$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: uDfu3BzsfFzL0RpNcwnpCCol1mCJ6Uc6Kax/+cFTwFE= Subject key identifier: 03:A2:32:8E:1E:98:9A:28:32:98:EF:7D:D1:66:EE:C9:4B:95:49:10 Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 72B91E0EF6818B2660E2632C893BA5A0BCDA4461 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 21:40:47 +0000 Manifest this update: Wed 16 Sep 2026 21:35:47 +0000 Manifest next update: Fri 18 Sep 2026 01:02:47 +0000 Files and hashes: 1: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: TrVH5W2LoAEjH0IS3nywv7j9d9rVS2UE44kVQSTKyTM=) 2: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) 3: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) 4: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b9:1e:0e:f6:81:8b:26:60:e2:63:2c:89:3b:a5:a0:bc:da:44:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: Sep 16 21:35:47 2026 GMT Not After : Sep 18 01:02:47 2026 GMT Subject: CN=03A2328E1E989A283298EF7DD166EEC94B954910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7f:85:c0:5a:ac:9a:d8:82:cb:2a:26:b8:0c: 09:6d:0a:3a:18:6a:58:0a:d4:9d:ef:32:f4:67:d4: f8:08:bc:db:a8:96:52:7d:ba:71:2b:e7:26:37:cc: ba:4a:25:89:c2:9b:79:36:1d:53:01:d3:c4:50:dd: 7e:88:82:ac:0a:99:a4:c7:4c:64:8f:87:47:11:41: 4d:43:dd:81:09:b3:f5:04:57:16:b0:03:c6:a6:11: 84:38:f2:a8:2f:e4:c6:c8:1c:6f:c0:77:af:67:e0: 32:48:48:28:50:da:b1:8f:c2:12:da:c6:7d:1d:03: a4:d8:4f:f5:2b:f1:96:6f:79:ee:45:3c:e0:4c:3b: b4:34:aa:32:dd:d9:6c:61:81:0c:6c:77:77:5b:88: e1:1c:a1:f8:50:6a:28:31:94:7c:f5:9d:60:88:2f: b1:9e:d6:fd:7b:66:0c:54:a1:37:43:e0:1a:18:6d: 77:df:0f:42:18:d4:4c:e2:34:f1:09:96:56:95:08: b8:95:6a:ec:a6:8d:72:be:ed:14:4d:8d:c1:9d:e2: 35:bd:75:37:04:ac:ed:96:54:22:be:b0:82:72:60: 85:67:7d:58:7e:73:6e:89:02:6f:f4:16:46:06:65: b6:4d:62:66:95:c1:1d:2a:c0:47:af:b0:98:61:ec: f3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A2:32:8E:1E:98:9A:28:32:98:EF:7D:D1:66:EE:C9:4B:95:49:10 X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3f:eb:35:81:1a:82:28:be:d6:5b:ea:8d:12:9d:e8:0f:bc: aa:7b:16:65:7c:d0:fd:4c:f6:5b:4d:a5:29:4b:75:a3:7d:9d: 61:cf:e7:24:42:5d:23:7a:88:8b:85:fc:68:c6:b7:c7:f0:15: cd:96:a5:bc:ea:28:09:96:8f:21:a2:71:33:2d:65:da:dc:eb: bc:e3:32:29:42:d9:43:a5:28:3d:6a:87:3c:5d:f1:b6:d1:67: bc:8f:95:8c:f5:42:a8:5c:17:e7:f4:a6:72:2c:a1:7f:67:9a: 60:52:84:aa:b3:05:a1:26:86:b5:9d:df:6f:d1:fe:be:27:f6: 08:fc:13:56:0a:3f:e9:69:d8:48:2e:fb:7a:20:1e:ee:30:0b: 83:81:f9:58:8b:bb:3c:ba:84:70:ef:76:75:aa:50:c4:a3:f5: 85:48:ee:a0:b9:44:0b:76:97:f3:90:38:6e:42:42:98:5a:ec: 37:6a:b9:0e:6e:b5:38:54:9f:4b:cd:d0:43:23:7d:bc:56:bd: 30:9a:58:b6:9a:aa:e3:a5:1a:b8:9a:8c:9f:5a:d1:4c:fb:cf: 10:8e:e4:1d:57:46:91:37:80:f5:21:ec:3f:21:c7:18:82:84: a3:68:ec:10:e8:fb:b3:e1:5d:c5:ed:25:39:bc:02:98:d1:5d: ef:e0:7b:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrkeDvaBiyZg4mMsiTuloLzaRGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjA5MTYyMTM1NDdaFw0yNjA5MTgwMTAyNDdaMDMxMTAvBgNV BAMTKDAzQTIzMjhFMUU5ODlBMjgzMjk4RUY3REQxNjZFRUM5NEI5NTQ5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUf4XAWqya2ILLKia4DAltCjoY algK1J3vMvRn1PgIvNuollJ9unEr5yY3zLpKJYnCm3k2HVMB08RQ3X6IgqwKmaTH TGSPh0cRQU1D3YEJs/UEVxawA8amEYQ48qgv5MbIHG/Ad69n4DJISChQ2rGPwhLa xn0dA6TYT/Ur8ZZvee5FPOBMO7Q0qjLd2WxhgQxsd3dbiOEcofhQaigxlHz1nWCI L7Ge1v17ZgxUoTdD4BoYbXffD0IY1EziNPEJllaVCLiVauymjXK+7RRNjcGd4jW9 dTcErO2WVCK+sIJyYIVnfVh+c26JAm/0FkYGZbZNYmaVwR0qwEevsJhh7PMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA6Iyjh6YmigymO990WbuyUuVSRAwHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs/6zWBGoIovtZb6o0SnegPvKp7FmV80P1M 9ltNpSlLdaN9nWHP5yRCXSN6iIuF/GjGt8fwFc2WpbzqKAmWjyGicTMtZdrc67zj MilC2UOlKD1qhzxd8bbRZ7yPlYz1QqhcF+f0pnIsoX9nmmBShKqzBaEmhrWd32/R /r4n9gj8E1YKP+lp2Egu+3ogHu4wC4OB+ViLuzy6hHDvdnWqUMSj9YVI7qC5RAt2 l/OQOG5CQpha7DdquQ5utThUn0vN0EMjfbxWvTCaWLaaquOlGriajJ9a0Uz7zxCO 5B1XRpE3gPUh7D8hxxiChKNo7BDo+7PhXcXtJTm8ApjRXe/ge4c= -----END CERTIFICATE-----Generated at Thu Sep 17 10:44:22 2026 by rpki-client