$ rpki-client -vvvf rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft File: FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft (raw, json) Hash identifier: 3GnxWBgDQdLyqjYiqH9OoZ0BfNdT5CcTU9xMTq7t8SM= Subject key identifier: 92:4F:0E:02:80:7D:E6:47:65:BE:F9:19:78:FE:BC:35:4B:97:A5:5F Authority key identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 Certificate issuer: /CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Certificate serial: 15DFD2C074AA560DA1209C3EA5EC317824BB88F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 11:09:22 +0000 Manifest this update: Fri 25 Sep 2026 11:04:22 +0000 Manifest next update: Sat 26 Sep 2026 13:44:22 +0000 Files and hashes: 1: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 1Tk9QAHZ0ijLeVFuLiIRsfqrrSPDFu+yHnjWDMhhwpg=) 2: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: wvIAxFKPShLQpqf7iVcqajkRTzgNz/nJFo4xan5f+EA=) 3: FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl (hash: Yppo5aOw0gYmieRldIzXUMEC4Fymi8Pdg/gviFgyu74=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:df:d2:c0:74:aa:56:0d:a1:20:9c:3e:a5:ec:31:78:24:bb:88:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Validity Not Before: Sep 25 11:04:22 2026 GMT Not After : Sep 26 13:44:22 2026 GMT Subject: CN=924F0E02807DE64765BEF91978FEBC354B97A55F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:c8:42:c3:d0:91:83:b4:8a:70:a4:be:53: fd:14:1d:25:a9:00:05:22:91:16:87:b5:77:2f:18: 7c:62:2d:19:df:ce:67:93:30:82:eb:ff:47:98:da: 8c:6d:b8:f9:3f:58:9f:d3:3a:43:54:ee:e0:2d:43: 68:f8:b6:d1:9b:ed:5a:4d:aa:47:79:c2:35:73:b2: 60:07:8f:ab:ec:77:ce:ed:82:17:62:92:ef:be:fc: 94:f9:73:bb:83:b9:de:f4:56:44:4f:a6:01:ec:b2: 08:d9:25:2a:eb:5e:51:86:40:ae:a5:46:15:e4:ee: d6:36:92:a5:5b:52:30:aa:87:bd:b7:9f:f4:36:33: de:87:42:59:8f:13:b7:11:d8:4f:1e:56:2e:b8:5c: c3:10:37:09:3e:a2:70:bb:c3:33:8a:39:ef:d4:86: 99:44:13:63:c9:72:23:0b:bd:93:87:a9:32:fe:cc: f1:f9:1f:e1:51:f1:e5:91:79:92:40:2d:6a:de:62: a8:1d:55:8f:03:7f:d3:9e:71:df:94:47:92:93:b8: d7:2a:b5:69:aa:98:53:16:d2:e5:0a:a4:39:92:73: 43:56:ce:6d:b3:2b:45:b5:51:33:9a:5a:1b:1b:3e: b0:8f:93:67:a1:91:a3:15:5f:71:cc:e8:42:04:2d: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4F:0E:02:80:7D:E6:47:65:BE:F9:19:78:FE:BC:35:4B:97:A5:5F X509v3 Authority Key Identifier: keyid:FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a7:1b:19:b2:da:83:63:47:5c:5b:d3:06:1e:86:3f:21:d0: 76:6c:c5:b9:ad:f1:ab:13:a9:f8:56:9b:71:06:bd:40:83:f7: 11:b9:1a:f0:ca:2a:5e:19:83:56:88:8b:2f:3a:77:e5:87:5b: 2f:8f:3d:02:5b:84:64:33:ab:a6:4f:10:6d:b5:68:b4:79:cb: 00:86:2a:bd:20:5c:f7:02:08:3b:eb:54:87:9f:2a:41:c5:a5: bc:c3:34:a2:aa:b6:16:34:60:da:11:03:1c:54:92:c9:24:75: b1:2d:48:9c:23:24:67:32:16:e0:13:41:28:f8:49:1b:6e:8c: d8:f5:87:8f:01:fe:08:c1:91:09:e9:83:b9:2c:31:fd:35:e8: 42:5b:9f:aa:a9:75:9d:eb:88:46:f1:8e:86:d9:c9:4b:ea:b4: 73:61:b1:04:b2:af:23:19:a0:e6:5b:6d:96:e9:50:53:7b:90: 2f:85:a6:af:1b:54:1a:cf:14:0b:c7:1e:7d:59:15:08:2e:24: 7d:92:9a:07:b8:2a:2d:59:0a:b7:74:c8:6b:db:05:21:4b:b3: 3c:7e:c9:ca:7f:41:81:c5:98:84:57:ff:b1:b4:22:d4:ef:c2: 11:79:cc:45:ec:19:05:53:6c:63:6e:09:1d:02:eb:0a:25:c8: a7:51:46:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFd/SwHSqVg2hIJw+pewxeCS7iPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5 RjQzQUZBNzAeFw0yNjA5MjUxMTA0MjJaFw0yNjA5MjYxMzQ0MjJaMDMxMTAvBgNV BAMTKDkyNEYwRTAyODA3REU2NDc2NUJFRjkxOTc4RkVCQzM1NEI5N0E1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn28hCw9CRg7SKcKS+U/0UHSWp AAUikRaHtXcvGHxiLRnfzmeTMILr/0eY2oxtuPk/WJ/TOkNU7uAtQ2j4ttGb7VpN qkd5wjVzsmAHj6vsd87tghdiku++/JT5c7uDud70VkRPpgHssgjZJSrrXlGGQK6l RhXk7tY2kqVbUjCqh723n/Q2M96HQlmPE7cR2E8eVi64XMMQNwk+onC7wzOKOe/U hplEE2PJciMLvZOHqTL+zPH5H+FR8eWReZJALWreYqgdVY8Df9Oecd+UR5KTuNcq tWmqmFMW0uUKpDmSc0NWzm2zK0W1UTOaWhsbPrCPk2ehkaMVX3HM6EIELemHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkk8OAoB95kdlvvkZeP68NUuXpV8wHwYDVR0j BBgwFoAU/TUxh/sNNk+nCGoXKLmJS59Dr6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA0ZDAzOTctZmZhMC00OTAzLTgwNWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdG QjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5RjQzQUZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1MzE4N0ZCMEQzNjRGQTcwODZBMTcyOEI5ODk0QjlGNDNB RkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5 NEI5RjQzQUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFinGxmy2oNjR1xb0wYehj8h0HZsxbmt8asT qfhWm3EGvUCD9xG5GvDKKl4Zg1aIiy86d+WHWy+PPQJbhGQzq6ZPEG21aLR5ywCG Kr0gXPcCCDvrVIefKkHFpbzDNKKqthY0YNoRAxxUkskkdbEtSJwjJGcyFuATQSj4 SRtujNj1h48B/gjBkQnpg7ksMf016EJbn6qpdZ3riEbxjobZyUvqtHNhsQSyryMZ oOZbbZbpUFN7kC+Fpq8bVBrPFAvHHn1ZFQguJH2Smge4Ki1ZCrd0yGvbBSFLszx+ ycp/QYHFmIRX/7G0ItTvwhF5zEXsGQVTbGNuCR0C6wolyKdRRvs= -----END CERTIFICATE-----Generated at Sat Sep 26 08:04:58 2026 by rpki-client