$ rpki-client -vvf rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft File: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft (raw, json) Hash identifier: QX8s+1msVLy1qkHCfLHklq00azxe1Vg86TTMlGCgHuQ= Subject key identifier: 2B:9D:85:D1:3D:43:E3:16:50:90:EB:2B:44:B7:FF:19:01:ED:91:80 Authority key identifier: FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 Certificate issuer: /CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Certificate serial: 26DBFB99F4838955B8A26CA647600EE6833AD224 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 16:57:41 +0000 Manifest this update: Tue 28 Jul 2026 16:52:41 +0000 Manifest next update: Wed 29 Jul 2026 17:07:41 +0000 Files and hashes: 1: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl (hash: pu0VU3BZ0Y9gD1OaDvEdDMKiQUUmQ62IN85Cf+XRZkA=) 2: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (hash: e5rLZ+uiB21yOgfSRe83jWI/e3SG0saFimxCgcV74b8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:db:fb:99:f4:83:89:55:b8:a2:6c:a6:47:60:0e:e6:83:3a:d2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Validity Not Before: Jul 28 16:52:41 2026 GMT Not After : Jul 29 17:07:41 2026 GMT Subject: CN=2B9D85D13D43E3165090EB2B44B7FF1901ED9180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c9:7d:b8:0e:31:1e:a4:f5:99:b2:b7:73:23: 37:aa:3a:21:31:43:29:28:85:89:e3:d1:11:38:b8: 8d:d2:bd:a3:41:b9:8a:f0:a7:53:fe:ff:87:6e:ee: 36:bc:95:81:fd:50:c7:da:f1:6c:24:99:4b:b0:67: c9:1b:90:95:9e:03:c7:b5:e0:04:09:53:b3:48:4e: 26:7c:98:60:8b:b5:16:de:a5:6f:32:ed:7d:a1:d8: 52:ab:19:97:d7:36:88:81:9a:af:16:2c:40:57:66: 70:92:b8:de:4c:a1:30:27:d9:ee:5f:0f:52:7d:c1: c6:e8:c9:43:f2:d6:8d:19:36:63:e9:2f:0d:c0:b3: d6:e2:82:dd:9c:b9:eb:67:23:fe:d8:f6:e8:7c:df: 45:9e:e4:83:9a:c7:eb:5b:c8:68:57:1a:d5:be:fb: 47:0c:4d:95:27:50:dd:87:43:18:d6:05:ca:e4:df: d5:85:b1:90:a2:8f:5f:dc:fa:b2:5c:2c:d5:b3:81: 32:db:57:fe:75:2e:56:98:b8:b7:1a:c8:ec:ec:e7: 5c:da:c5:78:8f:14:9a:b9:63:92:5d:b7:94:fc:cc: 81:9a:66:ce:03:e3:e1:d2:1f:fc:2a:2d:df:37:73: 2e:b6:ac:d2:fc:8d:14:a9:f6:fa:d4:b7:15:23:fb: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9D:85:D1:3D:43:E3:16:50:90:EB:2B:44:B7:FF:19:01:ED:91:80 X509v3 Authority Key Identifier: keyid:FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a4:61:f5:6b:da:a7:e5:b6:6d:ba:5b:43:60:9e:44:55:05: 01:95:61:b4:44:f3:d8:7a:b3:72:d7:52:c3:f6:2a:72:d7:1f: 9f:de:ee:e7:9c:55:11:a5:3b:b2:17:9d:69:22:e5:65:3c:d5: b7:31:ff:ce:36:1a:19:8f:f5:b3:d2:9c:85:94:34:f2:90:56: 84:67:02:57:a5:c0:1b:15:1c:ad:c3:ef:83:9e:de:57:03:2c: dd:04:89:f0:3d:f1:2e:ae:00:b1:b2:58:c3:e2:4a:d7:93:b7: 1b:c3:92:76:9a:a9:be:d4:0a:0f:ff:55:03:54:15:e9:75:8d: 6f:d0:84:b2:bf:9f:ba:0d:74:71:e3:ee:26:32:10:97:6c:71: e0:b6:42:f3:4c:c1:b4:9a:0f:f6:33:9e:85:d3:2b:e8:16:11: 9a:68:12:d6:ec:db:cf:c5:e9:62:2d:ce:bb:78:2a:a0:37:bd: 59:e9:54:ee:ac:fc:52:ec:4e:de:a2:6a:d1:a3:b4:ad:9b:b8: f5:af:88:f6:56:4f:02:c7:77:50:16:5d:b6:c4:e9:7e:df:37: 7c:a4:2b:a3:7b:05:f5:8d:ad:84:f2:0f:84:80:9e:11:cd:de: 19:71:d2:55:d1:f0:90:db:e8:73:3a:66:0f:6d:85:a6:aa:56: 0f:4a:5f:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJtv7mfSDiVW4omymR2AO5oM60iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMz MEZGRUNGNjAeFw0yNjA3MjgxNjUyNDFaFw0yNjA3MjkxNzA3NDFaMDMxMTAvBgNV BAMTKDJCOUQ4NUQxM0Q0M0UzMTY1MDkwRUIyQjQ0QjdGRjE5MDFFRDkxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yX24DjEepPWZsrdzIzeqOiEx QykohYnj0RE4uI3SvaNBuYrwp1P+/4du7ja8lYH9UMfa8WwkmUuwZ8kbkJWeA8e1 4AQJU7NITiZ8mGCLtRbepW8y7X2h2FKrGZfXNoiBmq8WLEBXZnCSuN5MoTAn2e5f D1J9wcboyUPy1o0ZNmPpLw3As9bigt2cuetnI/7Y9uh830We5IOax+tbyGhXGtW+ +0cMTZUnUN2HQxjWBcrk39WFsZCij1/c+rJcLNWzgTLbV/51LlaYuLcayOzs51za xXiPFJq5Y5Jdt5T8zIGaZs4D4+HSH/wqLd83cy62rNL8jRSp9vrUtxUj+wz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK52F0T1D4xZQkOsrRLf/GQHtkYAwHwYDVR0j BBgwFoAU/9rHdcu18bLHuVG/FSPvbDD/7PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTdkYzdlZTUtY2U2Ny00NWNkLTk4ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVD QkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMzMEZGRUNGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkRBQzc3NUNCQjVGMUIyQzdCOTUxQkYxNTIzRUY2QzMwRkZF Q0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTdkYzdlZTUtY2U2Ny00NWNkLTk4 ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VG NkMzMEZGRUNGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIukYfVr2qfltm26W0NgnkRVBQGVYbRE89h6 s3LXUsP2KnLXH5/e7uecVRGlO7IXnWki5WU81bcx/842GhmP9bPSnIWUNPKQVoRn AlelwBsVHK3D74Oe3lcDLN0EifA98S6uALGyWMPiSteTtxvDknaaqb7UCg//VQNU Fel1jW/QhLK/n7oNdHHj7iYyEJdsceC2QvNMwbSaD/YznoXTK+gWEZpoEtbs28/F 6WItzrt4KqA3vVnpVO6s/FLsTt6iatGjtK2buPWviPZWTwLHd1AWXbbE6X7fN3yk K6N7BfWNrYTyD4SAnhHN3hlx0lXR8JDb6HM6Zg9thaaqVg9KX44= -----END CERTIFICATE-----Generated at Wed Jul 29 10:33:22 2026 by rpki-client