$ rpki-client -vvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft File: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft (raw, json) Hash identifier: 2VLfUKjBgYUZ9E1eekdQRFKsGKa//3emqpMHP+qxcaI= Subject key identifier: A5:D8:17:DF:04:A0:E4:3F:82:20:44:F0:74:89:05:5D:56:EE:23:8A Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Certificate serial: 06CD8E788B93E919B7C165ED7B426E49AF2C6612 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 09:21:39 +0000 Manifest this update: Tue 02 Jun 2026 09:16:39 +0000 Manifest next update: Wed 03 Jun 2026 13:13:39 +0000 Files and hashes: 1: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=) 2: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: 2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=) 3: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=) 4: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl (hash: Gu7h55xztyUgMc2nKHMLMvY8DWxvc98i+1kai/55WbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:cd:8e:78:8b:93:e9:19:b7:c1:65:ed:7b:42:6e:49:af:2c:66:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Validity Not Before: Jun 2 09:16:39 2026 GMT Not After : Jun 3 13:13:39 2026 GMT Subject: CN=A5D817DF04A0E43F822044F07489055D56EE238A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:1a:91:6d:ae:b3:37:4c:fd:f0:94:f2:a0: 32:ff:11:e2:3d:bc:64:a2:8a:dc:bc:26:b0:9e:9b: 59:07:34:9c:0a:eb:8a:dc:f5:dc:dc:40:b6:fd:65: f6:15:51:9d:d0:64:30:54:b7:25:f5:7e:7b:32:69: b1:a6:cf:34:ed:5e:72:e6:36:41:9c:ed:ca:2e:88: ec:ca:3a:6d:7d:8b:94:ab:0f:12:10:d8:f9:6b:35: 96:76:43:5c:15:af:3e:c7:2f:3b:7f:4f:5e:4b:e0: 79:01:c7:52:39:64:79:19:9e:0c:0c:cd:d0:95:b6: 8e:48:3f:87:83:3d:b4:39:15:c5:92:7a:53:5f:82: 1e:4d:73:79:57:09:5b:79:e2:23:db:b3:34:0f:3a: 19:87:92:14:ef:57:d3:7f:ab:27:76:28:05:5a:13: e9:13:cd:ab:6e:43:99:c2:ad:ae:5b:8a:ad:d9:67: 58:a5:1c:1d:62:c3:30:bd:28:cb:e9:51:ac:b4:e6: b1:25:6a:f3:93:58:ef:8d:2b:ea:b2:6e:c8:0d:e8: c6:8b:f4:ec:88:31:cd:2e:be:40:9b:a1:4b:60:2e: 62:c8:e8:5c:36:e1:9f:70:f8:67:d5:51:cc:81:75: 8d:7c:16:a2:ae:1d:c4:49:b4:d6:4f:8f:7e:97:89: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D8:17:DF:04:A0:E4:3F:82:20:44:F0:74:89:05:5D:56:EE:23:8A X509v3 Authority Key Identifier: keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8b:70:5c:3e:7c:a9:10:7e:33:f9:9f:a0:07:83:60:db:b5: 11:e8:f9:c1:71:d9:2a:50:84:1a:50:32:9e:10:4d:5f:81:3d: f7:46:bd:f2:f2:fe:92:e3:09:96:9e:22:00:c4:83:72:d0:75: 74:cb:76:44:1a:bd:19:a2:33:3d:b0:d6:a9:78:da:6e:f0:ef: 70:24:70:f3:42:24:bc:13:b3:93:7c:0f:d9:76:56:eb:3c:b3: f4:5c:75:43:c6:b4:6b:bd:44:f8:97:37:a3:57:a9:fa:60:58: e3:be:88:a3:b0:23:63:f7:f5:af:45:5e:fc:4e:5b:90:a3:f9: 2c:1c:12:4e:59:18:60:4b:22:51:8c:7d:09:1c:e3:43:0e:58: a3:1e:6f:66:61:e6:93:96:c4:71:d7:76:37:8e:f0:55:9d:69: 6c:ed:31:65:6f:78:de:6b:f8:e6:f4:94:19:f9:42:df:cb:29: f9:80:70:ec:bc:08:4b:cc:40:e3:b3:0f:12:96:73:3e:f1:f9: f8:ee:4c:50:bb:3e:ee:af:b3:de:f3:06:65:20:c3:de:0f:e5: 87:81:37:68:ea:96:49:0b:df:e7:bb:c2:9f:bb:1e:63:de:05: aa:3b:25:4d:86:23:1f:19:80:e8:9f:0f:27:30:0a:1a:a1:a5: 78:11:e6:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBs2OeIuT6Rm3wWXte0JuSa8sZhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdD OTFCOTAzMjAeFw0yNjA2MDIwOTE2MzlaFw0yNjA2MDMxMzEzMzlaMDMxMTAvBgNV BAMTKEE1RDgxN0RGMDRBMEU0M0Y4MjIwNDRGMDc0ODkwNTVENTZFRTIzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqxqRba6zN0z98JTyoDL/EeI9 vGSiity8JrCem1kHNJwK64rc9dzcQLb9ZfYVUZ3QZDBUtyX1fnsyabGmzzTtXnLm NkGc7couiOzKOm19i5SrDxIQ2PlrNZZ2Q1wVrz7HLzt/T15L4HkBx1I5ZHkZngwM zdCVto5IP4eDPbQ5FcWSelNfgh5Nc3lXCVt54iPbszQPOhmHkhTvV9N/qyd2KAVa E+kTzatuQ5nCra5biq3ZZ1ilHB1iwzC9KMvpUay05rElavOTWO+NK+qybsgN6MaL 9OyIMc0uvkCboUtgLmLI6Fw24Z9w+GfVUcyBdY18FqKuHcRJtNZPj36XiV+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpdgX3wSg5D+CIETwdIkFXVbuI4owHwYDVR0j BBgwFoAU/+erKNJ3pa7EzUfaZX34F8kbkDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRjYzY5ZTktZWY3NC00YjgxLTkxZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhE Mjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdDOTFCOTAzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkU3QUIyOEQyNzdBNUFFQzRDRDQ3REE2NTdERjgxN0M5MUI5 MDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4 MTdDOTFCOTAzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2LcFw+fKkQfjP5n6AHg2DbtRHo+cFx2SpQ hBpQMp4QTV+BPfdGvfLy/pLjCZaeIgDEg3LQdXTLdkQavRmiMz2w1ql42m7w73Ak cPNCJLwTs5N8D9l2Vus8s/RcdUPGtGu9RPiXN6NXqfpgWOO+iKOwI2P39a9FXvxO W5Cj+SwcEk5ZGGBLIlGMfQkc40MOWKMeb2Zh5pOWxHHXdjeO8FWdaWztMWVveN5r +Ob0lBn5Qt/LKfmAcOy8CEvMQOOzDxKWcz7x+fjuTFC7Pu6vs97zBmUgw94P5YeB N2jqlkkL3+e7wp+7HmPeBao7JU2GIx8ZgOifDycwChqhpXgR5qc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:26 2026 by rpki-client