$ rpki-client -vvf rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft File: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft (raw, json) Hash identifier: Z1IZkfvb1KGmDAtDMKKoKvcj+gGSuaqnUR1JsFFAVqw= Subject key identifier: 3B:C6:E6:1F:CE:19:8F:80:B2:DA:71:A3:01:4E:5B:D9:CA:66:59:15 Authority key identifier: FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 Certificate issuer: /CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Certificate serial: 7130D4EDD6C0B858DA83E5F97EC7A52D279032DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:24:59 +0000 Manifest this update: Thu 23 Jul 2026 16:19:59 +0000 Manifest next update: Fri 24 Jul 2026 19:13:59 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: tqhtPy0pDXrbRO+/m8ay5h7+qXG3yJPzUoTIyb8m2MU=) 2: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl (hash: H0/2V+eYkS1z1295sBNZV8efEm7KKCXzbeEcfQYSHE8=) 3: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: DzuRo4UVpWSsuuvSZCPx+QPp1mXNSgbHMp2M3XRIA7s=) 4: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: pv5zffL4ZCBhJD+aFjjZDdz/CPK6N+eA7QhskPfJHEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:30:d4:ed:d6:c0:b8:58:da:83:e5:f9:7e:c7:a5:2d:27:90:32:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Validity Not Before: Jul 23 16:19:59 2026 GMT Not After : Jul 24 19:13:59 2026 GMT Subject: CN=3BC6E61FCE198F80B2DA71A3014E5BD9CA665915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3a:22:8e:69:83:c5:c7:c2:c4:47:21:2f:8b: 53:6b:8e:52:8c:58:47:6f:27:17:65:c6:7d:6f:76: 39:b9:c2:c1:90:a1:8d:fc:87:34:b8:ec:80:83:69: 68:3d:aa:52:58:bc:9c:8a:04:d2:2e:14:b3:37:9e: 4c:9d:b5:bc:c3:8e:99:1d:34:6e:20:1e:a2:5d:34: f6:6d:3f:4f:80:f7:14:40:94:6f:d0:b3:a1:b6:d9: b2:b4:45:20:e7:a7:91:44:68:e9:f8:ba:e8:2a:23: 81:2a:ba:75:58:50:84:0b:56:2c:f4:42:ae:00:ba: 51:c0:c4:73:47:99:94:48:44:1b:d3:89:83:c4:00: fe:51:3e:4e:07:0f:7f:75:09:66:27:e4:64:e9:32: 4a:7c:cb:e5:66:14:16:8b:c6:ab:1e:89:a7:86:e7: ae:41:6d:2f:76:c2:43:82:34:4c:d8:c7:18:bc:b1: a5:a2:2d:1e:af:c7:1d:e0:7e:d7:e6:95:e4:85:a5: ff:ff:dc:df:9f:a6:9c:56:4b:35:46:eb:a9:03:6a: 0e:fa:de:e1:da:0d:b7:14:d6:a0:d8:59:e8:de:ad: 3a:be:f1:cf:25:39:6d:12:f5:b5:7e:e4:8e:7c:0b: 31:b2:e3:50:11:92:55:e0:64:d0:b9:2a:ec:7c:dd: 0f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C6:E6:1F:CE:19:8F:80:B2:DA:71:A3:01:4E:5B:D9:CA:66:59:15 X509v3 Authority Key Identifier: keyid:FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3b:c0:67:37:0d:a6:84:6a:98:10:73:6b:f6:64:30:3e:c3: 89:5f:ff:5a:52:8c:dd:b4:a9:47:6b:ed:8f:a8:e6:4a:d8:cb: 54:74:05:a3:d0:42:48:e1:23:2f:ac:b6:23:cc:f6:71:15:5b: b8:49:c1:1a:1a:33:f4:e5:cb:45:c5:d5:45:a5:40:6d:e0:88: 56:a7:73:02:0e:12:0b:c6:c6:81:95:96:4e:7b:64:0d:50:df: d2:24:39:55:21:c5:a6:66:3a:39:5f:f0:d4:f3:53:c6:ef:c4: ac:0a:4f:e3:08:a2:b5:32:ed:ae:a7:77:64:9a:cb:8a:53:a5: ff:33:99:e0:45:a0:2b:e6:08:43:90:99:d3:13:b1:82:4c:26: d3:29:32:0e:b8:a9:a4:cf:23:8e:8c:63:29:be:45:55:18:19: 1e:f4:06:0c:33:73:55:9b:a2:13:12:2e:ca:f0:de:0b:87:02: 9e:f1:80:bb:a2:da:05:48:ac:37:5e:53:1f:42:f5:4d:3d:f5: 04:b1:04:99:5f:16:d8:78:ed:28:13:33:5f:15:7a:43:81:11: 24:1f:f1:a1:0e:c3:3a:39:93:40:be:df:89:16:a7:e1:ee:21: 12:ef:59:56:ba:08:79:10:e5:1f:08:99:10:f0:84:24:dd:a9: 91:2a:32:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTDU7dbAuFjag+X5fselLSeQMt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5 QjgzNDExMzAeFw0yNjA3MjMxNjE5NTlaFw0yNjA3MjQxOTEzNTlaMDMxMTAvBgNV BAMTKDNCQzZFNjFGQ0UxOThGODBCMkRBNzFBMzAxNEU1QkQ5Q0E2NjU5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQOiKOaYPFx8LERyEvi1NrjlKM WEdvJxdlxn1vdjm5wsGQoY38hzS47ICDaWg9qlJYvJyKBNIuFLM3nkydtbzDjpkd NG4gHqJdNPZtP0+A9xRAlG/Qs6G22bK0RSDnp5FEaOn4uugqI4EqunVYUIQLViz0 Qq4AulHAxHNHmZRIRBvTiYPEAP5RPk4HD391CWYn5GTpMkp8y+VmFBaLxqseiaeG 565BbS92wkOCNEzYxxi8saWiLR6vxx3gftfmleSFpf//3N+fppxWSzVG66kDag76 3uHaDbcU1qDYWejerTq+8c8lOW0S9bV+5I58CzGy41ARklXgZNC5Kux83Q+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO8bmH84Zj4Cy2nGjAU5b2cpmWRUwHwYDVR0j BBgwFoAU//RmKb3bTzocbXjyU+O2PJuDQRMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZlZGIyOGYtZjNmOS00MTk5LTg1YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlC RERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5QjgzNDExMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkY0NjYyOUJEREI0RjNBMUM2RDc4RjI1M0UzQjYzQzlCODM0 MTEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2 M0M5QjgzNDExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM7wGc3DaaEapgQc2v2ZDA+w4lf/1pSjN20 qUdr7Y+o5krYy1R0BaPQQkjhIy+stiPM9nEVW7hJwRoaM/Tly0XF1UWlQG3giFan cwIOEgvGxoGVlk57ZA1Q39IkOVUhxaZmOjlf8NTzU8bvxKwKT+MIorUy7a6nd2Sa y4pTpf8zmeBFoCvmCEOQmdMTsYJMJtMpMg64qaTPI46MYym+RVUYGR70Bgwzc1Wb ohMSLsrw3guHAp7xgLui2gVIrDdeUx9C9U099QSxBJlfFth47SgTM18VekOBESQf 8aEOwzo5k0C+34kWp+HuIRLvWVa6CHkQ5R8ImRDwhCTdqZEqMsA= -----END CERTIFICATE-----Generated at Fri Jul 24 02:49:10 2026 by rpki-client