$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft File: FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft (raw, json) Hash identifier: FXNA+UvGc8cRK3yvyJA9tkW83nI87gCqxHcW7Xax/h8= Subject key identifier: 96:10:62:92:A9:36:E5:D1:C9:2F:86:C5:48:F6:9F:A7:3D:9D:C0:D3 Authority key identifier: FF:75:FB:D7:DD:DE:14:F5:EF:E7:96:A5:B7:28:46:60:D4:6E:72:06 Certificate issuer: /CN=FF75FBD7DDDE14F5EFE796A5B7284660D46E7206 Certificate serial: 5E381BADC58954D7133448DD08FCB72994B795D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 13:02:33 +0000 Manifest this update: Tue 22 Sep 2026 12:57:33 +0000 Manifest next update: Wed 23 Sep 2026 14:50:33 +0000 Files and hashes: 1: FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl (hash: SJcwdHE2ij20hg2VM/puE1Dks5lk1j3VOLmQCYFk4BM=) 2: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: 18eMz8teTkkcf9p+UfDdXZ6oyQLlhohSPsxmAeH1CuI=) 3: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: lYcIqG++R3KlJJ8gdHbn639yTY/SuMx9BoynL2RsVYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:38:1b:ad:c5:89:54:d7:13:34:48:dd:08:fc:b7:29:94:b7:95:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75FBD7DDDE14F5EFE796A5B7284660D46E7206 Validity Not Before: Sep 22 12:57:33 2026 GMT Not After : Sep 23 14:50:33 2026 GMT Subject: CN=96106292A936E5D1C92F86C548F69FA73D9DC0D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:e0:ab:0b:a0:83:a9:2b:c6:87:da:52:07: 82:56:f8:1d:eb:f6:56:2e:33:a0:0a:41:fa:26:e6: b7:82:49:40:da:c5:87:ab:a7:a5:6e:28:0e:66:18: af:f5:d9:bf:41:5f:d9:ec:03:73:a9:2b:b0:1e:a4: 02:57:50:ac:a2:b3:df:35:4f:3e:58:0d:25:11:e8: 65:45:09:27:c7:d6:ce:7e:e8:4e:ff:64:37:2d:00: d5:a7:cd:87:30:db:d2:5b:81:90:99:13:1c:71:c5: c2:f1:b7:53:70:6c:98:84:c4:d6:f6:7e:34:54:d6: 6d:65:03:f8:96:e3:20:68:9a:ad:d6:1b:18:7d:0e: 8d:88:d1:50:57:2b:01:5f:e3:63:48:dc:ff:35:bc: 6d:cb:0b:30:2c:e8:63:ab:f8:95:f6:61:9f:cf:11: 90:32:21:97:3b:ce:ad:42:d3:d7:c3:51:35:f9:c0: cb:74:ef:81:71:4e:55:1e:62:44:45:63:a9:27:f7: 69:f8:20:60:f8:30:e5:dc:4a:aa:1a:19:0e:90:cc: 0c:4a:0a:ed:b7:f3:19:5b:a0:26:b0:69:2f:fc:24: 8b:2c:41:8c:f9:eb:e3:42:b8:73:3e:bd:1b:d1:d3: 06:33:4c:77:a4:67:23:6b:0f:b5:8e:1f:9c:5a:96: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:10:62:92:A9:36:E5:D1:C9:2F:86:C5:48:F6:9F:A7:3D:9D:C0:D3 X509v3 Authority Key Identifier: keyid:FF:75:FB:D7:DD:DE:14:F5:EF:E7:96:A5:B7:28:46:60:D4:6E:72:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:cd:12:0d:db:36:7b:bd:f2:10:18:81:77:ba:bb:9f:85:d5: 