$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft File: 11FFFA845980AD12347D7297657117A393722635.mft (raw, json) Hash identifier: wyyCwo14ZIj3aYQb0Al82CcZpVaOu5TSyiVmnQrjuDQ= Subject key identifier: D8:EE:ED:88:17:14:C8:C3:DD:91:9F:97:23:7F:38:6C:1E:4A:AC:48 Authority key identifier: 11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35 Certificate issuer: /CN=11FFFA845980AD12347D7297657117A393722635 Certificate serial: 32FFB5551806E4EE6D9774757B7E89B52AEBE104 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 08:16:02 +0000 Manifest this update: Fri 25 Sep 2026 08:11:02 +0000 Manifest next update: Sat 26 Sep 2026 11:03:02 +0000 Files and hashes: 1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: lcXF2ukAyeD79WJ/+d/LiALmLjnDTwGdGGkGmI9GuQ8=) 2: 11FFFA845980AD12347D7297657117A393722635.crl (hash: 6bw6EmJU7bBjD8MxjtH3tDH6UJbYIrrrXSRDjWwopFY=) 3: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: 1j1MwArF7+GiMoyA2GSO7NK/M/081FoP97bqeWhfFHU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ff:b5:55:18:06:e4:ee:6d:97:74:75:7b:7e:89:b5:2a:eb:e1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11FFFA845980AD12347D7297657117A393722635 Validity Not Before: Sep 25 08:11:02 2026 GMT Not After : Sep 26 11:03:02 2026 GMT Subject: CN=D8EEED881714C8C3DD919F97237F386C1E4AAC48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:89:a9:7b:12:7b:64:40:b5:ec:e3:b4:9b:b6: ef:0a:a8:a5:da:2b:5e:52:f8:59:ca:a3:b7:19:c1: a9:c4:6c:80:dc:4c:3e:81:92:8e:c5:8e:ac:5d:6b: 9b:fe:43:e3:55:ad:db:26:98:88:29:95:6e:72:43: fd:74:34:3e:13:7f:95:60:c9:5e:03:bc:50:d6:e2: 84:51:51:36:07:6d:50:9a:63:08:5f:fd:e2:bb:0d: 4d:20:0c:ec:47:de:42:71:7b:90:23:fe:72:79:b3: 4a:5b:f1:b3:05:32:41:cf:85:f2:8a:64:ca:11:b8: fe:f5:92:ac:e6:29:3a:fc:79:fc:c2:77:bd:93:0d: 67:31:3d:33:34:28:da:f9:1c:2b:ca:45:ae:62:00: bb:4e:46:66:a0:55:a1:8b:fd:73:25:67:a2:06:7e: c1:ac:f8:30:80:68:22:38:e6:71:a8:01:6c:e6:85: 28:f6:a5:e2:fa:37:25:06:49:04:25:db:5f:16:f0: 7a:43:7c:43:9b:93:f2:c2:58:67:7b:56:60:1b:14: bd:ae:da:1d:96:79:30:ac:9f:50:28:18:2b:eb:f9: 1b:a6:6e:dd:87:bd:91:06:c4:55:0a:20:36:1c:70: 3c:9e:a2:2d:96:a1:05:13:70:cc:5c:1c:11:f4:a1: 84:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EE:ED:88:17:14:C8:C3:DD:91:9F:97:23:7F:38:6C:1E:4A:AC:48 X509v3 Authority Key Identifier: keyid:11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:de:47:84:0e:08:2b:31:a0:1f:1f:95:57:79:ed:2e:ee:fa: 56:b7:d2:41:f5:08:32:33:9a:be:2d:75:6c:a5:b0:3f:8f:20: 0d:74:1f:b2:1e:a6:2e:6b:17:d1:46:8d:c8:91:a4:f1:c6:fd: 06:3a:b5:8e:70:02:5e:f7:30:75:3f:ea:74:ea:35:62:2b:b4: 69:bc:2b:47:15:ed:a7:64:6c:8f:24:46:b7:53:2f:43:d3:a4: cf:3c:27:87:20:9e:cd:93:57:ea:22:44:75:14:93:75:1c:d5: e5:3a:50:7c:a3:0c:fc:5a:98:fa:c4:4c:29:81:f2:f4:64:94: 89:a3:de:06:a9:fa:4c:55:b1:92:0e:13:26:bd:47:4d:0a:11: 43:34:9b:cb:a3:26:57:94:a0:c1:12:4b:63:ab:14:64:26:5f: c2:bb:5f:2b:ad:20:92:17:f6:db:06:26:fb:87:a1:c4:7e:58: 9d:ef:30:95:37:bb:15:b7:e5:5c:18:0c:dd:a1:24:7a:0d:13: 29:1e:67:9e:26:84:dc:a5:7f:05:6e:88:ff:7c:96:0e:9a:77: 19:2e:59:19:02:89:f2:b9:fc:0f:0c:27:c0:9a:54:bb:ae:f0: 22:ee:e1:da:22:b2:48:f6:54:d4:ea:36:10:5c:bb:66:68:c2: a5:1c:26:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMv+1VRgG5O5tl3R1e36JtSrr4QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5 MzcyMjYzNTAeFw0yNjA5MjUwODExMDJaFw0yNjA5MjYxMTAzMDJaMDMxMTAvBgNV BAMTKEQ4RUVFRDg4MTcxNEM4QzNERDkxOUY5NzIzN0YzODZDMUU0QUFDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQial7EntkQLXs47Sbtu8KqKXa K15S+FnKo7cZwanEbIDcTD6Bko7Fjqxda5v+Q+NVrdsmmIgplW5yQ/10ND4Tf5Vg yV4DvFDW4oRRUTYHbVCaYwhf/eK7DU0gDOxH3kJxe5Aj/nJ5s0pb8bMFMkHPhfKK ZMoRuP71kqzmKTr8efzCd72TDWcxPTM0KNr5HCvKRa5iALtORmagVaGL/XMlZ6IG fsGs+DCAaCI45nGoAWzmhSj2peL6NyUGSQQl218W8HpDfEObk/LCWGd7VmAbFL2u 2h2WeTCsn1AoGCvr+Rumbt2HvZEGxFUKIDYccDyeoi2WoQUTcMxcHBH0oYSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2O7tiBcUyMPdkZ+XI384bB5KrEgwHwYDVR0j BBgwFoAUEf/6hFmArRI0fXKXZXEXo5NyJjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRiNGZiODgtOGY0Mi00N2YyLWJlODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1 OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5MzcyMjYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMUZGRkE4NDU5ODBBRDEyMzQ3RDcyOTc2NTcxMTdBMzkzNzIy NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3 QTM5MzcyMjYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjeR4QOCCsxoB8flVd57S7u+la30kH1CDIz mr4tdWylsD+PIA10H7Iepi5rF9FGjciRpPHG/QY6tY5wAl73MHU/6nTqNWIrtGm8 K0cV7adkbI8kRrdTL0PTpM88J4cgns2TV+oiRHUUk3Uc1eU6UHyjDPxamPrETCmB 8vRklImj3gap+kxVsZIOEya9R00KEUM0m8ujJleUoMESS2OrFGQmX8K7XyutIJIX 9tsGJvuHocR+WJ3vMJU3uxW35VwYDN2hJHoNEykeZ54mhNylfwVuiP98lg6adxku WRkCifK5/A8MJ8CaVLuu8CLu4doiskj2VNTqNhBcu2ZowqUcJtE= -----END CERTIFICATE-----Generated at Fri Sep 25 20:36:51 2026 by rpki-client