$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft File: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft (raw, json) Hash identifier: Jkm42gkGxSqUJfvVZKqEzMdQxoo22kS4fBN14dIB3Ck= Subject key identifier: EB:AA:DC:66:93:2D:9F:47:F2:78:0A:70:A6:43:D5:4B:09:79:74:87 Authority key identifier: FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 Certificate issuer: /CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Certificate serial: 7A82AF75D96E39057D402DED1271AEA13697F1A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft Manifest number: EA Signing time: Sun 25 Oct 2026 09:33:29 +0000 Manifest this update: Sun 25 Oct 2026 09:28:29 +0000 Manifest next update: Mon 26 Oct 2026 13:28:29 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: tqhtPy0pDXrbRO+/m8ay5h7+qXG3yJPzUoTIyb8m2MU=) 2: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl (hash: RjQ3yKFgySzAt/TK9RY9+6uULm1KIQjbOd1Liv6QGuw=) 3: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: pv5zffL4ZCBhJD+aFjjZDdz/CPK6N+eA7QhskPfJHEg=) 4: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: DzuRo4UVpWSsuuvSZCPx+QPp1mXNSgbHMp2M3XRIA7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:82:af:75:d9:6e:39:05:7d:40:2d:ed:12:71:ae:a1:36:97:f1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Validity Not Before: Oct 25 09:28:29 2026 GMT Not After : Oct 26 13:28:29 2026 GMT Subject: CN=EBAADC66932D9F47F2780A70A643D54B09797487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ab:1c:7c:85:65:42:f7:9e:8d:f7:89:12:af: 92:f8:69:cf:71:72:74:54:31:0c:65:32:1a:06:be: c2:8c:6c:31:54:72:4e:76:d9:7e:ab:97:cd:e0:4a: 7b:80:48:9e:71:84:dc:40:9a:72:be:82:8e:eb:99: 0c:6a:c9:d5:40:f0:de:e5:be:51:2a:07:ed:50:ea: 45:d4:8f:d1:ab:99:ef:c1:d1:7a:cd:4d:bb:0c:0b: e6:a1:4d:73:9c:43:1b:b1:1e:b9:ce:0f:59:91:ef: ad:b5:5a:11:ec:73:d3:39:e1:2b:b6:a8:d3:bc:d1: 75:04:b7:bd:06:8f:fc:d6:d5:66:8f:ae:79:12:5a: 84:4a:10:68:d8:90:c2:d2:a0:80:33:0c:f6:95:3e: 63:58:44:3a:91:4c:55:28:fe:8b:12:f5:51:33:dd: 68:9a:bc:58:fc:86:5e:bc:ad:cd:c1:0b:d0:9c:e1: 5f:e0:b6:1f:8e:3c:72:ce:e3:70:f2:29:ba:13:50: 4c:ad:58:a2:d3:76:b4:01:0a:1c:ca:e6:26:1b:f2: d5:a1:87:00:7c:fd:1a:9e:7f:6f:97:98:11:36:0c: cc:aa:83:ae:da:e1:f2:a4:5e:b9:13:d0:0b:11:e1: b2:07:16:98:1b:56:0e:db:3a:29:43:59:95:aa:68: 08:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AA:DC:66:93:2D:9F:47:F2:78:0A:70:A6:43:D5:4B:09:79:74:87 X509v3 Authority Key Identifier: keyid:FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e2:20:f6:0f:c5:fa:56:73:d1:0c:59:65:2b:05:30:90:0a: 67:b2:fa:ec:c5:52:59:9f:3f:00:e7:e3:92:a8:c6:93:57:25: 18:4d:79:08:75:21:be:9b:78:b5:c0:a9:20:b4:8e:9c:91:ee: 72:27:13:20:f2:93:79:2e:46:fa:79:a8:cb:25:02:e0:49:86: b6:38:31:cb:f3:3d:23:4f:1a:75:27:0f:09:47:e7:ae:ea:d4: 3c:dd:7c:ab:07:47:ed:a0:6d:0e:a2:22:e5:28:e8:86:22:5e: 55:13:62:4f:ae:6d:e3:1b:0d:7b:3e:d0:36:09:0b:db:a1:1d: 5a:f3:bd:1b:a7:72:20:c3:0c:50:5f:c8:d7:e1:78:56:42:41: 05:50:78:57:60:4b:43:53:99:b9:e9:07:d3:3c:4f:3d:b7:28: 72:c2:06:05:10:7a:8f:39:9d:01:9e:08:85:12:29:ea:98:0d: 12:95:40:f1:d5:88:f6:ea:e4:62:a2:e7:cf:0b:58:0f:b5:50: 3d:4e:b2:83:f9:ee:a6:b2:01:a4:bf:23:66:a0:d5:e1:59:6f: 97:bb:cf:3e:ca:fc:b2:34:2c:97:03:29:eb:2a:e7:8e:0d:52: 5b:45:c9:ac:3f:14:76:df:fb:e4:bb:25:b9:09:42:ee:a6:75: 72:5c:53:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoKvddluOQV9QC3tEnGuoTaX8acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5 QjgzNDExMzAeFw0yNjEwMjUwOTI4MjlaFw0yNjEwMjYxMzI4MjlaMDMxMTAvBgNV BAMTKEVCQUFEQzY2OTMyRDlGNDdGMjc4MEE3MEE2NDNENTRCMDk3OTc0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnqxx8hWVC956N94kSr5L4ac9x cnRUMQxlMhoGvsKMbDFUck522X6rl83gSnuASJ5xhNxAmnK+go7rmQxqydVA8N7l vlEqB+1Q6kXUj9Grme/B0XrNTbsMC+ahTXOcQxuxHrnOD1mR7621WhHsc9M54Su2 qNO80XUEt70Gj/zW1WaPrnkSWoRKEGjYkMLSoIAzDPaVPmNYRDqRTFUo/osS9VEz 3WiavFj8hl68rc3BC9Cc4V/gth+OPHLO43DyKboTUEytWKLTdrQBChzK5iYb8tWh hwB8/Rqef2+XmBE2DMyqg67a4fKkXrkT0AsR4bIHFpgbVg7bOilDWZWqaAjXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU66rcZpMtn0fyeApwpkPVSwl5dIcwHwYDVR0j BBgwFoAU//RmKb3bTzocbXjyU+O2PJuDQRMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZlZGIyOGYtZjNmOS00MTk5LTg1YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlC RERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5QjgzNDExMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkY0NjYyOUJEREI0RjNBMUM2RDc4RjI1M0UzQjYzQzlCODM0 MTEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2 M0M5QjgzNDExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7iIPYPxfpWc9EMWWUrBTCQCmey+uzFUlmf PwDn45KoxpNXJRhNeQh1Ib6beLXAqSC0jpyR7nInEyDyk3kuRvp5qMslAuBJhrY4 McvzPSNPGnUnDwlH567q1DzdfKsHR+2gbQ6iIuUo6IYiXlUTYk+ubeMbDXs+0DYJ C9uhHVrzvRunciDDDFBfyNfheFZCQQVQeFdgS0NTmbnpB9M8Tz23KHLCBgUQeo85 nQGeCIUSKeqYDRKVQPHViPbq5GKi588LWA+1UD1OsoP57qayAaS/I2ag1eFZb5e7 zz7K/LI0LJcDKesq544NUltFyaw/FHbf++S7JbkJQu6mdXJcU3w= -----END CERTIFICATE-----Generated at Mon Oct 26 02:18:58 2026 by rpki-client