$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft (raw, json) Hash identifier: wSuqGuoRPXEt2jpypozwVfv1qW3hfjYGtWhqJrNzdSg= Subject key identifier: 11:C1:F0:19:E4:CF:59:E1:13:14:01:5D:65:86:55:FE:78:FE:8A:60 Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 2A03ACDB042A32D7BDA35D8382154534626D0064 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft Manifest number: 05 Signing time: Tue 05 May 2026 06:14:16 +0000 Manifest this update: Tue 05 May 2026 06:09:16 +0000 Manifest next update: Wed 06 May 2026 09:52:16 +0000 Files and hashes: 1: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=) 2: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl (hash: zxo4UjRsxA7BaZcESdprFRi8kJS7nkv3k4Yqy1peuSQ=) 3: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM=) 4: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:03:ac:db:04:2a:32:d7:bd:a3:5d:83:82:15:45:34:62:6d:00:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: May 5 06:09:16 2026 GMT Not After : May 6 09:52:16 2026 GMT Subject: CN=11C1F019E4CF59E11314015D658655FE78FE8A60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:12:14:88:7c:c4:47:aa:28:cc:b2:6d:a0: 8b:2b:45:2c:f3:6f:af:ab:a4:fc:6e:b0:83:99:22: 46:6b:65:e3:35:2f:ab:ea:32:c2:92:31:87:1a:01: e5:be:f3:72:f0:c1:30:c8:92:3f:12:9c:41:21:92: 37:e2:3c:57:ff:51:39:2f:07:ef:bc:8c:24:e5:b7: 0a:d4:b4:01:c5:80:bb:3e:31:c0:23:21:dc:3e:5e: 3d:36:64:b2:8d:47:6b:0b:4b:ec:47:3a:d8:8f:ea: 34:e0:9e:fe:de:92:37:40:16:53:1b:02:04:77:0e: 10:1b:64:c2:8f:61:d2:44:29:f1:3d:db:16:1a:b5: 97:28:7d:6e:7e:f1:0a:62:74:3d:ad:88:65:4e:e0: 57:7d:a9:46:f8:6c:4b:79:a8:ea:69:46:90:5e:92: 34:c4:19:16:ed:18:80:14:5f:45:8a:b9:95:54:e1: d4:3a:47:73:e9:22:dd:b9:1e:1e:60:e0:1a:14:cd: e2:21:f5:54:f8:03:e5:8c:b6:c2:c3:79:ce:e2:49: 36:bf:4e:20:b2:c6:3f:3c:48:41:dc:9a:29:c1:d1: ad:1d:c0:11:ae:7f:83:86:83:8d:33:fa:91:17:9f: a0:3c:a3:22:36:22:d6:9a:dd:14:2a:69:2b:57:86: 44:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C1:F0:19:E4:CF:59:E1:13:14:01:5D:65:86:55:FE:78:FE:8A:60 X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c0:c4:6c:cd:29:79:56:ee:94:13:aa:cf:93:f1:5a:98:22: fd:49:bf:c8:62:59:2a:53:43:60:ef:da:85:74:fd:9e:0a:aa: ca:19:22:cf:0d:7c:98:c0:1e:a5:67:84:22:1f:a7:d1:ae:18: e9:1a:38:47:a2:15:59:e3:f2:f6:b5:e5:b6:83:83:27:2a:b3: 4a:40:d9:6e:47:52:19:70:a3:ef:bc:88:69:70:3d:33:22:34: a0:86:1e:f2:58:8e:50:94:eb:1d:41:16:39:6c:8a:5c:a3:80: 18:6a:0e:73:c0:4e:67:cd:f3:ec:8c:0f:b9:fc:70:e8:54:7b: 29:f1:ae:38:42:b1:53:ec:a8:2a:2f:19:9e:e1:63:2a:f1:be: 0e:48:1f:fd:5e:bb:c6:57:30:09:93:e8:9c:5d:8b:a5:d6:60: 47:95:2d:f6:81:36:e6:20:c3:ba:f6:95:b6:31:67:05:92:41: 3c:53:b4:55:d4:e8:94:09:41:a1:68:8c:79:d3:45:28:97:a6: e9:9e:18:96:d7:74:c5:24:21:d8:35:6b:ff:ea:9d:fe:12:d4: 50:d4:4d:b6:82:f9:db:f9:35:f5:87:49:e7:0c:0c:0d:8c:c0: 9d:6e:db:55:6c:57:a2:a6:e9:99:11:f6:fe:cd:5a:52:cc:68: 43:ee:14:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgOs2wQqMte9o12DghVFNGJtAGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjA1MDUwNjA5MTZaFw0yNjA1MDYwOTUyMTZaMDMxMTAvBgNV BAMTKDExQzFGMDE5RTRDRjU5RTExMzE0MDE1RDY1ODY1NUZFNzhGRThBNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBRIUiHzER6oozLJtoIsrRSzz b6+rpPxusIOZIkZrZeM1L6vqMsKSMYcaAeW+83LwwTDIkj8SnEEhkjfiPFf/UTkv B++8jCTltwrUtAHFgLs+McAjIdw+Xj02ZLKNR2sLS+xHOtiP6jTgnv7ekjdAFlMb AgR3DhAbZMKPYdJEKfE92xYatZcofW5+8QpidD2tiGVO4Fd9qUb4bEt5qOppRpBe kjTEGRbtGIAUX0WKuZVU4dQ6R3PpIt25Hh5g4BoUzeIh9VT4A+WMtsLDec7iSTa/ TiCyxj88SEHcminB0a0dwBGuf4OGg40z+pEXn6A8oyI2Itaa3RQqaStXhkTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEcHwGeTPWeETFAFdZYZV/nj+imAwHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIx RUNCQUYyRjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrAxGzNKXlW7pQTqs+T8VqYIv1Jv8hiWSpT Q2Dv2oV0/Z4KqsoZIs8NfJjAHqVnhCIfp9GuGOkaOEeiFVnj8va15baDgycqs0pA 2W5HUhlwo++8iGlwPTMiNKCGHvJYjlCU6x1BFjlsilyjgBhqDnPATmfN8+yMD7n8 cOhUeynxrjhCsVPsqCovGZ7hYyrxvg5IH/1eu8ZXMAmT6Jxdi6XWYEeVLfaBNuYg w7r2lbYxZwWSQTxTtFXU6JQJQaFojHnTRSiXpumeGJbXdMUkIdg1a//qnf4S1FDU TbaC+dv5NfWHSecMDA2MwJ1u21VsV6Km6ZkR9v7NWlLMaEPuFFM= -----END CERTIFICATE-----Generated at Tue May 5 14:06:02 2026 by rpki-client