$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft File: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft (raw, json) Hash identifier: jn9/VHQ1NF7qn2kCG8SBaF0LIcQ7sEhP38Guy4o+CwU= Subject key identifier: BE:44:29:5F:CB:3B:8A:0E:A5:D0:D7:6C:53:1D:1E:6A:EA:1D:9C:49 Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Certificate serial: 37964A59F4BE4EDE2E68B1AFB5A5B0DB3E488E6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 20:02:24 +0000 Manifest this update: Wed 02 Sep 2026 19:57:24 +0000 Manifest next update: Thu 03 Sep 2026 23:23:24 +0000 Files and hashes: 1: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl (hash: xEcnS9/cHHeuXgh3t3HbLNjg+ggNvLmRVD5s4sgH7U8=) 2: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: 2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=) 3: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=) 4: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:96:4a:59:f4:be:4e:de:2e:68:b1:af:b5:a5:b0:db:3e:48:8e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Validity Not Before: Sep 2 19:57:24 2026 GMT Not After : Sep 3 23:23:24 2026 GMT Subject: CN=BE44295FCB3B8A0EA5D0D76C531D1E6AEA1D9C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f4:2d:d2:bf:89:8b:06:19:5c:26:ce:cb:40: 03:22:a2:cb:48:7b:3e:1f:8f:73:41:da:47:ab:f6: dd:b4:a9:b5:d9:fe:8a:c7:c5:2f:dd:01:5a:2b:e6: 4e:17:6b:c3:0f:c0:ae:d5:83:bd:84:df:41:02:f9: 03:40:8a:82:e1:e3:08:cf:18:68:b9:be:5e:b8:3a: 83:25:0b:a0:c3:f6:95:d0:2e:05:e0:a6:55:6a:48: a0:6a:22:96:72:b1:42:27:0f:f1:09:e1:51:7f:15: 86:18:15:d3:75:59:6d:39:19:cd:33:94:b1:6c:f9: 0e:7f:a2:2b:b8:99:4b:bc:bd:dc:aa:c5:55:fe:3c: 8f:6e:07:df:da:f7:6d:ee:04:c2:a6:9b:1a:27:7e: 69:d9:e6:64:39:c6:37:c2:a9:bd:7e:3b:73:fe:66: 09:dc:ac:b2:20:1a:f9:2c:7e:bd:61:2c:25:99:6b: 5b:05:ab:d9:a1:16:39:1c:7d:74:9c:bc:10:70:4a: d4:27:91:57:2c:2a:7d:a8:ae:63:b6:38:0b:fe:33: e4:bb:8f:9d:03:87:71:61:2c:4d:1a:17:5d:fc:42: 15:a3:11:05:8a:ea:79:48:45:85:a6:df:34:d3:ca: 13:83:23:9e:33:60:57:ac:c5:ac:92:6b:f3:8d:f8: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:44:29:5F:CB:3B:8A:0E:A5:D0:D7:6C:53:1D:1E:6A:EA:1D:9C:49 X509v3 Authority Key Identifier: keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f0:6a:06:1b:67:71:33:d2:55:07:e1:f7:7e:69:0c:3f:82: 1e:ad:5a:bf:f0:d5:7d:ae:b5:e9:b9:49:fe:16:ab:66:22:7e: 4e:94:41:af:cd:aa:f2:97:f2:29:3c:a2:24:88:5b:b0:1d:34: 23:20:96:fd:00:70:65:48:3e:88:24:ee:5a:a1:ec:a6:c3:2a: ea:7b:8a:b2:91:05:ed:9a:8f:06:67:3f:99:71:28:f1:e4:ab: 06:86:c4:09:0a:43:b6:45:8b:fc:ff:bd:d9:e5:f8:2d:02:48: ba:81:0a:b1:d2:32:d4:fe:ab:bb:9d:3f:e5:e9:61:e6:3c:c2: 08:27:50:51:68:30:42:e8:56:a8:c5:8b:23:c9:3f:73:2b:ea: a4:b3:5f:45:3f:f5:55:0a:b5:f2:d7:a5:cd:dd:59:bc:d8:30: 6c:c5:8d:92:df:dc:f6:fa:39:f9:7b:ee:31:17:47:ce:a9:8b: 24:a2:8a:25:ef:70:b8:6f:89:5b:6d:96:31:44:95:32:96:16: 67:1b:17:fa:16:f8:93:a5:60:e1:bd:55:49:6f:04:f1:7c:f0: a3:57:84:4a:d7:02:f9:e4:5e:8d:79:f8:32:f3:45:75:7a:a2: b9:b9:d6:d1:25:7c:d1:13:44:f2:b3:72:9e:d6:db:10:fd:a8: 63:df:35:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5ZKWfS+Tt4uaLGvtaWw2z5Ijm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdD OTFCOTAzMjAeFw0yNjA5MDIxOTU3MjRaFw0yNjA5MDMyMzIzMjRaMDMxMTAvBgNV BAMTKEJFNDQyOTVGQ0IzQjhBMEVBNUQwRDc2QzUzMUQxRTZBRUExRDlDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09C3Sv4mLBhlcJs7LQAMiostI ez4fj3NB2ker9t20qbXZ/orHxS/dAVor5k4Xa8MPwK7Vg72E30EC+QNAioLh4wjP GGi5vl64OoMlC6DD9pXQLgXgplVqSKBqIpZysUInD/EJ4VF/FYYYFdN1WW05Gc0z lLFs+Q5/oiu4mUu8vdyqxVX+PI9uB9/a923uBMKmmxonfmnZ5mQ5xjfCqb1+O3P+ ZgncrLIgGvksfr1hLCWZa1sFq9mhFjkcfXScvBBwStQnkVcsKn2ormO2OAv+M+S7 j50Dh3FhLE0aF138QhWjEQWK6nlIRYWm3zTTyhODI54zYFesxaySa/ON+D6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvkQpX8s7ig6l0NdsUx0eauodnEkwHwYDVR0j BBgwFoAU/+erKNJ3pa7EzUfaZX34F8kbkDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRjYzY5ZTktZWY3NC00YjgxLTkxZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhE Mjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdDOTFCOTAzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkU3QUIyOEQyNzdBNUFFQzRDRDQ3REE2NTdERjgxN0M5MUI5 MDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4 MTdDOTFCOTAzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3wagYbZ3Ez0lUH4fd+aQw/gh6tWr/w1X2u tem5Sf4Wq2Yifk6UQa/NqvKX8ik8oiSIW7AdNCMglv0AcGVIPogk7lqh7KbDKup7 irKRBe2ajwZnP5lxKPHkqwaGxAkKQ7ZFi/z/vdnl+C0CSLqBCrHSMtT+q7udP+Xp YeY8wggnUFFoMELoVqjFiyPJP3Mr6qSzX0U/9VUKtfLXpc3dWbzYMGzFjZLf3Pb6 Ofl77jEXR86piySiiiXvcLhviVttljFElTKWFmcbF/oW+JOlYOG9VUlvBPF88KNX hErXAvnkXo15+DLzRXV6orm51tElfNETRPKzcp7W2xD9qGPfNYo= -----END CERTIFICATE-----Generated at Thu Sep 3 05:06:00 2026 by rpki-client