$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft File: FF5E59BD445AE731E58ED471848043C324931D05.mft (raw, json) Hash identifier: 9Qb4iYtFcWApFzpMmjI+JqZjkg/hgqcUjdHPj6+qJD8= Subject key identifier: 17:0D:5C:BB:A4:32:AB:06:1D:03:2E:D8:DB:B8:AB:F3:7B:46:16:3C Authority key identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05 Certificate issuer: /CN=FF5E59BD445AE731E58ED471848043C324931D05 Certificate serial: 2BFEB41EACDC2FB18BE6C151EF59BEE2E68AAF05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 11:47:46 +0000 Manifest this update: Thu 08 Oct 2026 11:42:46 +0000 Manifest next update: Fri 09 Oct 2026 14:59:46 +0000 Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: OeYZDJDnfFOrv0gLIl0BcG8+/dZQ9bC3jq7crp9LkMo=) 2: FF5E59BD445AE731E58ED471848043C324931D05.crl (hash: BxQFDiCXP2R0EhwJhZh3EuBWF8Lt1b/uPvZGOoJIHsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fe:b4:1e:ac:dc:2f:b1:8b:e6:c1:51:ef:59:be:e2:e6:8a:af:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5E59BD445AE731E58ED471848043C324931D05 Validity Not Before: Oct 8 11:42:46 2026 GMT Not After : Oct 9 14:59:46 2026 GMT Subject: CN=170D5CBBA432AB061D032ED8DBB8ABF37B46163C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:04:31:db:bd:ff:23:f0:c0:83:8d:5a:7e: 5b:5c:a1:0d:85:ec:92:51:51:b9:6b:fa:f2:4c:68: b6:d0:3f:d0:a2:d8:c9:c9:3e:0a:ef:72:e7:56:eb: 3d:fe:66:86:56:01:36:a5:d3:19:ae:3a:f7:14:0f: 50:6b:82:50:3c:d4:d0:e4:a8:7a:3c:66:30:3d:c2: 8b:4d:84:c4:70:d3:6e:c8:c7:5c:fc:ca:59:b6:8b: 30:74:0a:d2:81:e7:7f:4e:c9:17:04:2c:48:92:6a: 8e:4a:d1:ec:95:13:69:b8:3e:46:96:57:8a:05:2c: ff:a1:85:68:e9:eb:7b:42:af:ab:06:c7:f0:8f:d9: 7e:bc:fd:d8:48:88:fd:e2:2f:79:9b:58:d9:45:dc: 83:3f:06:d7:5f:c4:55:d4:5d:a5:e2:b8:c9:07:19: 8f:ca:84:a0:fd:ff:1d:91:08:44:11:cb:d9:c4:ea: f3:a7:42:7c:5a:7e:76:94:3d:fd:97:32:8a:61:66: 6f:17:28:76:fb:5d:a1:88:e0:42:db:f0:75:fe:02: be:5c:99:30:86:b4:c6:4c:35:a0:55:ef:04:1b:cd: 1b:c1:3e:e2:9e:ca:1d:f1:40:44:4a:c1:8d:29:46: c7:77:63:bc:87:f5:9a:e9:d0:a6:1a:9a:92:c5:17: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0D:5C:BB:A4:32:AB:06:1D:03:2E:D8:DB:B8:AB:F3:7B:46:16:3C X509v3 Authority Key Identifier: keyid:FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d1:8d:0e:4c:b0:0d:73:18:de:b0:fd:a5:28:96:7a:d1:03: 8c:81:b2:12:38:f1:84:cb:76:0f:99:16:f8:26:9c:67:54:26: 