$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft File: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft (raw, json) Hash identifier: JAjXPZaIlhgQLIzoZmdiU0XeKq1izE5t7GKCSYjeA8A= Subject key identifier: 7C:96:51:AC:F0:ED:51:53:E5:38:DB:C5:3A:0D:5A:0D:DE:C3:F5:1D Authority key identifier: FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 Certificate issuer: /CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Certificate serial: 56EA4D028DB1BA573AD7FCB91545FEEA5991C074 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft Manifest number: B1 Signing time: Thu 10 Sep 2026 09:13:24 +0000 Manifest this update: Thu 10 Sep 2026 09:08:24 +0000 Manifest next update: Fri 11 Sep 2026 11:31:24 +0000 Files and hashes: 1: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl (hash: NKNarWjZokUthW4TAGkB/qcRGa3UH9Db35A8kDIWMXU=) 2: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: zLgVQYA5xLAWWDvEEhgF6F2kUEICyQjNZMvsMOscIV8=) 3: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: SBw6P3tSXs9klMeIGPKPIG91NqF9/LEzB6kE45zVl8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ea:4d:02:8d:b1:ba:57:3a:d7:fc:b9:15:45:fe:ea:59:91:c0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Validity Not Before: Sep 10 09:08:24 2026 GMT Not After : Sep 11 11:31:24 2026 GMT Subject: CN=7C9651ACF0ED5153E538DBC53A0D5A0DDEC3F51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:95:bc:f5:3a:84:16:25:5f:08:d4:b4:67: a4:aa:10:55:4f:68:1d:fd:42:b3:d6:b6:8a:da:7f: bd:3b:c3:5a:d4:44:05:0c:81:3a:5c:58:45:e6:92: d5:eb:c0:52:2d:47:c4:0f:c6:c0:e7:22:6a:8d:44: 52:99:7e:71:80:c5:9b:50:38:a5:38:79:33:3e:9f: 0f:1e:c2:18:3d:6c:2a:4e:ab:33:46:62:d3:34:42: fc:f9:1d:c7:47:49:d4:5b:ea:65:b2:30:4a:de:2d: 28:92:3d:06:52:bd:d1:8a:fe:52:28:7f:ad:d9:19: 5c:21:7f:cd:50:ea:55:88:7f:bc:91:a1:41:b9:5c: 23:18:97:7a:fc:e9:3c:f2:f8:4f:b7:11:36:e0:b9: 93:24:a5:78:95:7e:c0:d1:2f:5a:59:75:51:1b:bc: 62:ff:22:4b:85:15:bb:d9:f7:dd:47:1b:1f:46:2e: 3a:5b:44:45:0a:4d:1b:f8:ad:e7:3a:22:a4:0b:60: 09:4c:87:ea:da:2a:90:db:02:eb:5a:65:eb:22:7c: da:ae:b7:57:67:97:bb:4f:d1:0e:ac:d7:c8:1f:28: 97:11:9e:4a:6c:61:ad:e7:da:0e:4e:06:8d:ee:00: a7:32:2e:e0:c6:56:47:2e:94:ed:02:3d:9e:2b:c4: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:96:51:AC:F0:ED:51:53:E5:38:DB:C5:3A:0D:5A:0D:DE:C3:F5:1D X509v3 Authority Key Identifier: keyid:FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:cd:38:81:32:10:40:6d:1c:88:ab:c4:3c:60:4c:af:ee:16: cc:19:c1:bb:ea:af:0a:8e:1a:4b:af:b6:ff:d5:03:f5:83:05: bc:c6:ed:26:c2:78:8a:5f:87:8d:d9:1b:06:13:79:d6:ef:ef: 2f:9e:5b:d4:94:01:ba:8d:e8:b2:ac:56:71:82:ad:ae:f8:46: f5:24:00:19:a1:48:1a:69:fe:e7:36:c8:e9:d9:98:8d:7c:5c: 82:23:b1:01:8a:df:35:57:5c:75:3d:10:28:ca:63:f9:c5:7b: 85:4e:11:9e:63:26:9e:e1:96:bb:02:e4:25:32:aa:82:9d:17: 17:e7:b1:79:94:ae:8f:18:26:78:b6:bd:8f:8f:60:09:72:58: 5c:73:14:74:d6:b5:81:63:f1:ca:51:ee:af:28:90:96:be:64: f0:5a:d3:44:9c:28:f4:b7:b0:61:0a:95:20:df:89:f3:be:0c: 5d:ec:f6:4a:f1:38:79:f9:a7:17:e3:69:f6:70:b8:72:72:02: b2:26:e7:69:fa:b9:8b:7c:de:45:ac:a8:20:b5:07:b0:e8:a7: 51:91:2b:1a:09:c3:ac:f1:69:4a:42:a3:88:a8:ce:26:6e:7e: 8f:8a:d3:52:d4:94:1a:9f:9d:bc:93:b1:d5:64:c3:cc:92:11: de:1d:5e:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVupNAo2xulc61/y5FUX+6lmRwHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFG QUExRjc2NDAeFw0yNjA5MTAwOTA4MjRaFw0yNjA5MTExMTMxMjRaMDMxMTAvBgNV BAMTKDdDOTY1MUFDRjBFRDUxNTNFNTM4REJDNTNBMEQ1QTBEREVDM0Y1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDacZW89TqEFiVfCNS0Z6SqEFVP aB39QrPWtoraf707w1rURAUMgTpcWEXmktXrwFItR8QPxsDnImqNRFKZfnGAxZtQ OKU4eTM+nw8ewhg9bCpOqzNGYtM0Qvz5HcdHSdRb6mWyMEreLSiSPQZSvdGK/lIo f63ZGVwhf81Q6lWIf7yRoUG5XCMYl3r86Tzy+E+3ETbguZMkpXiVfsDRL1pZdVEb vGL/IkuFFbvZ991HGx9GLjpbREUKTRv4rec6IqQLYAlMh+raKpDbAutaZesifNqu t1dnl7tP0Q6s18gfKJcRnkpsYa3n2g5OBo3uAKcyLuDGVkculO0CPZ4rxKo5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJZRrPDtUVPlONvFOg1aDd7D9R0wHwYDVR0j BBgwFoAU/f41hITQgVoJqhVozPwC6vqh92QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTgzMjgyMzctNzUwZi00MDIyLWI4YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4 NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFGQUExRjc2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREZFMzU4NDg0RDA4MTVBMDlBQTE1NjhDQ0ZDMDJFQUZBQTFG NzY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAy RUFGQUExRjc2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN7NOIEyEEBtHIirxDxgTK/uFswZwbvqrwqO Gkuvtv/VA/WDBbzG7SbCeIpfh43ZGwYTedbv7y+eW9SUAbqN6LKsVnGCra74RvUk ABmhSBpp/uc2yOnZmI18XIIjsQGK3zVXXHU9ECjKY/nFe4VOEZ5jJp7hlrsC5CUy qoKdFxfnsXmUro8YJni2vY+PYAlyWFxzFHTWtYFj8cpR7q8okJa+ZPBa00ScKPS3 sGEKlSDfifO+DF3s9krxOHn5pxfjafZwuHJyArIm52n6uYt83kWsqCC1B7Dop1GR KxoJw6zxaUpCo4ioziZufo+K01LUlBqfnbyTsdVkw8ySEd4dXg8= -----END CERTIFICATE-----Generated at Fri Sep 11 02:07:21 2026 by rpki-client