$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft File: FF5F881DC07CC4A9A985D594360658D202A551B7.mft (raw, json) Hash identifier: 0mcoi6KE5Lj1C2kUVKFS5OlRYv8RiUUb8uVGvAh3F3w= Subject key identifier: E1:33:54:75:91:AF:B4:5D:91:21:BC:9A:D4:52:2C:21:78:09:DA:38 Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Certificate serial: 75C840519CB8DDF85C505A4E50FAB1920D80DC56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:11:59 +0000 Manifest this update: Thu 23 Jul 2026 22:06:59 +0000 Manifest next update: Sat 25 Jul 2026 01:01:59 +0000 Files and hashes: 1: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: zXGSnPmEp4F0jfkLMTMvDaGHFb1hgkrGA8TNoljlC2g=) 2: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: j3wy4rBOt9KLpaD5LH0BwgRkujp7xgPfgUer0oRRcO4=) 3: FF5F881DC07CC4A9A985D594360658D202A551B7.crl (hash: yqW85r3f5/sF3FI2Mgfi4oC75nbi4avCmIIpq0ZrHuA=) 4: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: 9MCsmuGnmFDoeSG3rIPrfccOXghMBGlEEz5Onpmf8wY=) 5: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Da+BSi/QmlOV/X3TjGzgwu4l3eK1o4UhYD/OBNK4cHQ=) 6: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 8XrnQ5SnhyZDHtT2jqiiu3w//jV9DlxlWcB7qtbppcE=) 7: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: oD9IDDMfDt326HwXRIsMWXvISYJSKNyW+NeKDvpDxLY=) 8: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: GNQ9BAndW/dbBDXxGBCrP2cWFnFb/Uhl5zGAhjYFfBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c8:40:51:9c:b8:dd:f8:5c:50:5a:4e:50:fa:b1:92:0d:80:dc:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Validity Not Before: Jul 23 22:06:59 2026 GMT Not After : Jul 25 01:01:59 2026 GMT Subject: CN=E133547591AFB45D9121BC9AD4522C217809DA38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:05:88:ea:6b:f2:57:e9:d3:14:6d:a2:13: 53:5e:2c:17:ca:e9:2e:78:db:50:fa:76:9f:5b:29: 9f:94:9c:55:16:9c:86:85:a1:89:1c:91:11:3e:7e: 4a:31:dc:66:61:75:bc:d3:ea:fe:40:d3:38:33:92: d4:a0:06:27:03:c9:72:2d:bc:5e:8c:f7:1b:f3:4d: a5:5d:18:47:28:ae:c8:15:f6:6a:09:32:89:a0:62: f0:72:25:1f:9f:9c:b7:1b:36:e6:f6:64:d3:bd:ae: 9b:a9:22:3b:a1:9e:7b:47:39:ca:db:17:95:a2:a6: 13:35:fb:db:6c:81:84:c1:45:84:06:20:a1:14:21: 7e:57:c3:df:0b:ce:69:b0:90:55:ef:93:52:70:c4: 02:e9:07:cf:78:b9:60:41:4d:72:41:f9:e5:71:d8: 52:54:64:e0:cd:be:62:36:f1:55:27:97:84:79:d7: 85:8a:06:c5:d9:b1:dd:7d:d7:56:7e:3c:0f:04:a2: ff:3e:72:f2:4e:6a:5d:fb:e1:77:6a:90:08:75:6d: 4c:93:a4:49:39:0d:e0:09:e1:fd:9f:aa:a4:2a:44: 1d:a9:78:20:8e:92:c6:ad:69:1e:a6:a2:36:d6:fb: 58:dd:b5:48:a4:18:75:54:0c:7f:e2:79:a2:71:fa: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:33:54:75:91:AF:B4:5D:91:21:BC:9A:D4:52:2C:21:78:09:DA:38 