$ rpki-client -vvvf rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft File: FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft (raw, json) Hash identifier: oPD5DWYowe2V62G792Kdng8vZWQRpCtvowD+BYnjQ6c= Subject key identifier: 2B:81:A2:E9:C2:31:34:7A:83:A1:BF:D7:05:FC:F3:A6:CD:93:2B:77 Authority key identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 Certificate issuer: /CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Certificate serial: 19DFEBAB699BD4B273E4B1BEB24B3730D1AA1FFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 08:08:39 +0000 Manifest this update: Thu 17 Sep 2026 08:03:39 +0000 Manifest next update: Fri 18 Sep 2026 08:25:39 +0000 Files and hashes: 1: FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl (hash: y+UIzVwpEcXxvkduAruEVu3G6BiB5qef4a+PqOHj8Is=) 2: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: wvIAxFKPShLQpqf7iVcqajkRTzgNz/nJFo4xan5f+EA=) 3: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 1Tk9QAHZ0ijLeVFuLiIRsfqrrSPDFu+yHnjWDMhhwpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:df:eb:ab:69:9b:d4:b2:73:e4:b1:be:b2:4b:37:30:d1:aa:1f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Validity Not Before: Sep 17 08:03:39 2026 GMT Not After : Sep 18 08:25:39 2026 GMT Subject: CN=2B81A2E9C231347A83A1BFD705FCF3A6CD932B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:04:02:46:78:ad:d7:f3:1a:a2:68:9a:a7: 1d:52:e6:b6:c4:1a:bf:25:de:5b:97:20:62:54:84: ff:2c:97:6b:d8:ac:64:4a:f5:dc:2d:d0:26:09:f4: 6d:a0:60:8a:26:fc:c0:8c:57:72:26:f9:e0:12:b3: 38:43:f4:87:3d:af:58:c6:62:2f:46:a1:16:70:42: 0e:d0:2a:7c:87:6b:40:04:31:1f:f4:8f:8f:2a:81: 6f:70:95:65:0c:25:c4:8e:6f:24:5f:28:99:46:51: 2f:dd:32:31:60:0b:67:73:88:3e:e2:dd:f1:5f:f8: 50:cf:89:ce:3a:01:0c:7a:44:e4:b0:20:6b:94:42: 13:bf:13:41:8d:b5:50:8b:df:8a:d9:ff:15:e4:93: 8e:8d:9a:a9:3e:02:ea:65:31:65:48:be:3e:c9:a5: 89:b0:e2:33:7a:b4:c0:da:ce:13:bd:7c:37:d4:f0: 49:69:06:01:03:8c:29:35:96:55:25:34:e9:31:50: a2:32:ff:f4:78:66:ff:9b:98:21:aa:aa:36:98:08: 06:a7:32:ca:2c:e6:c8:61:c0:49:68:95:9d:f3:3c: e6:d2:0f:93:d8:cc:e2:34:45:27:24:09:c0:1a:a4: 35:3b:eb:9c:41:8a:8f:e9:19:3e:06:ba:28:c4:cf: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:81:A2:E9:C2:31:34:7A:83:A1:BF:D7:05:FC:F3:A6:CD:93:2B:77 X509v3 Authority Key Identifier: keyid:FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7b:c2:dd:79:84:5d:eb:ef:f9:23:26:f9:f3:3f:f0:d8:73: 6a:67:5f:3e:d5:df:fd:18:55:f7:9f:3d:f7:22:c4:d5:05:8f: 48:c0:3f:b9:fc:68:2f:a4:51:87:f0:1b:f8:61:8c:7b:76:c1: f8:93:25:be:35:c8:83:ca:e4:44:0f:f8:8c:ff:ce:c2:95:50: 4a:87:65:b8:ee:30:68:a4:67:d0:e9:a0:eb:bb:45:77:eb:50: f2:5a:46:83:cc:77:b8:81:c8:ea:fd:59:0d:4d:ff:23:d5:28: 61:14:fe:c9:52:a4:d9:fc:b3:96:25:7e:d3:e0:aa:6f:ad:fb: 9e:ec:bc:1e:ab:b6:df:4f:47:fa:09:b0:dd:e2:de:99:d1:98: 3a:9d:b1:55:7d:c7:2e:88:ec:40:af:b7:52:a7:e8:21:96:1c: ca:73:d4:17:8c:ee:69:87:62:52:c4:7f:a1:3e:08:30:51:bf: 97:14:9c:ea:be:bb:8a:84:aa:1a:14:61:b2:b2:d8:e3:56:39: c8:a0:c1:c6:dc:1c:a4:bc:59:48:84:96:31:33:a7:b5:db:23: a5:38:96:06:9f:67:f9:66:67:fb:cf:cf:c6:48:0b:82:68:f7: 34:c1:72:55:20:bd:a1:70:b3:ee:5f:44:42:13:1d:cf:80:fe: 73:80:bc:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGd/rq2mb1LJz5LG+sks3MNGqH/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5 RjQzQUZBNzAeFw0yNjA5MTcwODAzMzlaFw0yNjA5MTgwODI1MzlaMDMxMTAvBgNV BAMTKDJCODFBMkU5QzIzMTM0N0E4M0ExQkZENzA1RkNGM0E2Q0Q5MzJCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QAQCRnit1/Maomiapx1S5rbE Gr8l3luXIGJUhP8sl2vYrGRK9dwt0CYJ9G2gYIom/MCMV3Im+eASszhD9Ic9r1jG Yi9GoRZwQg7QKnyHa0AEMR/0j48qgW9wlWUMJcSObyRfKJlGUS/dMjFgC2dziD7i 3fFf+FDPic46AQx6ROSwIGuUQhO/E0GNtVCL34rZ/xXkk46Nmqk+AuplMWVIvj7J pYmw4jN6tMDazhO9fDfU8ElpBgEDjCk1llUlNOkxUKIy//R4Zv+bmCGqqjaYCAan Msos5shhwElolZ3zPObSD5PYzOI0RSckCcAapDU765xBio/pGT4GuijEzwW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK4Gi6cIxNHqDob/XBfzzps2TK3cwHwYDVR0j BBgwFoAU/TUxh/sNNk+nCGoXKLmJS59Dr6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA0ZDAzOTctZmZhMC00OTAzLTgwNWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdG QjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5RjQzQUZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1MzE4N0ZCMEQzNjRGQTcwODZBMTcyOEI5ODk0QjlGNDNB RkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5 NEI5RjQzQUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE17wt15hF3r7/kjJvnzP/DYc2pnXz7V3/0Y VfefPfcixNUFj0jAP7n8aC+kUYfwG/hhjHt2wfiTJb41yIPK5EQP+Iz/zsKVUEqH ZbjuMGikZ9DpoOu7RXfrUPJaRoPMd7iByOr9WQ1N/yPVKGEU/slSpNn8s5YlftPg qm+t+57svB6rtt9PR/oJsN3i3pnRmDqdsVV9xy6I7ECvt1Kn6CGWHMpz1BeM7mmH YlLEf6E+CDBRv5cUnOq+u4qEqhoUYbKy2ONWOcigwcbcHKS8WUiEljEzp7XbI6U4 lgafZ/lmZ/vPz8ZIC4Jo9zTBclUgvaFws+5fREITHc+A/nOAvJs= -----END CERTIFICATE-----Generated at Thu Sep 17 12:21:33 2026 by rpki-client