$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft (raw, json) Hash identifier: SeRA5eO2fZtovEryN6nBtB60A2fg3WF2i5qcLWwYV8E= Subject key identifier: 21:6A:F7:6A:2E:AC:C1:C7:02:6E:00:FE:94:A7:C2:03:A3:9D:60:83 Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 4DA0D56ACAA9E755ABA77C0AF756F880248947A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:36:12 +0000 Manifest this update: Tue 12 May 2026 16:31:12 +0000 Manifest next update: Wed 13 May 2026 20:26:12 +0000 Files and hashes: 1: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl (hash: Jyt84rTg44Nk5F7fTTdxfkowrAwu2HMi9JgtOSgzAA0=) 2: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM=) 3: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0=) 4: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a0:d5:6a:ca:a9:e7:55:ab:a7:7c:0a:f7:56:f8:80:24:89:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: May 12 16:31:12 2026 GMT Not After : May 13 20:26:12 2026 GMT Subject: CN=216AF76A2EACC1C7026E00FE94A7C203A39D6083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:27:e2:60:5c:99:9e:83:7f:c3:be:9f:e5: eb:87:f0:93:0f:4e:d4:02:5d:d1:96:8c:7d:b8:18: 96:8d:05:d9:11:f6:cb:86:c9:c6:48:96:a6:c8:0b: d8:ef:61:6e:c9:40:2c:44:87:8c:fb:ee:39:52:32: 5b:49:b5:39:db:96:35:85:d3:5e:63:52:1c:58:ab: e3:9a:a1:f7:08:0e:eb:5f:12:74:fc:d1:c8:c4:84: 0a:77:c0:30:09:d0:ec:23:2c:bf:62:03:b3:9d:c8: e3:5e:98:bf:20:8d:49:19:e0:23:6a:ba:9b:8b:fe: f1:95:db:6d:7d:f7:2c:d0:60:d3:a0:37:d1:36:8d: 9e:18:6f:8d:d4:f0:3e:93:45:31:b9:78:0c:f5:b8: e4:f0:c8:cf:a9:de:f0:0b:1c:f5:6f:d5:a5:ba:38: 64:8c:39:b0:e4:6a:30:f5:89:8c:22:10:9c:b2:11: 3d:09:b1:79:90:25:82:af:11:70:3b:b4:9d:e7:35: f8:cb:d7:5a:9b:d8:21:31:f4:14:e2:3a:b4:b4:52: 42:82:a6:fc:1d:71:4a:fa:e3:d3:55:79:af:67:19: b7:d8:bc:9c:9d:56:fb:5b:69:97:9f:9a:ac:98:d5: 13:7e:ee:55:8c:a2:34:15:5e:c7:8a:5c:1b:f4:60: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6A:F7:6A:2E:AC:C1:C7:02:6E:00:FE:94:A7:C2:03:A3:9D:60:83 X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:96:c7:10:5c:e1:03:e8:ad:07:bb:ea:71:3c:53:5e:cd:cf: 82:91:33:8e:e4:9d:84:d4:a4:c2:1a:e4:37:97:23:6f:ec:82: 94:d7:7d:be:c2:6e:8f:22:ee:bd:65:c3:4f:4b:f3:2a:0f:f2: 25:14:d5:21:5b:54:41:55:c3:63:a6:50:a9:77:df:c9:fa:03: 73:21:0a:58:c0:cd:f4:10:29:6c:84:7d:cc:56:9e:f5:e7:ab: 3d:1d:c3:e6:c3:e0:a4:84:47:3b:02:c4:0b:13:2c:f1:26:71: d7:50:6d:5a:e3:f2:4b:f3:bf:c1:42:99:f2:da:15:53:ad:ff: 1b:8d:1a:ea:48:c5:cd:a1:69:cd:df:48:bc:76:06:16:da:1c: a2:ba:25:30:25:8d:eb:1e:89:2e:20:11:b2:f3:24:e8:71:db: 22:79:12:45:45:ed:6e:5c:2e:6a:ee:f9:33:97:00:f7:c3:6b: 4e:65:b4:d8:06:eb:26:00:36:2f:cb:f1:0f:04:98:78:e0:78: 33:f3:74:29:b8:b7:4c:9e:34:d3:fc:e8:f1:00:be:4e:e3:fa: 30:46:97:98:f5:34:fa:6d:d5:bc:a7:40:87:78:69:36:3a:1e: f4:65:6d:88:a2:a4:a2:d9:9e:5c:4f:2a:47:16:3d:c7:0d:fd: 77:a0:64:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTaDVasqp51Wrp3wK91b4gCSJR6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjA1MTIxNjMxMTJaFw0yNjA1MTMyMDI2MTJaMDMxMTAvBgNV BAMTKDIxNkFGNzZBMkVBQ0MxQzcwMjZFMDBGRTk0QTdDMjAzQTM5RDYwODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGSfiYFyZnoN/w76f5euH8JMP TtQCXdGWjH24GJaNBdkR9suGycZIlqbIC9jvYW7JQCxEh4z77jlSMltJtTnbljWF 015jUhxYq+OaofcIDutfEnT80cjEhAp3wDAJ0OwjLL9iA7OdyONemL8gjUkZ4CNq upuL/vGV22199yzQYNOgN9E2jZ4Yb43U8D6TRTG5eAz1uOTwyM+p3vALHPVv1aW6 OGSMObDkajD1iYwiEJyyET0JsXmQJYKvEXA7tJ3nNfjL11qb2CEx9BTiOrS0UkKC pvwdcUr649NVea9nGbfYvJydVvtbaZefmqyY1RN+7lWMojQVXseKXBv0YCTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIWr3ai6swccCbgD+lKfCA6OdYIMwHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIx RUNCQUYyRjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaWxxBc4QPorQe76nE8U17Nz4KRM47knYTU pMIa5DeXI2/sgpTXfb7Cbo8i7r1lw09L8yoP8iUU1SFbVEFVw2OmUKl338n6A3Mh CljAzfQQKWyEfcxWnvXnqz0dw+bD4KSERzsCxAsTLPEmcddQbVrj8kvzv8FCmfLa FVOt/xuNGupIxc2hac3fSLx2BhbaHKK6JTAljeseiS4gEbLzJOhx2yJ5EkVF7W5c Lmru+TOXAPfDa05ltNgG6yYANi/L8Q8EmHjgeDPzdCm4t0yeNNP86PEAvk7j+jBG l5j1NPpt1bynQId4aTY6HvRlbYiipKLZnlxPKkcWPccN/XegZPY= -----END CERTIFICATE-----Generated at Wed May 13 00:51:50 2026 by rpki-client