$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft File: FF5E59BD445AE731E58ED471848043C324931D05.mft (raw, json) Hash identifier: bVLBYP2ECZ/7WzRKYfq5Y6bU0sOEAP1iRmjyVbqd2gk= Subject key identifier: BE:71:42:42:58:44:76:58:CD:3E:6B:52:D6:51:AD:66:53:7B:7D:6B Authority key identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05 Certificate issuer: /CN=FF5E59BD445AE731E58ED471848043C324931D05 Certificate serial: 6BD0E2642D9479C856AF2961809F103FA7D5E933 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 23:47:38 +0000 Manifest this update: Wed 02 Sep 2026 23:42:38 +0000 Manifest next update: Fri 04 Sep 2026 00:55:38 +0000 Files and hashes: 1: FF5E59BD445AE731E58ED471848043C324931D05.crl (hash: 6CrmmTCThYGi+RcVQB+ZNUB3vw7EcksYbiO/lr/BAws=) 2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: OeYZDJDnfFOrv0gLIl0BcG8+/dZQ9bC3jq7crp9LkMo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d0:e2:64:2d:94:79:c8:56:af:29:61:80:9f:10:3f:a7:d5:e9:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5E59BD445AE731E58ED471848043C324931D05 Validity Not Before: Sep 2 23:42:38 2026 GMT Not After : Sep 4 00:55:38 2026 GMT Subject: CN=BE71424258447658CD3E6B52D651AD66537B7D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:a8:28:de:cd:62:28:50:32:f6:3f:e9:61: 06:bb:03:19:ae:e4:85:35:3c:3d:ae:1e:28:d3:a1: 32:a0:fb:e3:96:48:8a:a7:f4:3a:32:ca:17:83:ed: 0e:18:36:7a:63:20:48:be:45:d5:e2:5a:0c:59:70: fd:6a:0d:8c:64:ce:62:c2:e3:25:fe:e8:36:b9:5e: 3c:b2:2f:16:5c:68:04:40:34:62:0f:56:f4:94:ec: 0e:e1:22:81:d3:da:7c:a3:41:b3:f8:d3:d5:bf:95: 6b:46:e7:9a:80:be:d1:28:b2:0e:0a:5b:37:b3:e7: 6a:ff:95:d4:bf:f1:eb:c9:56:7f:22:79:f1:e2:7c: 5d:26:0d:03:61:01:ba:f5:da:c7:55:75:3f:d0:c3: ab:20:51:83:fa:ef:51:26:16:5b:0d:f3:83:e8:9e: 76:d1:ee:99:27:eb:b7:1f:8e:65:39:32:58:4d:5f: da:f7:cc:33:8a:6f:0f:0d:0c:ef:ff:2e:e5:f6:44: db:dd:be:65:b6:bc:53:1f:6c:ff:ea:b2:6f:2e:01: 48:e3:88:77:08:78:cc:52:10:39:9f:90:08:e2:f0: 6e:62:02:db:1e:0f:c0:8b:be:19:04:9f:5e:0b:fb: 06:64:70:1f:ba:4d:cd:2d:e7:08:c6:71:3b:09:7b: 4d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:71:42:42:58:44:76:58:CD:3E:6B:52:D6:51:AD:66:53:7B:7D:6B X509v3 Authority Key Identifier: keyid:FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ef:9b:47:da:e3:20:f1:f2:42:09:57:65:e1:f6:c6:59:49: 11:37:01:9f:dc:2b:d9:eb:45:d9:03:93:c6:af:b6:93:01:ba: 