$ rpki-client -vvf rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft File: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft (raw, json) Hash identifier: cDJ211+cV9xYtFWX9g2DPHPd+R1kZXsAPKa1y5alyaU= Subject key identifier: 7F:9F:6A:CF:9E:BC:69:BE:2F:D4:39:D5:74:F7:BA:88:36:A1:AA:05 Authority key identifier: FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 Certificate issuer: /CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Certificate serial: 02A734869A5C1DD0C7D5DCAE854C3B1622D71BBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft Manifest number: 08 Signing time: Thu 07 May 2026 16:23:41 +0000 Manifest this update: Thu 07 May 2026 16:18:41 +0000 Manifest next update: Fri 08 May 2026 17:38:41 +0000 Files and hashes: 1: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl (hash: jcAvbbrAMcp2DiJ/Vylp+Bs15aV/1Jm+lR2v2psb4Kw=) 2: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (hash: e5rLZ+uiB21yOgfSRe83jWI/e3SG0saFimxCgcV74b8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 17:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a7:34:86:9a:5c:1d:d0:c7:d5:dc:ae:85:4c:3b:16:22:d7:1b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Validity Not Before: May 7 16:18:41 2026 GMT Not After : May 8 17:38:41 2026 GMT Subject: CN=7F9F6ACF9EBC69BE2FD439D574F7BA8836A1AA05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:14:64:9b:37:e2:87:a6:23:e0:cb:fc:a2: 1b:97:25:0c:a1:f7:69:51:39:fc:29:a9:11:d1:d9: ba:72:80:ef:be:e6:f2:7e:f6:af:bb:77:a0:dd:fc: c9:c6:db:d0:be:89:35:63:21:d1:ca:e5:cf:27:e5: 84:50:ad:52:22:9c:9b:5d:09:5f:18:3b:1b:64:b9: 81:d6:20:7e:4b:99:7b:c8:13:90:a7:9d:6f:33:8b: 36:5e:60:26:18:80:10:67:64:c4:25:04:e8:69:4b: 21:1d:93:59:b4:a3:d0:a2:ba:99:2e:b2:e6:2b:09: 98:8a:83:18:3e:20:03:26:61:7a:02:34:b4:93:4a: 48:24:63:2d:b4:61:17:e5:32:b7:0e:7c:3b:fe:d6: c5:71:26:e8:41:c2:dc:b9:30:19:2c:21:ae:14:22: 43:4d:b8:a7:61:90:29:74:77:3d:ad:7b:6a:e1:5e: f3:7a:8e:17:ca:70:74:7f:14:e8:b2:6e:84:44:2b: 90:47:c8:6a:6b:e3:ad:8a:41:e9:97:9a:f9:26:7f: 5e:45:f0:e6:c4:5e:3f:8b:ed:60:7b:d2:b2:c3:32: c9:5d:ac:dc:d7:34:46:4b:b3:04:96:71:ac:05:b9: 9a:40:aa:d3:a4:fd:7e:0d:85:69:8a:7a:33:ee:92: c4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9F:6A:CF:9E:BC:69:BE:2F:D4:39:D5:74:F7:BA:88:36:A1:AA:05 X509v3 Authority Key Identifier: keyid:FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:32:7a:8a:47:80:8d:66:b0:e2:ea:86:15:01:d0:c2:11:a7: c6:1e:a6:78:96:f8:c4:df:e3:88:e6:f3:b1:d6:6f:7e:b1:9b: ad:2d:86:75:1f:d3:fd:88:5c:f5:f7:fb:bc:01:40:aa:53:77: d1:6e:b2:09:eb:0a:0d:d5:a3:5b:82:71:2d:05:35:27:9d:c4: 4a:9c:a5:45:3e:94:dc:fa:5f:d6:e9:6c:18:6c:cb:2a:a9:d5: cc:95:da:9a:29:98:a1:1d:4e:b1:83:bf:e4:54:df:18:de:29: ab:b4:c5:85:2f:9e:8f:0e:aa:ae:e2:1d:eb:5a:9c:ac:40:5f: a5:16:c1:0e:ed:e7:cd:a4:2b:2f:f0:e4:bc:1c:af:ff:b3:b4: 2a:cd:0e:a5:8d:35:54:20:66:f1:24:a5:9b:1a:97:60:0e:34: a2:27:2e:e2:c0:dc:4c:ae:36:ec:3f:61:90:93:f5:9a:c1:91: a6:85:45:3a:3c:0c:ec:bc:4b:15:13:2f:42:c9:7f:0e:d2:dd: 9f:d8:ee:55:95:a9:c1:86:3f:fc:ac:2b:a4:94:b6:ad:56:90: eb:75:ca:4c:7e:1f:4f:db:af:d6:83:35:f7:11:57:c8:b5:47: 98:10:c7:ba:82:ca:8d:f3:95:e6:a9:f5:ec:d3:8a:32:20:5f: 87:1b:04:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqc0hppcHdDH1dyuhUw7FiLXG7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMz MEZGRUNGNjAeFw0yNjA1MDcxNjE4NDFaFw0yNjA1MDgxNzM4NDFaMDMxMTAvBgNV BAMTKDdGOUY2QUNGOUVCQzY5QkUyRkQ0MzlENTc0RjdCQTg4MzZBMUFBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDORhRkmzfih6Yj4Mv8ohuXJQyh 92lROfwpqRHR2bpygO++5vJ+9q+7d6Dd/MnG29C+iTVjIdHK5c8n5YRQrVIinJtd CV8YOxtkuYHWIH5LmXvIE5CnnW8zizZeYCYYgBBnZMQlBOhpSyEdk1m0o9Ciupku suYrCZiKgxg+IAMmYXoCNLSTSkgkYy20YRflMrcOfDv+1sVxJuhBwty5MBksIa4U IkNNuKdhkCl0dz2te2rhXvN6jhfKcHR/FOiyboREK5BHyGpr462KQemXmvkmf15F 8ObEXj+L7WB70rLDMsldrNzXNEZLswSWcawFuZpAqtOk/X4NhWmKejPuksRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf59qz568ab4v1DnVdPe6iDahqgUwHwYDVR0j BBgwFoAU/9rHdcu18bLHuVG/FSPvbDD/7PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTdkYzdlZTUtY2U2Ny00NWNkLTk4ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVD QkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMzMEZGRUNGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkRBQzc3NUNCQjVGMUIyQzdCOTUxQkYxNTIzRUY2QzMwRkZF Q0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTdkYzdlZTUtY2U2Ny00NWNkLTk4 ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VG NkMzMEZGRUNGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEyeopHgI1msOLqhhUB0MIRp8YepniW+MTf 44jm87HWb36xm60thnUf0/2IXPX3+7wBQKpTd9FusgnrCg3Vo1uCcS0FNSedxEqc pUU+lNz6X9bpbBhsyyqp1cyV2popmKEdTrGDv+RU3xjeKau0xYUvno8Oqq7iHeta nKxAX6UWwQ7t582kKy/w5Lwcr/+ztCrNDqWNNVQgZvEkpZsal2AONKInLuLA3Eyu Nuw/YZCT9ZrBkaaFRTo8DOy8SxUTL0LJfw7S3Z/Y7lWVqcGGP/ysK6SUtq1WkOt1 ykx+H0/br9aDNfcRV8i1R5gQx7qCyo3zleap9ezTijIgX4cbBM0= -----END CERTIFICATE-----Generated at Fri May 8 07:30:04 2026 by rpki-client