$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft (raw, json) Hash identifier: ISqjGsmmdFzZLy+BsqEt7BZuILmmP65uoSkcpxcHolE= Subject key identifier: 0B:C7:0D:BA:FA:D4:1E:9A:6D:37:C5:F9:13:A4:21:3F:C3:86:CA:C1 Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 133BBEEFEBA72D45D63A02ED9E742CCB05F55793 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:39:46 +0000 Manifest this update: Fri 19 Jun 2026 19:34:46 +0000 Manifest next update: Sat 20 Jun 2026 20:05:46 +0000 Files and hashes: 1: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0=) 2: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl (hash: zvUc7L7qDjEMT9F8zsim78PeH2NzcLe+VPsKh+C3dtY=) 3: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM=) 4: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3b:be:ef:eb:a7:2d:45:d6:3a:02:ed:9e:74:2c:cb:05:f5:57:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: Jun 19 19:34:46 2026 GMT Not After : Jun 20 20:05:46 2026 GMT Subject: CN=0BC70DBAFAD41E9A6D37C5F913A4213FC386CAC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:f4:85:b9:a2:51:cc:53:f0:54:a4:64:46: 12:06:82:29:5f:63:17:3d:2a:8d:1d:18:06:37:1a: 4e:d1:88:c9:5b:8c:3f:d3:95:ee:85:2e:8e:c6:9d: 56:15:69:12:9f:92:f0:01:6e:f9:6c:b3:2a:a1:fc: b8:5b:59:6c:4a:5e:44:b7:f9:e0:12:10:cc:ef:d7: 7d:dc:25:96:39:37:5b:d3:44:50:32:ec:67:ff:63: 56:5a:45:f3:50:b7:65:31:fd:ba:25:2b:fa:5d:83: 9b:04:a9:1b:c4:25:c1:fc:a9:17:5c:5d:6f:37:df: fa:d5:31:a5:40:f0:89:c7:06:6c:90:25:bf:28:60: c9:4c:de:71:8d:0d:bc:94:02:4a:78:66:4f:eb:38: 1d:12:c4:dc:eb:98:6c:58:55:ce:1f:a6:ec:0f:a5: e9:5c:37:93:9e:3f:7a:8b:5e:f0:d8:69:3d:94:8e: 45:cc:85:cd:39:c8:a9:ca:e8:33:f2:b6:c2:b5:4d: a3:4a:94:f1:18:69:87:c5:97:c2:5f:f2:c0:cf:ee: 1b:bf:45:f3:7f:ce:c5:63:55:14:16:43:21:df:1f: 67:02:3b:90:b0:c6:fb:00:a9:c1:b8:e5:0d:7a:52: ce:17:f9:a3:be:ba:bc:96:f6:4a:1c:79:1c:24:24: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C7:0D:BA:FA:D4:1E:9A:6D:37:C5:F9:13:A4:21:3F:C3:86:CA:C1 X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:54:81:78:c0:65:cc:cb:86:85:5f:ea:2b:c7:39:54:e5:77: c9:ff:2b:bf:a9:52:64:13:d0:9e:ad:5e:07:ca:16:9e:0d:86: f2:46:fb:df:b0:20:b9:0e:56:6a:42:35:cd:f9:b8:05:1c:4d: f9:5a:67:9a:43:62:b7:d0:af:e2:13:78:63:b5:3a:be:51:c5: 4e:57:6a:70:8b:63:b8:8a:3a:e7:41:39:aa:35:28:2c:df:a5: 5a:85:07:99:cf:3e:90:85:36:23:00:b3:19:c8:51:70:fa:35: b5:f5:94:33:9f:92:0c:24:3b:bb:02:1d:1a:de:4d:d9:00:cc: b2:a6:c5:29:5a:48:ab:3d:33:de:b9:99:4f:6e:fd:cd:9f:2b: ea:a7:14:6b:df:31:e3:de:f2:c0:ad:09:50:b4:92:36:3a:a8: f2:61:16:16:28:26:c7:b7:67:2f:1e:5a:6c:86:bb:76:1c:4b: 27:2f:1e:b6:89:6c:17:3d:6d:49:46:4f:db:06:1a:41:6c:16: 5a:9b:82:c3:41:89:51:d6:fc:fa:8f:f3:dc:54:94:a5:59:e3: 98:a1:74:39:c9:de:37:40:94:bb:b7:0d:76:ca:96:dd:49:be: c4:e9:a6:8e:da:4a:7a:28:72:ba:e4:56:02:ac:5c:8b:02:9c: dd:00:9c:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzu+7+unLUXWOgLtnnQsywX1V5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjA2MTkxOTM0NDZaFw0yNjA2MjAyMDA1NDZaMDMxMTAvBgNV BAMTKDBCQzcwREJBRkFENDFFOUE2RDM3QzVGOTEzQTQyMTNGQzM4NkNBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzPSFuaJRzFPwVKRkRhIGgilf Yxc9Ko0dGAY3Gk7RiMlbjD/Tle6FLo7GnVYVaRKfkvABbvlssyqh/LhbWWxKXkS3 +eASEMzv133cJZY5N1vTRFAy7Gf/Y1ZaRfNQt2Ux/bolK/pdg5sEqRvEJcH8qRdc XW833/rVMaVA8InHBmyQJb8oYMlM3nGNDbyUAkp4Zk/rOB0SxNzrmGxYVc4fpuwP pelcN5OeP3qLXvDYaT2UjkXMhc05yKnK6DPytsK1TaNKlPEYaYfFl8Jf8sDP7hu/ RfN/zsVjVRQWQyHfH2cCO5CwxvsAqcG45Q16Us4X+aO+uryW9koceRwkJJNNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC8cNuvrUHpptN8X5E6QhP8OGysEwHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIx RUNCQUYyRjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBUgXjAZczLhoVf6ivHOVTld8n/K7+pUmQT 0J6tXgfKFp4NhvJG+9+wILkOVmpCNc35uAUcTflaZ5pDYrfQr+ITeGO1Or5RxU5X anCLY7iKOudBOao1KCzfpVqFB5nPPpCFNiMAsxnIUXD6NbX1lDOfkgwkO7sCHRre TdkAzLKmxSlaSKs9M965mU9u/c2fK+qnFGvfMePe8sCtCVC0kjY6qPJhFhYoJse3 Zy8eWmyGu3YcSycvHraJbBc9bUlGT9sGGkFsFlqbgsNBiVHW/PqP89xUlKVZ45ih dDnJ3jdAlLu3DXbKlt1JvsTppo7aSnoocrrkVgKsXIsCnN0AnO8= -----END CERTIFICATE-----Generated at Sat Jun 20 11:41:24 2026 by rpki-client