$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft (raw, json) Hash identifier: mLMf9a+Vf5IbzBTGLpiqzhcZEhx0WhrRp7sEKRfvsno= Subject key identifier: 8D:D1:34:EA:FD:63:5A:81:2D:F7:7C:56:29:C6:91:C8:08:8E:B9:E6 Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 32D757366C5CCFFB8D0955F10AA14541E50AD6EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:54:23 +0000 Manifest this update: Wed 23 Sep 2026 22:49:23 +0000 Manifest next update: Fri 25 Sep 2026 01:32:23 +0000 Files and hashes: 1: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=) 2: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl (hash: ywKDyLYlNEETM3qBycPRA1dkdppDk2lm2t/YprL5qRk=) 3: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0=) 4: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d7:57:36:6c:5c:cf:fb:8d:09:55:f1:0a:a1:45:41:e5:0a:d6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: Sep 23 22:49:23 2026 GMT Not After : Sep 25 01:32:23 2026 GMT Subject: CN=8DD134EAFD635A812DF77C5629C691C8088EB9E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:32:87:75:8e:e5:a0:e8:5a:4a:cd:cf:2b: 9a:c9:04:54:5d:02:d9:b5:0f:9e:5b:12:e2:53:9e: a4:67:cc:b2:71:e3:1b:ae:8b:f8:92:2d:74:54:7e: 4f:4b:35:df:a9:9e:4a:33:52:da:08:dd:3b:17:b8: 93:84:38:dc:f7:54:94:bc:ba:fb:6a:9a:4d:43:b4: 03:76:1c:be:f8:a8:1a:fe:2d:1b:ab:24:ec:9b:31: 62:1c:37:2f:4d:18:50:db:43:30:4b:51:c3:1d:74: cd:21:3a:a5:f4:df:9f:85:e8:1e:de:7e:e5:a2:bd: 1e:e1:52:75:ea:69:54:4a:c2:84:d1:48:d9:f0:bb: e9:7f:07:e4:c5:d7:ec:a8:9c:74:4c:dd:2c:da:14: f9:1c:d4:2d:e7:ad:20:43:11:09:d7:38:0f:97:f3: 31:4e:a0:07:1f:f4:71:bf:51:32:02:a0:d8:c4:d9: 18:35:75:0e:72:93:2e:33:29:26:74:c0:75:0c:5d: 00:89:77:a8:44:68:9f:2f:85:7f:6c:92:20:72:e8: a4:d8:3c:30:22:66:15:26:71:79:71:9f:90:60:2b: f2:04:b3:a6:02:78:46:cf:29:b7:5e:49:8b:c7:f1: 20:ad:18:7a:e9:23:36:e8:da:89:6e:e5:23:07:13: e7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D1:34:EA:FD:63:5A:81:2D:F7:7C:56:29:C6:91:C8:08:8E:B9:E6 X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b3:84:c7:4f:df:39:92:fb:ea:91:ca:23:ea:f6:18:28:c6: 1e:70:7f:d2:94:b2:a5:7f:55:1d:11:3c:c9:2b:21:05:86:ad: 01:b3:28:ca:b9:3d:9c:92:5d:81:d5:0d:3a:b3:55:b9:31:aa: 8c:05:5f:78:7c:77:68:77:f4:3a:b7:73:ee:17:6b:87:97:de: 3e:d6:97:93:32:59:61:56:23:e7:c1:3b:ab:ac:2b:15:14:b4: b8:77:86:a6:9d:88:f5:a5:53:b3:51:93:c5:f6:0b:21:ef:36: 03:e7:8a:e2:6d:39:a9:b8:f7:a5:6f:5b:00:c2:d5:c2:58:11: bf:0f:2e:e4:1f:b5:d1:96:ea:8b:2f:16:a3:fd:6e:ff:37:8c: ad:4e:d9:3c:31:4b:42:79:6e:08:ff:e7:e9:b3:25:cc:16:10: c1:ac:e0:7a:11:1b:c8:93:54:6f:8b:2a:79:ae:9d:ee:89:02: 07:3b:62:81:a1:d5:26:36:b1:20:a5:30:68:6d:a2:a4:b1:15: dd:e1:90:83:55:de:23:ac:eb:02:81:87:af:eb:53:af:e1:06: 87:df:5d:da:55:2c:b8:f6:6f:71:92:f3:14:c0:d8:82:c3:47: 1f:54:bd:c0:d0:f1:8a:63:1d:c3:e4:0c:c6:78:70:17:27:c4: 9e:60:91:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtdXNmxcz/uNCVXxCqFFQeUK1uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjA5MjMyMjQ5MjNaFw0yNjA5MjUwMTMyMjNaMDMxMTAvBgNV BAMTKDhERDEzNEVBRkQ2MzVBODEyREY3N0M1NjI5QzY5MUM4MDg4RUI5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGjKHdY7loOhaSs3PK5rJBFRd Atm1D55bEuJTnqRnzLJx4xuui/iSLXRUfk9LNd+pnkozUtoI3TsXuJOEONz3VJS8 uvtqmk1DtAN2HL74qBr+LRurJOybMWIcNy9NGFDbQzBLUcMddM0hOqX035+F6B7e fuWivR7hUnXqaVRKwoTRSNnwu+l/B+TF1+yonHRM3SzaFPkc1C3nrSBDEQnXOA+X 8zFOoAcf9HG/UTICoNjE2Rg1dQ5yky4zKSZ0wHUMXQCJd6hEaJ8vhX9skiBy6KTY PDAiZhUmcXlxn5BgK/IEs6YCeEbPKbdeSYvH8SCtGHrpIzbo2olu5SMHE+fhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdE06v1jWoEt93xWKcaRyAiOueYwHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIx RUNCQUYyRjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICzhMdP3zmS++qRyiPq9hgoxh5wf9KUsqV/ VR0RPMkrIQWGrQGzKMq5PZySXYHVDTqzVbkxqowFX3h8d2h39Dq3c+4Xa4eX3j7W l5MyWWFWI+fBO6usKxUUtLh3hqadiPWlU7NRk8X2CyHvNgPniuJtOam496VvWwDC 1cJYEb8PLuQftdGW6osvFqP9bv83jK1O2TwxS0J5bgj/5+mzJcwWEMGs4HoRG8iT VG+LKnmune6JAgc7YoGh1SY2sSClMGhtoqSxFd3hkINV3iOs6wKBh6/rU6/hBoff XdpVLLj2b3GS8xTA2ILDRx9UvcDQ8YpjHcPkDMZ4cBcnxJ5gkak= -----END CERTIFICATE-----Generated at Thu Sep 24 08:25:22 2026 by rpki-client