$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft (raw, json) Hash identifier: 2hlwbXtE2xHI+bSs11DAclcJayOyC91coQOiUvPpvUw= Subject key identifier: 32:7B:EE:6B:BD:0B:E4:45:4D:8B:86:58:66:67:33:80:6F:A8:55:EA Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 7F17436E506CCF6CA288ADC29885F2294B484147 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft Manifest number: DD Signing time: Thu 15 Oct 2026 10:53:15 +0000 Manifest this update: Thu 15 Oct 2026 10:48:15 +0000 Manifest next update: Fri 16 Oct 2026 12:40:15 +0000 Files and hashes: 1: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl (hash: ImJnFUy520nbRsAMajcaMYYWbdY2U0saNtyH0ORl4kk=) 2: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0=) 3: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM=) 4: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:17:43:6e:50:6c:cf:6c:a2:88:ad:c2:98:85:f2:29:4b:48:41:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: Oct 15 10:48:15 2026 GMT Not After : Oct 16 12:40:15 2026 GMT Subject: CN=327BEE6BBD0BE4454D8B8658666733806FA855EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:a0:c7:38:f6:6d:78:ed:91:ec:48:bb:bf: 93:2e:ec:8a:ff:36:d1:0e:5b:12:80:53:9f:7e:e4: 7f:c1:a1:eb:1f:39:c5:e1:7a:59:29:8b:e0:88:18: 5b:71:8a:46:72:b2:08:ed:ef:8d:d5:66:04:87:3d: 93:40:03:29:09:26:ee:09:2a:3f:f6:13:ee:0d:1c: 11:d2:c9:90:36:75:ae:06:b1:c0:ab:3d:f0:b3:a6: 44:64:92:8b:82:1c:d8:38:ce:02:3b:49:b3:34:4c: 83:7b:09:52:c3:20:d4:71:d5:5c:2e:2a:1a:64:f6: db:4a:44:b2:6a:e9:e7:06:b5:2a:a2:59:41:2f:26: 01:6e:44:77:4a:3d:07:65:d1:fa:18:3f:e3:f8:70: e3:bc:de:7b:2c:3f:25:e2:ec:56:d3:dd:2e:a3:72: b2:47:e9:6f:27:bc:5d:c2:ca:4d:cf:94:cc:ce:7a: e4:22:27:57:7d:51:4b:95:0d:42:c0:19:b3:80:03: 27:b7:0c:f7:b7:27:1b:e6:3a:7a:f3:20:48:b1:ba: 68:5c:00:89:81:c1:b5:ce:96:49:42:d1:14:16:d8: 43:27:8b:bd:d8:15:b3:84:c0:80:b8:19:07:50:66: 14:28:28:41:50:2b:61:e0:9a:6f:9e:13:ee:66:84: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7B:EE:6B:BD:0B:E4:45:4D:8B:86:58:66:67:33:80:6F:A8:55:EA X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9e:d9:47:42:a7:ae:64:0d:68:d1:54:42:cf:e3:d2:b3:6d: 7b:83:01:69:ba:76:22:92:8d:48:a8:4a:af:43:6c:f5:30:33: c3:13:08:69:f9:f8:dd:51:03:7e:37:66:df:04:89:b3:93:fd: 98:36:37:28:48:ba:d5:0f:bb:41:71:03:92:27:fb:f9:53:b6: 69:6f:3e:92:3e:2e:76:dc:b4:ae:4b:46:be:52:c4:32:03:f6: 44:89:ee:99:b7:27:87:f8:9f:56:2c:65:2f:46:f3:60:cb:a0: 46:d6:0e:fe:99:bf:33:28:06:ea:03:6a:39:0a:5d:30:36:49: 00:14:f2:20:f6:6b:a6:b6:d4:2f:93:19:95:70:9c:4c:63:90: 87:40:6c:4c:78:ec:9c:44:04:92:1c:b0:a3:ad:64:a0:7a:c9: a9:bc:c3:57:6f:42:da:80:74:01:b9:62:03:65:11:e8:32:2d: 24:18:d0:27:30:2d:73:8a:7d:ad:b7:2e:2e:7c:57:a4:33:7a: 1c:e2:22:0f:5d:60:7b:ec:a5:82:32:a8:bc:9d:87:0f:02:81: ed:8f:65:4a:ef:73:75:04:d0:1b:0d:c9:d2:8b:09:99:fc:8d: 0d:88:5e:1c:41:60:66:49:7b:b8:08:89:12:ad:b3:25:ae:a5: 1c:08:b3:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfxdDblBsz2yiiK3CmIXyKUtIQUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjEwMTUxMDQ4MTVaFw0yNjEwMTYxMjQwMTVaMDMxMTAvBgNV BAMTKDMyN0JFRTZCQkQwQkU0NDU0RDhCODY1ODY2NjczMzgwNkZBODU1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClr6DHOPZteO2R7Ei7v5Mu7Ir/ NtEOWxKAU59+5H/BoesfOcXhelkpi+CIGFtxikZysgjt743VZgSHPZNAAykJJu4J Kj/2E+4NHBHSyZA2da4GscCrPfCzpkRkkouCHNg4zgI7SbM0TIN7CVLDINRx1Vwu Khpk9ttKRLJq6ecGtSqiWUEvJgFuRHdKPQdl0foYP+P4cOO83nssPyXi7FbT3S6j crJH6W8nvF3Cyk3PlMzOeuQiJ1d9UUuVDULAGbOAAye3DPe3JxvmOnrzIEixumhc AImBwbXOlklC0RQW2EMni73YFbOEwIC4GQdQZhQoKEFQK2Hgmm+eE+5mhH2JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMnvua70L5EVNi4ZYZmczgG+oVeowHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIx RUNCQUYyRjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWe2UdCp65kDWjRVELP49KzbXuDAWm6diKS jUioSq9DbPUwM8MTCGn5+N1RA343Zt8EibOT/Zg2NyhIutUPu0FxA5In+/lTtmlv PpI+LnbctK5LRr5SxDID9kSJ7pm3J4f4n1YsZS9G82DLoEbWDv6ZvzMoBuoDajkK XTA2SQAU8iD2a6a21C+TGZVwnExjkIdAbEx47JxEBJIcsKOtZKB6yam8w1dvQtqA dAG5YgNlEegyLSQY0CcwLXOKfa23Li58V6QzehziIg9dYHvspYIyqLydhw8Cge2P ZUrvc3UE0BsNydKLCZn8jQ2IXhxBYGZJe7gIiRKtsyWupRwIswo= -----END CERTIFICATE-----Generated at Thu Oct 15 15:28:24 2026 by rpki-client