$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft File: FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft (raw, json) Hash identifier: Gq2Kd62dMw7gFUpI09osa2fGRkjrf1gZzSiMXAngGLc= Subject key identifier: C2:31:D6:81:72:C1:E1:EE:D1:9D:5F:0F:E4:69:61:A0:B4:63:A6:A7 Authority key identifier: FF:75:FB:D7:DD:DE:14:F5:EF:E7:96:A5:B7:28:46:60:D4:6E:72:06 Certificate issuer: /CN=FF75FBD7DDDE14F5EFE796A5B7284660D46E7206 Certificate serial: 06C40E675F560D870B1F35EE1BA285DC75F27F54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 14:01:28 +0000 Manifest this update: Wed 16 Sep 2026 13:56:28 +0000 Manifest next update: Thu 17 Sep 2026 17:00:28 +0000 Files and hashes: 1: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: lYcIqG++R3KlJJ8gdHbn639yTY/SuMx9BoynL2RsVYg=) 2: FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl (hash: +kmaXXz07hVgPRB/qqfwrZ9msz9BvAd+tFQ2hB39v5w=) 3: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: 18eMz8teTkkcf9p+UfDdXZ6oyQLlhohSPsxmAeH1CuI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c4:0e:67:5f:56:0d:87:0b:1f:35:ee:1b:a2:85:dc:75:f2:7f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75FBD7DDDE14F5EFE796A5B7284660D46E7206 Validity Not Before: Sep 16 13:56:28 2026 GMT Not After : Sep 17 17:00:28 2026 GMT Subject: CN=C231D68172C1E1EED19D5F0FE46961A0B463A6A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:2b:ea:e3:ab:c8:60:4b:1d:cb:93:e2:59: 2a:3f:64:c3:56:36:23:fb:c9:57:3d:57:1a:87:e5: fc:f0:88:7e:23:84:37:0f:2f:c5:df:40:47:27:5a: 6f:48:03:c7:72:42:82:2b:19:06:cc:07:f7:bf:1a: bf:0f:80:3c:78:ff:cc:e1:a8:c6:74:35:01:f9:60: 91:15:b9:5f:5b:84:7f:b5:62:9f:81:73:a6:b1:77: 14:58:cb:27:b1:2c:68:5b:84:52:20:ee:75:78:d9: 48:b1:30:f6:53:a7:ef:0e:fc:cb:70:66:28:1b:7c: 6f:da:74:f9:2b:2d:50:98:50:52:d8:e8:91:d4:70: 94:99:05:75:26:75:aa:56:fd:31:fe:47:46:8b:dc: 2a:e7:2c:60:35:94:cd:29:58:a5:b8:54:ce:66:82: 12:1a:19:96:fd:2b:7b:f0:e4:0e:e8:2b:94:f2:6f: 37:08:68:68:95:8e:44:62:86:33:c7:de:02:4f:8c: 3f:d0:f2:93:cc:af:c6:a9:ba:2a:1f:88:a6:15:96: 8b:c6:07:d1:7d:9e:1d:80:82:0c:7a:40:36:d1:79: ab:23:49:a1:eb:9e:d7:ff:76:19:32:51:4f:40:95: 73:12:55:67:22:3b:86:88:fa:ba:f7:56:18:60:8c: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:31:D6:81:72:C1:E1:EE:D1:9D:5F:0F:E4:69:61:A0:B4:63:A6:A7 X509v3 Authority Key Identifier: keyid:FF:75:FB:D7:DD:DE:14:F5:EF:E7:96:A5:B7:28:46:60:D4:6E:72:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ad:a4:c5:98:24:bf:0d:b1:aa:77:7a:c6:7c:f2:f6:9b:40: 