$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft File: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft (raw, json) Hash identifier: jslBCD3k5gzYtyRGLZ7OLzaIMveEkoYlNb9gl0IK74E= Subject key identifier: 89:57:9C:24:E0:AF:86:2A:6C:F9:34:D2:69:13:F1:86:F0:42:3B:76 Authority key identifier: FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 Certificate issuer: /CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Certificate serial: 028105F948508DF6A13A67C384A5B16875AE05B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:59:00 +0000 Manifest this update: Mon 21 Sep 2026 09:54:00 +0000 Manifest next update: Tue 22 Sep 2026 12:57:00 +0000 Files and hashes: 1: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl (hash: rPEBYX9TCTKJHqNsiletCPDvuNnYDuq6s0Gg/C5dfAk=) 2: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: pv5zffL4ZCBhJD+aFjjZDdz/CPK6N+eA7QhskPfJHEg=) 3: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: tqhtPy0pDXrbRO+/m8ay5h7+qXG3yJPzUoTIyb8m2MU=) 4: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: DzuRo4UVpWSsuuvSZCPx+QPp1mXNSgbHMp2M3XRIA7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:81:05:f9:48:50:8d:f6:a1:3a:67:c3:84:a5:b1:68:75:ae:05:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Validity Not Before: Sep 21 09:54:00 2026 GMT Not After : Sep 22 12:57:00 2026 GMT Subject: CN=89579C24E0AF862A6CF934D26913F186F0423B76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:cd:96:df:7e:5b:e6:ba:73:c2:7c:fe:79: 1c:2e:6a:27:ec:4c:51:f4:c0:91:45:51:78:dc:19: 3a:db:c4:8b:ae:47:c2:e1:6a:47:2b:1d:32:50:0c: 99:5b:cb:4a:71:cd:ce:92:9a:dc:8c:18:fb:66:37: f1:f0:33:04:75:dd:66:c6:24:fe:32:00:dc:72:46: 15:d5:b7:42:60:d1:6c:28:16:cb:a9:d9:e5:fe:c9: 64:5a:bb:9b:7c:2e:c2:f6:89:15:bf:30:a5:d2:5d: 7b:38:36:05:d0:b7:0f:51:b2:c1:40:87:d6:b1:de: e9:9d:5e:cb:9c:55:d6:c0:35:2f:94:34:01:87:f6: e5:f2:24:62:46:40:96:8e:44:08:83:d8:0b:85:01: 73:b2:22:a2:c9:3b:bb:c4:20:ca:e7:3d:43:1e:f8: 03:5c:12:c5:ad:9a:4b:d5:72:22:c6:78:96:85:19: f4:5d:18:90:3b:fd:79:fe:2d:f0:36:e2:ce:62:d9: a6:d5:ea:13:d8:ad:c3:60:78:6d:3c:0d:ee:99:b5: c7:27:b3:4b:f8:65:65:36:92:4e:0c:cc:dc:d9:fc: 3f:f5:a5:91:eb:2e:e6:69:a6:33:b6:17:ea:39:e7: a0:3a:34:f4:7a:79:a0:df:ef:f1:7c:14:72:6d:16: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:57:9C:24:E0:AF:86:2A:6C:F9:34:D2:69:13:F1:86:F0:42:3B:76 X509v3 Authority Key Identifier: keyid:FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:53:26:de:9c:35:85:bc:b6:19:94:97:77:15:f3:47:68:f0: 50:05:9b:61:81:4c:76:37:ab:1f:42:80:36:93:77:68:7b:4f: 8f:b3:0f:5e:6d:13:da:7f:89:02:82:76:51:ec:1b:e5:15:da: cc:5c:c4:cc:cb:a6:e1:f0:3f:f8:96:04:de:01:6e:e2:ab:ab: 77:50:ab:6b:43:46:57:fe:1b:11:0d:1d:33:00:70:8f:06:54: f6:7b:bd:05:5c:51:24:53:d8:bc:0b:89:4e:74:36:1d:df:40: 54:52:9e:62:d1:58:96:a3:c4:cf:9b:30:c0:34:b6:d9:c9:23: ba:58:a7:21:61:b3:f7:dd:da:a2:7b:d3:cb:64:4b:4f:dd:be: d0:d9:0d:fb:32:32:24:48:16:6f:6d:0f:07:a9:ef:65:19:e0: 16:6e:d9:e9:cf:23:ed:d2:6d:de:62:51:2e:ac:98:9c:83:03: f9:97:c3:4a:14:76:b9:3d:fa:19:f9:b5:f6:25:51:02:2d:8c: c7:b7:99:d5:b4:ae:a3:ed:63:0d:c6:4f:f4:cd:90:e1:5c:05: f6:2f:02:e6:a8:b8:fd:62:bb:79:21:2d:d5:75:30:19:58:9b: 0a:0f:fd:38:aa:90:74:cb:f8:b9:7d:0e:65:31:c1:f8:e5:b7: ef:ae:2b:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoEF+UhQjfahOmfDhKWxaHWuBbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5 QjgzNDExMzAeFw0yNjA5MjEwOTU0MDBaFw0yNjA5MjIxMjU3MDBaMDMxMTAvBgNV BAMTKDg5NTc5QzI0RTBBRjg2MkE2Q0Y5MzREMjY5MTNGMTg2RjA0MjNCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7L82W335b5rpzwnz+eRwuaifs TFH0wJFFUXjcGTrbxIuuR8LhakcrHTJQDJlby0pxzc6SmtyMGPtmN/HwMwR13WbG JP4yANxyRhXVt0Jg0WwoFsup2eX+yWRau5t8LsL2iRW/MKXSXXs4NgXQtw9RssFA h9ax3umdXsucVdbANS+UNAGH9uXyJGJGQJaORAiD2AuFAXOyIqLJO7vEIMrnPUMe +ANcEsWtmkvVciLGeJaFGfRdGJA7/Xn+LfA24s5i2abV6hPYrcNgeG08De6Ztccn s0v4ZWU2kk4MzNzZ/D/1pZHrLuZppjO2F+o556A6NPR6eaDf7/F8FHJtFtlZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiVecJOCvhips+TTSaRPxhvBCO3YwHwYDVR0j BBgwFoAU//RmKb3bTzocbXjyU+O2PJuDQRMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZlZGIyOGYtZjNmOS00MTk5LTg1YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlC RERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5QjgzNDExMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkY0NjYyOUJEREI0RjNBMUM2RDc4RjI1M0UzQjYzQzlCODM0 MTEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2 M0M5QjgzNDExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9TJt6cNYW8thmUl3cV80do8FAFm2GBTHY3 qx9CgDaTd2h7T4+zD15tE9p/iQKCdlHsG+UV2sxcxMzLpuHwP/iWBN4BbuKrq3dQ q2tDRlf+GxENHTMAcI8GVPZ7vQVcUSRT2LwLiU50Nh3fQFRSnmLRWJajxM+bMMA0 ttnJI7pYpyFhs/fd2qJ708tkS0/dvtDZDfsyMiRIFm9tDwep72UZ4BZu2enPI+3S bd5iUS6smJyDA/mXw0oUdrk9+hn5tfYlUQItjMe3mdW0rqPtYw3GT/TNkOFcBfYv AuaouP1iu3khLdV1MBlYmwoP/TiqkHTL+Ll9DmUxwfjlt++uK7M= -----END CERTIFICATE-----Generated at Tue Sep 22 06:03:05 2026 by rpki-client