$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft (raw, json) Hash identifier: eKiHqU2HAifrcXaDv5CJI0DzH8SS9wzV9ikisnYGdFU= Subject key identifier: 7C:86:C0:DD:F5:60:0E:93:26:99:B6:5B:54:DD:06:4A:71:6B:92:FA Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 252A436068348ADA8456A2DAA54C00B129F4BDC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 16:25:01 +0000 Manifest this update: Sat 14 Nov 2026 16:20:01 +0000 Manifest next update: Sun 15 Nov 2026 20:06:01 +0000 Files and hashes: 1: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0=) 2: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl (hash: tzx6R7xm2Hixv/fVKnlQKSYMIihIdn15IIt6die8gBA=) 3: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM=) 4: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2a:43:60:68:34:8a:da:84:56:a2:da:a5:4c:00:b1:29:f4:bd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: Nov 14 16:20:01 2026 GMT Not After : Nov 15 20:06:01 2026 GMT Subject: CN=7C86C0DDF5600E932699B65B54DD064A716B92FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:4c:56:a6:48:3e:14:61:71:1d:f8:b9:00: f1:5c:83:ec:81:88:2c:c2:ce:3d:54:37:f5:20:d2: b4:ed:d3:93:3a:a9:6b:52:fc:7e:7a:c5:3a:f6:aa: c4:e5:50:6b:c4:0c:ff:56:5a:44:96:6b:17:45:33: 48:54:24:32:62:66:5c:d0:21:7b:e2:d1:fd:39:03: 19:a7:bc:e3:37:85:41:f3:0b:d8:ae:37:6f:fe:9b: 52:37:ef:44:3b:61:29:2d:5a:f4:86:00:24:b9:4b: fc:37:c0:80:3f:55:c4:dc:88:49:a2:5e:36:d4:09: cc:df:48:2d:5e:55:3c:7b:af:c2:2d:7a:00:b9:97: 05:90:72:b2:7a:3d:2b:95:a4:45:99:53:22:a6:58: f0:01:bc:83:e8:a0:ed:c8:75:fd:6b:51:9c:aa:8a: 0a:bc:4d:69:48:f3:b5:22:87:a6:ea:66:57:80:69: 87:28:3f:90:ff:7e:a3:f8:19:2b:1d:10:bb:e4:a9: d0:54:c5:44:ae:dd:8d:4b:3f:e7:f0:43:15:8b:ba: 32:92:ad:4a:06:82:45:7d:59:f8:f8:b2:50:df:93: 79:c9:d1:eb:3f:26:95:fd:66:51:35:fd:7a:15:da: 6f:1a:6a:c3:fa:af:86:a1:6a:b0:76:37:54:b7:d6: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:86:C0:DD:F5:60:0E:93:26:99:B6:5B:54:DD:06:4A:71:6B:92:FA X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:11:8b:9e:b2:20:b2:17:22:9a:e0:45:a9:73:00:76:54:21: ef:1e:4e:0b:87:81:bc:e4:41:38:a0:b9:a2:9e:fe:8b:14:a0: 4b:51:cd:1b:ae:d7:89:fa:87:96:af:89:3d:82:4f:9b:47:2f: 8a:d4:94:36:cd:de:d4:12:f2:ea:cc:6d:da:b3:02:e9:5b:bc: 4e:6a:0f:92:fc:b9:0c:0c:bd:d9:57:bf:94:bc:07:0d:34:fc: 6e:eb:8a:ed:16:10:11:f9:b1:b2:99:ee:49:86:b6:4f:46:3d: be:a1:65:1f:95:f9:7b:8c:97:db:56:07:1a:3e:a9:83:60:7c: 42:65:1c:0d:23:71:4b:90:7e:ca:e8:d5:76:30:88:27:7d:d4: 15:a9:17:51:0b:2e:4d:b3:3e:d5:67:fa:62:69:59:23:c9:52: 29:29:8c:68:40:b6:ce:9e:75:5d:20:c5:6b:54:05:cc:70:a8: 2a:29:1b:9b:ec:ec:fd:3a:04:73:0f:45:70:23:fe:87:11:ee: 01:89:83:9d:e3:25:41:ed:f6:a3:2e:6a:96:2a:8d:75:1a:ff: 62:87:32:27:4d:f5:22:aa:8c:06:9b:97:e6:fe:a3:75:8d:20: 63:cc:ee:a8:58:8d:10:4e:2c:87:7e:15:6f:ea:89:ad:68:65: 38:b0:45:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSpDYGg0itqEVqLapUwAsSn0vcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjExMTQxNjIwMDFaFw0yNjExMTUyMDA2MDFaMDMxMTAvBgNV BAMTKDdDODZDMERERjU2MDBFOTMyNjk5QjY1QjU0REQwNjRBNzE2QjkyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZkxWpkg+FGFxHfi5APFcg+yB iCzCzj1UN/Ug0rTt05M6qWtS/H56xTr2qsTlUGvEDP9WWkSWaxdFM0hUJDJiZlzQ IXvi0f05AxmnvOM3hUHzC9iuN2/+m1I370Q7YSktWvSGACS5S/w3wIA/VcTciEmi XjbUCczfSC1eVTx7r8ItegC5lwWQcrJ6PSuVpEWZUyKmWPABvIPooO3Idf1rUZyq igq8TWlI87Uih6bqZleAaYcoP5D/fqP4GSsdELvkqdBUxUSu3Y1LP+fwQxWLujKS rUoGgkV9Wfj4slDfk3nJ0es/JpX9ZlE1/XoV2m8aasP6r4aharB2N1S31itJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfIbA3fVgDpMmmbZbVN0GSnFrkvowHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIx RUNCQUYyRjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4Ri56yILIXIprgRalzAHZUIe8eTguHgbzk QTiguaKe/osUoEtRzRuu14n6h5aviT2CT5tHL4rUlDbN3tQS8urMbdqzAulbvE5q D5L8uQwMvdlXv5S8Bw00/G7riu0WEBH5sbKZ7kmGtk9GPb6hZR+V+XuMl9tWBxo+ qYNgfEJlHA0jcUuQfsro1XYwiCd91BWpF1ELLk2zPtVn+mJpWSPJUikpjGhAts6e dV0gxWtUBcxwqCopG5vs7P06BHMPRXAj/ocR7gGJg53jJUHt9qMuapYqjXUa/2KH MidN9SKqjAabl+b+o3WNIGPM7qhYjRBOLId+FW/qia1oZTiwRTQ= -----END CERTIFICATE-----Generated at Sat Nov 14 22:57:36 2026 by rpki-client