$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft (raw, json) Hash identifier: MX529q+bjxrahMd27BnI4BMKdiDzogSDvW1PNIrSfy4= Subject key identifier: 36:B3:D6:DB:10:F1:85:51:D9:60:8B:57:F1:AD:60:0F:16:B8:8B:60 Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 52A7C74B44FCF1AF36F4711423DDF2E65102131B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:16:15 +0000 Manifest this update: Thu 23 Jul 2026 13:11:15 +0000 Manifest next update: Fri 24 Jul 2026 14:12:15 +0000 Files and hashes: 1: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0=) 2: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=) 3: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM=) 4: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl (hash: jvwOJOt4bAGiZsRcPhAqXUjxb6SiFOPP6LOO5hYqNDI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a7:c7:4b:44:fc:f1:af:36:f4:71:14:23:dd:f2:e6:51:02:13:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: Jul 23 13:11:15 2026 GMT Not After : Jul 24 14:12:15 2026 GMT Subject: CN=36B3D6DB10F18551D9608B57F1AD600F16B88B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:22:c1:03:5b:1a:1a:ab:bc:29:76:dd:5f: 94:fa:ec:e0:93:51:09:61:89:89:2d:40:0f:32:94: eb:f9:51:e2:19:82:a6:e4:52:30:9b:26:9e:89:99: 10:af:06:20:cc:78:10:da:01:f0:63:10:6e:82:44: ff:78:f6:28:2b:6e:13:da:8b:ea:29:0a:5f:0b:f4: d2:43:b6:be:c5:fd:ca:2f:f1:b5:07:b5:b0:4f:53: d2:e0:fa:42:df:74:5f:b6:78:44:95:84:80:99:80: cb:df:2a:f4:4c:f8:7f:3a:9c:d4:34:d1:ad:20:67: 3a:f8:c3:c5:90:66:ee:ea:c5:0a:98:4d:a6:33:ff: 00:bf:f2:38:7c:53:f0:ae:e0:aa:51:7f:4e:9f:7e: f4:ff:54:26:0e:8c:82:3a:3a:93:1f:b8:e0:82:fb: 62:f2:71:e1:18:1d:54:16:c3:f9:f0:fe:bc:6b:f6: d8:ee:f5:af:7d:ba:c3:3e:94:50:93:88:43:e0:ef: b4:f4:a2:26:3f:3c:52:45:bc:bf:cf:cc:04:16:40: 15:74:18:a8:7e:fd:b1:d5:6b:29:3d:80:95:13:16: 87:3e:4e:8b:26:ce:42:c3:bb:ca:f1:3e:bd:de:de: 1a:a9:ca:28:03:ff:2e:26:68:10:25:8c:75:51:9c: e4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B3:D6:DB:10:F1:85:51:D9:60:8B:57:F1:AD:60:0F:16:B8:8B:60 X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:4d:7d:2e:5d:d4:f9:9d:fa:4e:71:77:96:be:3a:00:ee: 7f:a1:89:91:65:86:79:a2:51:c0:05:cc:7e:f9:66:75:5c:99: 72:6d:f7:41:db:1c:f5:53:16:ae:5d:15:12:19:97:1b:02:40: 26:e2:c1:c9:73:5e:69:95:c0:ea:53:23:19:0d:c2:1f:bf:e3: f6:be:62:04:69:2c:a1:ba:23:44:40:6e:d5:81:ab:6a:b0:e0: 3d:27:40:75:43:90:5e:57:7a:98:6a:df:d4:1b:80:c9:a2:22: 8d:52:ff:df:6e:ed:b4:0b:a2:c0:cb:a5:fb:80:a8:ae:af:8e: d1:e2:c3:76:0f:e0:0e:d6:e8:a2:09:d2:17:0f:6a:10:ec:f1: ef:9e:65:59:66:70:67:8c:ac:eb:bd:e1:d5:4f:d3:8e:4a:c9: 78:c0:b0:91:31:ad:d4:79:95:48:b5:38:c2:6c:80:2d:51:22: 60:6d:63:e7:4f:16:ba:4a:d2:43:f0:9e:71:6f:af:51:81:e3: e2:b1:e5:cb:68:78:9a:ce:8d:af:d7:97:ba:22:c5:12:0c:a6: 32:b3:04:00:2f:4a:56:4f:64:a4:16:06:ac:c6:6d:78:50:71: 82:93:f4:d4:7c:6e:2f:56:9b:5f:da:2a:60:88:85:78:96:dc: 85:a6:8a:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqfHS0T88a829HEUI93y5lECExswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjA3MjMxMzExMTVaFw0yNjA3MjQxNDEyMTVaMDMxMTAvBgNV BAMTKDM2QjNENkRCMTBGMTg1NTFEOTYwOEI1N0YxQUQ2MDBGMTZCODhCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZiLBA1saGqu8KXbdX5T67OCT UQlhiYktQA8ylOv5UeIZgqbkUjCbJp6JmRCvBiDMeBDaAfBjEG6CRP949igrbhPa i+opCl8L9NJDtr7F/cov8bUHtbBPU9Lg+kLfdF+2eESVhICZgMvfKvRM+H86nNQ0 0a0gZzr4w8WQZu7qxQqYTaYz/wC/8jh8U/Cu4KpRf06ffvT/VCYOjII6OpMfuOCC +2LyceEYHVQWw/nw/rxr9tju9a99usM+lFCTiEPg77T0oiY/PFJFvL/PzAQWQBV0 GKh+/bHVayk9gJUTFoc+TosmzkLDu8rxPr3e3hqpyigD/y4maBAljHVRnOQxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNrPW2xDxhVHZYItX8a1gDxa4i2AwHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIx RUNCQUYyRjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuDTX0uXdT5nfpOcXeWvjoA7n+hiZFlhnmi UcAFzH75ZnVcmXJt90HbHPVTFq5dFRIZlxsCQCbiwclzXmmVwOpTIxkNwh+/4/a+ YgRpLKG6I0RAbtWBq2qw4D0nQHVDkF5Xephq39QbgMmiIo1S/99u7bQLosDLpfuA qK6vjtHiw3YP4A7W6KIJ0hcPahDs8e+eZVlmcGeMrOu94dVP045KyXjAsJExrdR5 lUi1OMJsgC1RImBtY+dPFrpK0kPwnnFvr1GB4+Kx5ctoeJrOja/Xl7oixRIMpjKz BAAvSlZPZKQWBqzGbXhQcYKT9NR8bi9Wm1/aKmCIhXiW3IWmii4= -----END CERTIFICATE-----Generated at Fri Jul 24 01:08:14 2026 by rpki-client