$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft File: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft (raw, json) Hash identifier: jLQfiNfroaDKfzDcNeiEtvT47pkS4H322Bo+3vOlJrQ= Subject key identifier: 1E:50:D7:EE:D7:D1:70:7A:10:3E:FF:9F:0F:72:21:68:01:AB:10:11 Authority key identifier: FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB Certificate issuer: /CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Certificate serial: 131123FDEEF6E95646BE7DB508FB6C4599FBAC82 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 03:12:28 +0000 Manifest this update: Thu 17 Sep 2026 03:07:28 +0000 Manifest next update: Fri 18 Sep 2026 04:48:28 +0000 Files and hashes: 1: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: zgtrY5nvzrcyU/ntTybDgmO63b7QkAMGZiL13SPjEp8=) 2: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl (hash: r+2bpbEShEykXIw9RDFGogfKbENpBsIWqEuMeoEJggI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:11:23:fd:ee:f6:e9:56:46:be:7d:b5:08:fb:6c:45:99:fb:ac:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Validity Not Before: Sep 17 03:07:28 2026 GMT Not After : Sep 18 04:48:28 2026 GMT Subject: CN=1E50D7EED7D1707A103EFF9F0F72216801AB1011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:cc:b8:77:fd:fb:66:28:b2:d7:1a:06:a4: ba:37:01:95:4a:b2:70:49:4c:01:f3:61:0a:0a:48: a5:fc:0d:0d:66:88:aa:7c:b3:09:e9:4c:fb:98:de: 61:8b:05:16:5d:a7:53:a7:56:16:a2:da:70:57:9e: a2:4f:07:27:6d:d2:17:2b:c5:65:29:ae:c8:8b:0f: ec:b5:f6:58:3e:75:59:9d:77:94:51:96:a8:14:44: 55:18:06:f6:14:3e:c0:96:4f:44:c1:c9:0c:93:d6: f4:9c:b9:02:99:82:82:5d:35:59:6e:36:83:51:af: 81:ab:b3:94:6b:ea:11:b5:a7:d8:7b:c6:8a:c0:83: de:ef:f9:92:40:31:c8:5e:25:70:1b:7d:4d:a1:1b: bd:09:a3:77:87:3f:7e:84:9b:82:c2:39:56:84:74: 8d:18:bc:59:c7:fa:ce:40:bb:06:a9:d4:b4:6c:b2: 28:cb:84:e6:37:80:18:04:a6:c5:c7:74:2b:e3:41: 16:38:18:15:41:24:49:be:ff:83:d8:5b:73:96:e7: 5e:79:60:50:b7:f1:8f:b8:0b:f1:7c:11:06:6f:f4: f0:fe:4c:ab:8f:50:79:0b:55:f0:4a:92:7b:fb:c0: 1a:91:9b:8d:1d:2e:9a:6b:dc:00:4b:5d:2e:bd:7f: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:50:D7:EE:D7:D1:70:7A:10:3E:FF:9F:0F:72:21:68:01:AB:10:11 X509v3 Authority Key Identifier: keyid:FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4c:b7:08:ee:15:b8:b8:21:46:c1:74:cc:bc:e6:e3:1a:9e: 8e:93:15:ae:27:48:48:8a:65:fe:9f:82:9a:b6:e2:cd:57:eb: 19:a8:4d:47:38:c2:1b:20:a8:8a:ec:c5:0f:7b:04:74:d4:b4: 6c:81:63:1b:12:9c:61:2a:39:ae:49:16:fa:88:57:e6:b5:25: 84:4d:8e:93:95:ad:ce:de:a6:51:78:3e:8d:81:f6:3c:14:8b: 66:06:a3:99:e2:25:e8:db:9b:c7:a2:a1:58:5a:4f:37:0f:c8: 1a:09:00:2b:ba:51:74:cf:4a:26:ae:6f:2b:d7:22:6f:d2:4b: 05:69:2a:47:1a:dc:a8:6c:de:38:e3:eb:b1:72:1f:7d:b1:c2: f4:ea:4b:e8:27:77:71:42:5b:1b:1a:40:e1:4d:09:75:75:ce: 45:5b:bc:2b:98:ef:ff:40:66:f7:c6:50:18:ba:6c:3d:f9:47: a9:63:5c:ed:d1:42:04:8b:6f:7d:8d:90:79:ee:4b:9e:0a:c4: 79:25:13:0e:f3:27:f2:ec:3a:4e:97:7c:7f:e4:4c:54:9c:81: 90:15:4f:e8:95:90:74:07:58:0d:62:1e:d5:75:5c:59:e8:93: 71:18:90:16:00:39:b7:80:ef:4d:08:2f:7b:a8:32:f8:a2:d3: 64:39:b9:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUExEj/e726VZGvn21CPtsRZn7rIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZB MTMwRTFFQjAeFw0yNjA5MTcwMzA3MjhaFw0yNjA5MTgwNDQ4MjhaMDMxMTAvBgNV BAMTKDFFNTBEN0VFRDdEMTcwN0ExMDNFRkY5RjBGNzIyMTY4MDFBQjEwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dsy4d/37Ziiy1xoGpLo3AZVK snBJTAHzYQoKSKX8DQ1miKp8swnpTPuY3mGLBRZdp1OnVhai2nBXnqJPBydt0hcr xWUprsiLD+y19lg+dVmdd5RRlqgURFUYBvYUPsCWT0TByQyT1vScuQKZgoJdNVlu NoNRr4Grs5Rr6hG1p9h7xorAg97v+ZJAMcheJXAbfU2hG70Jo3eHP36Em4LCOVaE dI0YvFnH+s5Auwap1LRssijLhOY3gBgEpsXHdCvjQRY4GBVBJEm+/4PYW3OW5155 YFC38Y+4C/F8EQZv9PD+TKuPUHkLVfBKknv7wBqRm40dLppr3ABLXS69f4dtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHlDX7tfRcHoQPv+fD3IhaAGrEBEwHwYDVR0j BBgwFoAU/dVCrA6lq0+D0MaoY8XVtqEw4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYwMzFmZDAtNTg0MC00YWMxLWJmYjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMw RUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZBMTMwRTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREQ1NDJBQzBFQTVBQjRGODNEMEM2QTg2M0M1RDVCNkExMzBF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYwMzFmZDAtNTg0MC00YWMxLWJm YjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1 QjZBMTMwRTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZMtwjuFbi4IUbBdMy85uMano6TFa4nSEiK Zf6fgpq24s1X6xmoTUc4whsgqIrsxQ97BHTUtGyBYxsSnGEqOa5JFvqIV+a1JYRN jpOVrc7eplF4Po2B9jwUi2YGo5niJejbm8eioVhaTzcPyBoJACu6UXTPSiaubyvX Im/SSwVpKkca3Khs3jjj67FyH32xwvTqS+gnd3FCWxsaQOFNCXV1zkVbvCuY7/9A ZvfGUBi6bD35R6ljXO3RQgSLb32NkHnuS54KxHklEw7zJ/LsOk6XfH/kTFScgZAV T+iVkHQHWA1iHtV1XFnok3EYkBYAObeA700IL3uoMvii02Q5uSM= -----END CERTIFICATE-----Generated at Thu Sep 17 15:20:20 2026 by rpki-client