$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: 6fde5ubcWoj0iIajboG8fXyuZ05Mh0hFduFIofriATI= Subject key identifier: CB:35:53:E7:66:65:B1:F8:AA:80:D3:85:05:86:0A:5E:FB:A3:EF:52 Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 7B737C2935E047ECFF0242AAE4DB64DD4733704C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: F5 Signing time: Tue 03 Nov 2026 00:17:53 +0000 Manifest this update: Tue 03 Nov 2026 00:12:53 +0000 Manifest next update: Wed 04 Nov 2026 00:56:53 +0000 Files and hashes: 1: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) 2: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) 3: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: AGAJ7/JjF62vk2iiB9hX8umHtAZYRcBaLqQ9c+SyzGY=) 4: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:73:7c:29:35:e0:47:ec:ff:02:42:aa:e4:db:64:dd:47:33:70:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: Nov 3 00:12:53 2026 GMT Not After : Nov 4 00:56:53 2026 GMT Subject: CN=CB3553E76665B1F8AA80D38505860A5EFBA3EF52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:c9:8c:8a:a4:fa:ea:4a:0f:b0:5f:b8:ce: 19:3c:43:6c:17:3c:44:a9:46:45:02:31:f4:c3:e9: b4:80:68:44:24:b4:3f:5c:11:42:6d:0d:c3:b4:73: 8d:ab:ad:b5:7c:55:d2:f0:f5:7e:7d:bf:61:02:1c: a1:26:aa:d0:9b:75:b3:46:0c:29:8c:ab:82:4f:69: 87:e5:89:22:66:35:d4:5e:c8:61:a1:bd:9c:15:11: 61:4c:a5:02:f9:3e:7d:72:04:5f:a0:19:44:c5:fd: de:9f:39:f9:12:c6:23:3d:53:c2:49:9f:0e:de:f7: b6:b3:fb:17:bd:a4:f0:06:38:aa:06:09:ca:ea:3c: 70:0f:b3:a1:83:f1:ed:0c:86:e9:b0:6e:a3:9b:7b: 2e:91:c5:64:64:46:25:ce:38:9e:75:7e:4e:ab:fb: ba:fe:3b:81:56:7d:b1:5a:8c:ac:7d:37:3f:a4:a8: 67:a0:0f:1f:85:e5:2c:ef:43:2b:3e:2f:42:0c:91: 7d:32:e0:74:c4:45:a1:d6:b1:57:e8:f9:93:eb:a9: 8f:22:7e:7f:4c:8f:f2:86:26:8e:e1:ba:38:28:6e: 22:8b:69:e4:95:6d:0f:7d:3e:cc:07:53:a5:31:2d: 79:4f:b5:27:64:bb:c3:86:8a:91:ea:15:aa:a6:47: e5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:35:53:E7:66:65:B1:F8:AA:80:D3:85:05:86:0A:5E:FB:A3:EF:52 X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:05:97:37:85:37:51:29:8a:fb:e9:ad:1f:1f:a6:6f:6b:2c: fb:8c:2d:3a:5b:a7:29:b2:01:53:03:fe:7d:47:a2:cc:f3:a6: a4:32:46:29:ea:09:9c:f6:8f:5b:ec:09:20:3e:99:5a:66:8b: 81:20:77:c9:01:25:6c:af:d0:d2:6a:24:11:d2:67:38:ea:22: 8a:a9:8b:34:a7:06:39:65:6b:7e:6a:60:9e:0a:54:8d:c3:70: 94:a1:c9:25:7e:5a:e6:0f:fc:5f:13:dc:3e:ee:6d:9c:5f:a8: b2:25:6f:a4:e2:d4:06:74:eb:1c:05:8d:57:d8:b7:6e:df:30: 3c:53:bc:d3:96:cb:e0:c7:d5:a2:d3:cf:3c:1b:25:8f:f7:91: ab:7b:88:0c:5c:d2:29:6b:a2:46:98:62:d6:2e:e8:28:cb:5d: d2:c1:7d:24:58:02:64:ef:5f:c9:b9:38:ff:93:1b:f0:ac:15: 5b:cd:4f:01:9d:9e:08:96:c7:63:55:b5:64:05:b7:fa:b7:c8: 72:ab:88:0e:b2:4e:9a:e5:e8:8f:b4:6b:a4:6c:9f:5d:2f:e6: 54:67:54:e3:00:06:e9:6b:64:95:cb:d2:d0:b6:42:dd:e4:1a: b4:d9:fd:b1:8d:d6:43:d5:81:de:b5:9a:24:1c:b0:6d:38:ba: 77:38:bb:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3N8KTXgR+z/AkKq5Ntk3UczcEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjExMDMwMDEyNTNaFw0yNjExMDQwMDU2NTNaMDMxMTAvBgNV BAMTKENCMzU1M0U3NjY2NUIxRjhBQTgwRDM4NTA1ODYwQTVFRkJBM0VGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7cmMiqT66koPsF+4zhk8Q2wX PESpRkUCMfTD6bSAaEQktD9cEUJtDcO0c42rrbV8VdLw9X59v2ECHKEmqtCbdbNG DCmMq4JPaYfliSJmNdReyGGhvZwVEWFMpQL5Pn1yBF+gGUTF/d6fOfkSxiM9U8JJ nw7e97az+xe9pPAGOKoGCcrqPHAPs6GD8e0MhumwbqObey6RxWRkRiXOOJ51fk6r +7r+O4FWfbFajKx9Nz+kqGegDx+F5SzvQys+L0IMkX0y4HTERaHWsVfo+ZPrqY8i fn9Mj/KGJo7hujgobiKLaeSVbQ99PswHU6UxLXlPtSdku8OGipHqFaqmR+XbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyzVT52ZlsfiqgNOFBYYKXvuj71IwHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIFlzeFN1EpivvprR8fpm9rLPuMLTpbpymy AVMD/n1HoszzpqQyRinqCZz2j1vsCSA+mVpmi4Egd8kBJWyv0NJqJBHSZzjqIoqp izSnBjlla35qYJ4KVI3DcJShySV+WuYP/F8T3D7ubZxfqLIlb6Ti1AZ06xwFjVfY t27fMDxTvNOWy+DH1aLTzzwbJY/3kat7iAxc0ilrokaYYtYu6CjLXdLBfSRYAmTv X8m5OP+TG/CsFVvNTwGdngiWx2NVtWQFt/q3yHKriA6yTprl6I+0a6Rsn10v5lRn VOMABulrZJXL0tC2Qt3kGrTZ/bGN1kPVgd61miQcsG04unc4u1Y= -----END CERTIFICATE-----Generated at Tue Nov 3 06:01:55 2026 by rpki-client