$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft File: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft (raw, json) Hash identifier: ct0AaMKv95wO40yTE4GYrSNRrwWHgsIxdvnW4hsb/HA= Subject key identifier: 31:4B:C8:D9:C9:F2:C1:24:93:62:3F:1F:B0:50:4F:20:AC:CD:74:EA Authority key identifier: FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 Certificate issuer: /CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Certificate serial: 4526E5EECBE79E28BAAB9756A28FDFC09EC5713F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft Manifest number: 37 Signing time: Thu 11 Jun 2026 11:40:58 +0000 Manifest this update: Thu 11 Jun 2026 11:35:58 +0000 Manifest next update: Fri 12 Jun 2026 12:31:58 +0000 Files and hashes: 1: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: zLgVQYA5xLAWWDvEEhgF6F2kUEICyQjNZMvsMOscIV8=) 2: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl (hash: R8RdN95COj/MtN1DZqJK9Qp2IKBddlJPgx4UKjpYHpI=) 3: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: SBw6P3tSXs9klMeIGPKPIG91NqF9/LEzB6kE45zVl8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:26:e5:ee:cb:e7:9e:28:ba:ab:97:56:a2:8f:df:c0:9e:c5:71:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Validity Not Before: Jun 11 11:35:58 2026 GMT Not After : Jun 12 12:31:58 2026 GMT Subject: CN=314BC8D9C9F2C12493623F1FB0504F20ACCD74EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:fe:c7:da:e9:de:2e:c0:b4:35:cb:d9:27: 5c:e4:21:6a:20:c5:6b:77:33:1f:77:ce:8d:98:b7: f7:d0:1f:6f:44:51:bd:9b:53:7c:bf:25:c0:f9:8e: e6:0c:8a:57:aa:5f:27:7b:ac:99:ff:26:2c:10:07: 50:c7:d2:ab:3c:f5:92:18:02:43:01:8c:c7:40:1b: 88:63:82:62:94:24:dc:50:3f:4e:31:71:25:6d:26: 37:6a:9b:36:9a:2c:d7:71:5f:e6:18:c9:92:5c:c7: 42:6e:8a:68:8d:f0:73:33:42:fc:ac:f2:bc:6b:d7: 66:2f:6a:b1:b9:55:ce:98:8c:80:2e:5f:18:12:d5: 83:80:d4:de:8a:9a:ee:65:fa:f7:c4:ed:6a:91:33: bf:6b:71:e4:d9:d7:76:d1:e8:f9:63:87:f8:72:56: 37:d6:53:0f:34:c6:8e:39:dc:30:ef:e6:f4:2c:e7: 2a:7d:92:08:9b:d9:42:fb:e5:e9:35:cd:3b:2b:10: d1:af:6d:5a:76:ef:00:44:7d:e4:b1:a3:bb:13:e1: 85:2d:c8:9c:63:99:58:4f:e1:77:86:37:96:ac:a8: 34:6b:c0:14:d1:c7:d3:29:1d:82:46:0f:3d:b9:16: a6:77:df:70:89:d9:6d:f3:fa:21:cb:1e:1b:52:52: f2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4B:C8:D9:C9:F2:C1:24:93:62:3F:1F:B0:50:4F:20:AC:CD:74:EA X509v3 Authority Key Identifier: keyid:FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:01:92:bd:7e:b5:22:bf:1b:9b:1d:9f:65:3e:3b:b6:5c:ae: 7b:b3:2a:97:f7:63:f8:9c:b6:02:90:c8:24:70:06:9e:d3:c2: 0c:49:a6:e0:c0:0e:34:d2:1b:a3:4d:1f:56:ac:45:04:9c:2a: 46:9e:0b:4c:02:81:02:69:fb:17:b1:67:5d:c6:02:67:1a:ce: a5:98:d8:a8:63:50:f3:be:2d:29:7e:d0:68:7a:fa:b4:f6:e1: 42:9c:44:c3:21:5f:e2:ad:05:dd:93:d3:5f:da:84:66:25:40: ac:1d:6e:e6:de:3d:8e:31:c2:be:66:48:77:f0:e7:e3:a9:1e: c6:7d:34:54:7b:58:09:56:99:19:64:20:2d:19:ab:37:c6:cb: 32:9b:d6:53:7b:85:2d:f3:b2:06:cc:c0:f2:b7:d4:d9:70:e7: b1:1f:dd:d8:45:4a:12:e8:2e:75:f1:68:df:d6:29:fa:80:a6: 1f:02:95:5e:a1:5f:1a:af:8b:de:5b:62:c5:72:46:67:62:cb: 50:d9:d5:0d:c5:46:93:f1:a3:2b:18:a7:78:62:0a:bb:0a:9b: 24:60:a7:a5:9f:86:2d:79:d2:b2:ed:38:4e:38:88:ae:b6:91: 94:03:a1:52:a8:40:37:be:e7:a5:50:3b:cd:08:c8:e4:7d:60: b7:75:81:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURSbl7svnnii6q5dWoo/fwJ7FcT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFG QUExRjc2NDAeFw0yNjA2MTExMTM1NThaFw0yNjA2MTIxMjMxNThaMDMxMTAvBgNV BAMTKDMxNEJDOEQ5QzlGMkMxMjQ5MzYyM0YxRkIwNTA0RjIwQUNDRDc0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxu/7H2uneLsC0NcvZJ1zkIWog xWt3Mx93zo2Yt/fQH29EUb2bU3y/JcD5juYMileqXyd7rJn/JiwQB1DH0qs89ZIY AkMBjMdAG4hjgmKUJNxQP04xcSVtJjdqmzaaLNdxX+YYyZJcx0JuimiN8HMzQvys 8rxr12YvarG5Vc6YjIAuXxgS1YOA1N6Kmu5l+vfE7WqRM79rceTZ13bR6Pljh/hy VjfWUw80xo453DDv5vQs5yp9kgib2UL75ek1zTsrENGvbVp27wBEfeSxo7sT4YUt yJxjmVhP4XeGN5asqDRrwBTRx9MpHYJGDz25FqZ333CJ2W3z+iHLHhtSUvJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMUvI2cnywSSTYj8fsFBPIKzNdOowHwYDVR0j BBgwFoAU/f41hITQgVoJqhVozPwC6vqh92QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTgzMjgyMzctNzUwZi00MDIyLWI4YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4 NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFGQUExRjc2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREZFMzU4NDg0RDA4MTVBMDlBQTE1NjhDQ0ZDMDJFQUZBQTFG NzY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAy RUFGQUExRjc2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN0Bkr1+tSK/G5sdn2U+O7ZcrnuzKpf3Y/ic tgKQyCRwBp7TwgxJpuDADjTSG6NNH1asRQScKkaeC0wCgQJp+xexZ13GAmcazqWY 2KhjUPO+LSl+0Gh6+rT24UKcRMMhX+KtBd2T01/ahGYlQKwdbubePY4xwr5mSHfw 5+OpHsZ9NFR7WAlWmRlkIC0ZqzfGyzKb1lN7hS3zsgbMwPK31Nlw57Ef3dhFShLo LnXxaN/WKfqAph8ClV6hXxqvi95bYsVyRmdiy1DZ1Q3FRpPxoysYp3hiCrsKmyRg p6Wfhi150rLtOE44iK62kZQDoVKoQDe+56VQO80IyOR9YLd1gQ4= -----END CERTIFICATE-----Generated at Fri Jun 12 06:04:08 2026 by rpki-client