$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft File: FF5F881DC07CC4A9A985D594360658D202A551B7.mft (raw, json) Hash identifier: t7+lDC+x17FPCQKHwTmJaLVZwxvazqhMXGzVgmyJkJw= Subject key identifier: E9:C7:3A:C4:56:C7:D9:A7:E5:92:43:2E:B1:8D:54:05:AF:F8:74:0E Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Certificate serial: 7472356F1340AC84B1106A6DDF12B9CFEDFE1D9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:30:29 +0000 Manifest this update: Wed 03 Jun 2026 00:25:29 +0000 Manifest next update: Thu 04 Jun 2026 01:29:29 +0000 Files and hashes: 1: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 8XrnQ5SnhyZDHtT2jqiiu3w//jV9DlxlWcB7qtbppcE=) 2: FF5F881DC07CC4A9A985D594360658D202A551B7.crl (hash: afv0FScLtebUH6ziG46DO5mX3tZQeQNclLdiS3tkhpE=) 3: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Da+BSi/QmlOV/X3TjGzgwu4l3eK1o4UhYD/OBNK4cHQ=) 4: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: GNQ9BAndW/dbBDXxGBCrP2cWFnFb/Uhl5zGAhjYFfBA=) 5: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: 9MCsmuGnmFDoeSG3rIPrfccOXghMBGlEEz5Onpmf8wY=) 6: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: oD9IDDMfDt326HwXRIsMWXvISYJSKNyW+NeKDvpDxLY=) 7: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: j3wy4rBOt9KLpaD5LH0BwgRkujp7xgPfgUer0oRRcO4=) 8: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: zXGSnPmEp4F0jfkLMTMvDaGHFb1hgkrGA8TNoljlC2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:72:35:6f:13:40:ac:84:b1:10:6a:6d:df:12:b9:cf:ed:fe:1d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Validity Not Before: Jun 3 00:25:29 2026 GMT Not After : Jun 4 01:29:29 2026 GMT Subject: CN=E9C73AC456C7D9A7E592432EB18D5405AFF8740E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fa:97:bd:9e:80:b4:77:79:f9:9e:65:7d:96: 7e:56:c3:78:11:91:e1:eb:19:19:fe:c7:3b:70:81: 70:eb:70:fc:b9:c9:a9:1f:8e:61:e5:b7:ce:12:c7: 9a:53:77:53:19:f6:e0:35:10:ab:d6:b3:ad:ed:b0: d6:6b:f0:e9:b1:81:7d:fc:e7:e7:3a:c4:3b:f2:3c: e1:db:9e:31:e8:5a:67:49:df:b1:a8:37:e3:81:5b: 0d:58:da:a4:21:fb:b3:17:fb:c5:a6:a9:df:d0:30: 95:4a:9f:52:8d:b5:da:7e:76:9c:de:1f:61:96:cd: 81:3d:8a:ff:94:96:39:c0:96:b0:38:af:c9:ec:9f: b6:45:61:04:30:cd:93:4b:2f:a1:67:02:f7:2c:c7: 4f:10:76:e0:14:a5:4e:1f:76:b2:61:d9:17:fa:be: a2:ee:3e:ff:73:11:b2:c3:e7:11:78:2c:93:98:cb: 23:08:73:59:96:4c:b2:3d:92:8b:7f:de:6f:05:c4: 77:44:75:81:a5:94:90:38:eb:fe:e7:41:20:2c:3b: 3c:a1:2a:e7:ef:91:d1:0e:a5:d6:3b:8a:aa:d4:12: 8b:f0:2b:c1:c9:ca:06:10:c0:16:a3:0f:1a:ca:e6: 49:e7:24:da:1b:46:b2:5d:b1:bf:ef:be:1d:4d:cc: 