$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft File: FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json) Hash identifier: HJNyg3Lm2JhCCZquJWG4+YRAuqm0M/SF5EauTRAqX2k= Subject key identifier: 8D:0A:B0:BD:37:33:6B:00:A3:84:CD:52:7B:A0:64:86:57:86:7B:6A Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC Certificate issuer: /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC Certificate serial: 2D028640728C089AEC8F1BFB5F6E64081C73537D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft Manifest number: EA Signing time: Sun 25 Oct 2026 17:33:35 +0000 Manifest this update: Sun 25 Oct 2026 17:28:35 +0000 Manifest next update: Mon 26 Oct 2026 20:46:35 +0000 Files and hashes: 1: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=) 2: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=) 3: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: OyOb1FTf8OTmb1PBfO6W+TJz67C0LYIEQcn5JxlP9R0=) 4: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=) 5: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:02:86:40:72:8c:08:9a:ec:8f:1b:fb:5f:6e:64:08:1c:73:53:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC Validity Not Before: Oct 25 17:28:35 2026 GMT Not After : Oct 26 20:46:35 2026 GMT Subject: CN=8D0AB0BD37336B00A384CD527BA0648657867B6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:18:fc:8c:5c:fb:27:cb:c4:b9:fc:73:d0: 5f:b1:11:69:83:15:14:1c:96:12:2f:11:4a:2d:58: f1:c0:64:15:ef:76:08:7f:86:4e:93:83:cb:e0:5a: a5:e9:86:a6:50:54:70:af:cd:4c:0f:95:6c:b9:9f: ee:10:c3:64:9c:ab:c8:68:c7:16:aa:8d:28:ab:c6: d2:10:63:37:be:9d:1b:19:14:26:50:44:51:a8:37: 06:4a:86:09:9d:d9:f3:0f:93:40:03:33:bc:ea:19: e2:6c:d4:43:da:5b:f3:a0:df:f5:5b:3f:e4:cc:96: 7b:f6:ea:66:16:73:67:35:20:39:71:4b:92:43:d9: 36:5e:ee:eb:d2:cf:16:0a:f3:21:98:04:df:97:f1: 1b:47:c9:e1:fb:4c:03:bd:3a:07:1b:4a:29:db:69: d2:24:87:1d:c8:ea:c2:b1:46:fc:57:25:14:85:4b: df:03:37:23:4e:45:d3:35:74:e3:c3:53:0c:c8:2a: 36:1e:2b:9c:e5:85:9f:ef:c0:78:02:33:25:26:05: 09:b6:2f:bc:51:c9:b0:e5:43:47:a9:1d:2f:25:14: 2b:6e:2b:5e:34:04:b5:65:e3:c1:98:0c:45:fc:4c: 07:67:53:c9:27:0c:fd:f9:bb:42:6c:b4:12:63:62: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0A:B0:BD:37:33:6B:00:A3:84:CD:52:7B:A0:64:86:57:86:7B:6A X509v3 Authority Key Identifier: keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:15:85:ce:ba:2d:3a:f3:14:c3:e1:96:b8:00:10:80:35:38: 34:42:e7:62:eb:b5:74:01:3d:1b:d2:4f:e0:0a:fa:dd:52:cf: c1:1e:fd:96:a6:f3:f4:2e:c5:f2:0a:2c:33:3c:65:79:8c:99: a0:70:9d:2b:7e:ca:07:a3:0b:4e:9e:1e:b8:26:1e:4c:af:68: 76:66:57:2e:83:91:1f:d9:0f:36:d3:09:a0:55:b0:a5:62:e2: a2:91:fd:ad:b0:09:e5:77:a3:fd:8c:09:c9:cd:29:d2:0c:c4: 4c:23:5d:79:97:4a:fb:09:5f:c9:94:a3:c9:dd:55:ce:72:59: 48:d0:54:93:85:b9:ca:e2:e1:03:a0:bc:a9:84:f6:b8:e3:5f: 86:e0:0d:66:68:1d:9d:ab:fd:09:1b:10:f5:15:3a:17:ec:6e: 5e:0f:61:01:f0:ff:d3:35:d0:fe:71:42:ad:b5:46:3a:b5:b8: 72:d9:96:3f:e3:c0:f4:b3:90:d7:85:c9:cf:e2:26:b0:f2:ef: 86:1c:bc:28:b5:47:80:56:3f:d3:e1:61:4c:20:6f:38:9a:61: 04:6d:92:0b:b3:ba:70:33:a1:6e:15:57:9d:84:76:01:9a:19: 4f:c4:28:5c:ab:b8:20:b2:6f:b0:f5:00:8e:03:d8:44:f2:1e: d8:e3:87:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQKGQHKMCJrsjxv7X25kCBxzU30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRDODNDODE5OUM3NkQwOTFFMkFEOUJGQjQ2MDkyNjU3 MzYwNURBQzAeFw0yNjEwMjUxNzI4MzVaFw0yNjEwMjYyMDQ2MzVaMDMxMTAvBgNV BAMTKDhEMEFCMEJEMzczMzZCMDBBMzg0Q0Q1MjdCQTA2NDg2NTc4NjdCNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbhj8jFz7J8vEufxz0F+xEWmD FRQclhIvEUotWPHAZBXvdgh/hk6Tg8vgWqXphqZQVHCvzUwPlWy5n+4Qw2Scq8ho xxaqjSirxtIQYze+nRsZFCZQRFGoNwZKhgmd2fMPk0ADM7zqGeJs1EPaW/Og3/Vb P+TMlnv26mYWc2c1IDlxS5JD2TZe7uvSzxYK8yGYBN+X8RtHyeH7TAO9OgcbSinb adIkhx3I6sKxRvxXJRSFS98DNyNORdM1dOPDUwzIKjYeK5zlhZ/vwHgCMyUmBQm2 L7xRybDlQ0epHS8lFCtuK140BLVl48GYDEX8TAdnU8knDP35u0JstBJjYnQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjQqwvTczawCjhM1Se6BkhleGe2owHwYDVR0j BBgwFoAU/cg8gZnHbQkeKtm/tGCSZXNgXawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA1Zjc2OGItNDIxOC00YzVkLTg5M2EtMGZmNjk2NTI2NjM5LzAvRkRDODNDODE5 OUM3NkQwOTFFMkFEOUJGQjQ2MDkyNjU3MzYwNURBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREM4M0M4MTk5Qzc2RDA5MUUyQUQ5QkZCNDYwOTI2NTczNjA1 REFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvRkRDODNDODE5OUM3NkQwOTFFMkFEOUJGQjQ2MDky NjU3MzYwNURBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQVhc66LTrzFMPhlrgAEIA1ODRC52LrtXQB PRvST+AK+t1Sz8Ee/Zam8/QuxfIKLDM8ZXmMmaBwnSt+ygejC06eHrgmHkyvaHZm Vy6DkR/ZDzbTCaBVsKVi4qKR/a2wCeV3o/2MCcnNKdIMxEwjXXmXSvsJX8mUo8nd Vc5yWUjQVJOFucri4QOgvKmE9rjjX4bgDWZoHZ2r/QkbEPUVOhfsbl4PYQHw/9M1 0P5xQq21Rjq1uHLZlj/jwPSzkNeFyc/iJrDy74YcvCi1R4BWP9PhYUwgbziaYQRt kguzunAzoW4VV52EdgGaGU/EKFyruCCyb7D1AI4D2ETyHtjjh/Q= -----END CERTIFICATE-----Generated at Mon Oct 26 01:42:39 2026 by rpki-client