$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft File: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft (raw, json) Hash identifier: 5SMj/z3ErD2hemRevKcZmPc4C29avof73QwdGx/JAQA= Subject key identifier: 1B:2A:52:B6:B0:3E:E8:6F:2C:A5:CE:FC:31:A2:B9:9B:5D:C9:67:71 Authority key identifier: FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 Certificate issuer: /CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Certificate serial: 32924C7CBB5893A695EDB5E69D15263C74BCE9EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft Manifest number: 75 Signing time: Mon 27 Jul 2026 11:01:36 +0000 Manifest this update: Mon 27 Jul 2026 10:56:36 +0000 Manifest next update: Tue 28 Jul 2026 13:17:36 +0000 Files and hashes: 1: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl (hash: +3Fg31Y/2+Jv4EyFepqKNDiWTk5XjwcMKrK3e6PcCho=) 2: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: zLgVQYA5xLAWWDvEEhgF6F2kUEICyQjNZMvsMOscIV8=) 3: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: SBw6P3tSXs9klMeIGPKPIG91NqF9/LEzB6kE45zVl8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:92:4c:7c:bb:58:93:a6:95:ed:b5:e6:9d:15:26:3c:74:bc:e9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Validity Not Before: Jul 27 10:56:36 2026 GMT Not After : Jul 28 13:17:36 2026 GMT Subject: CN=1B2A52B6B03EE86F2CA5CEFC31A2B99B5DC96771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:23:cb:d1:e7:3b:b4:d0:62:16:1c:96:d7:8e: 7d:82:cc:6e:f5:e3:85:74:19:16:c0:ee:96:37:27: 37:c0:71:e7:35:7a:23:04:32:95:d8:f6:34:97:d2: 05:b3:99:23:aa:be:ec:51:ba:fb:32:03:29:2b:97: e3:4f:09:f2:5a:54:4e:d6:b9:ae:d5:65:65:d0:79: d0:9d:1d:84:b8:9a:b5:4a:80:e3:50:ad:6f:a6:a5: 92:53:02:5f:c0:da:34:33:6c:b6:45:da:c1:96:b3: 73:b6:91:b1:5a:c7:55:68:c8:1e:7e:52:3a:8d:97: ff:57:81:6d:1b:ca:fe:a9:cf:14:2b:02:ce:f0:d0: b9:ed:f0:e6:57:68:5a:6c:f9:dd:13:3f:c4:9f:42: 4e:c0:73:d8:8b:80:fd:d1:d4:46:a0:8e:90:db:b7: cd:a6:21:49:d0:27:d2:80:1f:99:4d:96:2c:c3:6a: 3e:be:e0:74:a2:14:4c:ba:09:4b:7a:e1:96:14:8c: d0:ed:b2:6e:44:90:d2:1f:68:2e:f7:e0:ec:53:66: 7b:f6:72:4d:21:ae:7e:10:30:5d:2c:da:91:5c:f4: ca:5e:ee:41:2c:85:7f:c8:e2:1a:41:f4:71:0d:c5: db:c4:a1:1b:91:e6:30:d9:03:30:6a:54:39:b2:9b: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2A:52:B6:B0:3E:E8:6F:2C:A5:CE:FC:31:A2:B9:9B:5D:C9:67:71 X509v3 Authority Key Identifier: keyid:FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:59:b5:af:97:e5:b1:12:7f:f0:46:d4:97:b5:d6:c9:7f:5b: 49:db:da:ee:26:9c:a7:5a:a3:61:53:81:ef:60:98:31:66:31: e1:85:fe:34:53:0e:c8:e6:e6:b0:ee:05:52:f3:7f:8c:bb:b6: e2:60:c5:57:ae:07:be:27:6d:68:5b:69:11:6e:25:73:ee:0e: dd:34:07:96:5e:07:fd:77:8c:d2:df:71:3a:d9:c7:87:3e:51: 7b:c7:9e:71:3c:7a:fa:0a:18:90:90:9a:d4:78:1c:5a:54:d3: 24:49:27:9f:40:2d:2e:90:83:89:28:db:ea:fb:73:e4:f2:5b: da:b1:60:11:82:67:18:dd:96:36:5e:38:31:67:c5:88:ee:fc: 33:34:50:6d:df:ab:f0:af:09:77:35:71:cb:5e:6c:a9:11:87: 80:3a:64:1f:d1:e4:7b:bb:06:8c:76:59:7d:04:1b:90:2e:39: 9b:d9:a4:c1:3d:f9:90:dd:ef:ec:c1:ac:cd:73:e7:ff:fa:59: 12:0f:f6:61:23:86:ad:c2:db:3a:33:15:95:50:af:f1:fd:6e: da:8f:2f:54:a1:7d:27:74:54:6f:93:70:a1:fe:26:84:5b:82: a5:93:b2:8e:65:b7:7a:f1:ac:de:e5:4b:df:4f:93:7a:aa:a4: 3b:a5:b7:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMpJMfLtYk6aV7bXmnRUmPHS86e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFG QUExRjc2NDAeFw0yNjA3MjcxMDU2MzZaFw0yNjA3MjgxMzE3MzZaMDMxMTAvBgNV BAMTKDFCMkE1MkI2QjAzRUU4NkYyQ0E1Q0VGQzMxQTJCOTlCNURDOTY3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRI8vR5zu00GIWHJbXjn2CzG71 44V0GRbA7pY3JzfAcec1eiMEMpXY9jSX0gWzmSOqvuxRuvsyAykrl+NPCfJaVE7W ua7VZWXQedCdHYS4mrVKgONQrW+mpZJTAl/A2jQzbLZF2sGWs3O2kbFax1VoyB5+ UjqNl/9XgW0byv6pzxQrAs7w0Lnt8OZXaFps+d0TP8SfQk7Ac9iLgP3R1EagjpDb t82mIUnQJ9KAH5lNlizDaj6+4HSiFEy6CUt64ZYUjNDtsm5EkNIfaC734OxTZnv2 ck0hrn4QMF0s2pFc9Mpe7kEshX/I4hpB9HENxdvEoRuR5jDZAzBqVDmymzAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGypStrA+6G8spc78MaK5m13JZ3EwHwYDVR0j BBgwFoAU/f41hITQgVoJqhVozPwC6vqh92QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTgzMjgyMzctNzUwZi00MDIyLWI4YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4 NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFGQUExRjc2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREZFMzU4NDg0RDA4MTVBMDlBQTE1NjhDQ0ZDMDJFQUZBQTFG NzY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAy RUFGQUExRjc2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhZta+X5bESf/BG1Je11sl/W0nb2u4mnKda o2FTge9gmDFmMeGF/jRTDsjm5rDuBVLzf4y7tuJgxVeuB74nbWhbaRFuJXPuDt00 B5ZeB/13jNLfcTrZx4c+UXvHnnE8evoKGJCQmtR4HFpU0yRJJ59ALS6Qg4ko2+r7 c+TyW9qxYBGCZxjdljZeODFnxYju/DM0UG3fq/CvCXc1cctebKkRh4A6ZB/R5Hu7 Box2WX0EG5AuOZvZpME9+ZDd7+zBrM1z5//6WRIP9mEjhq3C2zozFZVQr/H9btqP L1ShfSd0VG+TcKH+JoRbgqWTso5lt3rxrN7lS99Pk3qqpDulty0= -----END CERTIFICATE-----Generated at Mon Jul 27 14:35:07 2026 by rpki-client