$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft File: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft (raw, json) Hash identifier: mw7oyWoFwQbL8EvDwtOsRM5iFUix+Dv6Tjv46qWmBKc= Subject key identifier: 22:0A:D1:F5:CF:68:1B:FD:0D:CA:46:7B:A2:B9:74:F7:6D:28:3F:B2 Authority key identifier: FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 Certificate issuer: /CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Certificate serial: 4450AEA25F0A2CDDC08664A5909DF35C003AA3DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft Manifest number: EF Signing time: Tue 27 Oct 2026 07:09:11 +0000 Manifest this update: Tue 27 Oct 2026 07:04:11 +0000 Manifest next update: Wed 28 Oct 2026 11:04:11 +0000 Files and hashes: 1: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: SBw6P3tSXs9klMeIGPKPIG91NqF9/LEzB6kE45zVl8k=) 2: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl (hash: FJKqZHOP3EDh5uja/pcpkSOGm+hUlZ0KjvT1d/zPNW4=) 3: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: zLgVQYA5xLAWWDvEEhgF6F2kUEICyQjNZMvsMOscIV8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 11:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:50:ae:a2:5f:0a:2c:dd:c0:86:64:a5:90:9d:f3:5c:00:3a:a3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Validity Not Before: Oct 27 07:04:11 2026 GMT Not After : Oct 28 11:04:11 2026 GMT Subject: CN=220AD1F5CF681BFD0DCA467BA2B974F76D283FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:b8:a7:9a:61:b6:6e:9f:7c:0a:b6:ba:cb: 62:e5:29:13:43:e6:8f:ae:cf:ac:f0:0c:58:95:4a: 5a:90:59:1a:bb:fe:9e:7a:34:2d:d8:7e:06:b2:55: 29:02:43:f3:95:53:84:e6:11:87:87:ab:a4:19:fe: fa:59:15:bd:8c:1f:89:fb:99:8c:9a:b1:38:4c:94: 5e:3c:2f:92:54:6b:d3:e9:78:08:ae:d5:8f:0b:c4: c1:92:2d:72:7d:5e:b5:e0:dc:df:a7:87:8c:78:64: 9f:de:59:f0:70:c5:f9:88:cf:fa:34:73:86:01:da: 53:7c:ea:60:db:8f:7a:b1:5d:11:1b:e9:57:c9:d3: 7e:67:bd:ef:33:fb:99:c7:1f:ea:5f:b7:93:de:9b: 6d:a1:22:ea:09:48:b4:b7:8e:91:71:3d:3b:a1:ca: 68:79:2a:e0:0c:ea:67:cc:9f:91:f5:32:79:38:52: a3:27:72:ef:97:08:40:11:90:8a:76:28:97:73:97: 02:37:e1:76:47:c9:be:4a:57:5b:9d:9b:8f:8c:9d: 26:a4:b2:d0:af:2b:f0:93:a0:92:2a:87:23:f6:c6: 02:d2:76:0d:50:9b:2d:34:48:4c:32:3c:c1:9a:66: bc:50:96:0a:76:17:12:52:53:e3:f8:ec:30:a0:e4: 22:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:D1:F5:CF:68:1B:FD:0D:CA:46:7B:A2:B9:74:F7:6D:28:3F:B2 X509v3 Authority Key Identifier: keyid:FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f4:7d:f7:0a:b3:dc:fb:4d:d8:b7:84:d3:8c:f1:e5:6c:f0: 85:4d:08:7c:d6:e2:e9:48:24:4b:32:a1:1f:54:3b:31:82:ab: 68:f4:a8:c5:34:8c:ed:c7:a7:31:72:5e:f5:4f:a8:f7:7f:92: 36:15:84:fd:31:c5:d3:64:09:4c:41:19:9b:57:68:e7:56:0b: 94:95:13:9a:96:03:2e:b0:81:1c:cc:df:d3:48:19:d1:6e:8c: 0d:7b:fa:4c:73:86:1d:6e:81:e1:95:3b:a7:59:45:40:fd:b1: a4:16:8f:e7:45:14:63:b9:8a:d7:7b:3e:63:41:b1:5a:2e:4e: 68:1c:f4:20:f8:6b:f3:85:fc:08:a7:10:56:f9:32:6c:8f:9d: bf:23:42:0c:ed:fa:58:fc:36:1a:e8:d9:de:68:f1:19:cb:ac: 40:dd:c6:0b:74:4d:65:aa:ab:6c:6f:49:48:48:02:7a:15:94: 3c:be:ea:5c:e6:8b:83:a4:6a:7b:54:b0:4d:08:ac:b0:bb:6a: 9c:80:00:0e:3e:a1:82:2a:c5:54:d2:a8:6d:64:f2:37:39:27: 48:ae:39:9e:d1:0c:39:9f:e0:a1:75:df:5a:c6:05:2a:fe:87: a8:50:52:dd:36:49:1b:7a:1f:51:5e:83:5e:3a:88:fd:ea:7d: 9b:08:3a:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFCuol8KLN3AhmSlkJ3zXAA6o9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFG QUExRjc2NDAeFw0yNjEwMjcwNzA0MTFaFw0yNjEwMjgxMTA0MTFaMDMxMTAvBgNV BAMTKDIyMEFEMUY1Q0Y2ODFCRkQwRENBNDY3QkEyQjk3NEY3NkQyODNGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSbinmmG2bp98Cra6y2LlKRND 5o+uz6zwDFiVSlqQWRq7/p56NC3YfgayVSkCQ/OVU4TmEYeHq6QZ/vpZFb2MH4n7 mYyasThMlF48L5JUa9PpeAiu1Y8LxMGSLXJ9XrXg3N+nh4x4ZJ/eWfBwxfmIz/o0 c4YB2lN86mDbj3qxXREb6VfJ035nve8z+5nHH+pft5Pem22hIuoJSLS3jpFxPTuh ymh5KuAM6mfMn5H1Mnk4UqMncu+XCEARkIp2KJdzlwI34XZHyb5KV1udm4+MnSak stCvK/CToJIqhyP2xgLSdg1Qmy00SEwyPMGaZrxQlgp2FxJSU+P47DCg5CK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIgrR9c9oG/0NykZ7orl0920oP7IwHwYDVR0j BBgwFoAU/f41hITQgVoJqhVozPwC6vqh92QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTgzMjgyMzctNzUwZi00MDIyLWI4YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4 NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFGQUExRjc2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREZFMzU4NDg0RDA4MTVBMDlBQTE1NjhDQ0ZDMDJFQUZBQTFG NzY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAy RUFGQUExRjc2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEf0ffcKs9z7Tdi3hNOM8eVs8IVNCHzW4ulI JEsyoR9UOzGCq2j0qMU0jO3HpzFyXvVPqPd/kjYVhP0xxdNkCUxBGZtXaOdWC5SV E5qWAy6wgRzM39NIGdFujA17+kxzhh1ugeGVO6dZRUD9saQWj+dFFGO5itd7PmNB sVouTmgc9CD4a/OF/AinEFb5MmyPnb8jQgzt+lj8Nhro2d5o8RnLrEDdxgt0TWWq q2xvSUhIAnoVlDy+6lzmi4OkantUsE0IrLC7apyAAA4+oYIqxVTSqG1k8jc5J0iu OZ7RDDmf4KF131rGBSr+h6hQUt02SRt6H1Feg146iP3qfZsIOp4= -----END CERTIFICATE-----Generated at Tue Oct 27 16:33:44 2026 by rpki-client