X509v3 Authority Key Identifier: keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:67:17:53:00:48:3e:b5:0c:23:a0:b6:2c:94:33:d0:82:9a: 20:1a:ac:5c:c8:6f:04:b9:74:d2:0c:9b:2e:39:3e:25:0e:88: c6:16:68:88:af:e4:a5:78:ba:87:86:7e:74:04:fd:a7:7f:47: 29:1e:26:07:ab:df:20:b5:12:ed:44:2f:f0:6e:5d:cc:b0:27: 74:94:eb:f7:3d:a2:fa:86:4d:bb:93:40:e3:e1:ef:ed:c1:06: 34:b9:27:5c:21:25:2f:98:45:b4:a9:ad:85:1c:e5:4c:72:fa: 02:64:7d:35:a2:71:10:65:b2:ac:d7:03:f9:fc:65:40:05:e0: 42:c4:9a:d7:f3:8e:db:33:3b:3b:95:da:d9:ab:96:8c:88:2f: 81:28:26:fa:d2:a7:26:74:40:e3:59:0d:e9:3b:70:b5:16:11: fc:ef:ae:d9:82:d2:27:e3:f4:c3:9b:69:20:bc:49:06:67:3e: 88:35:a4:d9:cb:8e:4b:a6:45:f6:98:1f:f7:2d:2e:14:0c:2e: 34:0a:07:4b:23:85:aa:07:80:62:a5:29:15:c0:1c:54:93:86: 50:68:1a:71:14:26:1c:39:b4:6d:c3:cb:b1:e4:a1:6c:dd:25: 1f:90:ec:54:c1:46:67:13:8d:57:a9:8d:3b:de:94:92:b2:3c: 7b:c0:27:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdchAUZy43fhcUFpOUPqxkg2A3FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4RDIw MkE1NTFCNzAeFw0yNjA3MjMyMjA2NTlaFw0yNjA3MjUwMTAxNTlaMDMxMTAvBgNV BAMTKEUxMzM1NDc1OTFBRkI0NUQ5MTIxQkM5QUQ0NTIyQzIxNzgwOURBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwAWI6mvyV+nTFG2iE1NeLBfK 6S5421D6dp9bKZ+UnFUWnIaFoYkckRE+fkox3GZhdbzT6v5A0zgzktSgBicDyXIt vF6M9xvzTaVdGEcorsgV9moJMomgYvByJR+fnLcbNub2ZNO9rpupIjuhnntHOcrb F5WiphM1+9tsgYTBRYQGIKEUIX5Xw98LzmmwkFXvk1JwxALpB894uWBBTXJB+eVx 2FJUZODNvmI28VUnl4R514WKBsXZsd1911Z+PA8Eov8+cvJOal374XdqkAh1bUyT pEk5DeAJ4f2fqqQqRB2peCCOksataR6mojbW+1jdtUikGHVUDH/ieaJx+tETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4TNUdZGvtF2RIbya1FIsIXgJ2jgwHwYDVR0j BBgwFoAU/1+IHcB8xKmphdWUNgZY0gKlUbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2MwNzRjZDgtMjgzMC00ZWFiLWJkZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURD MDdDQzRBOUE5ODVENTk0MzYwNjU4RDIwMkE1NTFCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVGODgxREMwN0NDNEE5QTk4NUQ1OTQzNjA2NThEMjAyQTU1 MUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4 RDIwMkE1NTFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZnF1MASD61DCOgtiyUM9CCmiAarFzIbwS5 dNIMmy45PiUOiMYWaIiv5KV4uoeGfnQE/ad/RykeJger3yC1Eu1EL/BuXcywJ3SU 6/c9ovqGTbuTQOPh7+3BBjS5J1whJS+YRbSprYUc5Uxy+gJkfTWicRBlsqzXA/n8 ZUAF4ELEmtfzjtszOzuV2tmrloyIL4EoJvrSpyZ0QONZDek7cLUWEfzvrtmC0ifj 9MObaSC8SQZnPog1pNnLjkumRfaYH/ctLhQMLjQKB0sjhaoHgGKlKRXAHFSThlBo GnEUJhw5tG3Dy7HkoWzdJR+Q7FTBRmcTjVepjTvelJKyPHvAJ2g= -----END CERTIFICATE-----Generated at Fri Jul 24 05:14:12 2026 by rpki-client