$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft File: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft (raw, json) Hash identifier: +natCGjExp6/CSYwl5KcgbYSYrCfKLx+OK49FxKWm+M= Subject key identifier: E7:E8:04:94:E7:38:65:20:CF:9E:74:06:15:26:84:52:CB:47:40:02 Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Certificate serial: B7BBE09C350A823B81D4DBED020011509997DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft Manifest number: FE Signing time: Mon 09 Nov 2026 08:56:49 +0000 Manifest this update: Mon 09 Nov 2026 08:51:49 +0000 Manifest next update: Tue 10 Nov 2026 12:06:49 +0000 Files and hashes: 1: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl (hash: YQKlt3/CuQ3ovibqUm3b3nXg1IyJC416dZFyG2mFb2A=) 2: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=) 3: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=) 4: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: 2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 12:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b7:bb:e0:9c:35:0a:82:3b:81:d4:db:ed:02:00:11:50:99:97:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Validity Not Before: Nov 9 08:51:49 2026 GMT Not After : Nov 10 12:06:49 2026 GMT Subject: CN=E7E80494E7386520CF9E740615268452CB474002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:48:00:eb:81:69:9f:b6:c3:4d:77:45:32:bf: 90:18:96:0d:4f:70:e4:56:69:e5:b6:9b:de:12:7d: 7c:f1:b3:fe:db:3e:02:69:2f:da:37:e0:c0:d2:32: 2d:e6:5f:7f:99:c1:f1:22:00:d6:0a:85:22:59:13: 23:0f:24:90:aa:4d:a8:35:46:ca:9d:0d:2e:b5:39: c2:53:35:39:56:f5:40:e9:f4:4a:e9:1c:4c:35:48: 03:a6:cb:a1:a1:5a:e8:84:aa:62:e5:35:e5:0e:9e: 0e:2c:c4:7c:c5:1c:d5:aa:96:4b:36:e1:c8:84:f1: 0c:d6:ce:82:93:e4:a4:da:a0:c8:5d:ef:c0:94:4d: b1:68:cc:58:19:9b:0a:6b:d3:c4:25:46:93:e2:4e: f4:4a:c1:73:8f:c9:9c:67:c7:5f:48:d2:56:da:d1: de:53:e8:b9:37:99:dd:31:c7:92:ec:74:43:93:5b: 44:80:49:c3:ff:3b:8f:c3:a5:2e:a1:3a:ad:e5:0f: b3:d3:17:e7:a3:34:08:4e:b7:64:ad:99:7b:e6:ac: 78:16:a2:35:3b:4c:53:e9:59:cf:db:63:41:ce:65: a6:d2:26:30:1c:5f:36:4e:59:35:dc:cd:dc:c9:58: 18:67:c3:79:c0:4e:0b:fb:41:f7:a5:0f:e4:8a:f0: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E8:04:94:E7:38:65:20:CF:9E:74:06:15:26:84:52:CB:47:40:02 X509v3 Authority Key Identifier: keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:af:2d:ef:37:f4:53:e2:44:08:82:16:1e:d4:b3:15:05:65: 47:9d:60:d4:20:67:eb:4b:69:90:b0:49:42:a6:e9:54:bc:1c: a9:c1:f3:cd:49:c3:48:f1:ec:4d:07:9d:3b:6e:b7:de:6f:36: 22:cb:8f:63:a2:15:25:f8:0c:ac:9e:1d:3a:f2:4a:8a:76:d2: df:68:58:a0:61:34:e3:38:c6:27:e9:83:7f:5f:c1:56:69:a4: 4b:f9:1f:9e:90:9d:4f:2a:6f:a7:f2:d6:b5:a4:8b:20:f6:ff: 46:42:c8:9a:c6:73:14:08:7f:3b:67:2e:8c:f4:50:f0:1f:02: 87:29:be:39:94:40:20:f3:30:82:19:1c:f7:91:57:0a:b9:96: 1d:6b:76:11:8e:b0:45:02:51:a6:03:8d:32:65:6a:e6:a5:8c: 0e:cc:e0:1b:b9:0c:3e:18:36:db:4f:ff:38:7b:c4:72:26:03: 82:ed:3e:81:7c:49:c7:bf:ad:bb:1f:58:f8:19:1e:e3:b0:59: 74:97:60:65:48:fc:d5:11:6d:c3:ba:d6:54:3f:a6:b1:ae:b1: 13:9d:86:22:75:dd:97:60:25:54:c1:13:d3:d9:06:eb:02:e5: 4c:f8:8b:22:b2:b7:a7:05:c1:0a:d9:9d:b7:8f:bf:2e:e7:88: 86:60:71:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUALe74Jw1CoI7gdTb7QIAEVCZl94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdD OTFCOTAzMjAeFw0yNjExMDkwODUxNDlaFw0yNjExMTAxMjA2NDlaMDMxMTAvBgNV BAMTKEU3RTgwNDk0RTczODY1MjBDRjlFNzQwNjE1MjY4NDUyQ0I0NzQwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoSADrgWmftsNNd0Uyv5AYlg1P cORWaeW2m94SfXzxs/7bPgJpL9o34MDSMi3mX3+ZwfEiANYKhSJZEyMPJJCqTag1 RsqdDS61OcJTNTlW9UDp9ErpHEw1SAOmy6GhWuiEqmLlNeUOng4sxHzFHNWqlks2 4ciE8QzWzoKT5KTaoMhd78CUTbFozFgZmwpr08QlRpPiTvRKwXOPyZxnx19I0lba 0d5T6Lk3md0xx5LsdEOTW0SAScP/O4/DpS6hOq3lD7PTF+ejNAhOt2StmXvmrHgW ojU7TFPpWc/bY0HOZabSJjAcXzZOWTXczdzJWBhnw3nATgv7QfelD+SK8FKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5+gElOc4ZSDPnnQGFSaEUstHQAIwHwYDVR0j BBgwFoAU/+erKNJ3pa7EzUfaZX34F8kbkDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRjYzY5ZTktZWY3NC00YjgxLTkxZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhE Mjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdDOTFCOTAzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkU3QUIyOEQyNzdBNUFFQzRDRDQ3REE2NTdERjgxN0M5MUI5 MDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4 MTdDOTFCOTAzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyvLe839FPiRAiCFh7UsxUFZUedYNQgZ+tL aZCwSUKm6VS8HKnB881Jw0jx7E0HnTtut95vNiLLj2OiFSX4DKyeHTrySop20t9o WKBhNOM4xifpg39fwVZppEv5H56QnU8qb6fy1rWkiyD2/0ZCyJrGcxQIfztnLoz0 UPAfAocpvjmUQCDzMIIZHPeRVwq5lh1rdhGOsEUCUaYDjTJlaualjA7M4Bu5DD4Y NttP/zh7xHImA4LtPoF8Sce/rbsfWPgZHuOwWXSXYGVI/NURbcO61lQ/prGusROd hiJ13ZdgJVTBE9PZBusC5Uz4iyKyt6cFwQrZnbePvy7niIZgcT0= -----END CERTIFICATE-----Generated at Tue Nov 10 03:10:09 2026 by rpki-client