$ rpki-client -vvf rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft File: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft (raw, json) Hash identifier: QWdtMpSdTmGFD9WR46flqfEU7p1N5Z5wdKb0IXNPfME= Subject key identifier: 3E:FD:26:0B:F9:A3:A9:98:78:66:AC:D2:7B:9C:D0:5C:66:19:D5:75 Authority key identifier: FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB Certificate issuer: /CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Certificate serial: 1463AD2750F5B225DB763D9F4B071E741173C45C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 11:24:02 +0000 Manifest this update: Thu 23 Jul 2026 11:19:02 +0000 Manifest next update: Fri 24 Jul 2026 14:20:02 +0000 Files and hashes: 1: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: zgtrY5nvzrcyU/ntTybDgmO63b7QkAMGZiL13SPjEp8=) 2: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl (hash: FMC8UNIWaGG+xr7mqPQ46bdUtkfgzLR81mWKXYcpGQM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:63:ad:27:50:f5:b2:25:db:76:3d:9f:4b:07:1e:74:11:73:c4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Validity Not Before: Jul 23 11:19:02 2026 GMT Not After : Jul 24 14:20:02 2026 GMT Subject: CN=3EFD260BF9A3A9987866ACD27B9CD05C6619D575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:24:e5:4d:30:ed:04:a0:13:66:da:57:7d: 6c:d2:49:64:62:85:e0:f1:d3:05:8f:ba:d9:f0:de: be:cf:d5:91:93:37:e7:72:ec:f6:d7:87:79:39:83: 72:ea:e4:4c:c7:eb:ac:de:13:c0:57:b1:e8:11:d6: 42:d1:4f:99:22:52:49:cf:49:c8:ed:87:67:5c:05: 80:2e:b9:8a:dd:c3:a9:ac:1c:49:f2:8c:7c:84:2c: 4d:e9:08:ca:ca:c3:69:a5:86:cb:0d:0c:17:c0:e6: 64:0a:ea:ea:7c:9a:f7:45:a4:76:f9:e7:5e:22:96: b3:32:cd:d8:d3:f3:96:7b:ce:86:89:f8:77:e3:d4: 41:58:e9:5f:df:94:82:26:20:1e:be:34:b6:bc:c1: 69:2b:13:e3:1f:0f:fd:25:86:ed:1a:5c:d1:e7:8f: 83:01:64:4e:0f:66:c5:4f:19:32:3b:f5:06:5a:66: 00:35:5b:01:90:d8:3d:ff:dd:d0:9d:0e:13:53:2b: 63:25:76:eb:b0:e1:a2:67:b0:af:e9:3b:d8:1b:5e: df:6d:f9:90:53:06:89:88:e5:90:fc:b7:6a:b5:bb: 10:ce:79:50:e8:54:48:d0:be:ed:29:2d:25:6d:74: 4c:2a:ca:3d:58:2f:e3:05:12:92:ae:d1:a1:a3:ee: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FD:26:0B:F9:A3:A9:98:78:66:AC:D2:7B:9C:D0:5C:66:19:D5:75 X509v3 Authority Key Identifier: keyid:FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:61:ff:b6:b4:97:d1:93:28:77:68:89:a1:7e:9a:db:12:9d: cd:27:d2:94:75:9d:ba:c3:e4:10:ac:15:bd:07:39:b0:0e:ed: ad:51:51:3b:58:5a:ed:2a:b6:80:86:6f:b5:d3:b1:b9:1c:af: 8d:f1:93:3a:1f:d7:26:7f:a4:43:96:a3:6a:27:26:70:82:c9: 51:a7:77:ac:81:b3:86:4d:2b:00:67:5f:8b:b6:21:e7:d6:c5: 0c:8c:f4:ec:6a:74:52:1f:55:6a:06:bb:e9:3e:17:43:84:24: 99:61:9c:10:20:1b:fd:ad:10:95:01:af:f0:06:82:5c:6f:f0: 60:4d:e1:34:4f:59:4b:3b:a4:d1:34:cc:d1:16:cc:4b:82:55: 78:ed:7b:0e:0e:11:72:47:21:77:43:3c:4a:30:f8:54:60:50: 2d:89:04:21:dd:54:51:28:4d:52:81:98:d3:50:47:e1:4b:b9: 4d:51:b1:5c:87:10:54:38:16:cf:30:80:94:61:61:6d:71:ba: ed:93:b6:2d:21:53:aa:74:89:1d:66:ff:d5:bb:52:0f:9b:89: 44:3f:8d:9e:d2:33:87:59:bf:7c:d9:33:f5:74:94:c0:26:2b: b7:49:6c:ef:39:1d:11:39:31:39:4c:34:97:43:04:ba:f3:d1: 6b:46:5e:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGOtJ1D1siXbdj2fSwcedBFzxFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZB MTMwRTFFQjAeFw0yNjA3MjMxMTE5MDJaFw0yNjA3MjQxNDIwMDJaMDMxMTAvBgNV BAMTKDNFRkQyNjBCRjlBM0E5OTg3ODY2QUNEMjdCOUNEMDVDNjYxOUQ1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAuiTlTTDtBKATZtpXfWzSSWRi heDx0wWPutnw3r7P1ZGTN+dy7PbXh3k5g3Lq5EzH66zeE8BXsegR1kLRT5kiUknP Scjth2dcBYAuuYrdw6msHEnyjHyELE3pCMrKw2mlhssNDBfA5mQK6up8mvdFpHb5 514ilrMyzdjT85Z7zoaJ+Hfj1EFY6V/flIImIB6+NLa8wWkrE+MfD/0lhu0aXNHn j4MBZE4PZsVPGTI79QZaZgA1WwGQ2D3/3dCdDhNTK2Mlduuw4aJnsK/pO9gbXt9t +ZBTBomI5ZD8t2q1uxDOeVDoVEjQvu0pLSVtdEwqyj1YL+MFEpKu0aGj7p/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPv0mC/mjqZh4ZqzSe5zQXGYZ1XUwHwYDVR0j BBgwFoAU/dVCrA6lq0+D0MaoY8XVtqEw4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYwMzFmZDAtNTg0MC00YWMxLWJmYjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMw RUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZBMTMwRTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREQ1NDJBQzBFQTVBQjRGODNEMEM2QTg2M0M1RDVCNkExMzBF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYwMzFmZDAtNTg0MC00YWMxLWJm YjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1 QjZBMTMwRTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOJh/7a0l9GTKHdoiaF+mtsSnc0n0pR1nbrD 5BCsFb0HObAO7a1RUTtYWu0qtoCGb7XTsbkcr43xkzof1yZ/pEOWo2onJnCCyVGn d6yBs4ZNKwBnX4u2IefWxQyM9OxqdFIfVWoGu+k+F0OEJJlhnBAgG/2tEJUBr/AG glxv8GBN4TRPWUs7pNE0zNEWzEuCVXjtew4OEXJHIXdDPEow+FRgUC2JBCHdVFEo TVKBmNNQR+FLuU1RsVyHEFQ4Fs8wgJRhYW1xuu2Tti0hU6p0iR1m/9W7Ug+biUQ/ jZ7SM4dZv3zZM/V0lMAmK7dJbO85HRE5MTlMNJdDBLrz0WtGXhc= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:57 2026 by rpki-client