00:ad:0b:aa:1c:3f:8f:8c:94:7b:70:f2:db:48:ce:ac:d6:4b: 4b:17:81:ee:c7:c9:93:c6:41:27:38:9c:e1:5a:aa:c9:81:c1: 72:62:85:93:28:47:d3:15:ff:fa:7d:db:87:98:25:ff:f3:69: 7c:77:c6:06:b7:a2:00:7f:3a:9b:f5:9d:34:3f:e3:b5:86:6f: 8f:ae:98:f9:15:bc:c4:84:07:4f:71:45:47:09:bf:86:26:bb: e3:b0:27:1d:38:7a:f5:36:8e:32:9c:35:a0:d5:7c:6e:67:71: a7:76:cb:86:8e:8c:b9:4d:5c:51:4f:f8:c6:6d:51:ed:2c:4d: 65:60:4c:75:ed:00:af:25:08:e5:b2:c5:24:c1:90:3a:f0:04: 4a:6c:09:15:be:0f:e8:5d:3a:d2:15:11:f6:0e:53:55:3c:46: db:0e:1f:fe:a4:94:12:d4:1a:a8:17:54:8a:4c:60:c8:2d:d3: 29:c8:e9:9b:ae:e5:60:1f:55:77:35:d5:ca:c8:a7:9b:ca:84: 31:00:c5:1a:9f:8b:3f:e0:7b:84:38:af:d1:80:3e:f9:b2:00: fd:12:49:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa9DiZC2UechWrylhgJ8QP6fV6TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1RTU5QkQ0NDVBRTczMUU1OEVENDcxODQ4MDQzQzMy NDkzMUQwNTAeFw0yNjA5MDIyMzQyMzhaFw0yNjA5MDQwMDU1MzhaMDMxMTAvBgNV BAMTKEJFNzE0MjQyNTg0NDc2NThDRDNFNkI1MkQ2NTFBRDY2NTM3QjdENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkwqgo3s1iKFAy9j/pYQa7Axmu 5IU1PD2uHijToTKg++OWSIqn9DoyyheD7Q4YNnpjIEi+RdXiWgxZcP1qDYxkzmLC 4yX+6Da5XjyyLxZcaARANGIPVvSU7A7hIoHT2nyjQbP409W/lWtG55qAvtEosg4K Wzez52r/ldS/8evJVn8iefHifF0mDQNhAbr12sdVdT/Qw6sgUYP671EmFlsN84Po nnbR7pkn67cfjmU5MlhNX9r3zDOKbw8NDO//LuX2RNvdvmW2vFMfbP/qsm8uAUjj iHcIeMxSEDmfkAji8G5iAtseD8CLvhkEn14L+wZkcB+6Tc0t5wjGcTsJe017AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvnFCQlhEdljNPmtS1lGtZlN7fWswHwYDVR0j BBgwFoAU/15ZvURa5zHljtRxhIBDwySTHQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc3MGZlZWItMmNhYS00NzZhLWFiNDMtZjY1MmExMWZkMDhjLzAvRkY1RTU5QkQ0 NDVBRTczMUU1OEVENDcxODQ4MDQzQzMyNDkzMUQwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVFNTlCRDQ0NUFFNzMxRTU4RUQ0NzE4NDgwNDNDMzI0OTMx RDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvRkY1RTU5QkQ0NDVBRTczMUU1OEVENDcxODQ4MDQz QzMyNDkzMUQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3vm0fa4yDx8kIJV2Xh9sZZSRE3AZ/cK9nr RdkDk8avtpMBugCtC6ocP4+MlHtw8ttIzqzWS0sXge7HyZPGQSc4nOFaqsmBwXJi hZMoR9MV//p924eYJf/zaXx3xga3ogB/Opv1nTQ/47WGb4+umPkVvMSEB09xRUcJ v4Ymu+OwJx04evU2jjKcNaDVfG5ncad2y4aOjLlNXFFP+MZtUe0sTWVgTHXtAK8l COWyxSTBkDrwBEpsCRW+D+hdOtIVEfYOU1U8RtsOH/6klBLUGqgXVIpMYMgt0ynI 6Zuu5WAfVXc11crIp5vKhDEAxRqfiz/ge4Q4r9GAPvmyAP0SSeY= -----END CERTIFICATE-----Generated at Thu Sep 3 04:21:01 2026 by rpki-client