$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft File: FF5F881DC07CC4A9A985D594360658D202A551B7.mft (raw, json) Hash identifier: UitQ7vv5Q34KUjB8PQO2GrDXg1ZSoQL+u0hoyAwETTs= Subject key identifier: E5:4E:5D:BC:65:73:08:ED:89:62:48:5D:45:E4:90:A8:47:F9:60:34 Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Certificate serial: 7BFD9E5BE4F36D967CC3C4E3C7E2D1ECDDD8B600 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:04:49 +0000 Manifest this update: Wed 23 Sep 2026 10:59:49 +0000 Manifest next update: Thu 24 Sep 2026 13:12:49 +0000 Files and hashes: 1: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: 9MCsmuGnmFDoeSG3rIPrfccOXghMBGlEEz5Onpmf8wY=) 2: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: oD9IDDMfDt326HwXRIsMWXvISYJSKNyW+NeKDvpDxLY=) 3: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 8XrnQ5SnhyZDHtT2jqiiu3w//jV9DlxlWcB7qtbppcE=) 4: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Da+BSi/QmlOV/X3TjGzgwu4l3eK1o4UhYD/OBNK4cHQ=) 5: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: GNQ9BAndW/dbBDXxGBCrP2cWFnFb/Uhl5zGAhjYFfBA=) 6: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: j3wy4rBOt9KLpaD5LH0BwgRkujp7xgPfgUer0oRRcO4=) 7: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: zXGSnPmEp4F0jfkLMTMvDaGHFb1hgkrGA8TNoljlC2g=) 8: FF5F881DC07CC4A9A985D594360658D202A551B7.crl (hash: y6fZX4S07jxH6Ep1iIPDyjnmbwn5pH4M+D+XvPawKqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fd:9e:5b:e4:f3:6d:96:7c:c3:c4:e3:c7:e2:d1:ec:dd:d8:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Validity Not Before: Sep 23 10:59:49 2026 GMT Not After : Sep 24 13:12:49 2026 GMT Subject: CN=E54E5DBC657308ED8962485D45E490A847F96034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:77:9c:ad:60:c9:fc:1c:b4:f8:ee:60:ba: 33:56:88:cd:c3:c7:19:16:4a:e7:75:6b:ed:3c:71: 26:2e:94:6e:e6:25:21:86:dd:a2:18:ed:eb:8b:4a: af:09:9c:6d:94:b8:89:43:e1:47:bf:a7:c0:6a:1e: 84:ab:01:23:0f:46:48:6f:c0:f4:5e:d8:97:64:24: 8d:3b:4b:36:d9:a6:c1:7b:fa:2d:a4:6c:6c:72:ca: 75:0d:d8:c7:0b:ea:30:16:d3:c8:ed:ce:94:eb:59: 1b:15:7c:7f:9d:98:1e:76:62:11:54:d9:fb:6a:47: 15:d0:ef:73:61:f0:6f:a4:f3:61:f1:d2:01:66:aa: 6e:3f:6f:b8:15:bc:c7:00:98:ee:08:93:c1:6b:ed: 11:2c:c7:f4:a5:91:bd:15:d3:f2:67:cd:ae:fc:25: 1f:a5:b0:4e:f4:f3:55:88:a8:2c:90:8e:7c:1c:5e: 91:c0:c5:7a:23:d4:15:b9:5f:47:b8:e9:52:fe:f9: 8b:b8:73:38:30:63:41:9b:e5:68:f1:78:91:59:ad: 16:13:3d:c9:e8:e5:8f:60:ef:01:03:c2:7d:86:91: cc:a8:c1:9d:7c:d5:21:54:ba:a1:05:c5:d4:13:56: 47:c6:24:5d:bc:f0:60:a4:85:3e:47:53:2c:55:a7: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4E:5D:BC:65:73:08:ED:89:62:48:5D:45:E4:90:A8:47:F9:60:34 