CD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 09:06:01 +0000 Manifest this update: Thu 23 Jul 2026 09:01:01 +0000 Manifest next update: Fri 24 Jul 2026 11:43:01 +0000 Files and hashes: 1: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl (hash: 5Noq1jY9/6N4wYc+zCJ2yCYnyhgORANXSA7IdrGqCEU=) 2: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=) 3: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=) 4: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: 2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:21:54:29:fd:37:a7:f3:f0:46:df:75:e4:ce:c3:12:02:e7:2c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Validity Not Before: Jul 23 09:01:01 2026 GMT Not After : Jul 24 11:43:01 2026 GMT Subject: CN=BF78E78A2B18030048A9BDAC822029C551DE5416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:0b:3e:8d:d6:73:d4:a0:b2:d5:70:f8:76: 02:25:4d:8e:cd:8d:c8:1f:95:ac:eb:0c:7e:49:da: 44:27:bd:8f:f2:c2:97:67:ee:7e:22:83:bf:47:2e: c2:60:0a:1b:fb:71:31:0f:dd:d7:35:d7:34:92:15: 72:61:bb:1d:91:37:ff:c7:b2:4c:2f:5c:ce:89:4c: df:9c:6f:9d:da:13:b4:e0:fc:ea:17:f0:13:7f:ce: be:2c:9a:7c:70:63:79:d8:6f:93:7e:fb:e2:be:89: f3:dc:bf:bd:b3:5e:b2:9d:76:bb:9a:a8:ee:24:d6: fe:4c:8f:53:cd:22:29:44:15:dc:ac:ed:53:79:3c: 5b:8b:ac:c3:b7:53:5a:7d:2b:71:f9:81:74:6f:c3: 3c:d1:70:82:77:52:24:e0:81:80:d5:c5:f2:b0:df: a4:71:ff:d1:48:f5:31:50:fa:8a:4d:dd:1a:d3:60: 69:61:2b:1c:f8:00:81:e0:18:29:05:9e:d0:04:02: 94:91:f9:2d:fa:73:29:5b:0c:c1:49:41:79:89:1f: a0:bd:f0:ff:f8:d8:7a:a8:df:9b:ba:c5:d7:4e:6a: 0c:4a:13:65:56:a8:7b:81:8c:a0:bd:d0:2d:65:22: d2:3f:d2:fe:05:ef:53:e1:29:ad:34:70:07:72:6d: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:78:E7:8A:2B:18:03:00:48:A9:BD:AC:82:20:29:C5:51:DE:54:16 X509v3 Authority Key Identifier: keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8a:f6:66:2c:8f:2f:00:11:55:07:61:e6:d0:66:f6:de:01: 5d:70:6e:8a:d2:c1:2f:49:fd:5f:bd:0d:13:68:9d:7a:c9:73: b3:08:d7:b2:f8:f5:3a:d3:18:99:d2:f9:58:59:d5:d5:b1:99: 2f:72:7c:87:61:a3:1b:b7:05:94:01:e8:90:35:b7:8c:0e:6e: dd:be:5d:fd:79:4b:af:61:36:f8:bf:a9:82:75:59:b7:0c:f1: 09:2f:e2:a0:d4:b8:5e:ce:62:12:04:1d:c9:52:36:29:2e:f1: d2:ff:6a:a8:4a:16:2e:c5:7c:50:4a:6f:1d:0f:8e:43:da:87: 20:22:8b:fc:3c:f6:44:49:31:de:b2:d4:ff:99:a5:8e:49:77: 97:63:2c:44:0d:ed:73:d2:35:c3:4e:c3:c8:76:31:16:36:4b: 72:94:82:3b:45:88:f3:99:b2:e0:7d:b8:3e:8c:fc:70:69:74: 4e:21:0f:16:63:21:fe:68:14:21:9b:28:12:59:5a:7a:55:25: e5:9d:3f:90:63:de:d0:2c:e5:33:6d:9a:ae:66:30:67:1d:a1: 88:3c:84:55:77:d6:22:4a:c9:46:01:16:b4:1d:b0:09:ac:9d: 6f:95:f7:b0:db:49:d8:17:4f:07:1f:fa:1e:6e:df:c1:ca:0f: 12:35:d6:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyFUKf03p/PwRt915M7DEgLnLNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdD OTFCOTAzMjAeFw0yNjA3MjMwOTAxMDFaFw0yNjA3MjQxMTQzMDFaMDMxMTAvBgNV BAMTKEJGNzhFNzhBMkIxODAzMDA0OEE5QkRBQzgyMjAyOUM1NTFERTU0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHiws+jdZz1KCy1XD4dgIlTY7N jcgflazrDH5J2kQnvY/ywpdn7n4ig79HLsJgChv7cTEP3dc11zSSFXJhux2RN//H skwvXM6JTN+cb53aE7Tg/OoX8BN/zr4smnxwY3nYb5N+++K+ifPcv72zXrKddrua qO4k1v5Mj1PNIilEFdys7VN5PFuLrMO3U1p9K3H5gXRvwzzRcIJ3UiTggYDVxfKw 36Rx/9FI9TFQ+opN3RrTYGlhKxz4AIHgGCkFntAEApSR+S36cylbDMFJQXmJH6C9 8P/42Hqo35u6xddOagxKE2VWqHuBjKC90C1lItI/0v4F71PhKa00cAdybX2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3jniisYAwBIqb2sgiApxVHeVBYwHwYDVR0j BBgwFoAU/+erKNJ3pa7EzUfaZX34F8kbkDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRjYzY5ZTktZWY3NC00YjgxLTkxZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhE Mjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdDOTFCOTAzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkU3QUIyOEQyNzdBNUFFQzRDRDQ3REE2NTdERjgxN0M5MUI5 MDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4 MTdDOTFCOTAzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWK9mYsjy8AEVUHYebQZvbeAV1wborSwS9J /V+9DRNonXrJc7MI17L49TrTGJnS+VhZ1dWxmS9yfIdhoxu3BZQB6JA1t4wObt2+ Xf15S69hNvi/qYJ1WbcM8Qkv4qDUuF7OYhIEHclSNiku8dL/aqhKFi7FfFBKbx0P jkPahyAii/w89kRJMd6y1P+ZpY5Jd5djLEQN7XPSNcNOw8h2MRY2S3KUgjtFiPOZ suB9uD6M/HBpdE4hDxZjIf5oFCGbKBJZWnpVJeWdP5Bj3tAs5TNtmq5mMGcdoYg8 hFV31iJKyUYBFrQdsAmsnW+V97DbSdgXTwcf+h5u38HKDxI11ss= -----END CERTIFICATE-----Generated at Fri Jul 24 02:32:47 2026 by rpki-client