$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft (raw, json) Hash identifier: I7eCeiPy/C7wK9jhTPb2NSQjgJ60ln+psRFAoeDxOHQ= Subject key identifier: FC:BF:F7:FE:B9:3C:FA:EA:33:8E:30:16:39:E2:D6:02:AC:F6:09:A5 Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 5A2671840CAA405821689FBEE706F202A065E557 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft Manifest number: 93 Signing time: Thu 20 Aug 2026 07:11:33 +0000 Manifest this update: Thu 20 Aug 2026 07:06:33 +0000 Manifest next update: Fri 21 Aug 2026 10:49:33 +0000 Files and hashes: 1: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM=) 2: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0=) 3: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=) 4: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl (hash: 4DWfHzRWwdNZtOBaD4aFXOPPqrFvbvf1D4qhVB0b2E4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:26:71:84:0c:aa:40:58:21:68:9f:be:e7:06:f2:02:a0:65:e5:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: Aug 20 07:06:33 2026 GMT Not After : Aug 21 10:49:33 2026 GMT Subject: CN=FCBFF7FEB93CFAEA338E301639E2D602ACF609A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:a8:a2:51:53:6d:c8:2f:23:6c:e5:38:ab: 80:67:f7:2d:c9:90:2d:2d:a5:02:4c:1a:f1:53:a8: 15:97:ed:45:c4:90:9f:75:51:85:6f:71:be:da:af: 79:34:a3:f2:70:00:3b:3a:11:d9:88:7f:5c:9d:e1: 1f:2a:3a:21:28:1b:ea:96:f8:10:f7:23:96:de:25: 2e:df:c7:72:d3:b4:23:9d:f6:0d:2b:f3:df:52:15: 8a:03:23:65:47:da:da:57:32:db:40:e5:0e:9e:f9: 34:3c:1f:ce:6b:12:aa:dd:fc:db:c4:b9:c4:31:d5: 4f:a0:18:9c:e1:56:6a:3c:03:1d:82:39:c2:a7:dd: 9d:89:79:22:d6:36:93:86:94:be:bc:d8:bf:4a:28: 63:74:ea:78:49:5d:5f:f3:0c:f5:2b:16:9d:70:16: 9c:37:e8:56:d5:c5:02:13:f1:69:3f:fc:a3:bf:91: 17:f4:16:b2:c1:93:8b:07:a2:51:56:6f:01:5e:78: bf:85:af:c9:e8:51:d8:23:38:2f:54:c7:1d:fc:44: 9f:c8:72:8e:69:5c:61:3b:90:b8:0d:8c:55:b4:44: d6:da:c2:60:e7:7e:04:b6:60:a6:8c:e6:3d:19:be: c7:83:cd:86:90:c6:bf:ec:f4:e9:2b:40:de:20:be: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BF:F7:FE:B9:3C:FA:EA:33:8E:30:16:39:E2:D6:02:AC:F6:09:A5 X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:0e:c5:db:02:f6:a8:82:61:dd:f3:e5:36:37:80:9d:75:5e: e9:d6:9a:d7:da:6e:0c:e7:06:07:bb:55:0a:55:6e:17:28:07: be:73:75:60:ce:db:e0:c7:f0:99:ff:e5:c0:01:a0:dc:26:1d: 21:97:cf:72:21:f8:1c:b8:20:a5:64:7e:cc:f0:9c:ea:4b:33: b6:94:5d:ea:36:a9:6e:d7:cc:6f:4e:0f:a8:75:fe:6b:41:75: 6b:86:5b:43:ae:46:9b:59:06:fd:e2:91:07:19:89:e2:c8:18: 90:d4:be:7a:22:da:3f:39:39:e3:5b:51:36:ac:bf:6f:9d:c5: 3b:74:a6:40:f6:71:3a:be:76:c2:be:a5:fe:03:f6:5f:cf:78: ae:78:da:4a:58:0a:3f:1c:62:7a:27:ba:57:16:1f:84:6e:6d: cf:18:2e:dc:ef:66:64:59:13:b5:60:c4:f5:1b:3c:2d:9f:8f: 04:77:fe:48:cf:00:34:9a:a0:f7:63:c2:95:32:1d:34:77:b1: 00:6e:32:33:8b:98:87:54:25:8e:f8:a3:44:cd:54:a7:f2:39: 2a:e0:22:9a:79:4c:be:51:86:f0:d1:17:14:f3:d2:ad:5a:a5: 80:00:5e:ac:b9:6f:ab:6e:dc:49:8b:2d:14:6b:08:c3:89:bf: 88:dd:80:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiZxhAyqQFghaJ++5wbyAqBl5VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjA4MjAwNzA2MzNaFw0yNjA4MjExMDQ5MzNaMDMxMTAvBgNV BAMTKEZDQkZGN0ZFQjkzQ0ZBRUEzMzhFMzAxNjM5RTJENjAyQUNGNjA5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNKiiUVNtyC8jbOU4q4Bn9y3J kC0tpQJMGvFTqBWX7UXEkJ91UYVvcb7ar3k0o/JwADs6EdmIf1yd4R8qOiEoG+qW +BD3I5beJS7fx3LTtCOd9g0r899SFYoDI2VH2tpXMttA5Q6e+TQ8H85rEqrd/NvE ucQx1U+gGJzhVmo8Ax2COcKn3Z2JeSLWNpOGlL682L9KKGN06nhJXV/zDPUrFp1w Fpw36FbVxQIT8Wk//KO/kRf0FrLBk4sHolFWbwFeeL+Fr8noUdgjOC9Uxx38RJ/I co5pXGE7kLgNjFW0RNbawmDnfgS2YKaM5j0ZvseDzYaQxr/s9OkrQN4gvpV7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/L/3/rk8+uozjjAWOeLWAqz2CaUwHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIx RUNCQUYyRjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUOxdsC9qiCYd3z5TY3gJ11XunWmtfabgzn Bge7VQpVbhcoB75zdWDO2+DH8Jn/5cABoNwmHSGXz3Ih+By4IKVkfszwnOpLM7aU Xeo2qW7XzG9OD6h1/mtBdWuGW0OuRptZBv3ikQcZieLIGJDUvnoi2j85OeNbUTas v2+dxTt0pkD2cTq+dsK+pf4D9l/PeK542kpYCj8cYnonulcWH4Rubc8YLtzvZmRZ E7VgxPUbPC2fjwR3/kjPADSaoPdjwpUyHTR3sQBuMjOLmIdUJY74o0TNVKfyOSrg Ipp5TL5RhvDRFxTz0q1apYAAXqy5b6tu3EmLLRRrCMOJv4jdgKo= -----END CERTIFICATE-----Generated at Thu Aug 20 10:21:52 2026 by rpki-client