$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft File: FF5F881DC07CC4A9A985D594360658D202A551B7.mft (raw, json) Hash identifier: 0LZF6TBRIvZkGROYcpSIqOwvptnY5Jmspip4gEVGskQ= Subject key identifier: 0B:D6:D9:C2:78:B2:DF:A1:9A:ED:89:08:48:67:36:4E:2B:91:F6:93 Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Certificate serial: 36890B5214F311F424BEEFBACD947F0CD5F2459E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:20:32 +0000 Manifest this update: Wed 17 Jun 2026 02:15:32 +0000 Manifest next update: Thu 18 Jun 2026 05:07:32 +0000 Files and hashes: 1: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Da+BSi/QmlOV/X3TjGzgwu4l3eK1o4UhYD/OBNK4cHQ=) 2: FF5F881DC07CC4A9A985D594360658D202A551B7.crl (hash: 9zuSYjjirzxJCUJAdCl9Iq48kv2a3viqi3r00FlBNFA=) 3: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: oD9IDDMfDt326HwXRIsMWXvISYJSKNyW+NeKDvpDxLY=) 4: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: 9MCsmuGnmFDoeSG3rIPrfccOXghMBGlEEz5Onpmf8wY=) 5: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: GNQ9BAndW/dbBDXxGBCrP2cWFnFb/Uhl5zGAhjYFfBA=) 6: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: j3wy4rBOt9KLpaD5LH0BwgRkujp7xgPfgUer0oRRcO4=) 7: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: zXGSnPmEp4F0jfkLMTMvDaGHFb1hgkrGA8TNoljlC2g=) 8: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 8XrnQ5SnhyZDHtT2jqiiu3w//jV9DlxlWcB7qtbppcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:89:0b:52:14:f3:11:f4:24:be:ef:ba:cd:94:7f:0c:d5:f2:45:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Validity Not Before: Jun 17 02:15:32 2026 GMT Not After : Jun 18 05:07:32 2026 GMT Subject: CN=0BD6D9C278B2DFA19AED89084867364E2B91F693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:c4:73:05:95:3f:42:04:af:aa:b0:76:e7: ad:74:03:ea:95:a8:64:f4:26:12:bb:69:99:6b:b3: 24:44:a8:21:4d:60:d4:82:2d:bc:63:0a:82:46:b5: 3a:cd:12:ca:b8:37:fc:6f:b9:12:e6:5b:00:47:ba: f3:36:b3:70:5d:2e:7a:11:8a:ac:3e:5b:32:e5:3c: 8c:c1:9e:d1:ec:dd:bc:49:a2:f9:07:99:a0:74:fc: ad:d5:6d:2e:2b:90:84:c5:9b:37:c2:63:50:70:9e: 17:8c:8d:65:de:d5:15:21:ef:7a:91:b1:3d:70:6d: fc:fe:db:79:ac:69:53:85:9a:c9:92:39:35:87:8a: 4e:50:86:4f:19:cf:0c:78:a4:f1:56:66:fc:c4:50: 27:63:bc:8d:e5:64:d0:19:3a:20:a7:a7:4f:13:0d: c1:cb:6b:5d:fb:fb:83:d6:df:4f:6c:e9:e8:a8:3b: 93:13:73:fa:6e:c7:77:2e:90:40:08:6a:53:ec:df: 47:90:a6:03:aa:94:cf:17:a3:b4:bb:3b:5f:86:3f: 03:50:ff:1d:1e:a5:99:a4:f7:02:2c:cb:66:dc:60: 3b:d6:21:56:cd:7c:fe:ec:36:e4:94:35:f5:5a:3f: 21:3b:bb:2a:8c:50:3b:77:92:cf:b1:da:b6:61:59: