$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft File: FF5F881DC07CC4A9A985D594360658D202A551B7.mft (raw, json) Hash identifier: nZ/EYjg+XJutwOU0xUxJUBRWYcFWR02nQ+99WxbpiCw= Subject key identifier: D8:B2:E5:2D:E9:8B:CF:88:12:E0:C1:28:D1:CF:94:BE:6F:66:4D:1D Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Certificate serial: 0398EA90D517BE1CB7DEAF48FD6530D4D012E61C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:33:33 +0000 Manifest this update: Mon 21 Sep 2026 05:28:33 +0000 Manifest next update: Tue 22 Sep 2026 08:13:33 +0000 Files and hashes: 1: FF5F881DC07CC4A9A985D594360658D202A551B7.crl (hash: J3fn2qvn50J8txMS3U+h0De2qvDxH67fhaW/PuEA2rs=) 2: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 8XrnQ5SnhyZDHtT2jqiiu3w//jV9DlxlWcB7qtbppcE=) 3: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: j3wy4rBOt9KLpaD5LH0BwgRkujp7xgPfgUer0oRRcO4=) 4: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: GNQ9BAndW/dbBDXxGBCrP2cWFnFb/Uhl5zGAhjYFfBA=) 5: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: zXGSnPmEp4F0jfkLMTMvDaGHFb1hgkrGA8TNoljlC2g=) 6: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: 9MCsmuGnmFDoeSG3rIPrfccOXghMBGlEEz5Onpmf8wY=) 7: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Da+BSi/QmlOV/X3TjGzgwu4l3eK1o4UhYD/OBNK4cHQ=) 8: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: oD9IDDMfDt326HwXRIsMWXvISYJSKNyW+NeKDvpDxLY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:98:ea:90:d5:17:be:1c:b7:de:af:48:fd:65:30:d4:d0:12:e6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Validity Not Before: Sep 21 05:28:33 2026 GMT Not After : Sep 22 08:13:33 2026 GMT Subject: CN=D8B2E52DE98BCF8812E0C128D1CF94BE6F664D1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:be:39:40:cd:21:af:3a:2f:06:96:aa:5d: 2a:ee:36:ea:f7:94:3a:41:9d:46:e5:00:8c:86:ee: c0:0a:d7:a2:53:06:6d:8f:94:2c:f7:97:a6:75:e5: 8e:be:71:fb:ef:93:a6:ec:ca:5b:d2:c0:25:8f:6f: 96:a9:8f:67:a6:23:90:15:64:48:34:95:84:3b:85: bf:56:19:78:5d:60:da:13:f2:c3:59:42:ae:5b:ad: 08:62:22:65:22:46:eb:5a:0d:88:70:b8:be:5e:67: 10:0e:32:25:ae:3f:bc:5c:94:2f:ee:78:7d:55:30: e6:9c:63:e2:0f:e3:ce:0b:e2:62:ac:48:b9:10:4c: 2b:a4:f6:25:66:92:e3:e0:3a:b0:df:a3:23:12:67: 69:d9:d6:91:e2:1a:f9:31:fd:97:bb:e6:c9:4c:0d: 6e:53:3e:81:4b:f4:34:54:1a:42:23:05:12:22:a7: 32:51:5a:cd:b0:47:15:a8:df:2c:da:b2:ef:81:74: 2f:e0:bc:84:61:53:d1:a4:0e:0e:9f:3d:69:83:a4: 4c:c9:e4:29:dc:68:fd:27:33:c4:1c:e5:ad:3b:5b: 6b:91:ba:5a:cb:2d:9a:58:ed:31:fb:fe:96:53:69: 2a:96:bf:9c:38:97:40:e1:72:b7:61:5f:83:c2:97: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B2:E5:2D:E9:8B:CF:88:12:E0:C1:28:D1:CF:94:BE:6F:66:4D:1D