$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft File: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft (raw, json) Hash identifier: GDYDXOIg+5rg006V8XD3f8dyGSIYIFLKSByD3dfk+gc= Subject key identifier: E3:9B:6D:D8:3F:FE:EF:1A:CC:8B:09:CD:A5:32:31:99:E2:0E:8F:0A Authority key identifier: FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A Certificate issuer: /CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Certificate serial: 74B7D2A561092609ED2D88CEC627366F12BE5CD1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:57:43 +0000 Manifest this update: Mon 21 Sep 2026 00:52:43 +0000 Manifest next update: Tue 22 Sep 2026 04:01:43 +0000 Files and hashes: 1: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl (hash: 59cbA5QrSVBkVoywb0IQ+rl4CItyuzmP1EsYUwJ444c=) 2: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: d3W50Pv9IvojYqj5AXX2l3Oy/7lfLR7Ec6qbGSXUUA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b7:d2:a5:61:09:26:09:ed:2d:88:ce:c6:27:36:6f:12:be:5c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Validity Not Before: Sep 21 00:52:43 2026 GMT Not After : Sep 22 04:01:43 2026 GMT Subject: CN=E39B6DD83FFEEF1ACC8B09CDA5323199E20E8F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:ba:dc:fe:0c:cc:d3:ec:da:7d:22:f7:58: ec:fc:c7:97:cc:fb:51:34:ad:30:9f:87:ad:7f:1f: 16:d1:ad:60:e3:86:77:c3:0a:d3:2e:02:61:d4:96: 66:98:de:d3:cb:10:39:36:a0:a6:6d:bf:39:b8:3b: 15:89:88:4a:53:6d:39:3e:aa:f4:f7:44:9b:50:b2: fa:04:56:33:08:36:3d:2e:ec:1a:b7:61:04:e8:f6: f6:52:ad:60:3d:46:1c:95:7c:68:d3:62:cb:d4:37: 86:31:be:b3:f4:2b:6a:87:7c:c9:49:52:31:3e:94: 68:46:73:90:00:80:44:c7:b8:5f:81:30:9b:6f:f5: 4b:08:ea:92:7e:c8:0b:bc:26:f5:01:ac:61:c4:c1: b7:7c:4d:dd:3f:30:52:4c:69:c7:54:97:87:6d:d2: e6:29:fa:f7:64:92:b0:7b:40:a9:18:1f:e5:74:6a: c6:2f:d6:6f:71:1e:5e:c1:42:91:44:8c:32:d1:92: ae:77:c2:3f:fd:ff:f0:2f:e0:19:32:4d:e1:79:17: 68:fc:4d:e6:5a:14:2f:87:61:96:03:71:e0:d0:5d: 70:40:66:17:86:52:44:bd:77:ab:dc:13:4a:43:98: bc:a9:c9:5f:5e:e0:6a:fc:a7:b4:c2:85:ac:52:7f: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9B:6D:D8:3F:FE:EF:1A:CC:8B:09:CD:A5:32:31:99:E2:0E:8F:0A X509v3 Authority Key Identifier: keyid:FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:52:da:e5:e9:7b:b6:46:4a:d3:56:38:06:19:02:a4:88:81: 3f:c5:20:f3:dd:c4:6d:ca:23:cb:b8:f4:b7:49:74:f6:80:67: 5b:34:91:ef:e2:70:f6:7c:0c:93:df:76:7a:d4:99:7e:7f:ab: 6d:ac:ca:dc:07:6b:79:c5:57:e9:21:0d:20:99:06:e5:a7:b3: 5a:f6:81:59:55:12:fe:d5:75:c4:2e:82:91:09:61:0f:6c:00: cf:27:cc:c3:8b:eb:fe:7a:b6:f1:74:49:e1:3e:70:84:f1:a3: 1c:1f:31:8e:bf:64:a8:36:db:9e:c7:30:1b:e4:28:28:5d:57: cd:ff:32:3d:9a:e3:60:ad:a7:be:e2:18:95:6c:9a:04:54:80: f3:3c:46:e1:cc:12:75:61:7a:98:4c:51:34:da:74:c7:dd:0a: 3f:7b:e0:8d:8b:c2:8f:b3:f4:e9:3d:55:db:98:e7:82:86:09: ca:27:ea:2d:c7:9f:d1:c0:79:00:40:b9:1b:8f:28:21:be:ed: 45:0c:6d:96:9c:77:43:63:d7:84:3d:22:3d:9c:3d:48:cc:a4: dc:16:bc:64:56:98:c0:f8:47:de:a8:d3:9e:fe:7b:22:42:da: fc:80:02:30:45:e3:19:2f:df:8d:f3:af:2d:e4:e3:15:a4:c7: 4c:00:d8:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLfSpWEJJgntLYjOxic2bxK+XNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkExOEEx Mjc3QTU5QTAeFw0yNjA5MjEwMDUyNDNaFw0yNjA5MjIwNDAxNDNaMDMxMTAvBgNV BAMTKEUzOUI2REQ4M0ZGRUVGMUFDQzhCMDlDREE1MzIzMTk5RTIwRThGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjLrc/gzM0+zafSL3WOz8x5fM +1E0rTCfh61/HxbRrWDjhnfDCtMuAmHUlmaY3tPLEDk2oKZtvzm4OxWJiEpTbTk+ qvT3RJtQsvoEVjMINj0u7Bq3YQTo9vZSrWA9RhyVfGjTYsvUN4YxvrP0K2qHfMlJ UjE+lGhGc5AAgETHuF+BMJtv9UsI6pJ+yAu8JvUBrGHEwbd8Td0/MFJMacdUl4dt 0uYp+vdkkrB7QKkYH+V0asYv1m9xHl7BQpFEjDLRkq53wj/9//Av4BkyTeF5F2j8 TeZaFC+HYZYDceDQXXBAZheGUkS9d6vcE0pDmLypyV9e4Gr8p7TChaxSf9WNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU45tt2D/+7xrMiwnNpTIxmeIOjwowHwYDVR0j BBgwFoAU//PY3FwMhlKfl7uGk0ahihJ3pZowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ2ZmZhZDItMjBiYy00MjQ2LTgyOTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1 QzBDODY1MjlGOTdCQjg2OTM0NkExOEExMjc3QTU5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkYzRDhEQzVDMEM4NjUyOUY5N0JCODY5MzQ2QTE4QTEyNzdB NTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkEx OEExMjc3QTU5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARS2uXpe7ZGStNWOAYZAqSIgT/FIPPdxG3K I8u49LdJdPaAZ1s0ke/icPZ8DJPfdnrUmX5/q22sytwHa3nFV+khDSCZBuWns1r2 gVlVEv7VdcQugpEJYQ9sAM8nzMOL6/56tvF0SeE+cITxoxwfMY6/ZKg2257HMBvk KChdV83/Mj2a42Ctp77iGJVsmgRUgPM8RuHMEnVhephMUTTadMfdCj974I2Lwo+z 9Ok9VduY54KGCcon6i3Hn9HAeQBAuRuPKCG+7UUMbZacd0Nj14Q9Ij2cPUjMpNwW vGRWmMD4R96o057+eyJC2vyAAjBF4xkv343zry3k4xWkx0wA2EE= -----END CERTIFICATE-----Generated at Mon Sep 21 21:25:44 2026 by rpki-client