$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft File: FF5F881DC07CC4A9A985D594360658D202A551B7.mft (raw, json) Hash identifier: 9ZZDRAw2mDfCao/GXxSAwInlSuJA+x4L95oewxsvwOk= Subject key identifier: AC:0F:D8:D2:6C:C6:A4:E3:ED:9B:8C:E3:56:56:A8:58:72:AB:7A:5F Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Certificate serial: 24B0B79F3A35E78FA48AB68AA7A6838BC2255868 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:01:01 +0000 Manifest this update: Mon 20 Jul 2026 19:56:01 +0000 Manifest next update: Tue 21 Jul 2026 23:44:01 +0000 Files and hashes: 1: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: j3wy4rBOt9KLpaD5LH0BwgRkujp7xgPfgUer0oRRcO4=) 2: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: 9MCsmuGnmFDoeSG3rIPrfccOXghMBGlEEz5Onpmf8wY=) 3: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: zXGSnPmEp4F0jfkLMTMvDaGHFb1hgkrGA8TNoljlC2g=) 4: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: oD9IDDMfDt326HwXRIsMWXvISYJSKNyW+NeKDvpDxLY=) 5: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: GNQ9BAndW/dbBDXxGBCrP2cWFnFb/Uhl5zGAhjYFfBA=) 6: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Da+BSi/QmlOV/X3TjGzgwu4l3eK1o4UhYD/OBNK4cHQ=) 7: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 8XrnQ5SnhyZDHtT2jqiiu3w//jV9DlxlWcB7qtbppcE=) 8: FF5F881DC07CC4A9A985D594360658D202A551B7.crl (hash: hYGxuAlhqjSazJjzZjeDVfLprMXcS+c5LJNpcUweDlU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b0:b7:9f:3a:35:e7:8f:a4:8a:b6:8a:a7:a6:83:8b:c2:25:58:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Validity Not Before: Jul 20 19:56:01 2026 GMT Not After : Jul 21 23:44:01 2026 GMT Subject: CN=AC0FD8D26CC6A4E3ED9B8CE35656A85872AB7A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:23:ba:31:84:75:8e:6a:e3:02:d5:be:49: 37:23:2b:6f:00:a9:1a:2d:9c:b1:f5:24:c0:e2:28: b6:96:6e:dc:46:63:97:8b:0d:b6:a0:cb:2e:99:7b: 24:02:bd:77:b0:b3:ec:2a:4c:bc:0a:c0:77:34:d0: ea:4c:ef:0e:9d:4e:58:c5:4c:13:4d:c0:68:b7:5e: ea:ce:ad:f5:ac:4e:1e:1c:af:53:56:c6:5f:fc:de: de:88:dc:8c:b4:ac:62:34:d2:46:6f:91:08:fb:18: e5:ae:68:4e:a4:a3:97:b6:86:63:fd:7d:7f:6b:de: f0:ff:26:45:08:52:23:47:4e:cf:6a:e8:fb:a4:3a: f0:45:76:a0:d2:40:98:3f:de:52:4d:01:c9:ee:67: 33:3f:2f:f9:a1:eb:1c:79:b7:1d:f4:8c:96:8f:e5: 41:2a:44:f3:ae:04:c8:3d:ad:a8:f5:d8:95:d8:64: 6f:cb:a4:33:eb:58:ea:ca:23:45:75:35:e5:88:84: 9f:d2:c8:c5:a0:19:d4:fb:dc:05:56:11:a4:76:68: 9e:ec:c5:26:8d:4b:56:2e:14:88:5c:44:1f:4b:86: f8:02:9b:d6:28:73:63:a6:ba:d7:f5:95:2e:73:85: ac:63:50:d7:16:40:a2:34:fd:2f:b4:c5:72:d0:03: