$ rpki-client -vvvf rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft File: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft (raw, json) Hash identifier: Mchd3e3UDMlMEvctTEcg/0bMtDr3nmkBYBNNfvpK8zE= Subject key identifier: 6C:90:CA:42:38:E3:E2:E9:E8:79:B8:79:12:1B:50:C4:AD:CA:F4:5D Authority key identifier: FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 Certificate issuer: /CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Certificate serial: 793DAE84E450A376F49757DA15B5477448A879FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft Manifest number: D4 Signing time: Wed 07 Oct 2026 07:36:04 +0000 Manifest this update: Wed 07 Oct 2026 07:31:04 +0000 Manifest next update: Thu 08 Oct 2026 10:15:04 +0000 Files and hashes: 1: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl (hash: 5LnAn60/UriW2JcZZNz7JfiT0JkuXJAstfjuO5c7G4g=) 2: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (hash: e5rLZ+uiB21yOgfSRe83jWI/e3SG0saFimxCgcV74b8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:3d:ae:84:e4:50:a3:76:f4:97:57:da:15:b5:47:74:48:a8:79:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Validity Not Before: Oct 7 07:31:04 2026 GMT Not After : Oct 8 10:15:04 2026 GMT Subject: CN=6C90CA4238E3E2E9E879B879121B50C4ADCAF45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ce:f8:98:15:4e:d1:dd:f0:9d:97:68:73:c0: 64:07:c8:3a:c4:5b:9b:8d:63:bd:82:5d:4f:a6:6b: 1e:ae:07:b2:d4:ba:6a:d9:d6:7f:63:71:6b:28:ec: 26:56:24:42:a8:7b:cc:ca:9f:14:a6:17:fd:29:22: fe:29:8d:bd:62:4f:b1:19:4b:5d:f7:1f:08:cc:cc: 7d:18:7d:82:81:2e:e9:f5:79:84:d7:34:83:68:38: 45:34:ad:55:7f:6a:27:69:46:d8:b3:ab:56:2a:46: a3:e1:dd:0e:eb:12:d7:24:02:29:f7:5e:e8:53:cc: 92:94:96:ff:e6:c8:aa:ee:9a:ba:cb:47:c7:14:a6: 60:7e:a7:ea:56:75:a7:b0:4b:ff:d8:c9:22:c5:de: 70:76:fc:25:fc:60:42:0d:d7:5e:c5:2c:a6:23:08: 23:fb:8b:ef:4a:32:27:90:d2:dd:de:52:04:03:21: 1d:90:41:36:47:f5:7d:a1:f2:61:03:b2:b7:49:7d: b7:56:96:6d:95:1a:74:c9:44:28:5d:3d:9d:41:80: 13:85:06:81:10:17:53:e8:98:a8:c9:8f:14:89:20: d1:8e:01:91:5a:8d:50:fb:3f:42:c8:d5:0b:c0:8b: 9f:2c:a4:7f:1d:0c:03:f4:c1:5b:03:c5:b9:ea:17: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:90:CA:42:38:E3:E2:E9:E8:79:B8:79:12:1B:50:C4:AD:CA:F4:5D X509v3 Authority Key Identifier: keyid:FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c7:74:f3:2f:41:3a:0d:66:11:dc:21:97:01:15:18:50:5c: 98:1e:c6:c5:c0:c0:28:40:01:82:23:94:37:2c:15:c0:f2:db: eb:75:39:f9:48:66:b2:a6:b0:2a:93:52:e4:d2:31:ef:25:45: 0c:80:03:06:3f:74:d2:63:31:54:d6:ed:1d:2b:15:7a:3f:6a: 0b:2a:96:45:87:48:de:eb:20:5d:d3:f0:77:91:5d:8d:b9:41: 9c:a7:13:15:15:b2:91:b4:91:70:57:b7:b4:ae:2c:ca:57:73: eb:e0:b9:6a:dd:9a:80:60:de:7d:a0:ff:7e:b4:7e:64:59:53: 2f:e0:ef:a9:f9:08:03:dc:9c:71:cc:ba:12:4c:5d:43:8e:aa: 35:25:1d:b8:17:63:73:42:59:f6:8e:8a:5b:f5:e3:cf:fb:71: 22:51:4a:f5:7a:d5:33:51:d9:ff:99:00:d5:f6:03:0b:f2:fb: cb:7c:6c:23:f5:9c:be:c0:3a:39:9f:26:44:fc:3d:38:c3:99: ac:3c:96:f4:b0:aa:a0:c8:be:ff:e4:8c:fe:fc:68:d5:3d:32: 62:e9:ed:0a:eb:b1:25:1e:62:22:65:34:7f:49:fe:b9:d7:e5: 85:8a:6b:6b:10:9e:93:15:7d:dc:2a:49:67:c5:19:4c:a3:4d: be:76:40:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeT2uhORQo3b0l1faFbVHdEioef8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMz MEZGRUNGNjAeFw0yNjEwMDcwNzMxMDRaFw0yNjEwMDgxMDE1MDRaMDMxMTAvBgNV BAMTKDZDOTBDQTQyMzhFM0UyRTlFODc5Qjg3OTEyMUI1MEM0QURDQUY0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdzviYFU7R3fCdl2hzwGQHyDrE W5uNY72CXU+max6uB7LUumrZ1n9jcWso7CZWJEKoe8zKnxSmF/0pIv4pjb1iT7EZ S133HwjMzH0YfYKBLun1eYTXNINoOEU0rVV/aidpRtizq1YqRqPh3Q7rEtckAin3 XuhTzJKUlv/myKrumrrLR8cUpmB+p+pWdaewS//YySLF3nB2/CX8YEIN117FLKYj CCP7i+9KMieQ0t3eUgQDIR2QQTZH9X2h8mEDsrdJfbdWlm2VGnTJRChdPZ1BgBOF BoEQF1PomKjJjxSJINGOAZFajVD7P0LI1QvAi58spH8dDAP0wVsDxbnqF4f7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbJDKQjjj4unoebh5EhtQxK3K9F0wHwYDVR0j BBgwFoAU/9rHdcu18bLHuVG/FSPvbDD/7PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTdkYzdlZTUtY2U2Ny00NWNkLTk4ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVD QkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMzMEZGRUNGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkRBQzc3NUNCQjVGMUIyQzdCOTUxQkYxNTIzRUY2QzMwRkZF Q0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTdkYzdlZTUtY2U2Ny00NWNkLTk4 ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VG NkMzMEZGRUNGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzHdPMvQToNZhHcIZcBFRhQXJgexsXAwChA AYIjlDcsFcDy2+t1OflIZrKmsCqTUuTSMe8lRQyAAwY/dNJjMVTW7R0rFXo/agsq lkWHSN7rIF3T8HeRXY25QZynExUVspG0kXBXt7SuLMpXc+vguWrdmoBg3n2g/360 fmRZUy/g76n5CAPcnHHMuhJMXUOOqjUlHbgXY3NCWfaOilv148/7cSJRSvV61TNR 2f+ZANX2Awvy+8t8bCP1nL7AOjmfJkT8PTjDmaw8lvSwqqDIvv/kjP78aNU9MmLp 7QrrsSUeYiJlNH9J/rnX5YWKa2sQnpMVfdwqSWfFGUyjTb52QGE= -----END CERTIFICATE-----Generated at Thu Oct 8 02:24:26 2026 by rpki-client