$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft File: FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft (raw, json) Hash identifier: qMAT+MmxzVwX0r4cyV94EEC7JORuFKFZ148ilHvBXl0= Subject key identifier: 94:A4:EA:11:10:72:69:AE:B0:5B:63:17:DC:FD:BE:88:88:D3:5E:97 Authority key identifier: FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD Certificate issuer: /CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD Certificate serial: 2559779E3C36693D8B6375A2FAFC1F75C6F22AC0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 23:13:01 +0000 Manifest this update: Wed 04 Nov 2026 23:08:01 +0000 Manifest next update: Thu 05 Nov 2026 23:18:01 +0000 Files and hashes: 1: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: yDrVyoeowwpodsmIoAkE1qIpwTZ6W9Penvq2Oshsmwc=) 2: FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl (hash: RQmbzlQyaj3w5hC6mUOWT6YBZmKBCY6Sm7qY3KxJc4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 23:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:59:77:9e:3c:36:69:3d:8b:63:75:a2:fa:fc:1f:75:c6:f2:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD Validity Not Before: Nov 4 23:08:01 2026 GMT Not After : Nov 5 23:18:01 2026 GMT Subject: CN=94A4EA11107269AEB05B6317DCFDBE8888D35E97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:31:a0:89:eb:45:4f:10:12:c7:e7:db:5c: 39:ae:34:fb:d9:46:56:ee:b5:03:00:79:ec:45:53: 08:a7:71:f0:fa:2f:35:cd:42:53:03:ce:e8:f6:b8: 8f:ac:6a:77:7c:e9:33:c5:25:b1:7d:7f:e5:e4:d2: 6b:cb:fe:cf:f0:59:de:0a:0d:1c:a3:55:f5:29:50: fa:43:99:fb:48:4b:d5:43:8d:28:2d:8c:f7:27:ba: c2:48:48:ba:16:10:05:46:72:02:3e:d4:a0:80:f5: 19:78:bd:58:cb:77:39:86:98:66:dd:5d:9c:92:89: 53:d6:b9:e2:f6:35:2c:bf:85:8a:a7:e1:94:c9:17: 2d:e3:c8:b6:de:6c:c4:52:72:f8:2e:a1:36:a4:c4: c4:37:e0:23:83:c4:2e:62:c9:51:37:eb:18:fd:b1: ea:1d:14:51:6f:50:c3:0e:6f:ab:84:7b:42:e3:2f: 96:f3:06:45:20:a8:63:66:a2:15:b5:20:88:3b:d4: e4:e0:d2:0a:33:fd:bb:9d:4d:31:4a:80:51:eb:b4: 65:7d:24:4b:0a:60:98:ae:a1:79:1b:25:dd:0c:9b: 26:f8:21:cc:20:93:fa:75:c8:df:84:1a:18:7e:2e: 44:04:f7:d5:55:1f:32:70:79:a4:4f:15:33:c6:9b: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A4:EA:11:10:72:69:AE:B0:5B:63:17:DC:FD:BE:88:88:D3:5E:97 X509v3 Authority Key Identifier: keyid:FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8c:d7:26:71:b4:1a:11:e9:98:2f:e4:74:6c:f5:74:ad:ad: 7f:5e:3b:6a:21:c2:17:1f:60:43:a3:5c:8e:0b:13:10:1c:d6: 