$ rpki-client -vvf rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft File: FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft (raw, json) Hash identifier: CdjyThCMtMwzkS88Ph4eB1ydult7Wcu0CV8EizKWo/Q= Subject key identifier: 10:EC:DD:1B:F3:90:F6:C8:41:3C:99:3E:F2:A2:CD:C5:10:98:D5:A5 Authority key identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 Certificate issuer: /CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Certificate serial: 2337D8FBA56BF84C1DEBF53F33CA0F5ACFA47D67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:37:41 +0000 Manifest this update: Tue 12 May 2026 20:32:41 +0000 Manifest next update: Wed 13 May 2026 22:30:41 +0000 Files and hashes: 1: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: wvIAxFKPShLQpqf7iVcqajkRTzgNz/nJFo4xan5f+EA=) 2: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 1Tk9QAHZ0ijLeVFuLiIRsfqrrSPDFu+yHnjWDMhhwpg=) 3: FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl (hash: hhMdWzi6/nILiv9jh4MeyzEgiuComyRQR72FFaH3otg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:37:d8:fb:a5:6b:f8:4c:1d:eb:f5:3f:33:ca:0f:5a:cf:a4:7d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Validity Not Before: May 12 20:32:41 2026 GMT Not After : May 13 22:30:41 2026 GMT Subject: CN=10ECDD1BF390F6C8413C993EF2A2CDC51098D5A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:18:3c:50:7c:53:39:08:0c:ba:72:5f:9e: b1:f3:f1:f6:9b:4f:00:89:0c:ef:db:74:11:01:23: 27:a0:24:13:49:f6:2c:8c:db:75:20:8b:63:7a:f3: 16:15:c8:b0:9a:da:ce:01:9e:7f:2a:2b:45:50:c3: 92:b1:e3:d4:fd:e7:f3:98:00:38:9c:fa:bf:d2:f6: de:17:cc:bf:08:a7:3e:a8:33:49:cc:41:4b:f2:30: ad:f9:40:76:8c:e5:e4:7a:d0:28:4c:21:50:e1:a2: 31:5a:ed:53:8f:1a:49:0d:4a:1f:39:24:33:f2:56: 7a:9e:8e:b2:fe:89:17:94:e1:ed:ff:8e:17:14:b7: f9:bd:78:b2:d2:29:2a:e0:1f:9d:d6:3e:2c:d4:18: a6:6a:a0:2f:8b:e9:ca:4d:e0:dd:0c:3f:65:80:c5: 18:b0:8d:0c:33:02:b4:63:78:f8:a4:d3:ef:d3:a9: ed:31:cb:e3:74:3d:55:33:fe:b4:4b:25:c1:84:55: 6d:52:df:4a:9e:52:8f:f1:79:26:61:f5:0e:74:66: d5:6d:07:0a:91:4a:6c:10:99:f6:75:11:6b:69:c2: 9f:ff:3f:9c:8e:f8:0d:39:e3:1b:a4:37:b1:9f:26: 29:c5:24:52:1f:cb:08:6f:73:da:8b:53:b5:e1:c6: 34:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EC:DD:1B:F3:90:F6:C8:41:3C:99:3E:F2:A2:CD:C5:10:98:D5:A5 X509v3 Authority Key Identifier: keyid:FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2f:b5:5a:bb:ed:1f:ef:28:62:bb:0a:69:50:0d:51:e1:6b: cb:da:d7:49:d8:1c:28:e3:24:d8:6a:77:0c:0b:2c:ac:80:0d: ae:ee:a0:4c:d2:4b:b2:9f:2d:9a:ad:ec:76:0c:53:5a:96:d4: 0e:eb:37:ea:ac:5b:10:ec:a6:33:34:8a:0c:f7:df:a9:3a:55: 43:17:8f:0a:64:7d:d8:d5:38:ac:a7:f2:56:d5:71:2a:b9:9b: b0:8b:52:e6:60:ae:ef:9f:04:53:70:a3:86:dd:8d:54:f0:29: 1a:a0:a9:ea:11:90:99:97:fb:79:6b:b0:48:c2:69:7d:40:2a: a6:80:3f:20:63:67:fa:b7:ae:81:1e:39:af:d9:ab:be:e6:a3: e4:ba:95:68:e8:ae:60:b9:46:46:37:41:f4:d4:33:86:f4:f3: b8:ad:d5:b0:1c:82:69:97:0b:a4:83:ef:1f:6f:46:0d:c9:8d: 75:c4:f9:61:3a:05:4d:e4:ea:8a:a0:21:8c:40:28:9e:d8:25: 18:8f:1a:e8:22:da:bc:fc:70:14:cb:78:a3:73:94:04:be:ef: 07:2a:92:8a:26:f5:6c:1e:d9:b1:52:c8:81:6f:af:04:4f:5f: 0e:ec:bc:c2:18:6d:66:cc:e4:c8:31:a0:06:0e:50:b0:5b:38: de:e2:b4:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzfY+6Vr+Ewd6/U/M8oPWs+kfWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5 RjQzQUZBNzAeFw0yNjA1MTIyMDMyNDFaFw0yNjA1MTMyMjMwNDFaMDMxMTAvBgNV BAMTKDEwRUNERDFCRjM5MEY2Qzg0MTNDOTkzRUYyQTJDREM1MTA5OEQ1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Whg8UHxTOQgMunJfnrHz8fab TwCJDO/bdBEBIyegJBNJ9iyM23Ugi2N68xYVyLCa2s4Bnn8qK0VQw5Kx49T95/OY ADic+r/S9t4XzL8Ipz6oM0nMQUvyMK35QHaM5eR60ChMIVDhojFa7VOPGkkNSh85 JDPyVnqejrL+iReU4e3/jhcUt/m9eLLSKSrgH53WPizUGKZqoC+L6cpN4N0MP2WA xRiwjQwzArRjePik0+/Tqe0xy+N0PVUz/rRLJcGEVW1S30qeUo/xeSZh9Q50ZtVt BwqRSmwQmfZ1EWtpwp//P5yO+A054xukN7GfJinFJFIfywhvc9qLU7XhxjTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEOzdG/OQ9shBPJk+8qLNxRCY1aUwHwYDVR0j BBgwFoAU/TUxh/sNNk+nCGoXKLmJS59Dr6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA0ZDAzOTctZmZhMC00OTAzLTgwNWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdG QjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5RjQzQUZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1MzE4N0ZCMEQzNjRGQTcwODZBMTcyOEI5ODk0QjlGNDNB RkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5 NEI5RjQzQUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUvtVq77R/vKGK7CmlQDVHha8va10nYHCjj JNhqdwwLLKyADa7uoEzSS7KfLZqt7HYMU1qW1A7rN+qsWxDspjM0igz336k6VUMX jwpkfdjVOKyn8lbVcSq5m7CLUuZgru+fBFNwo4bdjVTwKRqgqeoRkJmX+3lrsEjC aX1AKqaAPyBjZ/q3roEeOa/Zq77mo+S6lWjormC5RkY3QfTUM4b087it1bAcgmmX C6SD7x9vRg3JjXXE+WE6BU3k6oqgIYxAKJ7YJRiPGugi2rz8cBTLeKNzlAS+7wcq koom9Wwe2bFSyIFvrwRPXw7svMIYbWbM5MgxoAYOULBbON7itGw= -----END CERTIFICATE-----Generated at Wed May 13 06:19:18 2026 by rpki-client