$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft File: 11FFFA845980AD12347D7297657117A393722635.mft (raw, json) Hash identifier: 5bCV2c9kKWxMfLlTFewbKBfNHxrIP9Y9ifSNWNIhf+4= Subject key identifier: E1:0C:7E:B8:60:82:7D:5C:B5:30:62:ED:03:5F:A4:33:BF:35:5E:E2 Authority key identifier: 11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35 Certificate issuer: /CN=11FFFA845980AD12347D7297657117A393722635 Certificate serial: 7F25A4766CF173649A78858301CDF16C64CEE92A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft Manifest number: BD Signing time: Sun 20 Sep 2026 19:20:45 +0000 Manifest this update: Sun 20 Sep 2026 19:15:45 +0000 Manifest next update: Mon 21 Sep 2026 21:56:45 +0000 Files and hashes: 1: 11FFFA845980AD12347D7297657117A393722635.crl (hash: YA8+J9pzKRKUdCAvqnve2HrH2WliG5A8ebnfQDwX+ms=) 2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: 1j1MwArF7+GiMoyA2GSO7NK/M/081FoP97bqeWhfFHU=) 3: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: lcXF2ukAyeD79WJ/+d/LiALmLjnDTwGdGGkGmI9GuQ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:25:a4:76:6c:f1:73:64:9a:78:85:83:01:cd:f1:6c:64:ce:e9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11FFFA845980AD12347D7297657117A393722635 Validity Not Before: Sep 20 19:15:45 2026 GMT Not After : Sep 21 21:56:45 2026 GMT Subject: CN=E10C7EB860827D5CB53062ED035FA433BF355EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:ac:da:c2:c2:76:24:85:1d:8a:ab:af:76: 61:d0:3e:a4:a2:c1:50:33:1f:e6:52:af:b1:62:74: fb:c4:08:1f:bb:d7:f4:93:40:56:d4:e2:14:d6:5d: 10:a4:b1:82:f7:d4:4a:51:02:e6:4c:88:1d:0f:35: a5:88:fb:96:05:25:04:bf:b7:28:6e:88:bb:f3:b6: 08:28:e1:78:a5:85:23:77:29:fa:c9:37:64:fd:d4: 2d:48:50:a5:24:3e:44:41:04:61:bd:43:6b:23:95: 07:b8:0f:49:e7:a1:c7:15:a0:92:c7:79:01:af:39: a1:a2:ea:5d:06:44:9b:14:f6:1b:0b:5d:7e:7b:28: f4:be:e8:c6:67:88:0d:f3:39:d7:ca:b4:a1:81:dd: c7:73:a4:83:5f:0b:ed:1d:6d:17:31:3e:b5:55:d7: 58:3d:7f:7d:77:cb:b7:02:50:5c:be:39:31:6d:6f: 4e:25:47:44:53:9f:1f:7a:a1:ad:76:b1:4a:30:4a: b2:0c:7d:3c:f2:a9:e9:e1:5b:8f:79:18:8f:5f:36: f2:7b:26:99:1a:56:88:08:12:6e:ba:77:29:8e:34: 08:73:4b:7a:cb:a9:d1:2f:fe:82:42:ff:7f:64:b7: 16:37:58:3f:15:dc:5e:68:01:a9:39:c6:34:1e:71: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0C:7E:B8:60:82:7D:5C:B5:30:62:ED:03:5F:A4:33:BF:35:5E:E2 X509v3 Authority Key Identifier: keyid:11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c1:6f:14:d6:6e:dd:81:00:06:e6:6f:27:9e:00:4f:b1:69: d5:a6:cb:f3:5c:f3:2c:26:e0:e0:b2:3d:7f:6d:9e:ed:05:28: a2:d0:94:7f:d4:42:56:0a:42:af:55:98:6b:d7:7f:84:7f:06: ce:db:d3:19:db:1f:5c:df:37:82:0b:dc:f8:cc:a8:71:b4:cb: 21:eb:69:fb:39:a3:c2:2c:eb:8a:00:b5:e8:2d:f4:18:e8:bd: 97:a7:de:58:5a:c4:05:47:db:38:c8:d8:65:fb:5c:d8:d5:f3: d2:f0:75:73:98:aa:9e:e4:c9:11:ea:3d:5f:f5:1b:13:ad:f1: ef:db:4d:c3:e9:1d:68:29:ea:a2:ba:24:dc:e6:07:6e:5d:35: df:a1:c2:56:f6:3b:fd:8d:e8:4c:57:56:15:4a:ba:87:0b:52: 66:78:1d:bb:a1:13:ab:9c:b9:e3:b2:97:a5:b7:75:1a:d7:fe: 2f:08:39:dd:68:46:a6:a9:e7:b2:83:71:c2:be:43:98:0f:70: 8d:d4:e2:c8:7f:bb:c9:7d:1c:c9:cc:b2:c4:f3:ed:b9:b6:32: 63:93:34:ce:68:4c:02:d8:bb:6b:00:7c:05:0e:41:19:53:9e: 29:5d:fa:58:43:3a:dc:b7:3b:77:47:7a:40:56:e0:b9:80:f7: 5b:46:cc:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyWkdmzxc2SaeIWDAc3xbGTO6SowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5 MzcyMjYzNTAeFw0yNjA5MjAxOTE1NDVaFw0yNjA5MjEyMTU2NDVaMDMxMTAvBgNV BAMTKEUxMEM3RUI4NjA4MjdENUNCNTMwNjJFRDAzNUZBNDMzQkYzNTVFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhKzawsJ2JIUdiquvdmHQPqSi wVAzH+ZSr7FidPvECB+71/STQFbU4hTWXRCksYL31EpRAuZMiB0PNaWI+5YFJQS/ tyhuiLvztggo4XilhSN3KfrJN2T91C1IUKUkPkRBBGG9Q2sjlQe4D0nnoccVoJLH eQGvOaGi6l0GRJsU9hsLXX57KPS+6MZniA3zOdfKtKGB3cdzpINfC+0dbRcxPrVV 11g9f313y7cCUFy+OTFtb04lR0RTnx96oa12sUowSrIMfTzyqenhW495GI9fNvJ7 JpkaVogIEm66dymONAhzS3rLqdEv/oJC/39ktxY3WD8V3F5oAak5xjQecfDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Qx+uGCCfVy1MGLtA1+kM781XuIwHwYDVR0j BBgwFoAUEf/6hFmArRI0fXKXZXEXo5NyJjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRiNGZiODgtOGY0Mi00N2YyLWJlODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1 OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5MzcyMjYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMUZGRkE4NDU5ODBBRDEyMzQ3RDcyOTc2NTcxMTdBMzkzNzIy NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3 QTM5MzcyMjYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfBbxTWbt2BAAbmbyeeAE+xadWmy/Nc8ywm 4OCyPX9tnu0FKKLQlH/UQlYKQq9VmGvXf4R/Bs7b0xnbH1zfN4IL3PjMqHG0yyHr afs5o8Is64oAtegt9BjovZen3lhaxAVH2zjI2GX7XNjV89LwdXOYqp7kyRHqPV/1 GxOt8e/bTcPpHWgp6qK6JNzmB25dNd+hwlb2O/2N6ExXVhVKuocLUmZ4HbuhE6uc ueOyl6W3dRrX/i8IOd1oRqap57KDccK+Q5gPcI3U4sh/u8l9HMnMssTz7bm2MmOT NM5oTALYu2sAfAUOQRlTnild+lhDOty3O3dHekBW4LmA91tGzOc= -----END CERTIFICATE-----Generated at Mon Sep 21 02:19:54 2026 by rpki-client