3a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C7:3A:C4:56:C7:D9:A7:E5:92:43:2E:B1:8D:54:05:AF:F8:74:0E X509v3 Authority Key Identifier: keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b7:5e:17:3b:2a:44:2c:85:cf:7d:45:40:73:c2:80:08:ee: 91:72:fa:e9:df:38:16:23:da:1a:b3:be:6f:b9:5e:e5:ef:68: 05:c9:57:17:6d:7f:44:f4:14:ae:50:0d:38:dd:1d:7b:5b:78: 1c:7c:99:cc:a4:72:a7:98:53:a9:7e:7b:26:40:a0:5d:ff:fc: 8e:29:76:f6:67:df:c2:13:7e:70:9f:8c:bf:06:1a:0a:dd:b5: d4:de:e0:6e:3b:89:ac:cd:d6:19:30:7c:f1:df:96:51:1c:62: 97:06:bd:fe:7d:8e:3c:7d:3d:82:48:f8:59:22:af:9c:dd:e0: c5:d9:23:a8:25:5d:27:bd:6b:6e:d1:b6:b4:10:88:41:3e:e9: 70:6c:e2:f7:d6:a8:c8:ed:05:7d:2d:78:08:3e:1e:47:a7:19: cd:9f:78:ad:c9:a3:16:74:4e:ed:34:b1:22:bf:8c:77:be:0e: 6e:88:b4:e2:e9:64:45:cf:41:1f:ae:36:87:3c:dd:39:cc:97: 17:43:50:d8:35:d3:c5:ad:3c:c3:13:7f:43:1e:54:94:a8:42: 76:5b:9f:11:21:07:fd:48:8f:f9:60:91:89:3e:0d:4f:f9:29: df:80:e1:ca:ab:21:c7:33:a3:91:e5:1b:e9:07:97:88:26:8d: ee:5d:95:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHI1bxNArISxEGpt3xK5z+3+HZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4RDIw MkE1NTFCNzAeFw0yNjA2MDMwMDI1MjlaFw0yNjA2MDQwMTI5MjlaMDMxMTAvBgNV BAMTKEU5QzczQUM0NTZDN0Q5QTdFNTkyNDMyRUIxOEQ1NDA1QUZGODc0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi+pe9noC0d3n5nmV9ln5Ww3gR keHrGRn+xztwgXDrcPy5yakfjmHlt84Sx5pTd1MZ9uA1EKvWs63tsNZr8OmxgX38 5+c6xDvyPOHbnjHoWmdJ37GoN+OBWw1Y2qQh+7MX+8Wmqd/QMJVKn1KNtdp+dpze H2GWzYE9iv+UljnAlrA4r8nsn7ZFYQQwzZNLL6FnAvcsx08QduAUpU4fdrJh2Rf6 vqLuPv9zEbLD5xF4LJOYyyMIc1mWTLI9kot/3m8FxHdEdYGllJA46/7nQSAsOzyh KufvkdEOpdY7iqrUEovwK8HJygYQwBajDxrK5knnJNobRrJdsb/vvh1NzDqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6cc6xFbH2aflkkMusY1UBa/4dA4wHwYDVR0j BBgwFoAU/1+IHcB8xKmphdWUNgZY0gKlUbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2MwNzRjZDgtMjgzMC00ZWFiLWJkZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURD MDdDQzRBOUE5ODVENTk0MzYwNjU4RDIwMkE1NTFCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVGODgxREMwN0NDNEE5QTk4NUQ1OTQzNjA2NThEMjAyQTU1 MUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4 RDIwMkE1NTFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADa3Xhc7KkQshc99RUBzwoAI7pFy+unfOBYj 2hqzvm+5XuXvaAXJVxdtf0T0FK5QDTjdHXtbeBx8mcykcqeYU6l+eyZAoF3//I4p dvZn38ITfnCfjL8GGgrdtdTe4G47iazN1hkwfPHfllEcYpcGvf59jjx9PYJI+Fki r5zd4MXZI6glXSe9a27RtrQQiEE+6XBs4vfWqMjtBX0teAg+HkenGc2feK3JoxZ0 Tu00sSK/jHe+Dm6ItOLpZEXPQR+uNoc83TnMlxdDUNg108WtPMMTf0MeVJSoQnZb nxEhB/1Ij/lgkYk+DU/5Kd+A4cqrIcczo5HlG+kHl4gmje5dlac= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:52 2026 by rpki-client