$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft File: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft (raw, json) Hash identifier: dsRcjAnmAcRr0clu5z1Oyc8sYaFrsDKZZbGqEfEaoIY= Subject key identifier: 14:F6:E5:C0:61:DC:B3:CF:74:A7:EB:31:9A:B6:EE:44:4E:A0:0D:CB Authority key identifier: FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A Certificate issuer: /CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Certificate serial: 7874488877B1C0A93B85B14C204C32DEA159C699 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 15:29:31 +0000 Manifest this update: Fri 25 Sep 2026 15:24:31 +0000 Manifest next update: Sat 26 Sep 2026 19:13:31 +0000 Files and hashes: 1: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: d3W50Pv9IvojYqj5AXX2l3Oy/7lfLR7Ec6qbGSXUUA4=) 2: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl (hash: 4sfL3eWHJSJWCG4TjilHegSD7SSe7tdVso5Gqnw5AuY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:74:48:88:77:b1:c0:a9:3b:85:b1:4c:20:4c:32:de:a1:59:c6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Validity Not Before: Sep 25 15:24:31 2026 GMT Not After : Sep 26 19:13:31 2026 GMT Subject: CN=14F6E5C061DCB3CF74A7EB319AB6EE444EA00DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:4f:0f:8d:e5:51:a8:21:51:b4:96:d2:db: 1a:4d:71:1d:28:40:07:c9:24:8d:33:a3:f7:01:21: a4:0e:8f:2d:d4:d3:96:d2:f0:7b:67:1d:db:4e:54: 44:b3:2a:42:0f:d7:35:9b:5d:53:16:8e:ed:04:fe: a0:eb:cc:92:22:04:95:1a:21:60:7e:52:be:a6:29: 6c:e6:98:a0:7a:47:fa:e0:7e:7b:39:83:6a:4d:ff: 35:0a:b2:53:d8:f8:c2:18:9e:0d:76:f0:a0:62:6e: 47:b9:de:70:df:de:97:6f:14:59:bd:e4:f9:2d:9c: 73:24:9d:06:81:8b:6f:c8:0c:02:97:4c:dc:4d:fe: e2:31:c0:b6:29:5b:47:22:d8:bb:77:80:e8:db:51: 58:2b:fd:5e:86:ea:06:4b:04:d6:d6:a0:b1:3a:8d: 79:89:81:2b:f4:b3:48:ba:39:96:bb:f7:c1:52:22: 96:53:e0:f9:f7:40:a9:52:11:f2:41:fe:40:52:5e: c5:3e:d0:38:b6:0c:e7:c8:5e:68:82:d0:d6:fa:09: f4:75:0f:70:1f:2d:ec:56:b8:48:84:ab:11:b0:84: 46:e7:b1:cf:67:23:f8:8f:05:3a:c5:6d:3e:07:16: b7:df:b3:ee:05:bd:27:f2:8a:08:1d:93:64:65:30: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F6:E5:C0:61:DC:B3:CF:74:A7:EB:31:9A:B6:EE:44:4E:A0:0D:CB X509v3 Authority Key Identifier: keyid:FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:31:fc:36:9a:81:7d:7e:3b:75:37:d6:87:96:88:48:f9:fe: 27:f4:3c:34:12:6b:f4:61:26:87:91:be:e7:07:58:20:7e:2a: 81:c7:26:92:b9:29:6b:0c:cd:cc:d7:86:79:fa:45:0b:53:5e: 76:ee:59:67:5d:c4:be:7a:a1:2b:39:2c:d5:1b:7d:a2:f5:20: bb:98:0d:82:0b:b8:d4:91:ae:69:4b:f8:0b:d7:5a:9f:f4:97: cd:d9:d4:77:91:e1:00:34:18:02:75:12:cc:5c:03:47:15:ff: 3b:0e:a0:6e:e8:af:27:75:dd:5e:e2:46:cd:14:42:58:e3:75: 2d:16:04:6e:ed:bb:8b:50:c0:c8:81:84:35:f7:bf:45:2f:e6: a4:86:1c:ab:58:36:af:94:b5:96:1b:33:47:f7:f0:a4:d8:45: 76:8c:8a:ce:e3:1d:ba:06:f4:71:53:63:11:5c:4c:1a:53:b7: 09:8b:6d:30:16:28:96:0d:05:0e:6b:84:48:12:66:09:b1:20: 5c:c4:bd:54:b6:7f:c4:bb:eb:06:00:bb:aa:d5:5e:f6:c6:63: 7f:20:69:8a:1a:da:44:45:2a:4b:25:07:1e:dd:8e:b8:34:47: 5b:f7:e7:75:45:c0:f8:30:90:ac:87:26:43:fb:34:34:b2:18: a4:a3:72:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHRIiHexwKk7hbFMIEwy3qFZxpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkExOEEx Mjc3QTU5QTAeFw0yNjA5MjUxNTI0MzFaFw0yNjA5MjYxOTEzMzFaMDMxMTAvBgNV BAMTKDE0RjZFNUMwNjFEQ0IzQ0Y3NEE3RUIzMTlBQjZFRTQ0NEVBMDBEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/U8PjeVRqCFRtJbS2xpNcR0o QAfJJI0zo/cBIaQOjy3U05bS8HtnHdtOVESzKkIP1zWbXVMWju0E/qDrzJIiBJUa IWB+Ur6mKWzmmKB6R/rgfns5g2pN/zUKslPY+MIYng128KBibke53nDf3pdvFFm9 5PktnHMknQaBi2/IDAKXTNxN/uIxwLYpW0ci2Lt3gOjbUVgr/V6G6gZLBNbWoLE6 jXmJgSv0s0i6OZa798FSIpZT4Pn3QKlSEfJB/kBSXsU+0Di2DOfIXmiC0Nb6CfR1 D3AfLexWuEiEqxGwhEbnsc9nI/iPBTrFbT4HFrffs+4FvSfyiggdk2RlMLhrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFPblwGHcs890p+sxmrbuRE6gDcswHwYDVR0j BBgwFoAU//PY3FwMhlKfl7uGk0ahihJ3pZowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ2ZmZhZDItMjBiYy00MjQ2LTgyOTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1 QzBDODY1MjlGOTdCQjg2OTM0NkExOEExMjc3QTU5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkYzRDhEQzVDMEM4NjUyOUY5N0JCODY5MzQ2QTE4QTEyNzdB NTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkEx OEExMjc3QTU5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8x/DaagX1+O3U31oeWiEj5/if0PDQSa/Rh JoeRvucHWCB+KoHHJpK5KWsMzczXhnn6RQtTXnbuWWddxL56oSs5LNUbfaL1ILuY DYILuNSRrmlL+AvXWp/0l83Z1HeR4QA0GAJ1EsxcA0cV/zsOoG7oryd13V7iRs0U QljjdS0WBG7tu4tQwMiBhDX3v0Uv5qSGHKtYNq+UtZYbM0f38KTYRXaMis7jHboG 9HFTYxFcTBpTtwmLbTAWKJYNBQ5rhEgSZgmxIFzEvVS2f8S76wYAu6rVXvbGY38g aYoa2kRFKkslBx7djrg0R1v353VFwPgwkKyHJkP7NDSyGKSjcoc= -----END CERTIFICATE-----Generated at Sat Sep 26 02:02:44 2026 by rpki-client