$ rpki-client -vvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft File: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft (raw, json) Hash identifier: vBKM4EHmcoAvdErATqxffoS1yVVUTPZ9+mRWjmxFND0= Subject key identifier: B6:B7:19:22:2F:11:A4:C3:E9:49:CC:FB:C1:F7:00:72:66:73:1E:71 Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Certificate serial: 2D01F10ABC2DCCFE6A48DC61BB9E672D443E7880 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 15:00:24 +0000 Manifest this update: Sun 19 Jul 2026 14:55:24 +0000 Manifest next update: Mon 20 Jul 2026 16:43:24 +0000 Files and hashes: 1: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl (hash: xMhKeg4qzHLsMzQURec6F2tNJh/IjmwZx1tqoRgCuEo=) 2: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=) 3: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: 2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=) 4: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:01:f1:0a:bc:2d:cc:fe:6a:48:dc:61:bb:9e:67:2d:44:3e:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Validity Not Before: Jul 19 14:55:24 2026 GMT Not After : Jul 20 16:43:24 2026 GMT Subject: CN=B6B719222F11A4C3E949CCFBC1F7007266731E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:f9:51:02:35:fc:61:80:1a:49:7a:b0:cd: c8:b8:0f:36:2b:b8:55:b3:5b:57:b0:96:67:27:51: 5e:b5:59:1f:4b:96:81:55:f6:42:e3:a8:0a:cc:bf: 62:ee:1b:66:1c:1b:6c:3d:ca:75:83:fd:e8:19:27: 71:a3:11:7d:b1:0b:c1:96:69:e3:b5:29:c4:38:5b: ef:3a:2f:e7:b4:86:4b:6d:63:c0:98:b5:4e:2f:8f: b5:5e:30:2c:98:6f:f3:ba:42:92:17:7f:e6:a7:eb: 8f:58:df:8b:9e:e7:67:83:c3:86:9a:51:5f:41:5f: 9d:5b:3c:d0:68:21:95:7e:0f:8a:5b:57:5e:48:77: 08:50:84:c7:23:4b:d4:f2:5d:2d:ea:cf:96:81:21: 3c:44:80:05:29:dd:dd:f4:65:75:6a:9e:25:a8:08: 57:c6:e3:b9:82:22:4a:bc:e1:47:05:1d:ac:0c:21: 45:b3:db:e6:fe:6e:73:bb:45:c8:51:17:e0:d6:14: b4:40:dd:55:15:f7:60:28:9c:0f:40:89:a5:81:42: 1d:1a:3b:f1:fd:c8:52:d9:5a:f6:7a:af:20:63:4d: 78:59:43:5a:8c:85:18:82:3a:71:39:5e:65:25:6f: 53:9c:6b:76:47:ec:de:db:57:44:3a:e1:44:f2:41: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B7:19:22:2F:11:A4:C3:E9:49:CC:FB:C1:F7:00:72:66:73:1E:71 X509v3 Authority Key Identifier: keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a2:c4:92:70:a9:ae:7b:a4:77:28:14:b4:b7:b9:ca:7d:ba: 9b:07:a1:6e:31:77:63:02:d1:48:fe:10:2e:4b:7d:83:d3:f2: 7d:cc:ff:cd:30:17:eb:b3:ec:4a:20:a0:b9:ec:dc:94:ca:af: 26:40:95:01:7a:d1:59:dc:9d:02:68:9f:59:86:80:3c:63:6a: 1f:e7:ed:09:52:78:15:c7:ae:d1:06:74:82:45:1d:56:7c:95: 21:3a:f6:d4:17:ab:02:ba:51:68:a5:77:ed:d8:3f:a8:80:73: 25:88:de:62:78:85:59:fc:f1:d9:61:32:53:be:69:11:6b:4f: e6:de:b9:ca:90:c6:87:b9:69:74:ff:05:e6:7c:73:f4:4c:db: 00:92:e4:5c:35:df:31:63:1c:16:ce:f2:4c:82:b9:cc:18:19: 31:4e:aa:6b:7c:d7:9a:85:63:f4:8c:af:09:fc:8a:5c:13:a0: f0:e2:66:44:6f:ee:a5:5c:e6:75:02:79:71:92:06:40:06:e2: 80:a4:86:8f:08:21:3c:e7:f1:e5:2d:61:2d:16:8c:06:4a:91: f4:17:23:e1:eb:fe:64:e3:f4:f2:5a:6c:a5:1e:27:d7:85:b6: e9:47:fb:a7:a2:6f:f8:b3:fc:68:d8:f4:28:d6:df:c8:4c:21: d7:9a:2b:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQHxCrwtzP5qSNxhu55nLUQ+eIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdD OTFCOTAzMjAeFw0yNjA3MTkxNDU1MjRaFw0yNjA3MjAxNjQzMjRaMDMxMTAvBgNV BAMTKEI2QjcxOTIyMkYxMUE0QzNFOTQ5Q0NGQkMxRjcwMDcyNjY3MzFFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B/lRAjX8YYAaSXqwzci4DzYr uFWzW1ewlmcnUV61WR9LloFV9kLjqArMv2LuG2YcG2w9ynWD/egZJ3GjEX2xC8GW aeO1KcQ4W+86L+e0hkttY8CYtU4vj7VeMCyYb/O6QpIXf+an649Y34ue52eDw4aa UV9BX51bPNBoIZV+D4pbV15IdwhQhMcjS9TyXS3qz5aBITxEgAUp3d30ZXVqniWo CFfG47mCIkq84UcFHawMIUWz2+b+bnO7RchRF+DWFLRA3VUV92AonA9AiaWBQh0a O/H9yFLZWvZ6ryBjTXhZQ1qMhRiCOnE5XmUlb1Oca3ZH7N7bV0Q64UTyQZm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtrcZIi8RpMPpScz7wfcAcmZzHnEwHwYDVR0j BBgwFoAU/+erKNJ3pa7EzUfaZX34F8kbkDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRjYzY5ZTktZWY3NC00YjgxLTkxZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhE Mjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdDOTFCOTAzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkU3QUIyOEQyNzdBNUFFQzRDRDQ3REE2NTdERjgxN0M5MUI5 MDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4 MTdDOTFCOTAzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiixJJwqa57pHcoFLS3ucp9upsHoW4xd2MC 0Uj+EC5LfYPT8n3M/80wF+uz7EogoLns3JTKryZAlQF60VncnQJon1mGgDxjah/n 7QlSeBXHrtEGdIJFHVZ8lSE69tQXqwK6UWild+3YP6iAcyWI3mJ4hVn88dlhMlO+ aRFrT+beucqQxoe5aXT/BeZ8c/RM2wCS5Fw13zFjHBbO8kyCucwYGTFOqmt815qF Y/SMrwn8ilwToPDiZkRv7qVc5nUCeXGSBkAG4oCkho8IITzn8eUtYS0WjAZKkfQX I+Hr/mTj9PJabKUeJ9eFtulH+6eib/iz/GjY9CjW38hMIdeaK/A= -----END CERTIFICATE-----Generated at Sun Jul 19 22:48:43 2026 by rpki-client