21:4b:56:b4:d9:f5:d4:8d:e4:cc:5b:a0:cc:7e:ce:ba:7b:bb: 09:84:0e:92:30:5d:7e:e8:73:28:e1:32:76:45:b0:fb:a9:f5: d9:83:b4:be:69:1e:26:66:7b:44:f0:90:9c:d1:85:a9:40:80: fa:9b:46:0f:d5:cd:51:0e:35:ab:c3:78:bc:cb:d8:93:e4:09: 26:ac:fc:24:eb:c2:9e:34:b5:9f:93:85:44:c2:09:cc:08:cb: 7b:63:cf:47:63:d2:57:2c:57:ca:e5:b7:84:9a:35:4d:02:d1: c7:e2:55:b8:c1:51:2c:59:92:0b:c5:bc:03:86:d7:a2:18:28: a5:02:d7:18:68:bc:46:1b:9b:94:65:61:d1:16:69:d6:15:48: ed:5b:5b:3b:fd:8b:53:8a:d3:38:7c:5e:a5:05:bf:41:4c:9a: b8:46:62:f1:49:13:7b:2c:4b:71:cd:8c:74:a8:a1:ac:cc:df: 1e:cb:78:e3:0f:57:a7:ba:73:94:60:54:27:1f:48:26:c5:4e: 6e:89:37:de:45:b7:f7:8d:c6:57:57:b2:6e:ec:11:8a:d4:95: 86:7f:09:5f:8b:db:27:d7:05:93:b4:b0:34:b2:55:40:72:b1: 1a:c0:0c:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsQOZ19WDYcLHzXuG6KF3HXyf1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUZCRDdERERFMTRGNUVGRTc5NkE1QjcyODQ2NjBE NDZFNzIwNjAeFw0yNjA5MTYxMzU2MjhaFw0yNjA5MTcxNzAwMjhaMDMxMTAvBgNV BAMTKEMyMzFENjgxNzJDMUUxRUVEMTlENUYwRkU0Njk2MUEwQjQ2M0E2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKivq46vIYEsdy5PiWSo/ZMNW NiP7yVc9VxqH5fzwiH4jhDcPL8XfQEcnWm9IA8dyQoIrGQbMB/e/Gr8PgDx4/8zh qMZ0NQH5YJEVuV9bhH+1Yp+Bc6axdxRYyyexLGhbhFIg7nV42UixMPZTp+8O/Mtw ZigbfG/adPkrLVCYUFLY6JHUcJSZBXUmdapW/TH+R0aL3CrnLGA1lM0pWKW4VM5m ghIaGZb9K3vw5A7oK5TybzcIaGiVjkRihjPH3gJPjD/Q8pPMr8apuiofiKYVlovG B9F9nh2Aggx6QDbReasjSaHrntf/dhkyUU9AlXMSVWciO4aI+rr3VhhgjNLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjHWgXLB4e7RnV8P5GlhoLRjpqcwHwYDVR0j BBgwFoAU/3X7193eFPXv55altyhGYNRucgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0MDU1NDUtYzM1ZC00ZGUxLTk2MTgtNDRiNWY0MTdhMzAzLzEvRkY3NUZCRDdE RERFMTRGNUVGRTc5NkE1QjcyODQ2NjBENDZFNzIwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjc1RkJEN0REREUxNEY1RUZFNzk2QTVCNzI4NDY2MEQ0NkU3 MjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzEvRkY3NUZCRDdERERFMTRGNUVGRTc5NkE1QjcyODQ2 NjBENDZFNzIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2tpMWYJL8Nsap3esZ88vabQCFLVrTZ9dSN 5MxboMx+zrp7uwmEDpIwXX7ocyjhMnZFsPup9dmDtL5pHiZme0TwkJzRhalAgPqb Rg/VzVEONavDeLzL2JPkCSas/CTrwp40tZ+ThUTCCcwIy3tjz0dj0lcsV8rlt4Sa NU0C0cfiVbjBUSxZkgvFvAOG16IYKKUC1xhovEYbm5RlYdEWadYVSO1bWzv9i1OK 0zh8XqUFv0FMmrhGYvFJE3ssS3HNjHSooazM3x7LeOMPV6e6c5RgVCcfSCbFTm6J N95Ft/eNxldXsm7sEYrUlYZ/CV+L2yfXBZO0sDSyVUBysRrADDM= -----END CERTIFICATE-----Generated at Thu Sep 17 06:42:52 2026 by rpki-client