36:28:a4:75:16:54:cf:68:12:27:b0:7b:35:80:df:ba:b2:11: 49:18:2f:ec:fc:28:29:2c:00:6d:36:e1:72:8a:e0:28:2b:8f: c2:70:eb:72:4f:ce:24:26:7c:c3:c4:bf:6b:bc:a3:04:2c:65: 92:0e:85:ea:5c:50:38:07:d9:be:e4:79:f5:50:d6:70:c4:da: 57:7b:25:c8:a0:31:55:10:6d:6b:2e:42:d0:03:dc:b4:fc:c3: 0b:b6:e3:33:53:a3:bc:6f:8a:75:d2:58:95:5a:d8:2e:08:53: 12:d4:1b:6f:08:26:2d:8b:cc:9b:ca:e6:a1:df:61:77:72:e5: a0:22:36:ca:f0:a9:db:7f:c7:ab:bf:9d:41:96:76:47:48:d6: 67:38:0d:40:b2:b2:43:36:b7:25:fa:f3:97:c3:ec:7a:15:8f: 40:07:09:78:e8:d8:d7:57:ae:74:6b:c9:5e:4a:0e:91:a2:44: cc:31:66:ab:59:67:57:a0:51:f5:dd:6a:7d:5d:fc:7a:89:67: 29:b2:1f:b5:14:34:25:35:3d:35:d7:13:0f:39:be:ce:69:93: 24:b2:a3:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVl3njw2aT2LY3Wi+vwfdcbyKsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRCRTU2MzcwNjlGRDVDNEY5MjVBNUZFNEUwOTQ5Nzcy QjM2RDdDRDAeFw0yNjExMDQyMzA4MDFaFw0yNjExMDUyMzE4MDFaMDMxMTAvBgNV BAMTKDk0QTRFQTExMTA3MjY5QUVCMDVCNjMxN0RDRkRCRTg4ODhEMzVFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrjGgietFTxASx+fbXDmuNPvZ RlbutQMAeexFUwincfD6LzXNQlMDzuj2uI+sand86TPFJbF9f+Xk0mvL/s/wWd4K DRyjVfUpUPpDmftIS9VDjSgtjPcnusJISLoWEAVGcgI+1KCA9Rl4vVjLdzmGmGbd XZySiVPWueL2NSy/hYqn4ZTJFy3jyLbebMRScvguoTakxMQ34CODxC5iyVE36xj9 seodFFFvUMMOb6uEe0LjL5bzBkUgqGNmohW1IIg71OTg0goz/budTTFKgFHrtGV9 JEsKYJiuoXkbJd0Mmyb4Icwgk/p1yN+EGhh+LkQE99VVHzJweaRPFTPGm83RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlKTqERByaa6wW2MX3P2+iIjTXpcwHwYDVR0j BBgwFoAU/b5WNwaf1cT5JaX+TglJdys2180wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2UyN2IzZTEtZjYxMS00YWZlLTlhNDktNWZhNGZkNTU3NjUzLzAvRkRCRTU2Mzcw NjlGRDVDNEY5MjVBNUZFNEUwOTQ5NzcyQjM2RDdDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREJFNTYzNzA2OUZENUM0RjkyNUE1RkU0RTA5NDk3NzJCMzZE N0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2UyN2IzZTEtZjYxMS00YWZlLTlh NDktNWZhNGZkNTU3NjUzLzAvRkRCRTU2MzcwNjlGRDVDNEY5MjVBNUZFNEUwOTQ5 NzcyQjM2RDdDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6M1yZxtBoR6Zgv5HRs9XStrX9eO2ohwhcf YEOjXI4LExAc1jYopHUWVM9oEiewezWA37qyEUkYL+z8KCksAG024XKK4Cgrj8Jw 63JPziQmfMPEv2u8owQsZZIOhepcUDgH2b7kefVQ1nDE2ld7JcigMVUQbWsuQtAD 3LT8wwu24zNTo7xvinXSWJVa2C4IUxLUG28IJi2LzJvK5qHfYXdy5aAiNsrwqdt/ x6u/nUGWdkdI1mc4DUCyskM2tyX685fD7HoVj0AHCXjo2NdXrnRryV5KDpGiRMwx ZqtZZ1egUfXdan1d/HqJZymyH7UUNCU1PTXXEw85vs5pkySyo2c= -----END CERTIFICATE-----Generated at Thu Nov 5 08:07:51 2026 by rpki-client