$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft File: FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft (raw, json) Hash identifier: THvaOBRKyZi9yMn40+TunbAlr700PeS4NGcrdnc7ZAI= Subject key identifier: A2:99:C8:E7:BF:FB:06:16:E4:AC:9D:C6:54:2D:9D:2E:FD:6D:6B:FF Authority key identifier: FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD Certificate issuer: /CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD Certificate serial: 33B5A229B066CA4EE30DAFC6E1A344171BCB30DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:12:20 +0000 Manifest this update: Thu 23 Jul 2026 14:07:20 +0000 Manifest next update: Fri 24 Jul 2026 14:26:20 +0000 Files and hashes: 1: FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl (hash: uxrQfIL8LrSrm3M3VjBwDQt8jVaDyovlQrge4OJrQYg=) 2: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: yDrVyoeowwpodsmIoAkE1qIpwTZ6W9Penvq2Oshsmwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b5:a2:29:b0:66:ca:4e:e3:0d:af:c6:e1:a3:44:17:1b:cb:30:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD Validity Not Before: Jul 23 14:07:20 2026 GMT Not After : Jul 24 14:26:20 2026 GMT Subject: CN=A299C8E7BFFB0616E4AC9DC6542D9D2EFD6D6BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:03:b3:d7:e5:e8:a7:a7:dd:ea:26:15:cc: 92:cd:27:b2:66:3c:90:be:68:a2:8e:34:56:2b:9b: 71:38:98:77:aa:5e:6a:a4:29:4f:b9:d7:22:7c:f1: c3:27:f4:8f:fb:81:bb:0c:f4:ab:f8:9d:88:92:ac: c8:01:ea:bf:71:2e:07:9a:94:09:11:3a:a3:da:24: 2d:18:76:9f:ee:b0:a4:c2:03:f0:d6:5b:43:b6:f3: 70:05:17:a8:a3:5b:5c:ff:04:91:c0:ba:5b:83:21: b2:11:0e:8e:c4:cc:27:61:38:4f:86:43:ed:72:14: 98:05:5e:76:e3:0a:05:49:80:c5:80:94:33:73:dd: 43:cb:39:35:e2:c1:28:1b:ac:cf:12:7b:c9:91:96: 17:25:d7:d3:b8:12:27:39:d0:0d:cb:e0:c0:38:ac: 67:b3:20:c9:23:ff:45:4f:ff:c6:a5:cf:2e:f3:cd: 27:4c:ab:0c:6e:d9:b6:6e:9f:2e:41:13:98:ac:fa: 08:6b:c0:23:bf:df:0b:0d:cb:81:5e:98:6a:86:07: 74:8e:1e:77:70:80:64:82:0f:3f:92:65:9d:1c:a2: b7:57:d2:6f:98:cf:2b:16:7a:ae:19:6a:74:b9:d8: 3f:00:9f:60:65:88:13:2f:ba:f9:b3:ad:ce:d4:f8: ae:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:99:C8:E7:BF:FB:06:16:E4:AC:9D:C6:54:2D:9D:2E:FD:6D:6B:FF X509v3 Authority Key Identifier: keyid:FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f8:91:4a:df:85:ac:12:ec:48:c6:e3:06:fc:71:51:df:ff: de:24:70:3a:77:17:bc:3e:1d:9a:09:64:76:d6:07:fe:17:79: