$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft File: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft (raw, json) Hash identifier: 1X3NJl5IKrHUvNb/AbBADKPeHG6l3S12lXHNcij6dUw= Subject key identifier: 0B:3A:5B:ED:19:54:5C:CC:B7:E9:49:7F:7A:BC:EF:7F:5C:CB:86:C6 Authority key identifier: FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A Certificate issuer: /CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Certificate serial: 19646E5680A83AC8279BF6B787E6F6B247F15C50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft Manifest number: EE Signing time: Mon 26 Oct 2026 23:09:11 +0000 Manifest this update: Mon 26 Oct 2026 23:04:11 +0000 Manifest next update: Wed 28 Oct 2026 01:49:11 +0000 Files and hashes: 1: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: d3W50Pv9IvojYqj5AXX2l3Oy/7lfLR7Ec6qbGSXUUA4=) 2: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl (hash: 5W7gE9zvqAdZy6fdocPi2E67aFQDibSmoLNBayHBXPs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:64:6e:56:80:a8:3a:c8:27:9b:f6:b7:87:e6:f6:b2:47:f1:5c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Validity Not Before: Oct 26 23:04:11 2026 GMT Not After : Oct 28 01:49:11 2026 GMT Subject: CN=0B3A5BED19545CCCB7E9497F7ABCEF7F5CCB86C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:57:77:1f:40:2c:27:a2:c1:45:50:c4:9d: 58:45:34:50:3d:05:95:b5:2a:7e:76:aa:18:3e:c2: 45:6d:df:db:51:53:85:ed:e4:a4:bb:6b:c7:62:dd: 25:fd:3a:df:59:b6:ce:64:c0:db:0c:7f:78:36:d1: b0:46:21:a5:f4:c8:f5:e8:31:9f:28:a6:6e:a8:6a: 2d:6d:b5:ad:16:1b:88:02:83:8e:c7:36:69:98:83: 33:e7:c8:39:92:4f:6f:77:5a:12:af:ac:a7:a7:d2: cb:89:b8:63:c3:24:75:73:d2:db:4e:33:67:fe:db: d0:e0:f0:dc:b3:27:8c:bb:19:79:36:3f:d9:53:a0: dc:82:7f:b4:96:e6:d2:7e:a9:4c:49:99:98:50:ba: c5:02:d7:37:f6:37:2c:62:c6:e7:59:a0:30:64:fb: 6b:e3:a7:db:93:e8:58:fb:dd:65:23:9b:33:ab:10: c3:f3:6c:30:99:d3:dd:b4:a6:19:02:4b:5e:8c:09: b9:e5:5a:7e:03:99:b3:a4:fa:bb:e9:fa:e3:28:8a: e0:5f:74:d0:a3:c5:8d:c5:cd:b9:9d:04:d8:43:49: 1e:c5:36:7b:95:69:11:e7:dc:30:60:68:13:84:8e: fa:5e:9a:4d:ad:35:30:8d:c4:51:0f:34:1c:10:86: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3A:5B:ED:19:54:5C:CC:B7:E9:49:7F:7A:BC:EF:7F:5C:CB:86:C6 X509v3 Authority Key Identifier: keyid:FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:92:ec:ff:4b:1b:ad:ff:bc:8a:a3:97:d9:6a:93:86:bf:6c: 93:01:33:5c:3d:08:d1:6c:9b:94:a5:97:ff:bb:f1:c4:d8:f6: b3:5b:34:55:6a:51:36:0e:af:f1:87:2d:1c:a2:19:ba:42:d2: 2d:43:22:7d:bf:5a:a2:68:a9:5a:60:06:99:b8:ab:a5:8d:09: 9a:fd:65:bc:56:3b:1e:7c:e5:e8:f1:d4:b9:65:39:5d:0e:03: e5:70:6c:a8:33:15:dc:5c:7d:70:44:53:93:5a:ed:b5:49:90: c7:11:35:64:1c:8b:9e:20:8c:5a:2e:d3:63:d1:1d:df:a7:d1: f0:01:f1:18:f7:fb:bb:9b:1b:0e:62:ec:d9:ea:92:5f:30:4b: b3:d8:1d:ca:6d:cd:33:27:52:a9:db:13:d5:33:9b:f5:41:ed: 0e:b0:92:6f:8d:a3:f1:b8:40:e9:f2:be:6b:b1:cf:8b:56:cd: 12:ad:0a:8e:98:7d:0d:50:47:52:3b:d1:44:b2:dc:3e:57:33: cf:a2:be:27:dc:8d:43:62:e0:fc:61:2e:b7:e6:96:9d:81:d9: 08:7a:8f:15:c6:ce:6e:ec:24:46:95:09:3f:4c:08:31:41:bd: 95:5a:be:91:20:e3:46:2b:11:d8:2d:47:4a:6d:78:0e:6b:5a: 8a:d5:52:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWRuVoCoOsgnm/a3h+b2skfxXFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkExOEEx Mjc3QTU5QTAeFw0yNjEwMjYyMzA0MTFaFw0yNjEwMjgwMTQ5MTFaMDMxMTAvBgNV BAMTKDBCM0E1QkVEMTk1NDVDQ0NCN0U5NDk3RjdBQkNFRjdGNUNDQjg2QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+Vd3H0AsJ6LBRVDEnVhFNFA9 BZW1Kn52qhg+wkVt39tRU4Xt5KS7a8di3SX9Ot9Zts5kwNsMf3g20bBGIaX0yPXo MZ8opm6oai1tta0WG4gCg47HNmmYgzPnyDmST293WhKvrKen0suJuGPDJHVz0ttO M2f+29Dg8NyzJ4y7GXk2P9lToNyCf7SW5tJ+qUxJmZhQusUC1zf2NyxixudZoDBk +2vjp9uT6Fj73WUjmzOrEMPzbDCZ0920phkCS16MCbnlWn4DmbOk+rvp+uMoiuBf dNCjxY3FzbmdBNhDSR7FNnuVaRHn3DBgaBOEjvpemk2tNTCNxFEPNBwQhuB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCzpb7RlUXMy36Ul/erzvf1zLhsYwHwYDVR0j BBgwFoAU//PY3FwMhlKfl7uGk0ahihJ3pZowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ2ZmZhZDItMjBiYy00MjQ2LTgyOTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1 QzBDODY1MjlGOTdCQjg2OTM0NkExOEExMjc3QTU5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkYzRDhEQzVDMEM4NjUyOUY5N0JCODY5MzQ2QTE4QTEyNzdB NTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkEx OEExMjc3QTU5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2S7P9LG63/vIqjl9lqk4a/bJMBM1w9CNFs m5Sll/+78cTY9rNbNFVqUTYOr/GHLRyiGbpC0i1DIn2/WqJoqVpgBpm4q6WNCZr9 ZbxWOx585ejx1LllOV0OA+VwbKgzFdxcfXBEU5Na7bVJkMcRNWQci54gjFou02PR Hd+n0fAB8Rj3+7ubGw5i7Nnqkl8wS7PYHcptzTMnUqnbE9Uzm/VB7Q6wkm+No/G4 QOnyvmuxz4tWzRKtCo6YfQ1QR1I70USy3D5XM8+ivifcjUNi4PxhLrfmlp2B2Qh6 jxXGzm7sJEaVCT9MCDFBvZVavpEg40YrEdgtR0pteA5rWorVUig= -----END CERTIFICATE-----Generated at Tue Oct 27 01:49:41 2026 by rpki-client