$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft File: 11FFFA845980AD12347D7297657117A393722635.mft (raw, json) Hash identifier: z05lyoSVVLMj7B81eIQstSp5OFMD69YkcgjY3OpUsmM= Subject key identifier: 10:E2:64:F4:1D:E8:9C:DD:0A:9C:22:A3:C6:DD:62:DE:F4:E4:AF:E0 Authority key identifier: 11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35 Certificate issuer: /CN=11FFFA845980AD12347D7297657117A393722635 Certificate serial: 3496E13BDBDF56E4F6ADDF610E5BDD7314D63108 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft Manifest number: AF Signing time: Thu 10 Sep 2026 06:40:00 +0000 Manifest this update: Thu 10 Sep 2026 06:35:00 +0000 Manifest next update: Fri 11 Sep 2026 10:39:00 +0000 Files and hashes: 1: 11FFFA845980AD12347D7297657117A393722635.crl (hash: 1ERIDbuwzEacgKIMCzI4TecleoDNTa2AZp9ly74IpxY=) 2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: 1j1MwArF7+GiMoyA2GSO7NK/M/081FoP97bqeWhfFHU=) 3: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: lcXF2ukAyeD79WJ/+d/LiALmLjnDTwGdGGkGmI9GuQ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 10:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:96:e1:3b:db:df:56:e4:f6:ad:df:61:0e:5b:dd:73:14:d6:31:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11FFFA845980AD12347D7297657117A393722635 Validity Not Before: Sep 10 06:35:00 2026 GMT Not After : Sep 11 10:39:00 2026 GMT Subject: CN=10E264F41DE89CDD0A9C22A3C6DD62DEF4E4AFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:84:43:f8:e6:eb:bf:06:35:09:b5:fb:1f:b2: 9f:6d:d3:73:24:2a:27:67:af:22:92:30:70:d1:1f: a5:06:46:46:df:d1:75:b8:20:a3:9c:09:0e:e4:2e: 9b:ed:b0:00:83:80:8e:aa:bb:51:72:02:1e:c3:48: a2:e9:e1:5b:c9:85:e8:a4:05:dd:7a:c1:ee:05:9a: 5a:1d:cb:ab:a5:38:02:43:e3:05:e6:c4:32:83:d6: 6b:bc:aa:ff:2b:0f:ad:0f:fc:fe:21:56:cd:15:3a: eb:ad:be:0f:58:7d:c0:3f:91:48:d6:2d:55:d8:23: fa:4e:61:d0:12:46:5c:94:ea:9c:3e:2b:75:3c:1a: 93:9f:b1:58:01:49:14:92:13:73:3e:a5:aa:a7:4e: c3:54:00:76:45:dd:a9:56:e0:34:04:52:a2:e6:b7: 0c:7f:9f:fb:60:24:6b:9e:c4:89:34:46:6e:29:3e: a6:6a:09:8d:6b:06:ef:09:4c:67:ad:3c:10:d1:91: 6b:f8:bf:3f:75:75:50:2a:1b:27:45:0b:0f:bb:9a: af:6f:8c:79:69:4b:e8:df:6b:b8:d9:24:ec:fc:20: 67:65:8d:f1:27:43:15:b3:3e:17:fa:82:84:8a:de: df:f5:af:0a:80:cc:be:8d:74:7c:f5:47:33:2d:f0: 8c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E2:64:F4:1D:E8:9C:DD:0A:9C:22:A3:C6:DD:62:DE:F4:E4:AF:E0 X509v3 Authority Key Identifier: keyid:11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:46:f4:e2:3b:26:30:e8:b8:40:28:f9:ff:a5:71:f3:0e:d3: 52:16:9c:68:0c:92:9f:0a:93:6e:af:cb:d0:95:0c:f1:56:27: 54:7e:e5:99:25:31:fd:c1:43:4e:a2:1b:b2:52:1b:05:42:47: 11:0c:08:35:1b:3f:c8:2e:92:25:7a:a3:1c:55:28:2b:5f:c0: a8:ed:d5:76:25:ee:f7:71:13:ae:3d:19:0c:75:ad:69:f1:b2: a1:c1:36:2e:0e:3b:18:a0:87:ab:a8:52:61:98:52:23:b1:d3: f4:94:5b:a6:7f:f1:54:ab:54:0c:eb:f7:1c:ca:60:ea:f5:c1: ab:9d:0d:95:f2:76:ec:25:a9:e0:b5:e2:62:45:02:fa:2f:ce: ab:23:0c:02:1d:38:36:1d:c6:1c:45:a6:40:0b:23:b7:01:d8: 36:dd:c4:92:df:72:37:08:76:b1:f4:22:d9:2d:7c:7d:fa:7b: f0:d9:b4:8c:f5:67:23:6f:91:6b:c8:2e:ce:08:d6:78:4a:71: 46:e9:e4:c9:fd:a2:90:5c:bd:db:31:44:b6:06:00:2e:02:3b: 1d:1d:ab:e2:5e:00:96:c5:88:97:99:9b:79:e4:ac:0d:bd:68: ce:8e:81:46:70:d3:00:82:35:30:7d:aa:69:e7:43:80:70:83: 89:55:db:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJbhO9vfVuT2rd9hDlvdcxTWMQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5 MzcyMjYzNTAeFw0yNjA5MTAwNjM1MDBaFw0yNjA5MTExMDM5MDBaMDMxMTAvBgNV BAMTKDEwRTI2NEY0MURFODlDREQwQTlDMjJBM0M2REQ2MkRFRjRFNEFGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhEP45uu/BjUJtfsfsp9t03Mk KidnryKSMHDRH6UGRkbf0XW4IKOcCQ7kLpvtsACDgI6qu1FyAh7DSKLp4VvJheik Bd16we4Fmlody6ulOAJD4wXmxDKD1mu8qv8rD60P/P4hVs0VOuutvg9YfcA/kUjW LVXYI/pOYdASRlyU6pw+K3U8GpOfsVgBSRSSE3M+paqnTsNUAHZF3alW4DQEUqLm twx/n/tgJGuexIk0Rm4pPqZqCY1rBu8JTGetPBDRkWv4vz91dVAqGydFCw+7mq9v jHlpS+jfa7jZJOz8IGdljfEnQxWzPhf6goSK3t/1rwqAzL6NdHz1RzMt8IzTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEOJk9B3onN0KnCKjxt1i3vTkr+AwHwYDVR0j BBgwFoAUEf/6hFmArRI0fXKXZXEXo5NyJjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRiNGZiODgtOGY0Mi00N2YyLWJlODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1 OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5MzcyMjYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMUZGRkE4NDU5ODBBRDEyMzQ3RDcyOTc2NTcxMTdBMzkzNzIy NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3 QTM5MzcyMjYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVG9OI7JjDouEAo+f+lcfMO01IWnGgMkp8K k26vy9CVDPFWJ1R+5ZklMf3BQ06iG7JSGwVCRxEMCDUbP8gukiV6oxxVKCtfwKjt 1XYl7vdxE649GQx1rWnxsqHBNi4OOxigh6uoUmGYUiOx0/SUW6Z/8VSrVAzr9xzK YOr1waudDZXyduwlqeC14mJFAvovzqsjDAIdODYdxhxFpkALI7cB2DbdxJLfcjcI drH0ItktfH36e/DZtIz1ZyNvkWvILs4I1nhKcUbp5Mn9opBcvdsxRLYGAC4COx0d q+JeAJbFiJeZm3nkrA29aM6OgUZw0wCCNTB9qmnnQ4Bwg4lV22c= -----END CERTIFICATE-----Generated at Fri Sep 11 02:07:38 2026 by rpki-client