25:3d:8f:93:ad:04:dc:1a:fd:86:1f:c1:62:c1:f5:0c:5b:cf: bb:6c:c5:54:32:a7:b0:6f:63:37:4a:be:49:e8:f3:2d:80:40: 23:9b:4a:7d:6c:36:ef:11:6f:66:28:41:6d:89:80:88:74:3c: e6:5e:82:24:31:8e:9e:45:26:12:0e:fd:e6:ee:1f:2a:fd:c6: 0a:85:cb:74:cb:3f:4e:45:a6:c5:31:8f:84:aa:e3:f6:b7:3f: 35:43:61:01:27:1b:99:e7:2f:31:54:a5:3d:d2:c0:dc:4e:53: 3e:52:7c:c3:63:d6:3e:02:0f:5d:18:d6:af:7f:a7:3d:18:c4: c2:67:88:d2:64:34:1b:c0:7d:a1:de:be:b6:17:a4:03:52:04: b0:df:8d:fe:d1:e5:99:10:e4:3f:02:dd:65:df:bf:f7:ea:87: fc:32:5a:ec:ac:df:53:b1:69:42:57:2d:81:e6:53:71:7e:3c: 8e:43:eb:9d:72:79:e6:74:7b:cf:5b:0d:4f:9a:e3:0e:f6:c6: 6d:3f:61:4a:7c:07:46:81:13:27:e4:4e:b1:6a:71:64:dc:8b: 7b:f9:22:fb:d2:5d:9e:70:cd:b6:40:b9:0d:b5:96:3c:91:22: 29:68:55:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjgbrcWJVNcTNEjdCPy3KZS3ldYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUZCRDdERERFMTRGNUVGRTc5NkE1QjcyODQ2NjBE NDZFNzIwNjAeFw0yNjA5MjIxMjU3MzNaFw0yNjA5MjMxNDUwMzNaMDMxMTAvBgNV BAMTKDk2MTA2MjkyQTkzNkU1RDFDOTJGODZDNTQ4RjY5RkE3M0Q5REMwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWB+CrC6CDqSvGh9pSB4JW+B3r 9lYuM6AKQfom5reCSUDaxYerp6VuKA5mGK/12b9BX9nsA3OpK7AepAJXUKyis981 Tz5YDSUR6GVFCSfH1s5+6E7/ZDctANWnzYcw29JbgZCZExxxxcLxt1NwbJiExNb2 fjRU1m1lA/iW4yBomq3WGxh9Do2I0VBXKwFf42NI3P81vG3LCzAs6GOr+JX2YZ/P EZAyIZc7zq1C09fDUTX5wMt074FxTlUeYkRFY6kn92n4IGD4MOXcSqoaGQ6QzAxK Cu238xlboCawaS/8JIssQYz56+NCuHM+vRvR0wYzTHekZyNrD7WOH5xaln2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlhBikqk25dHJL4bFSPafpz2dwNMwHwYDVR0j BBgwFoAU/3X7193eFPXv55altyhGYNRucgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0MDU1NDUtYzM1ZC00ZGUxLTk2MTgtNDRiNWY0MTdhMzAzLzEvRkY3NUZCRDdE RERFMTRGNUVGRTc5NkE1QjcyODQ2NjBENDZFNzIwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjc1RkJEN0REREUxNEY1RUZFNzk2QTVCNzI4NDY2MEQ0NkU3 MjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzEvRkY3NUZCRDdERERFMTRGNUVGRTc5NkE1QjcyODQ2 NjBENDZFNzIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfNEg3bNnu98hAYgXe6u5+F1SU9j5OtBNwa /YYfwWLB9Qxbz7tsxVQyp7BvYzdKvkno8y2AQCObSn1sNu8Rb2YoQW2JgIh0POZe giQxjp5FJhIO/ebuHyr9xgqFy3TLP05FpsUxj4Sq4/a3PzVDYQEnG5nnLzFUpT3S wNxOUz5SfMNj1j4CD10Y1q9/pz0YxMJniNJkNBvAfaHevrYXpANSBLDfjf7R5ZkQ 5D8C3WXfv/fqh/wyWuys31OxaUJXLYHmU3F+PI5D651yeeZ0e89bDU+a4w72xm0/ YUp8B0aBEyfkTrFqcWTci3v5IvvSXZ5wzbZAuQ21ljyRIiloVbg= -----END CERTIFICATE-----Generated at Tue Sep 22 18:00:42 2026 by rpki-client