$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft File: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft (raw, json) Hash identifier: 6FxRCm4tYuIg5uS2wu+55vDaRcqXmEkR0f8PJSXOBGM= Subject key identifier: 56:23:12:0A:02:67:97:74:C1:A6:0E:52:B6:B0:3F:25:AD:ED:81:3B Authority key identifier: FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A Certificate issuer: /CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Certificate serial: 0697C23C97A2B72B9CD5B60F6D274910A0837003 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft Manifest number: A8 Signing time: Fri 04 Sep 2026 12:52:40 +0000 Manifest this update: Fri 04 Sep 2026 12:47:40 +0000 Manifest next update: Sat 05 Sep 2026 14:35:40 +0000 Files and hashes: 1: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl (hash: kypzgas8BqLww49xoH/T4escD9xUW+a7otoRObGJ498=) 2: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: d3W50Pv9IvojYqj5AXX2l3Oy/7lfLR7Ec6qbGSXUUA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:97:c2:3c:97:a2:b7:2b:9c:d5:b6:0f:6d:27:49:10:a0:83:70:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Validity Not Before: Sep 4 12:47:40 2026 GMT Not After : Sep 5 14:35:40 2026 GMT Subject: CN=5623120A02679774C1A60E52B6B03F25ADED813B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:48:1c:bd:9f:55:5b:0c:11:7c:52:74:a0: 59:9a:d6:27:38:76:e9:97:88:3c:96:14:0c:32:b2: 4e:41:e2:6f:2b:31:b9:08:00:29:b7:7f:e3:b5:29: b4:bf:c3:d0:8a:99:41:7e:d3:53:2d:a7:b8:04:eb: e6:be:24:eb:23:5b:94:c5:31:90:aa:7a:7f:e6:c2: 64:37:af:b3:56:9d:34:62:e9:f6:a7:0b:a5:0a:c3: 2a:82:97:0f:aa:5e:35:23:f2:52:2e:3c:11:46:27: 90:cd:b9:2e:72:f9:03:25:d4:33:35:92:5c:fa:d3: 0a:37:1d:70:e4:eb:58:4b:f4:7c:14:af:80:20:3e: c5:0a:9f:9f:ad:b0:59:38:68:ef:2e:4b:54:bf:e1: 47:9e:b3:27:df:c8:b9:f2:30:eb:46:9f:7b:02:15: 44:76:2a:30:93:07:9f:63:7f:72:7b:c9:54:1a:37: 08:66:57:51:cb:e7:d6:2a:c7:3c:b0:a7:7d:15:70: d1:0b:05:91:26:8d:93:30:92:b6:97:b5:57:b2:89: 99:ac:16:fa:80:35:42:1f:f5:c8:df:17:a8:aa:1e: bd:77:48:92:9c:81:7b:ce:77:8e:85:fe:97:23:67: 5b:13:b2:ad:fe:a9:66:05:09:9e:d6:cc:5c:d0:a2: 38:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:23:12:0A:02:67:97:74:C1:A6:0E:52:B6:B0:3F:25:AD:ED:81:3B X509v3 Authority Key Identifier: keyid:FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e5:0f:cd:60:6a:3f:d9:59:07:1d:45:92:2c:67:90:28:03: 01:c9:fa:88:08:d4:29:9d:24:ed:a8:88:5f:38:2a:4a:4e:12: 1e:2f:a8:6f:93:c7:6b:56:51:82:00:27:3e:d1:e5:e4:c1:68: f0:85:cd:f1:13:9f:91:67:24:a8:bd:2a:79:17:3d:b5:d6:35: d3:a8:bb:14:e8:70:ef:57:14:09:db:c7:91:29:30:a3:dc:9b: 46:44:0c:7f:95:57:d9:89:82:71:0e:ec:4f:f4:b6:7b:39:0a: 02:2c:89:3c:c5:9d:c5:94:d4:85:8a:f5:77:9d:51:4f:d1:f9: 72:d1:ec:f7:90:83:14:62:ba:7c:d7:d0:3a:1b:2a:6f:66:b4: fe:ef:d1:ba:00:ed:23:48:e0:40:66:39:eb:bb:e2:ad:5c:fd: 43:27:b8:d2:77:f5:12:02:eb:73:14:77:0f:cd:c9:6e:5d:be: 1e:da:4e:ee:31:ff:c2:9b:c8:da:af:ab:69:38:1e:8c:13:a5: 19:eb:09:30:d7:18:57:16:4e:42:35:bf:42:76:d7:97:41:48: 88:ba:89:a1:ca:3d:27:f5:93:f5:0b:0d:ee:a9:71:04:60:e2: cd:28:5e:2f:c9:86:1e:96:c0:44:d4:68:2c:bf:65:ac:1e:69: f3:cc:6c:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBpfCPJeityuc1bYPbSdJEKCDcAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkExOEEx Mjc3QTU5QTAeFw0yNjA5MDQxMjQ3NDBaFw0yNjA5MDUxNDM1NDBaMDMxMTAvBgNV BAMTKDU2MjMxMjBBMDI2Nzk3NzRDMUE2MEU1MkI2QjAzRjI1QURFRDgxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCug0gcvZ9VWwwRfFJ0oFma1ic4 dumXiDyWFAwysk5B4m8rMbkIACm3f+O1KbS/w9CKmUF+01Mtp7gE6+a+JOsjW5TF MZCqen/mwmQ3r7NWnTRi6fanC6UKwyqClw+qXjUj8lIuPBFGJ5DNuS5y+QMl1DM1 klz60wo3HXDk61hL9HwUr4AgPsUKn5+tsFk4aO8uS1S/4UeesyffyLnyMOtGn3sC FUR2KjCTB59jf3J7yVQaNwhmV1HL59Yqxzywp30VcNELBZEmjZMwkraXtVeyiZms FvqANUIf9cjfF6iqHr13SJKcgXvOd46F/pcjZ1sTsq3+qWYFCZ7WzFzQojivAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUViMSCgJnl3TBpg5StrA/Ja3tgTswHwYDVR0j BBgwFoAU//PY3FwMhlKfl7uGk0ahihJ3pZowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ2ZmZhZDItMjBiYy00MjQ2LTgyOTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1 QzBDODY1MjlGOTdCQjg2OTM0NkExOEExMjc3QTU5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkYzRDhEQzVDMEM4NjUyOUY5N0JCODY5MzQ2QTE4QTEyNzdB NTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkEx OEExMjc3QTU5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvlD81gaj/ZWQcdRZIsZ5AoAwHJ+ogI1Cmd JO2oiF84KkpOEh4vqG+Tx2tWUYIAJz7R5eTBaPCFzfETn5FnJKi9KnkXPbXWNdOo uxTocO9XFAnbx5EpMKPcm0ZEDH+VV9mJgnEO7E/0tns5CgIsiTzFncWU1IWK9Xed UU/R+XLR7PeQgxRiunzX0DobKm9mtP7v0boA7SNI4EBmOeu74q1c/UMnuNJ39RIC 63MUdw/NyW5dvh7aTu4x/8KbyNqvq2k4HowTpRnrCTDXGFcWTkI1v0J215dBSIi6 iaHKPSf1k/ULDe6pcQRg4s0oXi/Jhh6WwETUaCy/ZaweafPMbFA= -----END CERTIFICATE-----Generated at Fri Sep 4 20:19:01 2026 by rpki-client