$ rpki-client -vvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft File: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft (raw, json) Hash identifier: 4r9hDWqzHJ8D7f+wIYPpnyeCmqNOV0+RHeMp/iHOfqE= Subject key identifier: 1C:B0:4D:0A:40:AC:13:AB:51:47:65:CF:71:C3:5D:48:68:2A:7C:D8 Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Certificate serial: 267F8FE275A5F475A7611A904CF982DDA15FAB1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:42:47 +0000 Manifest this update: Tue 16 Jun 2026 23:37:47 +0000 Manifest next update: Thu 18 Jun 2026 03:25:47 +0000 Files and hashes: 1: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=) 2: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=) 3: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl (hash: 6vhtGsbWw/eBLuXyobQ15gSbEH9K5yaagukAg3lHKWA=) 4: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: 2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:7f:8f:e2:75:a5:f4:75:a7:61:1a:90:4c:f9:82:dd:a1:5f:ab:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Validity Not Before: Jun 16 23:37:47 2026 GMT Not After : Jun 18 03:25:47 2026 GMT Subject: CN=1CB04D0A40AC13AB514765CF71C35D48682A7CD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:b0:69:be:67:b8:71:22:c5:93:2b:ef:ef: c6:56:00:7f:b0:5a:d2:d9:64:2f:79:5d:52:d0:23: 95:b6:06:f5:4b:b4:c7:8e:1d:72:6a:bc:37:85:04: bb:79:7e:88:6a:02:5e:01:0d:42:79:ec:a6:ae:c9: d5:39:bb:54:01:f5:48:be:85:32:01:87:a4:72:a6: 70:64:3f:11:f8:7e:01:59:96:59:4b:c5:de:3e:2a: 8d:3e:e0:bc:70:db:6a:29:c0:53:62:8e:a5:05:91: 15:a3:c0:62:0e:25:2c:3c:5d:f7:8c:47:d6:08:b9: 2f:67:40:b0:77:60:39:11:65:f5:41:0a:23:aa:8d: 39:45:59:07:54:95:6c:ba:85:bd:1b:6d:dc:70:de: 3d:46:89:4c:99:66:b8:15:b6:fa:72:b1:f6:7e:68: 33:2b:ca:bf:47:65:6f:58:85:7e:dd:15:26:7f:b0: d0:33:f8:65:64:fd:74:47:20:16:d8:79:f9:2d:29: 68:2f:6f:fc:c0:20:16:df:0d:68:51:8d:d3:fb:fb: 5b:c1:0d:74:8d:aa:a6:e6:ee:a3:a1:0c:49:9e:75: f5:72:e1:3b:1b:e5:b4:9e:50:0d:28:79:ad:85:8e: 3d:fd:0d:46:f5:49:ed:de:ff:16:c0:d6:3f:e8:6e: b4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B0:4D:0A:40:AC:13:AB:51:47:65:CF:71:C3:5D:48:68:2A:7C:D8 X509v3 Authority Key Identifier: keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:47:48:f3:c9:79:ec:05:6e:c1:c0:19:38:5f:9d:21:ec:61: 4a:5e:5a:6f:62:49:62:86:2f:7e:c8:f4:79:a3:2d:de:5c:e8: e2:74:ee:a0:30:35:e3:54:75:b1:fd:bf:e0:32:29:b9:f7:f3: 78:5e:84:95:f1:7c:6d:cf:85:ee:93:40:aa:42:84:36:d2:3d: 33:5f:c3:da:3d:6c:d6:cd:e9:db:f7:3a:8a:e3:93:76:b4:c4: d8:1b:1b:4f:f9:1e:8d:92:92:6f:a5:da:fc:4a:f4:68:b0:87: 34:c3:08:6d:c7:6c:eb:8b:fb:c1:70:07:2e:7b:56:46:17:de: ec:f9:12:7a:5c:24:18:cd:79:c1:c4:8e:ee:4d:c6:f8:31:b1: b2:f6:6d:80:36:7b:8b:25:37:24:6b:50:62:33:9d:cb:7d:4d: c3:64:35:b2:23:49:7b:a9:75:32:25:78:e5:89:09:cb:2a:51: c4:38:0c:e7:b0:41:41:2d:90:94:5e:41:cf:f6:95:6f:45:93: 2e:46:ee:aa:33:2f:ae:74:3e:c9:80:01:fe:54:4e:b8:8c:08: 14:11:64:51:56:c7:b0:dd:72:c2:61:c7:29:c8:94:be:15:90: 43:51:37:28:ac:58:98:d2:22:e4:91:59:e7:38:01:20:d6:e1: 76:7c:08:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJn+P4nWl9HWnYRqQTPmC3aFfqxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdD OTFCOTAzMjAeFw0yNjA2MTYyMzM3NDdaFw0yNjA2MTgwMzI1NDdaMDMxMTAvBgNV BAMTKDFDQjA0RDBBNDBBQzEzQUI1MTQ3NjVDRjcxQzM1RDQ4NjgyQTdDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtN7Bpvme4cSLFkyvv78ZWAH+w WtLZZC95XVLQI5W2BvVLtMeOHXJqvDeFBLt5fohqAl4BDUJ57KauydU5u1QB9Ui+ hTIBh6RypnBkPxH4fgFZlllLxd4+Ko0+4Lxw22opwFNijqUFkRWjwGIOJSw8XfeM R9YIuS9nQLB3YDkRZfVBCiOqjTlFWQdUlWy6hb0bbdxw3j1GiUyZZrgVtvpysfZ+ aDMryr9HZW9YhX7dFSZ/sNAz+GVk/XRHIBbYefktKWgvb/zAIBbfDWhRjdP7+1vB DXSNqqbm7qOhDEmedfVy4Tsb5bSeUA0oea2Fjj39DUb1Se3e/xbA1j/obrTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHLBNCkCsE6tRR2XPccNdSGgqfNgwHwYDVR0j BBgwFoAU/+erKNJ3pa7EzUfaZX34F8kbkDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRjYzY5ZTktZWY3NC00YjgxLTkxZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhE Mjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdDOTFCOTAzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkU3QUIyOEQyNzdBNUFFQzRDRDQ3REE2NTdERjgxN0M5MUI5 MDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4 MTdDOTFCOTAzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBHSPPJeewFbsHAGThfnSHsYUpeWm9iSWKG L37I9HmjLd5c6OJ07qAwNeNUdbH9v+AyKbn383hehJXxfG3Phe6TQKpChDbSPTNf w9o9bNbN6dv3Oorjk3a0xNgbG0/5Ho2Skm+l2vxK9GiwhzTDCG3HbOuL+8FwBy57 VkYX3uz5EnpcJBjNecHEju5NxvgxsbL2bYA2e4slNyRrUGIznct9TcNkNbIjSXup dTIleOWJCcsqUcQ4DOewQUEtkJReQc/2lW9Fky5G7qozL650PsmAAf5UTriMCBQR ZFFWx7DdcsJhxynIlL4VkENRNyisWJjSIuSRWec4ASDW4XZ8CGE= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:21 2026 by rpki-client