$ rpki-client -vvf rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft File: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft (raw, json) Hash identifier: QslB3RodskTaLiF49WaCssVHzlNVIvCxBSVVrWyHTqc= Subject key identifier: 86:31:55:26:87:0C:2F:76:54:32:19:57:46:E3:A8:9F:FA:C0:80:46 Authority key identifier: FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB Certificate issuer: /CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Certificate serial: 5A579F51E39B914786F58A158B95CE776AEA2FFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:14:51 +0000 Manifest this update: Tue 12 May 2026 15:09:51 +0000 Manifest next update: Wed 13 May 2026 18:50:51 +0000 Files and hashes: 1: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl (hash: CPNPev9z1LNKpy/3svpsCQb9z3fBtuNiyUUnPHaTA7s=) 2: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: zgtrY5nvzrcyU/ntTybDgmO63b7QkAMGZiL13SPjEp8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:57:9f:51:e3:9b:91:47:86:f5:8a:15:8b:95:ce:77:6a:ea:2f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Validity Not Before: May 12 15:09:51 2026 GMT Not After : May 13 18:50:51 2026 GMT Subject: CN=86315526870C2F765432195746E3A89FFAC08046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:04:b9:b5:a5:d8:87:33:cd:f6:ef:39:38: 4d:51:49:3d:97:79:d5:83:55:d5:d3:be:57:ff:9a: 49:1f:ee:05:07:2b:48:48:06:1f:c7:bf:52:78:08: 43:05:ad:19:36:af:c1:5b:d4:53:cc:80:fb:9d:20: 8b:ca:e6:46:2a:95:9b:a5:21:03:41:81:e9:0c:b2: ae:9f:c9:eb:8b:01:aa:9a:d3:e6:8c:fa:27:75:48: 35:a9:f9:f5:d5:5a:e5:04:c0:a8:9b:3f:57:2c:3c: 84:ff:0d:21:bc:98:b9:07:bf:6f:4d:17:20:03:8c: 7c:1e:ab:a9:7b:01:76:91:37:c8:30:5d:82:4a:0c: 8d:ee:8a:0e:6d:5b:3d:9d:d9:71:34:55:c2:37:20: d4:fd:dd:a4:d0:4b:c3:20:69:c3:81:52:6a:27:0c: 04:cd:73:b5:20:69:73:30:64:ed:ed:b8:eb:84:1a: ca:ee:41:db:29:96:b5:65:c1:95:f5:ea:2f:cd:53: c7:67:cb:be:71:c6:42:8a:6c:31:a8:b6:de:63:8b: 3d:b7:7d:d1:ef:b0:44:7c:38:0b:eb:24:a9:6a:40: 5e:fb:0f:24:f2:30:3f:b3:42:fe:5f:48:6c:0f:75: ff:8e:99:c1:9e:39:09:99:ed:66:fb:cd:f6:a8:6e: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:55:26:87:0C:2F:76:54:32:19:57:46:E3:A8:9F:FA:C0:80:46 X509v3 Authority Key Identifier: keyid:FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:e2:70:01:e6:07:ad:bf:62:31:b3:7c:c6:3b:38:49:67:02: 61:f8:5e:f4:21:d4:28:a6:8b:7a:f7:f9:62:a2:3c:34:59:0a: 5a:6e:15:58:1d:6a:35:70:5b:1d:3f:56:31:51:43:b3:9d:02: 26:63:fd:41:64:01:81:28:30:47:f0:18:d3:f7:3a:7a:a3:51: 38:30:4d:37:89:36:22:74:4b:3e:81:78:ad:d8:1d:36:30:66: 58:af:35:0e:2f:5c:69:44:3d:1c:80:cb:08:b8:55:b5:4c:fa: c7:f1:b1:cd:db:4b:52:68:23:4b:11:f0:ba:7e:02:b1:87:64: 11:72:06:f5:b5:19:3c:b9:c6:b2:e3:fd:68:5f:58:c0:7e:1a: 19:0c:74:aa:2d:43:9e:97:ec:39:60:fd:85:4a:a0:23:c5:f2: d9:06:e0:60:a9:77:e6:9c:c6:d1:d1:c2:04:b2:1a:c1:cb:17: 69:33:54:4c:09:ee:10:a5:bf:25:12:7e:17:64:53:03:fb:30: 59:17:f3:03:6c:59:c0:2f:04:ae:12:1c:5d:22:34:73:dd:db: a1:76:93:15:8f:58:a9:92:30:10:65:8c:eb:69:ac:57:eb:56: e1:19:7a:d1:8c:78:a8:ec:af:aa:a4:55:61:2e:42:86:cf:b6: 79:52:d6:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlefUeObkUeG9YoVi5XOd2rqL/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZB MTMwRTFFQjAeFw0yNjA1MTIxNTA5NTFaFw0yNjA1MTMxODUwNTFaMDMxMTAvBgNV BAMTKDg2MzE1NTI2ODcwQzJGNzY1NDMyMTk1NzQ2RTNBODlGRkFDMDgwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCongS5taXYhzPN9u85OE1RST2X edWDVdXTvlf/mkkf7gUHK0hIBh/Hv1J4CEMFrRk2r8Fb1FPMgPudIIvK5kYqlZul IQNBgekMsq6fyeuLAaqa0+aM+id1SDWp+fXVWuUEwKibP1csPIT/DSG8mLkHv29N FyADjHweq6l7AXaRN8gwXYJKDI3uig5tWz2d2XE0VcI3INT93aTQS8MgacOBUmon DATNc7UgaXMwZO3tuOuEGsruQdsplrVlwZX16i/NU8dny75xxkKKbDGott5jiz23 fdHvsER8OAvrJKlqQF77DyTyMD+zQv5fSGwPdf+OmcGeOQmZ7Wb7zfaobjFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjFVJocML3ZUMhlXRuOon/rAgEYwHwYDVR0j BBgwFoAU/dVCrA6lq0+D0MaoY8XVtqEw4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYwMzFmZDAtNTg0MC00YWMxLWJmYjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMw RUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZBMTMwRTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREQ1NDJBQzBFQTVBQjRGODNEMEM2QTg2M0M1RDVCNkExMzBF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYwMzFmZDAtNTg0MC00YWMxLWJm YjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1 QjZBMTMwRTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3icAHmB62/YjGzfMY7OElnAmH4XvQh1Cim i3r3+WKiPDRZClpuFVgdajVwWx0/VjFRQ7OdAiZj/UFkAYEoMEfwGNP3OnqjUTgw TTeJNiJ0Sz6BeK3YHTYwZlivNQ4vXGlEPRyAywi4VbVM+sfxsc3bS1JoI0sR8Lp+ ArGHZBFyBvW1GTy5xrLj/WhfWMB+GhkMdKotQ56X7Dlg/YVKoCPF8tkG4GCpd+ac xtHRwgSyGsHLF2kzVEwJ7hClvyUSfhdkUwP7MFkX8wNsWcAvBK4SHF0iNHPd26F2 kxWPWKmSMBBljOtprFfrVuEZetGMeKjsr6qkVWEuQobPtnlS1go= -----END CERTIFICATE-----Generated at Wed May 13 02:15:27 2026 by rpki-client