$ rpki-client -vvf rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft File: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft (raw, json) Hash identifier: f5ETNf1BWo/5NrOzM/oOnZY5VhrqOZ+Usok7YRVaOKU= Subject key identifier: 9A:9C:80:86:5A:DE:9C:10:35:D6:DF:DA:E7:D3:29:C8:85:3B:67:DA Authority key identifier: FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB Certificate issuer: /CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Certificate serial: 3CF010DDFEBC2DF110415121CA52E1BEA49514C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:00:28 +0000 Manifest this update: Tue 02 Jun 2026 20:55:28 +0000 Manifest next update: Wed 03 Jun 2026 23:47:28 +0000 Files and hashes: 1: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl (hash: VIlm+xm3Qk9gCSfaUKgh8dqXwYxxREFkNSOi5Zs5C7w=) 2: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: zgtrY5nvzrcyU/ntTybDgmO63b7QkAMGZiL13SPjEp8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f0:10:dd:fe:bc:2d:f1:10:41:51:21:ca:52:e1:be:a4:95:14:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Validity Not Before: Jun 2 20:55:28 2026 GMT Not After : Jun 3 23:47:28 2026 GMT Subject: CN=9A9C80865ADE9C1035D6DFDAE7D329C8853B67DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7f:f4:f0:67:76:d7:ec:74:fe:77:b4:61:be: e2:a4:98:47:74:5b:8f:76:63:b0:03:66:58:cb:19: a1:91:d4:2d:70:22:1a:0c:85:fe:a3:a3:dc:2f:67: 6f:80:82:76:4c:d2:0d:2b:9a:cd:a3:f1:80:9c:59: 91:9f:1a:37:35:55:ec:f4:3e:91:b4:5b:62:8d:85: 8c:25:ca:77:b3:f9:8f:29:f0:51:35:f9:22:c2:da: 2f:2f:ad:ae:bd:57:0f:d3:2d:84:79:8c:ea:61:cb: 3d:96:98:35:01:f6:bd:31:26:d3:15:28:4e:69:99: 8f:a9:41:02:e2:33:a6:d9:a3:51:af:19:49:01:1a: 0c:49:2a:3f:14:6d:ab:b1:96:82:62:ef:fe:3e:5f: 78:e4:e6:f9:b6:8c:f2:e7:2b:a1:88:28:ef:3b:74: 06:cc:20:4f:68:7b:be:ff:45:fe:9e:b1:6b:9f:51: 7e:21:77:eb:f7:a3:62:e9:f6:1a:9e:23:f2:16:40: 4f:66:b7:7a:47:16:12:a2:5c:c5:7e:51:1e:0e:77: 9c:f8:ec:3a:d5:d4:9d:ac:da:83:fa:e6:56:9c:d7: a2:b1:54:d2:7f:f3:0f:58:a3:a7:0a:01:a1:71:84: d4:59:d2:da:18:36:91:92:01:33:ff:78:33:73:45: 4c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9C:80:86:5A:DE:9C:10:35:D6:DF:DA:E7:D3:29:C8:85:3B:67:DA X509v3 Authority Key Identifier: keyid:FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a9:a8:29:0a:b1:7f:06:fb:a9:9a:15:a8:55:05:8a:66:ed: 6d:df:ac:04:c1:cc:88:12:6c:de:1c:e0:2c:2e:a0:d6:58:78: 5e:2f:ad:2c:7d:8e:fd:bd:9a:6a:18:da:52:62:d5:98:42:10: da:5a:ba:c3:3e:38:f5:75:cb:c9:ca:0f:a7:96:0a:c4:b1:5a: 63:f3:de:2a:38:e5:48:93:b5:eb:c2:06:36:f7:9c:8b:4f:b2: 3d:32:1e:88:9e:9d:ac:b3:c9:d1:82:03:9b:5a:96:27:14:ed: 6a:07:2d:85:a1:a6:9d:c7:d6:d8:5b:c5:a0:91:c1:a1:3c:6e: 95:df:9f:4e:92:6e:cd:84:a8:a0:95:b7:34:f8:57:b9:49:b0: 7b:c9:1a:cb:62:ee:18:32:ff:ce:36:92:8b:e9:42:36:eb:c7: e4:49:0d:c7:4c:db:d1:3e:3f:ac:6e:5a:33:60:2a:fa:ba:b7: 73:27:b4:49:94:2c:80:01:c7:da:86:06:15:94:38:20:65:b1: 70:66:2e:b4:2a:8c:51:96:8e:d5:18:24:73:25:b7:c1:cd:3d: 9b:c3:eb:fc:75:fd:45:d2:eb:b0:ff:b4:1e:75:82:53:2d:c5: 23:ee:4e:f8:45:05:64:7f:02:59:65:d3:73:17:2b:15:f5:35: a5:d2:99:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPAQ3f68LfEQQVEhylLhvqSVFMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZB MTMwRTFFQjAeFw0yNjA2MDIyMDU1MjhaFw0yNjA2MDMyMzQ3MjhaMDMxMTAvBgNV BAMTKDlBOUM4MDg2NUFERTlDMTAzNUQ2REZEQUU3RDMyOUM4ODUzQjY3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdf/TwZ3bX7HT+d7RhvuKkmEd0 W492Y7ADZljLGaGR1C1wIhoMhf6jo9wvZ2+AgnZM0g0rms2j8YCcWZGfGjc1Vez0 PpG0W2KNhYwlynez+Y8p8FE1+SLC2i8vra69Vw/TLYR5jOphyz2WmDUB9r0xJtMV KE5pmY+pQQLiM6bZo1GvGUkBGgxJKj8UbauxloJi7/4+X3jk5vm2jPLnK6GIKO87 dAbMIE9oe77/Rf6esWufUX4hd+v3o2Lp9hqeI/IWQE9mt3pHFhKiXMV+UR4Od5z4 7DrV1J2s2oP65lac16KxVNJ/8w9Yo6cKAaFxhNRZ0toYNpGSATP/eDNzRUxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmpyAhlrenBA11t/a59MpyIU7Z9owHwYDVR0j BBgwFoAU/dVCrA6lq0+D0MaoY8XVtqEw4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYwMzFmZDAtNTg0MC00YWMxLWJmYjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMw RUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZBMTMwRTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREQ1NDJBQzBFQTVBQjRGODNEMEM2QTg2M0M1RDVCNkExMzBF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYwMzFmZDAtNTg0MC00YWMxLWJm YjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1 QjZBMTMwRTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2pqCkKsX8G+6maFahVBYpm7W3frATBzIgS bN4c4CwuoNZYeF4vrSx9jv29mmoY2lJi1ZhCENpausM+OPV1y8nKD6eWCsSxWmPz 3io45UiTtevCBjb3nItPsj0yHoienayzydGCA5talicU7WoHLYWhpp3H1thbxaCR waE8bpXfn06Sbs2EqKCVtzT4V7lJsHvJGsti7hgy/842kovpQjbrx+RJDcdM29E+ P6xuWjNgKvq6t3MntEmULIABx9qGBhWUOCBlsXBmLrQqjFGWjtUYJHMlt8HNPZvD 6/x1/UXS67D/tB51glMtxSPuTvhFBWR/Alll03MXKxX1NaXSmYs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:40 2026 by rpki-client