$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft File: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft (raw, json) Hash identifier: 2ycVOJt+kgUxrqjWCsdHa3dbAZZfdgFOpyrLYrJPhVM= Subject key identifier: 01:74:F4:70:26:06:EF:AD:D3:BD:0C:1B:40:65:4C:27:85:C1:AF:5F Authority key identifier: FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 Certificate issuer: /CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Certificate serial: 4E6B5A8B8C1C158CF48BCE3BBD3D8BEB958CF75D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 14:54:35 +0000 Manifest this update: Wed 23 Sep 2026 14:49:35 +0000 Manifest next update: Thu 24 Sep 2026 17:48:35 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: tqhtPy0pDXrbRO+/m8ay5h7+qXG3yJPzUoTIyb8m2MU=) 2: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: pv5zffL4ZCBhJD+aFjjZDdz/CPK6N+eA7QhskPfJHEg=) 3: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: DzuRo4UVpWSsuuvSZCPx+QPp1mXNSgbHMp2M3XRIA7s=) 4: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl (hash: l9yrh789QQ+6rzB/cTI4P8u15QRYhFCklnTg/rD6q2I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6b:5a:8b:8c:1c:15:8c:f4:8b:ce:3b:bd:3d:8b:eb:95:8c:f7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Validity Not Before: Sep 23 14:49:35 2026 GMT Not After : Sep 24 17:48:35 2026 GMT Subject: CN=0174F4702606EFADD3BD0C1B40654C2785C1AF5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:30:96:a8:d3:a7:ce:4c:af:11:d1:db:d4: d8:89:b9:2d:46:fd:06:ec:c1:5a:47:24:e1:94:5d: 35:94:7d:0f:ff:75:10:10:01:e5:e8:fb:21:c8:24: 83:73:48:6b:15:74:11:27:ca:d2:c3:c3:c8:8d:3e: 0a:a7:d7:fc:1a:cd:aa:bc:0d:d1:23:86:b3:09:74: b5:8a:5f:1e:06:0c:b5:e7:40:57:ec:4a:2c:4e:5a: 6f:16:5c:8b:a7:4a:ef:43:52:c4:3a:4a:57:07:0e: a7:b9:81:5b:0e:48:08:23:45:2e:e2:a0:69:a4:a0: b7:e9:89:4d:f4:32:cc:4c:4b:86:06:c0:04:c6:1c: c7:17:5b:d5:14:9b:54:b7:58:02:c8:18:a0:f6:8a: f3:d0:a0:6e:7d:7c:fc:65:f5:61:a2:5a:89:b3:6c: ab:5a:c2:c3:ca:11:1a:30:ff:aa:9e:d1:6d:f4:b0: b3:a3:9f:51:4f:f8:7b:4f:ea:bd:e3:11:e5:60:b0: 78:34:91:30:18:2f:8e:83:cf:a2:33:c5:a4:9d:44: 21:22:27:94:28:f8:46:04:2f:38:ea:f8:e0:c8:4f: b3:9f:1b:0b:ae:e7:b1:37:36:3a:21:9a:91:67:54: 65:19:f5:f3:63:d5:f2:4d:fa:6a:85:82:51:58:f1: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:74:F4:70:26:06:EF:AD:D3:BD:0C:1B:40:65:4C:27:85:C1:AF:5F X509v3 Authority Key Identifier: keyid:FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:69:ed:ba:60:e7:b3:d9:1a:6e:f1:32:93:b0:f4:f8:f9:4e: 0c:a3:e7:2c:fc:7e:9f:6b:b0:bb:d7:d8:bd:6f:3f:81:76:67: ad:64:f5:d6:75:5a:2e:7e:da:0d:f3:09:8b:43:39:9d:ef:f1: 4c:6b:b2:2e:35:e0:92:85:ef:39:e3:63:cb:12:3a:40:fd:96: 16:bf:c4:ba:fc:e0:64:50:af:75:32:ee:9c:ae:03:2e:da:43: 33:e2:96:1a:94:9f:be:7f:ba:e7:70:bb:31:6c:21:89:52:12: b2:95:54:52:8f:b5:0c:bc:43:3c:a7:6a:18:71:ec:4b:65:bd: c5:27:71:99:29:88:8d:0b:95:38:6e:ba:fc:00:90:d9:03:d5: 11:5b:b5:3a:44:56:12:fc:8b:5e:7f:d2:d2:2c:5b:62:38:30: 94:23:df:68:20:03:2f:7e:00:74:f8:14:30:35:91:e8:10:0b: a7:40:73:40:5b:ec:26:f8:29:f1:c4:e2:22:b2:6e:8e:b0:b1: fd:63:e6:d6:d2:44:d6:31:d7:63:b7:c0:e9:31:8e:36:47:2a: 73:ae:5c:ca:56:66:ca:71:ba:12:56:9f:a2:c1:f8:6b:b7:69: da:9a:24:34:b2:09:9a:9a:62:38:54:9b:ba:a1:f1:a3:14:0f: 94:67:71:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmtai4wcFYz0i847vT2L65WM910wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5 QjgzNDExMzAeFw0yNjA5MjMxNDQ5MzVaFw0yNjA5MjQxNzQ4MzVaMDMxMTAvBgNV BAMTKDAxNzRGNDcwMjYwNkVGQUREM0JEMEMxQjQwNjU0QzI3ODVDMUFGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUDCWqNOnzkyvEdHb1NiJuS1G /QbswVpHJOGUXTWUfQ//dRAQAeXo+yHIJINzSGsVdBEnytLDw8iNPgqn1/wazaq8 DdEjhrMJdLWKXx4GDLXnQFfsSixOWm8WXIunSu9DUsQ6SlcHDqe5gVsOSAgjRS7i oGmkoLfpiU30MsxMS4YGwATGHMcXW9UUm1S3WALIGKD2ivPQoG59fPxl9WGiWomz bKtawsPKERow/6qe0W30sLOjn1FP+HtP6r3jEeVgsHg0kTAYL46Dz6IzxaSdRCEi J5Qo+EYELzjq+ODIT7OfGwuu57E3NjohmpFnVGUZ9fNj1fJN+mqFglFY8S7hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAXT0cCYG763TvQwbQGVMJ4XBr18wHwYDVR0j BBgwFoAU//RmKb3bTzocbXjyU+O2PJuDQRMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZlZGIyOGYtZjNmOS00MTk5LTg1YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlC RERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5QjgzNDExMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkY0NjYyOUJEREI0RjNBMUM2RDc4RjI1M0UzQjYzQzlCODM0 MTEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2 M0M5QjgzNDExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5p7bpg57PZGm7xMpOw9Pj5Tgyj5yz8fp9r sLvX2L1vP4F2Z61k9dZ1Wi5+2g3zCYtDOZ3v8Uxrsi414JKF7znjY8sSOkD9lha/ xLr84GRQr3Uy7pyuAy7aQzPilhqUn75/uudwuzFsIYlSErKVVFKPtQy8Qzynahhx 7EtlvcUncZkpiI0LlThuuvwAkNkD1RFbtTpEVhL8i15/0tIsW2I4MJQj32ggAy9+ AHT4FDA1kegQC6dAc0Bb7Cb4KfHE4iKybo6wsf1j5tbSRNYx12O3wOkxjjZHKnOu XMpWZspxuhJWn6LB+Gu3adqaJDSyCZqaYjhUm7qh8aMUD5RncXg= -----END CERTIFICATE-----Generated at Thu Sep 24 01:04:42 2026 by rpki-client