$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: lc51pPQvkdGi159WhBPCSDSg8+avILZR9Z5ztFgWDZA= Subject key identifier: 5A:6C:86:97:B4:BD:37:08:AD:5C:84:8F:80:A4:60:B1:64:C0:5D:EF Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 07B73EB14AC3CC78C8ED42C695367261131C8F32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 01:43:59 +0000 Manifest this update: Thu 18 Jun 2026 01:38:59 +0000 Manifest next update: Fri 19 Jun 2026 02:15:59 +0000 Files and hashes: 1: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: FDcfRb0UDcpi4w/cZA4oAhbv/gfqlzWrvH7DPWADVBM=) 2: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) 3: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) 4: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 02:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b7:3e:b1:4a:c3:cc:78:c8:ed:42:c6:95:36:72:61:13:1c:8f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: Jun 18 01:38:59 2026 GMT Not After : Jun 19 02:15:59 2026 GMT Subject: CN=5A6C8697B4BD3708AD5C848F80A460B164C05DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:ea:72:02:af:34:47:f2:6b:57:a1:fb:e5: 37:88:2c:46:b4:ef:4d:fa:93:0f:40:33:52:01:c1: da:2e:45:a3:51:2b:71:63:6f:33:d6:b1:74:26:ae: a4:4c:4d:af:e1:62:09:ee:6c:a7:c5:60:0f:bb:ef: 18:1a:d7:d9:77:bc:a9:8d:0d:2f:57:0b:7a:07:82: 65:52:43:39:d6:f7:42:bf:c5:8a:3a:b2:60:e6:0a: c0:86:e5:dd:22:55:a4:98:e4:03:47:9d:3f:14:61: 4d:77:52:6d:3b:fd:60:b1:2f:20:ea:fd:b3:eb:52: 66:c8:7c:f4:aa:07:55:fd:2d:24:e1:a9:95:e5:9e: 86:90:04:92:2f:d5:fd:52:fa:af:4b:79:7a:58:be: e2:4e:90:84:41:90:b8:6f:38:c4:2c:b7:4b:87:2c: 16:07:c4:68:6c:07:18:30:f8:d6:2f:8a:54:b8:3f: 67:49:25:1d:9c:b2:44:c6:be:64:5c:f4:b3:23:a5: 67:72:74:84:a1:7f:e7:f7:08:0b:25:1e:51:ad:d1: e3:24:2f:28:36:2d:af:55:d9:b4:d0:c1:c4:1f:b0: 20:52:58:fd:30:b1:66:ff:97:6d:e3:4d:c6:9b:5a: d5:10:30:19:2c:b0:e1:67:93:fb:83:71:90:4f:b5: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6C:86:97:B4:BD:37:08:AD:5C:84:8F:80:A4:60:B1:64:C0:5D:EF X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c1:84:65:7e:40:13:ff:be:11:75:87:58:01:db:03:fd:a0: 69:20:ef:62:30:6d:df:02:54:72:5b:85:30:6c:ac:34:0b:d0: cf:24:be:61:5b:81:9d:96:f4:a8:a9:a3:e8:d2:4f:2a:9e:73: aa:7d:5d:f6:3d:13:96:e4:25:7f:3d:47:37:10:7d:7f:ee:7e: f5:2b:37:44:e0:e5:b5:af:16:3f:1a:c7:cd:89:8b:b5:7e:cd: 58:da:bd:9e:7f:ae:46:d4:fc:b6:31:62:d6:aa:99:d2:b5:4e: b0:9b:f7:b4:cb:67:9c:04:94:ef:de:85:31:d2:c3:f3:f9:a7: 0a:4d:7a:0e:6a:30:33:d2:75:e5:5f:67:6b:da:10:9a:35:ce: a7:dd:4b:3e:a5:a6:73:36:f1:3b:3d:55:13:b2:d4:e0:4b:50: c6:63:39:37:00:c9:04:af:9b:ea:0c:ec:01:3a:9d:ef:07:b6: ab:df:9d:b7:ba:a2:0a:7b:2b:b8:13:3b:44:ad:60:6a:58:18: b0:89:6c:75:40:66:93:c7:d5:b8:a1:79:f2:bb:4c:bd:3e:d2: 66:7d:fd:ef:87:ff:5c:b9:0b:d7:59:02:25:f7:47:f2:dd:74: e3:fb:47:85:41:d6:c1:9f:28:af:26:df:a7:1b:b6:a6:17:e4: ce:cc:c5:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB7c+sUrDzHjI7ULGlTZyYRMcjzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjA2MTgwMTM4NTlaFw0yNjA2MTkwMjE1NTlaMDMxMTAvBgNV BAMTKDVBNkM4Njk3QjRCRDM3MDhBRDVDODQ4RjgwQTQ2MEIxNjRDMDVERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm3OpyAq80R/JrV6H75TeILEa0 7036kw9AM1IBwdouRaNRK3FjbzPWsXQmrqRMTa/hYgnubKfFYA+77xga19l3vKmN DS9XC3oHgmVSQznW90K/xYo6smDmCsCG5d0iVaSY5ANHnT8UYU13Um07/WCxLyDq /bPrUmbIfPSqB1X9LSThqZXlnoaQBJIv1f1S+q9LeXpYvuJOkIRBkLhvOMQst0uH LBYHxGhsBxgw+NYvilS4P2dJJR2cskTGvmRc9LMjpWdydIShf+f3CAslHlGt0eMk Lyg2La9V2bTQwcQfsCBSWP0wsWb/l23jTcabWtUQMBkssOFnk/uDcZBPte1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWmyGl7S9NwitXISPgKRgsWTAXe8wHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDBhGV+QBP/vhF1h1gB2wP9oGkg72Iwbd8C VHJbhTBsrDQL0M8kvmFbgZ2W9Kipo+jSTyqec6p9XfY9E5bkJX89RzcQfX/ufvUr N0Tg5bWvFj8ax82Ji7V+zVjavZ5/rkbU/LYxYtaqmdK1TrCb97TLZ5wElO/ehTHS w/P5pwpNeg5qMDPSdeVfZ2vaEJo1zqfdSz6lpnM28Ts9VROy1OBLUMZjOTcAyQSv m+oM7AE6ne8Htqvfnbe6ogp7K7gTO0StYGpYGLCJbHVAZpPH1bihefK7TL0+0mZ9 /e+H/1y5C9dZAiX3R/LddOP7R4VB1sGfKK8m36cbtqYX5M7Mxeo= -----END CERTIFICATE-----Generated at Thu Jun 18 17:08:21 2026 by rpki-client