X509v3 Authority Key Identifier: keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:45:5b:86:60:aa:4e:dd:e1:2e:68:92:76:c8:d5:0d:ff:79: 8d:10:99:9c:3e:56:6f:a4:ca:7e:b1:11:ed:73:52:a5:82:0d: 66:9f:21:2f:c0:b1:9b:db:aa:d4:19:67:d9:da:9f:10:fc:d2: d6:07:46:1e:eb:a9:76:17:49:a1:bc:e7:0d:ba:6e:f2:5e:cb: ee:bb:b5:44:68:91:cd:ab:42:b8:dc:34:a0:57:32:15:c8:38: 13:e4:06:90:76:a1:82:28:21:d9:26:b3:62:6c:7e:c2:5d:65: 3d:4d:ee:99:4c:cc:dd:98:81:21:c6:2f:f3:c1:a8:66:07:d7: 4f:a1:c6:a8:b6:ba:e9:d6:e7:db:8c:d6:ce:9b:a0:ad:0d:e9: 5d:1e:4b:6c:b1:28:1c:74:db:54:c3:ba:04:70:d5:f3:5f:76: 89:0f:78:3a:ef:b0:26:8c:b7:7e:37:cc:12:30:6b:02:76:fe: d8:9f:58:89:1b:6c:0c:9d:1c:fa:ef:f6:28:a2:f3:92:40:a3: 35:92:ce:fa:71:03:20:53:81:a8:a9:71:0a:92:d6:f3:ec:bb: bd:dc:1f:60:6b:f0:81:d3:eb:3d:88:83:23:98:c3:e3:52:44: f4:9d:2f:31:c1:b9:c5:bb:31:0e:a2:55:5b:3a:26:38:9f:96: 46:b8:58:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/2eW+TzbZZ8w8Tjx+LR7N3YtgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4RDIw MkE1NTFCNzAeFw0yNjA5MjMxMDU5NDlaFw0yNjA5MjQxMzEyNDlaMDMxMTAvBgNV BAMTKEU1NEU1REJDNjU3MzA4RUQ4OTYyNDg1RDQ1RTQ5MEE4NDdGOTYwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXnecrWDJ/By0+O5gujNWiM3D xxkWSud1a+08cSYulG7mJSGG3aIY7euLSq8JnG2UuIlD4Ue/p8BqHoSrASMPRkhv wPRe2JdkJI07SzbZpsF7+i2kbGxyynUN2McL6jAW08jtzpTrWRsVfH+dmB52YhFU 2ftqRxXQ73Nh8G+k82Hx0gFmqm4/b7gVvMcAmO4Ik8Fr7REsx/Slkb0V0/Jnza78 JR+lsE7081WIqCyQjnwcXpHAxXoj1BW5X0e46VL++Yu4czgwY0Gb5WjxeJFZrRYT Pcno5Y9g7wEDwn2GkcyowZ181SFUuqEFxdQTVkfGJF288GCkhT5HUyxVp+rFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5U5dvGVzCO2JYkhdReSQqEf5YDQwHwYDVR0j BBgwFoAU/1+IHcB8xKmphdWUNgZY0gKlUbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2MwNzRjZDgtMjgzMC00ZWFiLWJkZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURD MDdDQzRBOUE5ODVENTk0MzYwNjU4RDIwMkE1NTFCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVGODgxREMwN0NDNEE5QTk4NUQ1OTQzNjA2NThEMjAyQTU1 MUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4 RDIwMkE1NTFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5FW4Zgqk7d4S5oknbI1Q3/eY0QmZw+Vm+k yn6xEe1zUqWCDWafIS/AsZvbqtQZZ9nanxD80tYHRh7rqXYXSaG85w26bvJey+67 tURokc2rQrjcNKBXMhXIOBPkBpB2oYIoIdkms2JsfsJdZT1N7plMzN2YgSHGL/PB qGYH10+hxqi2uunW59uM1s6boK0N6V0eS2yxKBx021TDugRw1fNfdokPeDrvsCaM t343zBIwawJ2/tifWIkbbAydHPrv9iii85JAozWSzvpxAyBTgaipcQqS1vPsu73c H2Br8IHT6z2IgyOYw+NSRPSdLzHBucW7MQ6iVVs6Jjiflka4WH8= -----END CERTIFICATE-----Generated at Thu Sep 24 06:05:20 2026 by rpki-client