d1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0F:D8:D2:6C:C6:A4:E3:ED:9B:8C:E3:56:56:A8:58:72:AB:7A:5F X509v3 Authority Key Identifier: keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:fb:5f:3f:05:72:b3:df:b5:53:b9:9e:89:a3:01:35:41:a7: ff:36:9f:2a:89:a6:9c:c3:3a:b5:4d:de:9f:1c:ce:a5:80:26: 15:8c:10:28:31:2f:da:70:46:2d:40:05:26:23:88:2b:e9:4d: 59:0e:39:95:22:04:34:1a:c9:a7:fc:80:e5:ae:8f:78:b1:70: 00:68:fb:a4:60:7e:a8:42:02:17:19:09:39:d9:d3:4f:7f:f1: 35:f5:50:91:0f:b8:d6:8a:ed:81:aa:1d:b1:96:5e:21:f8:29: 6f:e0:48:7b:ff:10:d5:db:40:67:3b:76:09:f2:a6:2e:68:9b: 09:98:61:a2:43:d1:e5:30:2a:19:cf:cf:bd:4f:d3:89:06:35: ee:ae:0d:06:c3:2f:2e:e5:95:9a:3c:de:1d:76:7c:2e:2f:67: 07:f6:44:7b:b2:3e:82:b1:56:ba:93:80:66:02:95:e2:af:40: 4c:5f:b5:40:5e:4b:4c:8e:8a:e3:c5:d5:b8:84:30:98:28:68: 0b:63:64:94:23:e6:12:8c:d9:c7:b1:ac:b2:3f:a1:3a:50:9d: 73:fc:4e:41:a2:30:47:c3:4f:91:ee:e7:1b:db:0c:57:09:e5: 29:12:5a:b7:d5:80:11:f5:3d:34:9d:7c:1f:ec:e3:d7:ab:cc: e0:76:2f:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLC3nzo154+kiraKp6aDi8IlWGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4RDIw MkE1NTFCNzAeFw0yNjA3MjAxOTU2MDFaFw0yNjA3MjEyMzQ0MDFaMDMxMTAvBgNV BAMTKEFDMEZEOEQyNkNDNkE0RTNFRDlCOENFMzU2NTZBODU4NzJBQjdBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHkCO6MYR1jmrjAtW+STcjK28A qRotnLH1JMDiKLaWbtxGY5eLDbagyy6ZeyQCvXews+wqTLwKwHc00OpM7w6dTljF TBNNwGi3XurOrfWsTh4cr1NWxl/83t6I3Iy0rGI00kZvkQj7GOWuaE6ko5e2hmP9 fX9r3vD/JkUIUiNHTs9q6PukOvBFdqDSQJg/3lJNAcnuZzM/L/mh6xx5tx30jJaP 5UEqRPOuBMg9raj12JXYZG/LpDPrWOrKI0V1NeWIhJ/SyMWgGdT73AVWEaR2aJ7s xSaNS1YuFIhcRB9LhvgCm9Yoc2Omutf1lS5zhaxjUNcWQKI0/S+0xXLQA9GTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrA/Y0mzGpOPtm4zjVlaoWHKrel8wHwYDVR0j BBgwFoAU/1+IHcB8xKmphdWUNgZY0gKlUbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2MwNzRjZDgtMjgzMC00ZWFiLWJkZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURD MDdDQzRBOUE5ODVENTk0MzYwNjU4RDIwMkE1NTFCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVGODgxREMwN0NDNEE5QTk4NUQ1OTQzNjA2NThEMjAyQTU1 MUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4 RDIwMkE1NTFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEL7Xz8FcrPftVO5nomjATVBp/82nyqJppzD OrVN3p8czqWAJhWMECgxL9pwRi1ABSYjiCvpTVkOOZUiBDQayaf8gOWuj3ixcABo +6RgfqhCAhcZCTnZ009/8TX1UJEPuNaK7YGqHbGWXiH4KW/gSHv/ENXbQGc7dgny pi5omwmYYaJD0eUwKhnPz71P04kGNe6uDQbDLy7llZo83h12fC4vZwf2RHuyPoKx VrqTgGYCleKvQExftUBeS0yOiuPF1biEMJgoaAtjZJQj5hKM2cexrLI/oTpQnXP8 TkGiMEfDT5Hu5xvbDFcJ5SkSWrfVgBH1PTSdfB/s49erzOB2LxY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:53 2026 by rpki-client