$ rpki-client -vvvf rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft File: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft (raw, json) Hash identifier: I6PCV4rfU8jKXhCNU5EzfP4pYRMYYdovHK0Ze8wxFoc= Subject key identifier: 7B:70:F0:6B:84:46:A2:61:3F:B2:95:07:29:C4:A8:DC:36:15:FB:E8 Authority key identifier: FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 Certificate issuer: /CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Certificate serial: 4A403DF487C1076150E8FED5537FC43477428D0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:16:03 +0000 Manifest this update: Wed 23 Sep 2026 20:11:03 +0000 Manifest next update: Fri 25 Sep 2026 00:04:03 +0000 Files and hashes: 1: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl (hash: Hq2mHucDwed97yHpdFu3FsFTVmM5pDVgucA5LiIG6jE=) 2: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (hash: e5rLZ+uiB21yOgfSRe83jWI/e3SG0saFimxCgcV74b8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:40:3d:f4:87:c1:07:61:50:e8:fe:d5:53:7f:c4:34:77:42:8d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Validity Not Before: Sep 23 20:11:03 2026 GMT Not After : Sep 25 00:04:03 2026 GMT Subject: CN=7B70F06B8446A2613FB2950729C4A8DC3615FBE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:4e:e7:f0:81:a3:63:1f:bb:d2:e6:5f:52: c1:a8:5b:10:d4:74:4e:8a:d7:7e:82:21:84:72:e3: 4d:15:1a:6b:51:89:ff:79:3b:3a:74:73:d7:9f:61: 36:83:be:72:88:04:97:d7:dc:9c:9f:92:ac:7e:35: ee:8f:d4:0d:7f:9b:da:01:4b:b0:5a:61:74:92:73: 13:83:6e:fd:7d:8d:48:e2:92:e9:c9:31:54:b5:62: 22:e5:1b:7c:8d:71:73:ff:eb:b0:3d:76:64:aa:a9: 12:d0:93:f7:f1:4a:62:7e:0f:3c:34:bb:77:c6:aa: ba:a0:05:13:d6:09:5d:4b:b0:af:8d:1d:07:99:37: ab:04:00:20:f8:8d:e6:89:32:4c:09:25:a6:38:da: 45:64:60:5b:e2:47:e8:01:20:36:a3:12:3f:2d:6a: 5b:12:62:21:4b:e3:82:c0:ed:17:64:fe:be:c2:89: 9a:9e:80:1f:a9:08:27:c8:57:dc:68:60:be:ee:31: ba:fc:18:85:a1:8f:01:91:5d:c2:b1:22:52:f4:73: 2d:87:47:ca:2f:24:43:1d:51:2d:6f:bf:91:89:1f: 0c:f5:ae:0a:84:49:f3:17:ec:8e:34:5f:64:bb:83: 0a:12:6f:d2:3a:f2:f7:44:32:b0:da:02:03:72:2f: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:70:F0:6B:84:46:A2:61:3F:B2:95:07:29:C4:A8:DC:36:15:FB:E8 X509v3 Authority Key Identifier: keyid:FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f7:1b:4e:a3:a8:64:e4:cb:97:3a:98:b1:24:c3:e0:d6:ef: a3:0b:9f:ec:89:14:86:c1:ac:07:3a:d1:73:17:f5:f5:0c:94: f5:c9:99:1a:01:be:85:62:0c:c4:a6:11:1c:5c:b5:1a:83:d5: be:5b:13:2f:b3:0b:e3:1e:e2:a4:a5:f6:9d:aa:a4:2a:5c:ea: 51:d2:1e:3b:90:27:1f:b0:23:70:be:c3:1b:76:1c:be:db:9f: 6c:07:6a:ce:54:18:06:f7:b9:ed:1d:9a:22:de:ca:4b:5c:66: b4:8d:0e:2c:1b:4c:42:42:1a:56:d7:aa:88:14:33:f0:e4:3a: b2:db:99:f7:31:cc:e8:c9:b7:95:38:75:dc:b3:86:de:41:01: c7:a2:c9:4c:36:d3:68:7d:e6:8d:ce:e4:4b:02:48:91:c2:5b: c7:ec:39:20:d4:b3:e0:24:34:59:21:f8:1b:7f:34:fd:08:23: 32:95:92:bb:e4:d7:b7:f5:2b:18:88:e0:78:49:ad:50:da:31: 80:81:2a:3b:71:33:aa:80:ca:57:40:00:90:39:db:b4:ba:6d: ed:c6:d8:9b:11:4b:6f:c7:46:52:8b:cc:4d:d6:ae:65:43:c5: eb:69:3a:93:5a:61:af:e9:29:a8:25:64:79:79:bf:a1:a8:33: 42:2f:06:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSkA99IfBB2FQ6P7VU3/ENHdCjQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMz MEZGRUNGNjAeFw0yNjA5MjMyMDExMDNaFw0yNjA5MjUwMDA0MDNaMDMxMTAvBgNV BAMTKDdCNzBGMDZCODQ0NkEyNjEzRkIyOTUwNzI5QzRBOERDMzYxNUZCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtk7n8IGjYx+70uZfUsGoWxDU dE6K136CIYRy400VGmtRif95Ozp0c9efYTaDvnKIBJfX3Jyfkqx+Ne6P1A1/m9oB S7BaYXSScxODbv19jUjikunJMVS1YiLlG3yNcXP/67A9dmSqqRLQk/fxSmJ+Dzw0 u3fGqrqgBRPWCV1LsK+NHQeZN6sEACD4jeaJMkwJJaY42kVkYFviR+gBIDajEj8t alsSYiFL44LA7Rdk/r7CiZqegB+pCCfIV9xoYL7uMbr8GIWhjwGRXcKxIlL0cy2H R8ovJEMdUS1vv5GJHwz1rgqESfMX7I40X2S7gwoSb9I68vdEMrDaAgNyL9ovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe3Dwa4RGomE/spUHKcSo3DYV++gwHwYDVR0j BBgwFoAU/9rHdcu18bLHuVG/FSPvbDD/7PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTdkYzdlZTUtY2U2Ny00NWNkLTk4ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVD QkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMzMEZGRUNGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkRBQzc3NUNCQjVGMUIyQzdCOTUxQkYxNTIzRUY2QzMwRkZF Q0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTdkYzdlZTUtY2U2Ny00NWNkLTk4 ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VG NkMzMEZGRUNGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ33G06jqGTky5c6mLEkw+DW76MLn+yJFIbB rAc60XMX9fUMlPXJmRoBvoViDMSmERxctRqD1b5bEy+zC+Me4qSl9p2qpCpc6lHS HjuQJx+wI3C+wxt2HL7bn2wHas5UGAb3ue0dmiLeyktcZrSNDiwbTEJCGlbXqogU M/DkOrLbmfcxzOjJt5U4ddyzht5BAceiyUw202h95o3O5EsCSJHCW8fsOSDUs+Ak NFkh+Bt/NP0IIzKVkrvk17f1KxiI4HhJrVDaMYCBKjtxM6qAyldAAJA527S6be3G 2JsRS2/HRlKLzE3WrmVDxetpOpNaYa/pKaglZHl5v6GoM0IvBkE= -----END CERTIFICATE-----Generated at Thu Sep 24 12:10:45 2026 by rpki-client