f9:94:9a:87:0a:f1:26:a8:bb:98:93:e3:b1:32:8d:47:6b:2e: 06:db:15:24:98:d7:fb:0c:ba:97:2d:38:3e:91:52:0c:3a:c6: e3:91:bc:0c:eb:c8:e6:2b:bb:dd:a2:3a:37:62:da:c8:bd:96: c9:5c:ca:c4:3a:5b:12:2a:6b:d8:db:b3:26:50:f3:c5:31:de: 40:9a:57:64:8b:a3:61:d9:a4:b9:09:f4:34:5c:d4:8e:65:36: 3c:b7:7d:5e:6c:ac:8a:69:b4:4c:70:4c:6e:dd:b6:12:76:91: 2f:3b:65:bc:f1:91:6a:92:8b:54:a4:6b:8b:d5:4e:40:aa:27: 7c:90:85:31:d9:24:0e:17:52:7d:33:b7:eb:01:94:2b:86:05: 7e:ea:e2:a2:38:b7:aa:06:74:3f:6c:a0:71:eb:21:04:e7:2c: 1a:eb:20:db:3e:a0:d7:0b:39:19:f9:58:52:e8:91:ae:6c:6b: fd:b2:77:ce:09:7b:10:16:87:13:ac:7e:54:9f:81:66:ed:42: 72:c3:5c:41:64:ad:5f:2b:13:bd:29:46:83:53:43:35:6f:0c: 3d:1b:2d:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7WiKbBmyk7jDa/G4aNEFxvLMN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRCRTU2MzcwNjlGRDVDNEY5MjVBNUZFNEUwOTQ5Nzcy QjM2RDdDRDAeFw0yNjA3MjMxNDA3MjBaFw0yNjA3MjQxNDI2MjBaMDMxMTAvBgNV BAMTKEEyOTlDOEU3QkZGQjA2MTZFNEFDOURDNjU0MkQ5RDJFRkQ2RDZCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNwOz1+Xop6fd6iYVzJLNJ7Jm PJC+aKKONFYrm3E4mHeqXmqkKU+51yJ88cMn9I/7gbsM9Kv4nYiSrMgB6r9xLgea lAkROqPaJC0Ydp/usKTCA/DWW0O283AFF6ijW1z/BJHAuluDIbIRDo7EzCdhOE+G Q+1yFJgFXnbjCgVJgMWAlDNz3UPLOTXiwSgbrM8Se8mRlhcl19O4Eic50A3L4MA4 rGezIMkj/0VP/8alzy7zzSdMqwxu2bZuny5BE5is+ghrwCO/3wsNy4FemGqGB3SO HndwgGSCDz+SZZ0cordX0m+YzysWeq4ZanS52D8An2BliBMvuvmzrc7U+K4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUopnI57/7BhbkrJ3GVC2dLv1ta/8wHwYDVR0j BBgwFoAU/b5WNwaf1cT5JaX+TglJdys2180wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2UyN2IzZTEtZjYxMS00YWZlLTlhNDktNWZhNGZkNTU3NjUzLzAvRkRCRTU2Mzcw NjlGRDVDNEY5MjVBNUZFNEUwOTQ5NzcyQjM2RDdDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREJFNTYzNzA2OUZENUM0RjkyNUE1RkU0RTA5NDk3NzJCMzZE N0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2UyN2IzZTEtZjYxMS00YWZlLTlh NDktNWZhNGZkNTU3NjUzLzAvRkRCRTU2MzcwNjlGRDVDNEY5MjVBNUZFNEUwOTQ5 NzcyQjM2RDdDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH34kUrfhawS7EjG4wb8cVHf/94kcDp3F7w+ HZoJZHbWB/4XefmUmocK8Saou5iT47EyjUdrLgbbFSSY1/sMupctOD6RUgw6xuOR vAzryOYru92iOjdi2si9lslcysQ6WxIqa9jbsyZQ88Ux3kCaV2SLo2HZpLkJ9DRc 1I5lNjy3fV5srIpptExwTG7dthJ2kS87ZbzxkWqSi1Ska4vVTkCqJ3yQhTHZJA4X Un0zt+sBlCuGBX7q4qI4t6oGdD9soHHrIQTnLBrrINs+oNcLORn5WFLoka5sa/2y d84JexAWhxOsflSfgWbtQnLDXEFkrV8rE70pRoNTQzVvDD0bLZ0= -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:02 2026 by rpki-client