$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft File: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft (raw, json) Hash identifier: 4nB8tlTh8zF1T5vLXdeC9HNf+lOhZhL5VOb9q/TIixU= Subject key identifier: 07:38:43:C7:61:52:3C:81:18:5F:C1:5C:23:4F:C7:B4:77:15:AE:A0 Authority key identifier: FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB Certificate issuer: /CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Certificate serial: 4E31811B9B255E3BF4B2AD56FD9ABE08112A7270 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:02:04 +0000 Manifest this update: Wed 23 Sep 2026 20:57:04 +0000 Manifest next update: Thu 24 Sep 2026 21:27:04 +0000 Files and hashes: 1: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: zgtrY5nvzrcyU/ntTybDgmO63b7QkAMGZiL13SPjEp8=) 2: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl (hash: kSHAJc2DpcsIA7F23RILMZcI0maFyo2Kr++CBnGmHbw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:31:81:1b:9b:25:5e:3b:f4:b2:ad:56:fd:9a:be:08:11:2a:72:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Validity Not Before: Sep 23 20:57:04 2026 GMT Not After : Sep 24 21:27:04 2026 GMT Subject: CN=073843C761523C81185FC15C234FC7B47715AEA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d9:ef:3f:dd:75:00:fe:00:a7:63:fc:ea:04: 52:cd:29:35:03:cc:b0:34:77:ee:6d:03:48:82:7d: e4:9d:7a:3b:ac:d3:22:be:4f:af:e6:44:bd:37:49: a2:ae:5a:a5:53:df:cb:d7:fe:a4:d5:bb:33:45:a3: 90:60:2f:7d:f1:04:c6:30:46:cd:48:0f:69:6e:84: 7a:2d:fa:05:a2:77:fc:3e:96:8c:11:7f:6c:bf:61: 45:12:7e:ce:2a:8b:67:87:97:4b:45:8b:72:3b:2c: 04:03:67:d1:7e:6d:40:3f:cc:aa:6a:c5:75:58:78: df:4a:36:be:35:1a:6b:72:fd:10:43:68:97:05:1f: c9:b7:2c:78:98:ee:f1:b1:cc:fe:fb:e3:88:eb:98: 2e:b4:24:1d:88:62:31:0a:4e:ac:05:73:f1:36:60: 1f:b3:a7:a5:57:71:ad:40:28:b9:e5:29:57:8d:31: ba:25:dc:56:26:e1:00:4c:d4:f6:71:38:c2:d0:63: 12:54:f0:c2:84:26:4d:9f:f1:07:fc:08:b1:38:e1: 87:54:23:fb:17:c9:9a:de:29:39:b5:9c:76:18:ac: cf:aa:9b:34:c5:63:e3:de:ed:3f:15:53:ec:f2:37: c7:3e:3b:4c:7a:2b:8c:07:25:64:82:96:55:69:f3: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:38:43:C7:61:52:3C:81:18:5F:C1:5C:23:4F:C7:B4:77:15:AE:A0 X509v3 Authority Key Identifier: keyid:FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:59:95:74:94:28:90:d6:f5:ee:ee:4d:55:07:81:0f:7a:dc: b7:52:6b:02:42:1c:7d:49:a6:f8:af:e2:e3:70:d6:93:15:bb: a8:29:e2:27:31:26:08:46:1a:90:9a:8c:bd:22:62:21:ba:9c: a3:13:83:75:a8:c8:0f:78:0b:de:9c:21:e2:8c:fb:e8:c0:2d: f3:4c:f3:35:32:27:a4:eb:2b:d5:94:b6:5a:47:cf:ec:6b:a8: 59:67:7e:6d:a6:e1:3a:ed:87:8e:ae:d6:d8:d1:78:31:e5:6e: 84:1e:a3:e4:c5:a2:93:73:b3:5c:4b:dd:97:b6:05:bf:24:50: 52:9f:92:36:38:da:6c:34:00:c9:48:8a:2a:19:79:fe:f9:34: b2:85:a6:e1:76:d9:ed:3b:db:b6:1d:80:8f:32:a3:b4:a6:cd: b9:c1:45:0b:ce:ad:5d:b5:8b:a4:70:7e:f8:39:f8:cf:98:95: 6e:5e:e8:8a:b5:dc:22:de:1b:aa:5b:07:d1:5c:ee:6a:87:60: 18:d7:a3:f9:db:c7:27:ae:a1:69:1c:06:d3:a2:83:41:66:fe: 5a:86:8c:46:a5:db:24:d0:2a:cc:1d:b9:6d:7f:3f:51:22:19: a6:16:a9:b8:cf:43:e6:14:7b:21:de:9a:15:d1:98:f8:fb:06: 06:13:43:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjGBG5slXjv0sq1W/Zq+CBEqcnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZB MTMwRTFFQjAeFw0yNjA5MjMyMDU3MDRaFw0yNjA5MjQyMTI3MDRaMDMxMTAvBgNV BAMTKDA3Mzg0M0M3NjE1MjNDODExODVGQzE1QzIzNEZDN0I0NzcxNUFFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF2e8/3XUA/gCnY/zqBFLNKTUD zLA0d+5tA0iCfeSdejus0yK+T6/mRL03SaKuWqVT38vX/qTVuzNFo5BgL33xBMYw Rs1ID2luhHot+gWid/w+lowRf2y/YUUSfs4qi2eHl0tFi3I7LAQDZ9F+bUA/zKpq xXVYeN9KNr41Gmty/RBDaJcFH8m3LHiY7vGxzP7744jrmC60JB2IYjEKTqwFc/E2 YB+zp6VXca1AKLnlKVeNMbol3FYm4QBM1PZxOMLQYxJU8MKEJk2f8Qf8CLE44YdU I/sXyZreKTm1nHYYrM+qmzTFY+Pe7T8VU+zyN8c+O0x6K4wHJWSCllVp8z0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBzhDx2FSPIEYX8FcI0/HtHcVrqAwHwYDVR0j BBgwFoAU/dVCrA6lq0+D0MaoY8XVtqEw4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYwMzFmZDAtNTg0MC00YWMxLWJmYjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMw RUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZBMTMwRTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREQ1NDJBQzBFQTVBQjRGODNEMEM2QTg2M0M1RDVCNkExMzBF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYwMzFmZDAtNTg0MC00YWMxLWJm YjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1 QjZBMTMwRTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhZlXSUKJDW9e7uTVUHgQ963LdSawJCHH1J pviv4uNw1pMVu6gp4icxJghGGpCajL0iYiG6nKMTg3WoyA94C96cIeKM++jALfNM 8zUyJ6TrK9WUtlpHz+xrqFlnfm2m4Trth46u1tjReDHlboQeo+TFopNzs1xL3Ze2 Bb8kUFKfkjY42mw0AMlIiioZef75NLKFpuF22e0727YdgI8yo7SmzbnBRQvOrV21 i6Rwfvg5+M+YlW5e6Iq13CLeG6pbB9Fc7mqHYBjXo/nbxyeuoWkcBtOig0Fm/lqG jEal2yTQKswduW1/P1EiGaYWqbjPQ+YUeyHemhXRmPj7BgYTQ7c= -----END CERTIFICATE-----Generated at Thu Sep 24 10:43:10 2026 by rpki-client