e3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D6:D9:C2:78:B2:DF:A1:9A:ED:89:08:48:67:36:4E:2B:91:F6:93 X509v3 Authority Key Identifier: keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:03:7e:63:4a:2c:d3:64:27:23:b0:a5:2f:4d:a8:77:6a:17: ef:18:2c:80:9a:10:cf:45:1c:e4:4e:e8:94:7f:ad:d3:98:a4: fb:63:2f:2c:07:e7:82:80:85:78:60:f8:5b:a4:e2:d9:dd:90: 5f:4a:8f:38:6d:51:ef:54:cd:0f:3d:13:52:df:bf:6c:1c:60: 8d:02:28:de:5a:27:75:c6:c2:f5:64:ca:0e:5e:f8:9f:c9:4d: eb:d2:3c:d1:7b:e3:7f:aa:c2:44:a2:2d:c3:f9:b9:fb:8c:7c: 31:d0:52:87:80:41:cc:6f:b7:73:79:10:64:2b:a5:1a:ed:37: 1b:f6:76:4f:ad:02:71:38:5e:2b:72:82:33:0b:c2:54:c6:ae: 80:cb:d2:c3:66:30:e2:dc:7d:24:a3:b5:2a:14:9e:cb:25:a5: 28:51:c5:f8:fe:a1:79:94:63:c1:d3:33:dd:a3:c0:a4:7d:2a: 7e:90:f8:f1:58:34:8f:bb:e8:bd:e5:17:3c:16:dc:0e:49:c4: 28:30:36:65:4a:18:df:2d:d6:78:d7:d8:0e:9b:92:21:f8:f9: e9:f6:9c:03:d9:95:ca:5f:13:15:9f:22:63:1b:79:80:70:8c: 57:6a:25:f6:d3:a4:dc:af:c6:29:d8:9f:99:01:25:fe:cb:6d: e3:35:86:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNokLUhTzEfQkvu+6zZR/DNXyRZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4RDIw MkE1NTFCNzAeFw0yNjA2MTcwMjE1MzJaFw0yNjA2MTgwNTA3MzJaMDMxMTAvBgNV BAMTKDBCRDZEOUMyNzhCMkRGQTE5QUVEODkwODQ4NjczNjRFMkI5MUY2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgN8RzBZU/QgSvqrB25610A+qV qGT0JhK7aZlrsyREqCFNYNSCLbxjCoJGtTrNEsq4N/xvuRLmWwBHuvM2s3BdLnoR iqw+WzLlPIzBntHs3bxJovkHmaB0/K3VbS4rkITFmzfCY1BwnheMjWXe1RUh73qR sT1wbfz+23msaVOFmsmSOTWHik5Qhk8Zzwx4pPFWZvzEUCdjvI3lZNAZOiCnp08T DcHLa137+4PW309s6eioO5MTc/pux3cukEAIalPs30eQpgOqlM8Xo7S7O1+GPwNQ /x0epZmk9wIsy2bcYDvWIVbNfP7sNuSUNfVaPyE7uyqMUDt3ks+x2rZhWeNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC9bZwniy36Ga7YkISGc2TiuR9pMwHwYDVR0j BBgwFoAU/1+IHcB8xKmphdWUNgZY0gKlUbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2MwNzRjZDgtMjgzMC00ZWFiLWJkZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURD MDdDQzRBOUE5ODVENTk0MzYwNjU4RDIwMkE1NTFCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVGODgxREMwN0NDNEE5QTk4NUQ1OTQzNjA2NThEMjAyQTU1 MUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4 RDIwMkE1NTFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQDfmNKLNNkJyOwpS9NqHdqF+8YLICaEM9F HORO6JR/rdOYpPtjLywH54KAhXhg+Fuk4tndkF9KjzhtUe9UzQ89E1Lfv2wcYI0C KN5aJ3XGwvVkyg5e+J/JTevSPNF743+qwkSiLcP5ufuMfDHQUoeAQcxvt3N5EGQr pRrtNxv2dk+tAnE4XitygjMLwlTGroDL0sNmMOLcfSSjtSoUnsslpShRxfj+oXmU Y8HTM92jwKR9Kn6Q+PFYNI+76L3lFzwW3A5JxCgwNmVKGN8t1njX2A6bkiH4+en2 nAPZlcpfExWfImMbeYBwjFdqJfbTpNyvxinYn5kBJf7LbeM1hkI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:00 2026 by rpki-client