$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft File: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft (raw, json) Hash identifier: +8syLZQY5OHCYaQpIC/9I/Jx7n/PftNwuzJNHlHvAB8= Subject key identifier: 88:49:D3:55:BA:2C:DA:9D:7B:A8:0D:4E:D9:C5:24:C9:BC:FF:34:34 Authority key identifier: FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A Certificate issuer: /CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Certificate serial: 05C1E0471742295EF156569AC7B6EC506D293936 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:31:32 +0000 Manifest this update: Tue 21 Jul 2026 00:26:32 +0000 Manifest next update: Wed 22 Jul 2026 02:46:32 +0000 Files and hashes: 1: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl (hash: R7wM2uke0OnNcJyQCXI521r/sYgV4i/JflPLlssNRrU=) 2: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: d3W50Pv9IvojYqj5AXX2l3Oy/7lfLR7Ec6qbGSXUUA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c1:e0:47:17:42:29:5e:f1:56:56:9a:c7:b6:ec:50:6d:29:39:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Validity Not Before: Jul 21 00:26:32 2026 GMT Not After : Jul 22 02:46:32 2026 GMT Subject: CN=8849D355BA2CDA9D7BA80D4ED9C524C9BCFF3434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:b0:74:c4:6b:b0:25:65:da:b1:f3:ea:31: e4:c1:c8:61:a9:f7:1b:03:2b:40:9b:a0:c1:9d:bb: 66:a7:c9:6a:9c:c7:d3:4b:7d:42:d2:91:18:59:e5: 9f:3c:bf:2f:e6:0c:a7:46:5a:84:d7:60:5a:58:34: 4a:9e:bf:41:82:e7:e2:45:c1:64:f9:15:00:e7:dd: af:e0:9f:15:30:5c:9f:64:54:ef:4d:3e:0b:a5:ec: 21:58:39:eb:92:dd:c4:fc:ee:df:a9:c8:f9:18:a2: 56:52:75:67:07:8a:26:82:ea:71:ca:e0:ab:e4:0c: 74:55:0c:99:b4:f0:34:47:e8:a2:b0:d2:da:a8:db: 48:00:65:61:05:62:1a:bf:08:20:4a:76:79:96:f8: 3e:34:39:9d:3b:09:03:80:a5:10:ae:78:36:78:c6: 66:91:71:a1:5b:4a:c2:fb:d4:0b:0a:98:ce:43:13: 87:7c:d0:92:b8:9f:0c:91:f5:b1:e1:30:48:55:80: 53:f9:73:be:85:e2:ab:98:44:94:40:2f:ba:70:8b: ec:98:ab:61:ef:a3:f0:64:33:57:4e:64:c2:3d:a0: a3:3a:cc:8c:a4:33:c6:e0:b2:0b:fd:c4:3f:d2:fb: 95:8f:83:ab:20:e5:57:2d:d0:d3:15:6f:6d:f3:87: eb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:49:D3:55:BA:2C:DA:9D:7B:A8:0D:4E:D9:C5:24:C9:BC:FF:34:34 X509v3 Authority Key Identifier: keyid:FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e7:48:dd:12:11:49:90:fa:69:e3:77:84:d2:62:b8:3e:b7: 55:1f:ac:65:81:c6:4a:a6:4a:a4:08:40:e8:59:f0:ba:29:f8: 9d:1e:70:27:5a:9c:9d:fd:02:de:a4:c0:46:a6:24:d9:a0:99: aa:90:cb:9a:ad:4c:1b:50:68:c2:98:a3:40:e3:95:8f:5d:c2: 51:77:f2:1c:00:a6:be:7f:34:86:4c:bc:f4:c0:6e:c0:96:94: f2:df:90:6d:8a:59:8b:89:2a:ad:7f:96:9b:dc:c6:34:db:90: 02:82:a6:97:58:88:39:4e:c1:47:a1:5d:dd:0e:26:0a:02:97: b9:4f:69:31:e0:43:6b:13:8f:56:e2:1e:ca:f5:52:4f:02:2b: 6c:91:2f:ac:17:e2:3c:bf:1b:30:35:af:52:3c:c8:d9:ca:23: 90:0b:2d:79:b1:7d:6a:d2:af:96:43:e8:53:32:aa:ad:c2:ff: a2:f5:29:2e:17:c6:41:35:7b:97:5c:68:7f:e7:51:9b:d2:a0: 64:df:6c:04:9c:c4:bc:e0:84:c2:12:1f:76:7e:78:15:b0:96: 44:76:2a:a7:78:f2:bf:1d:1c:0c:ad:14:4e:cc:30:4d:2e:53: 95:36:e8:45:4a:0d:b8:04:47:e4:b5:99:04:23:02:42:36:42: d6:3f:00:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcHgRxdCKV7xVlaax7bsUG0pOTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkExOEEx Mjc3QTU5QTAeFw0yNjA3MjEwMDI2MzJaFw0yNjA3MjIwMjQ2MzJaMDMxMTAvBgNV BAMTKDg4NDlEMzU1QkEyQ0RBOUQ3QkE4MEQ0RUQ5QzUyNEM5QkNGRjM0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItrB0xGuwJWXasfPqMeTByGGp 9xsDK0CboMGdu2anyWqcx9NLfULSkRhZ5Z88vy/mDKdGWoTXYFpYNEqev0GC5+JF wWT5FQDn3a/gnxUwXJ9kVO9NPgul7CFYOeuS3cT87t+pyPkYolZSdWcHiiaC6nHK 4KvkDHRVDJm08DRH6KKw0tqo20gAZWEFYhq/CCBKdnmW+D40OZ07CQOApRCueDZ4 xmaRcaFbSsL71AsKmM5DE4d80JK4nwyR9bHhMEhVgFP5c76F4quYRJRAL7pwi+yY q2Hvo/BkM1dOZMI9oKM6zIykM8bgsgv9xD/S+5WPg6sg5Vct0NMVb23zh+ulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiEnTVbos2p17qA1O2cUkybz/NDQwHwYDVR0j BBgwFoAU//PY3FwMhlKfl7uGk0ahihJ3pZowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ2ZmZhZDItMjBiYy00MjQ2LTgyOTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1 QzBDODY1MjlGOTdCQjg2OTM0NkExOEExMjc3QTU5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkYzRDhEQzVDMEM4NjUyOUY5N0JCODY5MzQ2QTE4QTEyNzdB NTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkEx OEExMjc3QTU5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXnSN0SEUmQ+mnjd4TSYrg+t1UfrGWBxkqm SqQIQOhZ8Lop+J0ecCdanJ39At6kwEamJNmgmaqQy5qtTBtQaMKYo0DjlY9dwlF3 8hwApr5/NIZMvPTAbsCWlPLfkG2KWYuJKq1/lpvcxjTbkAKCppdYiDlOwUehXd0O JgoCl7lPaTHgQ2sTj1biHsr1Uk8CK2yRL6wX4jy/GzA1r1I8yNnKI5ALLXmxfWrS r5ZD6FMyqq3C/6L1KS4XxkE1e5dcaH/nUZvSoGTfbAScxLzghMISH3Z+eBWwlkR2 Kqd48r8dHAytFE7MME0uU5U26EVKDbgER+S1mQQjAkI2QtY/ABk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:53:06 2026 by rpki-client