$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft File: FF5F881DC07CC4A9A985D594360658D202A551B7.mft (raw, json) Hash identifier: R6Wc4A2bsexC45G1zsEUCqb+Hz4I3mK7rcib0LrsSvU= Subject key identifier: 9A:A7:DA:42:84:1A:4A:12:33:D0:4E:6F:7C:72:BA:8B:8D:78:C9:2C Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Certificate serial: 1A725A2C83E1B71D15F449683461FB2EE4932427 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:50:47 +0000 Manifest this update: Thu 17 Sep 2026 09:45:47 +0000 Manifest next update: Fri 18 Sep 2026 13:02:47 +0000 Files and hashes: 1: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: GNQ9BAndW/dbBDXxGBCrP2cWFnFb/Uhl5zGAhjYFfBA=) 2: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: zXGSnPmEp4F0jfkLMTMvDaGHFb1hgkrGA8TNoljlC2g=) 3: FF5F881DC07CC4A9A985D594360658D202A551B7.crl (hash: MKIjp5g9p/k5drNh5jmbBIhoWc7gnRumOpCygLzo7uY=) 4: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: 9MCsmuGnmFDoeSG3rIPrfccOXghMBGlEEz5Onpmf8wY=) 5: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Da+BSi/QmlOV/X3TjGzgwu4l3eK1o4UhYD/OBNK4cHQ=) 6: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 8XrnQ5SnhyZDHtT2jqiiu3w//jV9DlxlWcB7qtbppcE=) 7: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: j3wy4rBOt9KLpaD5LH0BwgRkujp7xgPfgUer0oRRcO4=) 8: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: oD9IDDMfDt326HwXRIsMWXvISYJSKNyW+NeKDvpDxLY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:72:5a:2c:83:e1:b7:1d:15:f4:49:68:34:61:fb:2e:e4:93:24:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Validity Not Before: Sep 17 09:45:47 2026 GMT Not After : Sep 18 13:02:47 2026 GMT Subject: CN=9AA7DA42841A4A1233D04E6F7C72BA8B8D78C92C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:43:6b:8b:69:75:90:a5:74:bb:c5:8a:ee: 3e:f3:85:22:20:d0:70:97:52:df:85:27:e7:24:6d: 2e:74:5f:43:9b:09:bb:3d:a6:93:6d:ca:56:44:73: 34:9c:e2:93:f5:e8:92:33:c0:7c:90:7f:0d:e7:47: ed:d9:f7:be:6b:d8:71:df:da:f4:07:11:49:0d:aa: 18:51:d6:5a:ed:a3:dd:17:de:6e:b2:fa:c5:7e:ac: 4c:ff:40:46:ec:32:45:ea:01:d4:76:6a:42:6f:d5: 83:f2:78:3e:be:a1:da:58:d3:5e:84:49:eb:71:11: 9e:3a:4b:3a:fb:16:96:c2:f8:9d:4b:89:7c:54:86: c4:e8:fe:6b:de:70:74:a2:cf:17:5f:b6:07:7b:94: 42:8f:a3:9c:9c:cd:0b:8d:a5:ab:b8:e9:cc:bc:08: d8:92:ad:08:21:70:e3:a6:13:8e:6a:23:13:de:3a: 3b:ee:33:f6:bf:f9:78:48:f4:d5:f8:79:69:0b:1f: e9:8e:3f:62:a3:f9:47:b3:12:7e:a3:24:d2:22:20: 1e:7b:19:02:a8:95:b8:23:0d:6e:4b:79:37:ac:ae: 94:c0:7b:72:bb:83:f8:25:d2:cf:21:df:f5:ab:44: 7d:36:4b:3d:15:06:64:3d:a3:cc:09:50:44:d8:f9: 69:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A7:DA:42:84:1A:4A:12:33:D0:4E:6F:7C:72:BA:8B:8D:78:C9:2C X509v3 Authority Key Identifier: keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a8:c2:bc:cc:49:cc:5c:96:1f:87:18:c0:1f:0a:85:d6:e0: bf:f1:1c:a6:7a:93:dd:c2:2d:b6:8c:22:63:e1:48:6b:34:38: c1:75:ea:95:2a:a7:57:51:46:6c:96:e4:2e:ca:e4:8b:6a:b6: 9b:2a:97:0f:69:4b:e3:02:cf:43:56:d3:04:da:52:b0:57:8a: 81:ac:43:39:c1:a5:83:1a:37:51:fe:b4:c5:1c:ff:9f:87:0a: 3b:2a:01:ec:08:8f:26:b7:df:aa:95:93:17:76:c7:a4:50:a0: 2c:50:66:06:a1:bf:d6:23:a3:99:9e:1e:2b:a0:d6:1e:b5:58: 10:32:00:cb:86:f9:d6:be:c8:ee:64:4f:9a:92:7e:24:67:6f: 74:66:5e:53:ce:9c:ca:e9:99:fe:83:8e:97:a0:43:3f:5d:41: df:43:9d:f1:35:35:33:4b:31:10:49:bd:2a:31:b8:15:c7:a3: 36:71:cc:78:d5:05:da:4b:4a:36:bb:d1:76:3e:51:34:46:44: e4:5a:3b:f8:ec:d5:5a:4f:22:db:fe:71:1d:d5:ce:b4:5b:92: eb:db:b4:46:b6:51:16:1f:46:bf:75:ff:d1:85:2f:d8:a4:51: 8f:ed:35:36:fe:67:61:c3:c1:16:d0:e2:23:0a:0b:f6:d1:98: f1:6c:41:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnJaLIPhtx0V9EloNGH7LuSTJCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4RDIw MkE1NTFCNzAeFw0yNjA5MTcwOTQ1NDdaFw0yNjA5MTgxMzAyNDdaMDMxMTAvBgNV BAMTKDlBQTdEQTQyODQxQTRBMTIzM0QwNEU2RjdDNzJCQThCOEQ3OEM5MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnUNri2l1kKV0u8WK7j7zhSIg 0HCXUt+FJ+ckbS50X0ObCbs9ppNtylZEczSc4pP16JIzwHyQfw3nR+3Z975r2HHf 2vQHEUkNqhhR1lrto90X3m6y+sV+rEz/QEbsMkXqAdR2akJv1YPyeD6+odpY016E SetxEZ46Szr7FpbC+J1LiXxUhsTo/mvecHSizxdftgd7lEKPo5yczQuNpau46cy8 CNiSrQghcOOmE45qIxPeOjvuM/a/+XhI9NX4eWkLH+mOP2Kj+UezEn6jJNIiIB57 GQKolbgjDW5LeTesrpTAe3K7g/gl0s8h3/WrRH02Sz0VBmQ9o8wJUETY+Wm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmqfaQoQaShIz0E5vfHK6i414ySwwHwYDVR0j BBgwFoAU/1+IHcB8xKmphdWUNgZY0gKlUbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2MwNzRjZDgtMjgzMC00ZWFiLWJkZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURD MDdDQzRBOUE5ODVENTk0MzYwNjU4RDIwMkE1NTFCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjVGODgxREMwN0NDNEE5QTk4NUQ1OTQzNjA2NThEMjAyQTU1 MUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvRkY1Rjg4MURDMDdDQzRBOUE5ODVENTk0MzYwNjU4 RDIwMkE1NTFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaowrzMScxclh+HGMAfCoXW4L/xHKZ6k93C LbaMImPhSGs0OMF16pUqp1dRRmyW5C7K5Itqtpsqlw9pS+MCz0NW0wTaUrBXioGs QznBpYMaN1H+tMUc/5+HCjsqAewIjya336qVkxd2x6RQoCxQZgahv9Yjo5meHiug 1h61WBAyAMuG+da+yO5kT5qSfiRnb3RmXlPOnMrpmf6DjpegQz9dQd9DnfE1NTNL MRBJvSoxuBXHozZxzHjVBdpLSja70XY+UTRGRORaO/js1VpPItv+cR3VzrRbkuvb tEa2URYfRr91/9GFL9ikUY/tNTb+Z2HDwRbQ4iMKC/bRmPFsQWc= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:24 2026 by rpki-client