$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft File: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft (raw, json) Hash identifier: CQlNwauH+pdpvP52l2H3T8kvDSJ3EmaRI9ILR3lvlL0= Subject key identifier: 3F:2D:3A:9A:BF:5B:DE:23:8C:41:32:A6:26:AD:EB:E4:40:E4:AF:68 Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Certificate serial: 0390AFF018EC187F1364E00374181D8274E5D2CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft Manifest number: E8 Signing time: Fri 23 Oct 2026 22:57:46 +0000 Manifest this update: Fri 23 Oct 2026 22:52:46 +0000 Manifest next update: Sun 25 Oct 2026 02:38:46 +0000 Files and hashes: 1: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: 2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=) 2: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=) 3: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=) 4: FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl (hash: ++OgX2r0V0nJ773fK0sGovAfGHhSS38OP++0swQzk+g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 02:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:90:af:f0:18:ec:18:7f:13:64:e0:03:74:18:1d:82:74:e5:d2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032 Validity Not Before: Oct 23 22:52:46 2026 GMT Not After : Oct 25 02:38:46 2026 GMT Subject: CN=3F2D3A9ABF5BDE238C4132A626ADEBE440E4AF68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:2d:83:ad:59:39:79:9c:7f:b8:e3:4c:2e: 59:f4:26:3b:71:b2:3a:2d:10:ad:5d:a5:37:69:3f: a0:c8:17:75:79:3b:db:73:b3:5c:e1:d0:fb:eb:7b: 5a:26:19:4f:0f:af:f6:0b:9c:08:64:2d:71:56:74: bc:50:00:08:86:fb:15:68:0a:e4:2c:ab:83:2c:c1: 4c:07:85:b8:f6:cf:ee:ae:da:f1:d2:c2:98:60:94: d2:af:ec:f6:94:6e:3f:d5:3b:cd:b5:cc:86:d7:a6: b3:4f:cb:32:6e:08:8a:bb:8c:4f:0f:a8:8f:75:3b: f9:c5:bb:37:7a:22:1c:50:50:d2:e0:a5:45:da:75: 2a:c4:f9:4d:fc:bf:f1:2d:b3:30:c2:dc:3d:dd:82: bb:44:5e:82:d6:7f:f9:ae:a6:9f:f1:18:c2:37:2a: bb:e2:c6:ab:2c:4b:f3:9a:c3:a3:cc:19:8e:43:3e: 4d:bf:d2:dd:4d:b8:db:7b:86:93:21:94:17:3a:21: 0b:3b:2f:67:04:5c:43:af:bd:cb:c8:9e:f5:fc:4c: 1f:ff:ae:c6:bc:b3:63:22:15:13:30:10:33:2f:bc: 45:91:8b:f4:f9:81:bc:36:9c:8a:fa:dd:79:0c:c0: 00:08:07:e4:4b:3a:3b:0c:2c:c9:5a:a0:85:3a:44: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2D:3A:9A:BF:5B:DE:23:8C:41:32:A6:26:AD:EB:E4:40:E4:AF:68 X509v3 Authority Key Identifier: keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:91:9c:92:ab:46:42:43:d3:d6:a4:0f:21:13:c3:2f:4e:ac: 78:38:cc:8b:e5:b8:eb:50:1d:31:93:22:05:12:c9:00:de:bf: d6:09:ac:ae:74:b2:6f:cd:03:09:92:71:c2:27:df:d2:24:eb: cb:73:57:34:53:45:99:64:51:e2:7f:81:14:e8:84:3b:d1:4c: 35:21:40:aa:2f:ab:30:48:c4:cf:72:c4:e2:79:8f:62:43:3a: c9:4e:70:aa:ce:78:c8:d2:f7:44:6b:e9:f2:f6:ef:8a:a5:7f: 44:85:b8:af:33:1e:47:9c:6e:af:98:01:4f:d3:1f:61:0e:cd: f4:94:a6:8f:8d:d9:2d:72:45:10:a0:f0:b1:12:2e:25:19:c2: 78:2c:d1:0f:14:f4:78:3d:e8:f3:58:2e:56:ba:92:71:a8:18: a9:72:fa:92:c0:a1:80:66:99:d6:21:46:d2:47:c5:3c:d9:c9: 8e:5e:a4:cb:7c:84:98:1a:a2:df:cb:b5:db:e8:c3:e1:18:a1: 2b:bf:95:59:ee:6c:ab:e7:e8:a0:aa:44:21:8b:54:a3:e1:0a: a6:24:0f:f3:50:aa:b7:92:04:e5:42:d5:5d:ee:91:09:1f:a3: f7:5c:ed:be:c1:5a:42:da:05:f7:69:41:4c:5a:d6:e1:09:e5: f7:52:23:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5Cv8BjsGH8TZOADdBgdgnTl0s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdD OTFCOTAzMjAeFw0yNjEwMjMyMjUyNDZaFw0yNjEwMjUwMjM4NDZaMDMxMTAvBgNV BAMTKDNGMkQzQTlBQkY1QkRFMjM4QzQxMzJBNjI2QURFQkU0NDBFNEFGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fi2DrVk5eZx/uONMLln0Jjtx sjotEK1dpTdpP6DIF3V5O9tzs1zh0Pvre1omGU8Pr/YLnAhkLXFWdLxQAAiG+xVo CuQsq4MswUwHhbj2z+6u2vHSwphglNKv7PaUbj/VO821zIbXprNPyzJuCIq7jE8P qI91O/nFuzd6IhxQUNLgpUXadSrE+U38v/EtszDC3D3dgrtEXoLWf/mupp/xGMI3 KrvixqssS/Oaw6PMGY5DPk2/0t1NuNt7hpMhlBc6IQs7L2cEXEOvvcvInvX8TB// rsa8s2MiFRMwEDMvvEWRi/T5gbw2nIr63XkMwAAIB+RLOjsMLMlaoIU6RFqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPy06mr9b3iOMQTKmJq3r5EDkr2gwHwYDVR0j BBgwFoAU/+erKNJ3pa7EzUfaZX34F8kbkDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRjYzY5ZTktZWY3NC00YjgxLTkxZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhE Mjc3QTVBRUM0Q0Q0N0RBNjU3REY4MTdDOTFCOTAzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkU3QUIyOEQyNzdBNUFFQzRDRDQ3REE2NTdERjgxN0M5MUI5 MDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvRkZFN0FCMjhEMjc3QTVBRUM0Q0Q0N0RBNjU3REY4 MTdDOTFCOTAzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKRnJKrRkJD09akDyETwy9OrHg4zIvluOtQ HTGTIgUSyQDev9YJrK50sm/NAwmSccIn39Ik68tzVzRTRZlkUeJ/gRTohDvRTDUh QKovqzBIxM9yxOJ5j2JDOslOcKrOeMjS90Rr6fL274qlf0SFuK8zHkecbq+YAU/T H2EOzfSUpo+N2S1yRRCg8LESLiUZwngs0Q8U9Hg96PNYLla6knGoGKly+pLAoYBm mdYhRtJHxTzZyY5epMt8hJgaot/Ltdvow+EYoSu/lVnubKvn6KCqRCGLVKPhCqYk D/NQqreSBOVC1V3ukQkfo/dc7b7BWkLaBfdpQUxa1uEJ5fdSI8U= -----END CERTIFICATE-----Generated at Sat Oct 24 20:34:33 2026 by rpki-client