$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: GY0FHQn/h6h0tgc72ylqv3B2LZlQQlS7WD6RtaOeizU= Subject key identifier: 89:30:EB:F0:05:1C:88:E2:19:C7:67:95:B2:B5:3E:E5:2B:DE:53:6D Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 639031656027B12FFE9C8CF893232ED66232402F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 09:49:36 +0000 Manifest this update: Sun 02 Aug 2026 09:44:36 +0000 Manifest next update: Mon 03 Aug 2026 10:36:36 +0000 Files and hashes: 1: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) 2: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: 03WcO23IE9aKL8s42j286vyb13c0MZ0sADnjRUbLHEA=) 3: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) 4: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:90:31:65:60:27:b1:2f:fe:9c:8c:f8:93:23:2e:d6:62:32:40:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: Aug 2 09:44:36 2026 GMT Not After : Aug 3 10:36:36 2026 GMT Subject: CN=8930EBF0051C88E219C76795B2B53EE52BDE536D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0c:f0:0c:92:4d:e8:e3:da:ff:82:60:89:29: 92:1e:28:7c:1c:d1:74:40:b3:90:2b:d2:51:c4:d4: 04:37:fa:40:29:2a:03:43:8e:ce:2f:7b:7a:f8:a0: 7a:a9:ef:41:f4:e1:98:be:5f:51:35:ed:ca:d7:c3: cd:e8:05:31:08:2e:d3:45:0b:6c:a6:cd:e7:a8:05: db:29:74:be:2d:89:74:76:8f:aa:83:77:1f:91:49: 74:ee:2a:e7:03:a6:ca:61:9e:b4:de:9c:a6:2f:9f: 80:27:49:c9:96:27:ac:cd:f8:0e:cf:c5:2b:37:44: a0:64:31:8d:51:22:59:ca:e2:1f:8f:6b:81:2e:b9: fa:2a:4f:d2:40:f0:44:db:47:bd:ec:2e:73:4b:cb: 23:28:6d:76:2c:2d:6c:a0:8c:e0:b4:e8:a2:b2:b7: 11:81:c5:1d:d7:2f:19:2a:a4:42:2d:f7:24:4c:e2: 26:5a:a7:62:ee:a1:bc:c3:1b:56:0c:60:f3:94:40: 04:8d:d1:81:d4:2b:d1:78:f9:b8:fc:94:62:0e:de: ea:bb:b9:f3:c6:ba:18:bc:43:48:72:d9:85:98:e3: 8c:35:7b:48:9c:35:1b:8b:1f:f8:fb:f7:2f:41:b1: 0e:58:80:e0:f6:fe:17:b0:72:a0:3d:57:1c:89:a6: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:30:EB:F0:05:1C:88:E2:19:C7:67:95:B2:B5:3E:E5:2B:DE:53:6D X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0e:0c:98:cb:40:fa:a9:b6:bd:ee:ff:3b:9e:cf:fd:ce:bd: 4d:88:67:51:4d:41:b6:7e:b9:09:41:6b:0c:34:1c:84:2a:d0: a0:13:d5:d1:e2:4d:ec:4d:17:a1:6b:b1:e7:06:3b:31:47:e9: 4e:37:89:02:a8:77:95:55:48:98:76:ef:48:83:20:5e:90:f5: 88:2c:1f:29:b5:5b:6f:9e:f6:0b:7e:44:bf:3a:8d:0a:17:55: 74:39:7d:db:0b:1c:38:85:65:1c:f3:ed:31:0d:f0:64:1b:77: 6d:3f:d9:0c:46:ae:b4:17:a4:d3:01:50:40:9a:24:a4:e3:1a: a1:f4:a0:3a:b0:89:b2:ae:67:71:f6:53:f5:bd:06:b1:fc:85: 41:8c:46:e1:0b:45:f3:f6:f5:f6:44:02:4c:54:c4:02:3b:17: 0c:20:25:e4:9f:4f:78:c3:75:4d:c3:cf:1d:b9:20:1c:6c:71: 41:5a:e9:1e:b7:fd:ad:b9:78:21:2e:9f:70:0a:bf:58:87:7b: b2:e0:7b:4e:3e:eb:07:6b:41:3e:7a:9f:58:df:f0:db:67:5f: 85:d2:a4:1d:f2:30:22:08:a2:d6:12:b5:9a:e2:5a:37:27:85: 70:64:b5:7a:6a:15:ef:78:c8:09:39:90:23:f2:83:38:0c:f0: 86:da:75:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5AxZWAnsS/+nIz4kyMu1mIyQC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjA4MDIwOTQ0MzZaFw0yNjA4MDMxMDM2MzZaMDMxMTAvBgNV BAMTKDg5MzBFQkYwMDUxQzg4RTIxOUM3Njc5NUIyQjUzRUU1MkJERTUzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZDPAMkk3o49r/gmCJKZIeKHwc 0XRAs5Ar0lHE1AQ3+kApKgNDjs4ve3r4oHqp70H04Zi+X1E17crXw83oBTEILtNF C2ymzeeoBdspdL4tiXR2j6qDdx+RSXTuKucDpsphnrTenKYvn4AnScmWJ6zN+A7P xSs3RKBkMY1RIlnK4h+Pa4EuufoqT9JA8ETbR73sLnNLyyMobXYsLWygjOC06KKy txGBxR3XLxkqpEIt9yRM4iZap2LuobzDG1YMYPOUQASN0YHUK9F4+bj8lGIO3uq7 ufPGuhi8Q0hy2YWY44w1e0icNRuLH/j79y9BsQ5YgOD2/hewcqA9VxyJpl7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiTDr8AUciOIZx2eVsrU+5SveU20wHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8ODJjLQPqptr3u/zuez/3OvU2IZ1FNQbZ+ uQlBaww0HIQq0KAT1dHiTexNF6FrsecGOzFH6U43iQKod5VVSJh270iDIF6Q9Ygs Hym1W2+e9gt+RL86jQoXVXQ5fdsLHDiFZRzz7TEN8GQbd20/2QxGrrQXpNMBUECa JKTjGqH0oDqwibKuZ3H2U/W9BrH8hUGMRuELRfP29fZEAkxUxAI7FwwgJeSfT3jD dU3Dzx25IBxscUFa6R63/a25eCEun3AKv1iHe7Lge04+6wdrQT56n1jf8NtnX4XS pB3yMCIIotYStZriWjcnhXBktXpqFe94yAk5kCPygzgM8IbadUU= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:43 2026 by rpki-client