$ rpki-client -vvf rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft File: FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft (raw, json) Hash identifier: iFPyYo7r17eImKT9G6hxuvsj3tLlSKdxIwnI0KlgdoY= Subject key identifier: C7:4C:52:35:27:74:7B:98:75:3E:F5:3B:87:2B:C3:FC:E8:91:B4:E5 Authority key identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 Certificate issuer: /CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Certificate serial: 4E255508FCB912F3C68AF2AFD8027CEE80AC786A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 22:13:37 +0000 Manifest this update: Mon 20 Jul 2026 22:08:37 +0000 Manifest next update: Tue 21 Jul 2026 22:23:37 +0000 Files and hashes: 1: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 1Tk9QAHZ0ijLeVFuLiIRsfqrrSPDFu+yHnjWDMhhwpg=) 2: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: wvIAxFKPShLQpqf7iVcqajkRTzgNz/nJFo4xan5f+EA=) 3: FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl (hash: 4t7XxCzHoW5FOwe2nA/6MAeXkVIb3yW/OGtMQLmcpkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:25:55:08:fc:b9:12:f3:c6:8a:f2:af:d8:02:7c:ee:80:ac:78:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Validity Not Before: Jul 20 22:08:37 2026 GMT Not After : Jul 21 22:23:37 2026 GMT Subject: CN=C74C523527747B98753EF53B872BC3FCE891B4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:fc:61:fa:1c:b7:61:30:17:87:c7:24:78: 7e:e5:35:d5:07:9a:3d:1a:b2:49:00:fc:a1:b1:31: 8b:20:6a:0e:af:11:95:24:7d:9c:61:43:d7:cb:ff: 2e:37:3e:84:ce:27:00:3e:7a:24:7f:cd:04:5b:fd: fb:17:8b:06:60:e8:fc:d6:d1:3e:6f:1c:e7:a7:38: 53:d9:c3:e5:63:bd:dd:4b:bf:8c:1b:b6:56:4c:23: ca:a3:e1:61:28:fb:6a:b0:72:8f:f1:a0:e7:55:c3: c5:14:0e:16:ab:f7:4c:6d:84:8c:a3:1f:50:88:a3: 3a:93:c8:f1:ce:a5:14:88:b7:e5:89:1e:d0:6c:1c: e2:91:b3:81:d5:ff:39:1e:a6:ee:b5:20:96:f3:fb: 62:2d:4d:1c:f0:f7:e9:3d:a0:47:88:1e:8c:c7:2d: ff:bd:1d:2c:3a:69:c0:b1:f7:01:18:77:f0:eb:42: dc:f2:ac:04:e6:0c:89:83:03:eb:51:ae:4f:df:a7: 22:94:ad:04:ad:ec:f8:0e:bc:c3:bb:df:75:c8:34: 37:47:da:0f:5a:ef:ae:a8:2e:d9:4e:fa:1a:7e:87: 22:f7:f3:5d:51:96:fb:4d:4b:40:7d:7d:ae:7c:6b: f4:80:b2:3c:32:3a:a8:e2:e8:14:9e:b8:54:34:78: 4b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4C:52:35:27:74:7B:98:75:3E:F5:3B:87:2B:C3:FC:E8:91:B4:E5 X509v3 Authority Key Identifier: keyid:FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a3:76:7a:93:a5:ca:d6:e6:d0:db:22:4c:3c:91:6e:0c:d9: 19:d7:28:7d:9a:d2:1b:f0:67:7d:88:92:84:bc:c0:5a:6c:1e: b2:78:47:db:ef:c3:86:b6:6b:59:fd:cd:d8:0a:5e:de:bd:6c: 8b:96:c1:56:ab:81:5b:cf:3a:85:41:3f:dd:d0:49:bc:c3:aa: be:f0:04:88:c1:50:59:1c:2f:1d:b9:a8:32:d7:91:d5:44:9c: a1:af:10:1c:91:34:54:a9:82:3a:11:65:52:ca:b4:ad:99:7b: c0:21:6f:e6:be:8d:fd:52:10:b6:5e:b8:33:bd:2d:31:68:a5: e3:8d:e3:71:01:d1:be:ee:9b:bd:cd:72:6d:65:2c:92:94:84: b3:91:2d:19:4c:82:16:88:9c:b9:6c:bd:da:ae:96:bc:6c:61: 4a:ae:ac:36:73:19:01:ab:fe:91:c5:1d:86:90:c8:cb:54:70: 81:16:2b:18:ee:ff:51:11:4b:d0:3e:0c:2e:27:37:16:b1:2e: 35:bc:2a:9f:dc:87:18:07:cb:40:07:06:84:78:f3:df:2d:7a: ca:ba:9e:ce:75:ed:28:34:b9:88:ec:e5:a0:14:d4:c7:ac:f7: e2:ff:bf:41:51:57:fc:a5:8d:2c:61:f0:36:c3:dd:be:30:a1: e7:39:d2:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTiVVCPy5EvPGivKv2AJ87oCseGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5 RjQzQUZBNzAeFw0yNjA3MjAyMjA4MzdaFw0yNjA3MjEyMjIzMzdaMDMxMTAvBgNV BAMTKEM3NEM1MjM1Mjc3NDdCOTg3NTNFRjUzQjg3MkJDM0ZDRTg5MUI0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSvxh+hy3YTAXh8ckeH7lNdUH mj0askkA/KGxMYsgag6vEZUkfZxhQ9fL/y43PoTOJwA+eiR/zQRb/fsXiwZg6PzW 0T5vHOenOFPZw+Vjvd1Lv4wbtlZMI8qj4WEo+2qwco/xoOdVw8UUDhar90xthIyj H1CIozqTyPHOpRSIt+WJHtBsHOKRs4HV/zkepu61IJbz+2ItTRzw9+k9oEeIHozH Lf+9HSw6acCx9wEYd/DrQtzyrATmDImDA+tRrk/fpyKUrQSt7PgOvMO733XINDdH 2g9a766oLtlO+hp+hyL3811RlvtNS0B9fa58a/SAsjwyOqji6BSeuFQ0eEsdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx0xSNSd0e5h1PvU7hyvD/OiRtOUwHwYDVR0j BBgwFoAU/TUxh/sNNk+nCGoXKLmJS59Dr6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA0ZDAzOTctZmZhMC00OTAzLTgwNWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdG QjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5RjQzQUZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1MzE4N0ZCMEQzNjRGQTcwODZBMTcyOEI5ODk0QjlGNDNB RkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5 NEI5RjQzQUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmjdnqTpcrW5tDbIkw8kW4M2RnXKH2a0hvw Z32IkoS8wFpsHrJ4R9vvw4a2a1n9zdgKXt69bIuWwVargVvPOoVBP93QSbzDqr7w BIjBUFkcLx25qDLXkdVEnKGvEByRNFSpgjoRZVLKtK2Ze8Ahb+a+jf1SELZeuDO9 LTFopeON43EB0b7um73Ncm1lLJKUhLORLRlMghaInLlsvdqulrxsYUqurDZzGQGr /pHFHYaQyMtUcIEWKxju/1ERS9A+DC4nNxaxLjW8Kp/chxgHy0AHBoR4898tesq6 ns517Sg0uYjs5aAU1Mes9+L/v0FRV/yljSxh8DbD3b4woec50q8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:33 2026 by rpki-client