$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft File: FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft (raw, json) Hash identifier: FodQYMGBRHCniAwigDfyDo4PbgD1n8nUUL8+ElEUH4k= Subject key identifier: 07:F2:E4:59:F2:04:12:15:E2:8A:41:5D:ED:81:DC:3F:10:7A:86:F2 Authority key identifier: FF:75:FB:D7:DD:DE:14:F5:EF:E7:96:A5:B7:28:46:60:D4:6E:72:06 Certificate issuer: /CN=FF75FBD7DDDE14F5EFE796A5B7284660D46E7206 Certificate serial: 3D3BC4A5754BE1D6BE2DE1AAEBDDCC7C968B2EAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft Manifest number: D0 Signing time: Sun 04 Oct 2026 06:33:18 +0000 Manifest this update: Sun 04 Oct 2026 06:28:18 +0000 Manifest next update: Mon 05 Oct 2026 08:57:18 +0000 Files and hashes: 1: FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl (hash: +1P9Ykho459MkWq45db/LSqSiah+iBq6x8Q8rEHkZPg=) 2: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: 18eMz8teTkkcf9p+UfDdXZ6oyQLlhohSPsxmAeH1CuI=) 3: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: lYcIqG++R3KlJJ8gdHbn639yTY/SuMx9BoynL2RsVYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 02:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3b:c4:a5:75:4b:e1:d6:be:2d:e1:aa:eb:dd:cc:7c:96:8b:2e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75FBD7DDDE14F5EFE796A5B7284660D46E7206 Validity Not Before: Oct 4 06:28:18 2026 GMT Not After : Oct 5 08:57:18 2026 GMT Subject: CN=07F2E459F2041215E28A415DED81DC3F107A86F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:cd:df:f9:47:59:f9:8c:7d:5d:68:89:9e: 62:1f:0a:09:01:82:81:4d:e6:9e:ae:c4:39:31:08: 02:e6:ae:2e:2f:33:e1:6e:0d:bc:44:51:8e:14:72: 9e:79:d7:66:55:8e:52:37:3d:b0:59:e1:f0:26:7a: d2:d0:ff:b6:88:78:74:17:2b:fd:77:8e:de:a9:a9: cd:65:87:d8:42:8c:1d:3d:5d:d0:b4:04:9f:12:b9: 15:89:0e:66:19:7c:7e:35:78:7f:31:25:8d:4c:40: 5e:a4:40:7d:ba:e0:ea:68:f3:7f:c4:20:2a:0f:a6: c1:57:f1:7d:30:36:73:73:ff:a2:7a:6a:55:6b:86: fd:ee:f4:ae:cd:77:5c:7f:bf:b9:55:7d:c0:88:96: c4:1b:63:d4:9b:a9:6e:46:fe:f8:01:fc:45:37:e2: f4:77:54:a7:04:0e:a5:81:b6:87:7a:29:d5:0c:7a: ce:fb:50:fc:b7:51:0a:54:d4:6e:ed:93:49:e2:cc: 44:42:2d:42:7b:3f:f7:43:c2:d4:17:9c:29:00:4d: ac:32:94:03:8f:fb:27:b4:72:a2:5d:7b:d1:b6:b7: d0:35:22:3f:9d:b2:24:c6:f6:fd:49:aa:63:a7:a3: b2:28:45:f9:f7:74:36:98:58:00:1f:5d:0a:1a:99: 8f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F2:E4:59:F2:04:12:15:E2:8A:41:5D:ED:81:DC:3F:10:7A:86:F2 X509v3 Authority Key Identifier: keyid:FF:75:FB:D7:DD:DE:14:F5:EF:E7:96:A5:B7:28:46:60:D4:6E:72:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d9:83:3f:80:40:74:1a:49:d3:8c:55:d7:28:1f:62:16:1c: 8c:b6:89:2e:af:d5:bb:b1:8d:45:4b:30:9b:c5:a3:c9:e6:c7: 54:b3:e6:01:c8:84:75:7d:01:6e:30:fb:0a:57:27:65:ba:18: 7c:31:69:ef:c6:81:3f:00:0e:7e:14:23:1c:8d:fe:e7:3f:2e: c6:7a:93:d9:d8:8f:42:42:2a:67:31:a7:ea:7d:e2:9f:cb:07: a0:b4:b7:77:bc:42:59:1a:87:13:bb:08:d5:b5:5b:61:dd:5e: e9:67:6c:af:96:69:fc:2f:dd:f2:8d:ce:54:9d:c9:94:6f:84: d5:18:5f:f3:80:08:6a:e1:75:3e:4c:36:8a:ba:73:b6:c2:f6: e6:9e:51:f7:dd:a0:11:2c:1f:37:c4:3c:2e:a0:d7:5b:29:77: 06:b0:95:dc:1f:7e:a4:02:e8:46:73:38:3c:59:a1:c6:59:33: 0d:92:f9:d8:0d:07:df:b5:de:25:35:ba:a7:70:c5:c8:33:83: 4b:b2:71:a6:17:85:e2:a1:f2:db:1e:01:3d:35:f4:b8:07:29: 37:20:ff:08:66:26:27:00:f5:c4:ee:1e:8d:50:6b:98:25:76: dc:3d:62:36:43:49:e0:18:69:9a:f6:fa:70:79:33:66:2e:a6: c0:51:46:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTvEpXVL4da+LeGq693MfJaLLq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUZCRDdERERFMTRGNUVGRTc5NkE1QjcyODQ2NjBE NDZFNzIwNjAeFw0yNjEwMDQwNjI4MThaFw0yNjEwMDUwODU3MThaMDMxMTAvBgNV BAMTKDA3RjJFNDU5RjIwNDEyMTVFMjhBNDE1REVEODFEQzNGMTA3QTg2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTc3f+UdZ+Yx9XWiJnmIfCgkB goFN5p6uxDkxCALmri4vM+FuDbxEUY4Ucp5512ZVjlI3PbBZ4fAmetLQ/7aIeHQX K/13jt6pqc1lh9hCjB09XdC0BJ8SuRWJDmYZfH41eH8xJY1MQF6kQH264Opo83/E ICoPpsFX8X0wNnNz/6J6alVrhv3u9K7Nd1x/v7lVfcCIlsQbY9SbqW5G/vgB/EU3 4vR3VKcEDqWBtod6KdUMes77UPy3UQpU1G7tk0nizERCLUJ7P/dDwtQXnCkATawy lAOP+ye0cqJde9G2t9A1Ij+dsiTG9v1JqmOno7IoRfn3dDaYWAAfXQoamY/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB/LkWfIEEhXiikFd7YHcPxB6hvIwHwYDVR0j BBgwFoAU/3X7193eFPXv55altyhGYNRucgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0MDU1NDUtYzM1ZC00ZGUxLTk2MTgtNDRiNWY0MTdhMzAzLzEvRkY3NUZCRDdE RERFMTRGNUVGRTc5NkE1QjcyODQ2NjBENDZFNzIwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjc1RkJEN0REREUxNEY1RUZFNzk2QTVCNzI4NDY2MEQ0NkU3 MjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzEvRkY3NUZCRDdERERFMTRGNUVGRTc5NkE1QjcyODQ2 NjBENDZFNzIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7Zgz+AQHQaSdOMVdcoH2IWHIy2iS6v1bux jUVLMJvFo8nmx1Sz5gHIhHV9AW4w+wpXJ2W6GHwxae/GgT8ADn4UIxyN/uc/LsZ6 k9nYj0JCKmcxp+p94p/LB6C0t3e8QlkahxO7CNW1W2HdXulnbK+Wafwv3fKNzlSd yZRvhNUYX/OACGrhdT5MNoq6c7bC9uaeUffdoBEsHzfEPC6g11spdwawldwffqQC 6EZzODxZocZZMw2S+dgNB9+13iU1uqdwxcgzg0uycaYXheKh8tseAT019LgHKTcg /whmJicA9cTuHo1Qa5gldtw9YjZDSeAYaZr2+nB5M2YupsBRRmE= -----END CERTIFICATE-----Generated at Sun Oct 4 10:16:10 2026 by rpki-client