12:7b:da:3b:e3:06:7c:95:c1:b4:2a:3e:05:96:68:12:b8:28: d3:d1:ac:18:a8:23:2d:e6:5e:d4:0e:46:de:5d:9e:27:85:34: 5f:67:8a:82:2c:c6:8c:f9:4c:08:f8:cf:86:2f:8e:fa:dd:bd: ab:21:c5:6e:7e:d4:7d:7e:e1:d2:3b:c9:4d:b0:1d:ed:b0:a0: 91:43:67:d8:03:88:d3:b7:ed:fe:00:6a:2e:08:e3:72:ce:62: b5:2d:09:80:d2:96:13:a1:a5:ec:40:ab:0e:6c:40:d8:e7:81: 8c:dc:56:d3:20:86:f1:6e:a9:ac:b9:d9:4d:1c:55:f1:e1:94: f9:99:68:3c:49:3d:9a:9c:6a:97:73:6b:7f:a3:d0:cf:c7:d9: 19:f0:c4:0c:f7:2a:28:c2:2e:e1:63:4e:16:b2:30:54:d0:04: fb:b5:d6:5b:3b:d0:a1:ef:7c:69:1a:a5:27:07:7d:0d:57:a0: af:6c:c4:c6:c6:4e:32:cc:ea:7a:46:6f:d4:28:77:c9:62:78: d0:7b:60:0d:51:71:23:c0:c5:c0:95:92:38:f9:23:68:6b:92: 51:b6:8e:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/60HqzcL7GL5sFR71m+4uaKrwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1RTU5QkQ0NDVBRTczMUU1OEVENDcxODQ4MDQzQzMy NDkzMUQwNTAeFw0yNjEwMDgxMTQyNDZaFw0yNjEwMDkxNDU5NDZaMDMxMTAvBgNV BAMTKDE3MEQ1Q0JCQTQzMkFCMDYxRDAzMkVEOERCQjhBQkYzN0I0NjE2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/QQx273/I/DAg41afltcoQ2F 7JJRUblr+vJMaLbQP9Ci2MnJPgrvcudW6z3+ZoZWATal0xmuOvcUD1BrglA81NDk qHo8ZjA9wotNhMRw027Ix1z8ylm2izB0CtKB539OyRcELEiSao5K0eyVE2m4PkaW V4oFLP+hhWjp63tCr6sGx/CP2X68/dhIiP3iL3mbWNlF3IM/BtdfxFXUXaXiuMkH GY/KhKD9/x2RCEQRy9nE6vOnQnxafnaUPf2XMophZm8XKHb7XaGI4ELb8HX+Ar5c mTCGtMZMNaBV7wQbzRvBPuKeyh3xQERKwY0pRsd3Y7yH9Zrp0KYampLFFy6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFw1cu6QyqwYdAy7Y27ir83tGFjwwHwYDVR0j BBgwFoAU/15ZvURa5zHljtRxhIBDwySTHQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc3MGZlZWItMmNhYS00NzZhLWFiNDMtZjY1MmExMWZkMDhjLzAvRkY1RTU5QkQ0 NDVBRTczMUU1OEVENDcxODQ4MDQzQzMyNDkzMUQwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVFNTlCRDQ0NUFFNzMxRTU4RUQ0NzE4NDgwNDNDMzI0OTMx RDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvRkY1RTU5QkQ0NDVBRTczMUU1OEVENDcxODQ4MDQz QzMyNDkzMUQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3RjQ5MsA1zGN6w/aUolnrRA4yBshI48YTL dg+ZFvgmnGdUJhJ72jvjBnyVwbQqPgWWaBK4KNPRrBioIy3mXtQORt5dnieFNF9n ioIsxoz5TAj4z4YvjvrdvashxW5+1H1+4dI7yU2wHe2woJFDZ9gDiNO37f4Aai4I 43LOYrUtCYDSlhOhpexAqw5sQNjngYzcVtMghvFuqay52U0cVfHhlPmZaDxJPZqc apdza3+j0M/H2RnwxAz3KijCLuFjThayMFTQBPu11ls70KHvfGkapScHfQ1XoK9s xMbGTjLM6npGb9Qod8lieNB7YA1RcSPAxcCVkjj5I2hrklG2jvQ= -----END CERTIFICATE-----Generated at Fri Oct 9 02:51:35 2026 by rpki-client