$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft File: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft (raw, json) Hash identifier: M9l28tuAIcwqtXrAvw6V34I9ue6QDbSpXl9hZkO/DNA= Subject key identifier: 09:2E:1A:34:AF:AF:83:32:E8:A3:51:8C:91:47:9C:3B:F4:A3:1C:80 Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Certificate serial: 6255E37C2DBCBD92C1CBF80EEE66F54DDF296C77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:23:21 +0000 Manifest this update: Mon 21 Sep 2026 05:18:21 +0000 Manifest next update: Tue 22 Sep 2026 08:34:21 +0000 Files and hashes: 1: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=) 2: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=) 3: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl (hash: LFyLUhePyylgRF36KNqDe9w8+b2oNZweYmkoKgKHel4=) 4: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: 2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:55:e3:7c:2d:bc:bd:92:c1:cb:f8:0e:ee:66:f5:4d:df:29:6c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Validity Not Before: Sep 21 05:18:21 2026 GMT Not After : Sep 22 08:34:21 2026 GMT Subject: CN=092E1A34AFAF8332E8A3518C91479C3BF4A31C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3f:ea:67:63:4d:2b:8b:be:32:66:80:17:60: 94:7b:8f:19:7a:e6:a4:da:d2:58:90:88:7c:6d:c5: 2e:57:90:7c:cb:28:e9:e5:30:be:c4:f9:a9:cc:6d: 13:83:6d:a2:02:81:7e:8e:83:70:01:7a:0d:d7:2c: 64:1b:7e:3b:42:4a:15:d9:5f:61:df:68:0d:2f:ef: d3:ec:f5:de:6b:cb:b4:87:05:ec:af:a1:a2:2d:57: 2f:f3:b7:00:e6:dd:5c:08:0c:b5:e3:4f:b6:45:27: 00:58:15:33:2f:4f:74:93:b0:cc:b9:dd:9d:ec:28: cd:7e:68:13:af:8b:7a:43:c2:dc:2f:f8:77:27:6e: 22:89:69:e1:c2:ff:cb:e6:be:6b:af:4b:8c:e7:63: 3a:fd:53:69:e0:82:f0:81:b0:c0:77:66:b0:e5:5c: 9a:76:d6:a3:7b:59:97:1e:cc:6d:14:17:73:0c:1a: 46:51:ce:b6:36:fd:b6:95:0b:fc:03:b5:e8:f0:5e: e6:d9:a0:76:b6:11:6b:bb:2a:6e:22:96:b1:1a:00: bb:cf:e5:0f:f1:12:f5:57:45:90:42:85:8b:e0:3a: cc:65:92:84:31:c4:9a:13:37:64:a5:7e:b2:f6:82: c9:87:d4:fd:c6:95:e5:8e:87:5d:d4:09:79:a7:80: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2E:1A:34:AF:AF:83:32:E8:A3:51:8C:91:47:9C:3B:F4:A3:1C:80 X509v3 Authority Key Identifier: keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d7:5e:46:2c:9f:35:d5:95:d3:bb:07:fe:fd:ee:a1:b5:25: 8a:bf:ae:17:34:a7:17:9c:19:4a:bd:0a:82:e5:6e:76:df:33: 67:cc:25:19:dc:7c:dc:1c:e2:8f:c7:f6:85:d4:d1:db:20:d7: 1b:dd:58:30:c4:bf:af:4b:58:20:a5:44:d1:98:43:43:81:86: c8:98:63:41:25:d7:d9:3f:d0:13:82:79:d6:a3:db:0f:0b:7c: 5e:75:6f:1e:96:02:40:f4:df:91:43:ef:a6:df:79:66:d2:01: 9b:35:5c:dd:57:a2:48:e9:c9:4b:b3:69:c7:3e:14:9b:61:3d: c7:d6:44:ca:7d:92:df:f5:96:80:68:94:b3:ae:bd:6d:be:f7: 60:29:e9:ac:8a:b7:b6:a1:ac:f1:55:38:8f:ba:38:75:0c:50: 09:49:a1:41:82:d4:b2:d9:4d:40:cd:72:17:0a:bb:11:78:51: 33:dd:8b:b5:dd:37:ed:0a:6b:0b:15:f2:88:22:ed:fb:34:cd: 75:90:75:be:f8:d5:26:de:77:cf:c3:28:7b:3d:b8:48:b5:4c: 27:eb:1a:fe:a3:ba:9e:bd:8f:79:54:27:c1:e8:b4:c0:c3:07: 93:ea:ee:1c:71:3d:c3:88:1b:12:0c:3b:65:ab:2c:69:e1:07: a6:20:67:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlXjfC28vZLBy/gO7mb1Td8pbHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdD OTFCOTAzMjAeFw0yNjA5MjEwNTE4MjFaFw0yNjA5MjIwODM0MjFaMDMxMTAvBgNV BAMTKDA5MkUxQTM0QUZBRjgzMzJFOEEzNTE4QzkxNDc5QzNCRjRBMzFDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0P+pnY00ri74yZoAXYJR7jxl6 5qTa0liQiHxtxS5XkHzLKOnlML7E+anMbRODbaICgX6Og3ABeg3XLGQbfjtCShXZ X2HfaA0v79Ps9d5ry7SHBeyvoaItVy/ztwDm3VwIDLXjT7ZFJwBYFTMvT3STsMy5 3Z3sKM1+aBOvi3pDwtwv+HcnbiKJaeHC/8vmvmuvS4znYzr9U2nggvCBsMB3ZrDl XJp21qN7WZcezG0UF3MMGkZRzrY2/baVC/wDtejwXubZoHa2EWu7Km4ilrEaALvP 5Q/xEvVXRZBChYvgOsxlkoQxxJoTN2SlfrL2gsmH1P3GleWOh13UCXmngASRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCS4aNK+vgzLoo1GMkUecO/SjHIAwHwYDVR0j BBgwFoAU/+erKNJ3pa7EzUfaZX34F8kbkDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRjYzY5ZTktZWY3NC00YjgxLTkxZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhE Mjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdDOTFCOTAzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkU3QUIyOEQyNzdBNUFFQzRDRDQ3REE2NTdERjgxN0M5MUI5 MDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4 MTdDOTFCOTAzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/XXkYsnzXVldO7B/797qG1JYq/rhc0pxec GUq9CoLlbnbfM2fMJRncfNwc4o/H9oXU0dsg1xvdWDDEv69LWCClRNGYQ0OBhsiY Y0El19k/0BOCedaj2w8LfF51bx6WAkD035FD76bfeWbSAZs1XN1XokjpyUuzacc+ FJthPcfWRMp9kt/1loBolLOuvW2+92Ap6ayKt7ahrPFVOI+6OHUMUAlJoUGC1LLZ TUDNchcKuxF4UTPdi7XdN+0KawsV8ogi7fs0zXWQdb741Sbed8/DKHs9uEi1TCfr Gv6jup69j3lUJ8HotMDDB5Pq7hxxPcOIGxIMO2WrLGnhB6YgZwo= -----END CERTIFICATE-----Generated at Mon Sep 21 16:18:56 2026 by rpki-client