X509v3 Authority Key Identifier: keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c3:69:76:8c:c1:f4:6b:3e:5f:6f:b2:7d:8d:d6:6f:8e:7b: 25:e2:0a:6e:f2:c7:b8:01:ef:7e:ef:23:6c:cd:fb:9e:d0:63: 2f:76:96:1b:47:1e:1d:6f:83:de:82:fb:8d:96:6d:1a:f9:03: 92:7d:8c:e8:06:b2:41:24:f6:55:b1:07:4c:81:ea:9b:53:b1: 82:96:cc:41:c3:8a:9f:0b:10:f4:f5:5b:94:a1:63:e1:8b:bd: b9:f7:85:84:de:35:1d:c4:ab:16:e3:a8:f0:13:0f:c5:b3:70: 4a:76:62:15:ad:2b:e2:80:c1:15:5a:c4:87:c4:5d:a5:7e:42: b6:75:44:4b:54:57:7a:8d:6b:2c:b9:38:80:c4:5c:a0:56:59: ee:b0:29:5b:c1:58:5b:3d:19:9e:d5:c6:54:fa:dd:58:35:ad: e6:d0:13:1d:e5:e4:81:57:0a:5d:d9:1c:87:3b:23:64:f8:56: 2b:25:f1:f6:5d:53:a8:e1:fe:b1:92:cd:71:16:93:03:51:a1: f1:6d:a7:4f:78:75:50:2d:ef:87:2a:d9:65:c0:29:28:f1:b2: 10:84:f0:38:82:30:f0:04:51:75:b1:b5:e5:5d:99:3b:54:6f: 25:e2:2e:db:d3:15:4f:4a:d3:e6:96:31:04:70:9d:86:14:7f: e4:4c:6f:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5jqkNUXvhy33q9I/WUw1NAS5hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4RDIw MkE1NTFCNzAeFw0yNjA5MjEwNTI4MzNaFw0yNjA5MjIwODEzMzNaMDMxMTAvBgNV BAMTKEQ4QjJFNTJERTk4QkNGODgxMkUwQzEyOEQxQ0Y5NEJFNkY2NjREMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXgL45QM0hrzovBpaqXSruNur3 lDpBnUblAIyG7sAK16JTBm2PlCz3l6Z15Y6+cfvvk6bsylvSwCWPb5apj2emI5AV ZEg0lYQ7hb9WGXhdYNoT8sNZQq5brQhiImUiRutaDYhwuL5eZxAOMiWuP7xclC/u eH1VMOacY+IP484L4mKsSLkQTCuk9iVmkuPgOrDfoyMSZ2nZ1pHiGvkx/Ze75slM DW5TPoFL9DRUGkIjBRIipzJRWs2wRxWo3yzasu+BdC/gvIRhU9GkDg6fPWmDpEzJ 5CncaP0nM8Qc5a07W2uRulrLLZpY7TH7/pZTaSqWv5w4l0DhcrdhX4PCl1fXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2LLlLemLz4gS4MEo0c+Uvm9mTR0wHwYDVR0j BBgwFoAU/1+IHcB8xKmphdWUNgZY0gKlUbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2MwNzRjZDgtMjgzMC00ZWFiLWJkZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURD MDdDQzRBOUE5ODVENTk0MzYwNjU4RDIwMkE1NTFCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVGODgxREMwN0NDNEE5QTk4NUQ1OTQzNjA2NThEMjAyQTU1 MUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4 RDIwMkE1NTFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLDaXaMwfRrPl9vsn2N1m+OeyXiCm7yx7gB 737vI2zN+57QYy92lhtHHh1vg96C+42WbRr5A5J9jOgGskEk9lWxB0yB6ptTsYKW zEHDip8LEPT1W5ShY+GLvbn3hYTeNR3EqxbjqPATD8WzcEp2YhWtK+KAwRVaxIfE XaV+QrZ1REtUV3qNayy5OIDEXKBWWe6wKVvBWFs9GZ7VxlT63Vg1rebQEx3l5IFX Cl3ZHIc7I2T4Visl8fZdU6jh/rGSzXEWkwNRofFtp094dVAt74cq2WXAKSjxshCE 8DiCMPAEUXWxteVdmTtUbyXiLtvTFU9K0+aWMQRwnYYUf+RMb3o= -----END CERTIFICATE-----Generated at Mon Sep 21 17:50:08 2026 by rpki-client