$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft File: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft (raw, json) Hash identifier: QS7mPJl9IyE2Mz4lHGHinQgQNqR0gAOXL6MUUuhemaM= Subject key identifier: 90:4F:33:45:16:B2:D8:76:71:D7:18:88:EB:68:2A:CD:EC:37:D8:DD Authority key identifier: FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2 Certificate issuer: /CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2 Certificate serial: 6708905405B36890448C849CA40D6504CD969133 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 10:54:00 +0000 Manifest this update: Fri 25 Sep 2026 10:49:00 +0000 Manifest next update: Sat 26 Sep 2026 10:54:00 +0000 Files and hashes: 1: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl (hash: opCCGIiYVrn3vBMSyHGMKJBC8AX58ztEDCpLhS0fgmI=) 2: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: geMBt2/v9mDAfVwndEzecLfwDT1q5GpeHQvNLrPctqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 10:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:08:90:54:05:b3:68:90:44:8c:84:9c:a4:0d:65:04:cd:96:91:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2 Validity Not Before: Sep 25 10:49:00 2026 GMT Not After : Sep 26 10:54:00 2026 GMT Subject: CN=904F334516B2D87671D71888EB682ACDEC37D8DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:10:86:e1:45:ed:83:99:f5:a4:8f:6d:42: 0a:af:1a:e9:d6:3a:a7:f6:80:7d:47:d0:a0:6f:7d: 24:4e:9f:9c:fc:0c:7b:56:35:15:79:75:7f:d4:49: fd:3d:63:b4:a0:57:29:84:f6:94:6e:40:ba:0f:17: 0e:42:9f:c8:7e:2f:8d:07:e8:64:27:85:f7:8b:db: 2a:94:bb:40:64:2e:f3:87:86:dc:4b:b5:19:f0:2d: bc:51:97:18:d8:13:ad:13:bc:fa:ba:19:78:73:b2: b1:22:19:3c:e0:10:c5:47:ac:b0:57:d3:9d:5c:37: d3:10:91:e7:06:25:36:32:58:c0:7e:88:38:a1:6a: af:95:4b:b3:f5:1f:56:7c:14:46:c0:24:e8:4e:79: c2:41:27:a8:dc:6b:40:48:65:55:0b:06:11:99:0f: 67:99:97:aa:3c:12:a8:bd:a0:93:86:17:8d:ea:9d: 9c:41:db:da:0e:8c:c3:a8:01:91:4a:af:09:96:a6: 97:ff:3a:a5:5d:04:d0:2a:6d:f3:1a:e7:1f:9d:4c: bb:05:77:4c:60:d3:1d:c3:0d:d6:66:a7:88:05:0e: 01:94:5c:d8:c6:89:6a:d7:48:36:b3:da:be:e3:95: c2:e7:59:64:e5:cc:45:42:98:73:2a:71:83:73:09: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4F:33:45:16:B2:D8:76:71:D7:18:88:EB:68:2A:CD:EC:37:D8:DD X509v3 Authority Key Identifier: keyid:FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c0:cf:be:d2:77:93:ce:93:c6:5e:02:91:dd:66:73:eb:b1: b0:a2:44:7f:53:28:f6:59:e0:a4:1f:62:c4:f0:fc:69:10:32: 77:6e:d1:4c:d7:01:9e:31:45:69:89:0c:38:ac:ce:2e:a9:6f: 78:b4:a4:16:9a:31:0d:04:aa:4b:ae:b5:b5:a0:c1:fc:16:83: f9:75:e4:87:e0:b6:9d:95:72:3f:9f:4b:e5:a3:fc:52:91:aa: e0:0c:e2:88:28:5c:07:03:29:2a:bd:6c:ea:0c:06:38:1d:fe: 83:4d:43:57:3b:4c:5a:d3:95:41:8e:d6:00:6d:7b:be:57:67: 59:5a:75:e1:76:83:84:39:2c:72:e9:36:e9:89:fe:2e:cc:40: 31:b3:3b:99:cc:56:e8:17:57:db:a8:9f:d4:ef:c5:5c:1f:03: 14:cc:11:89:ce:a1:b8:f6:b8:5a:0a:9f:a4:9e:f1:82:29:0e: f3:62:f8:2d:0b:3a:e2:d3:ba:50:4b:47:1a:de:a4:6b:32:27: 9b:e1:d9:3c:15:76:55:a0:25:da:af:63:c8:31:8f:dd:9c:7a: d9:09:9f:25:d9:cd:27:65:9c:f6:80:3b:aa:b5:f7:81:68:81: 44:2e:59:26:ef:51:29:a1:eb:75:44:07:48:a1:75:96:58:5c: 2d:3c:b3:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwiQVAWzaJBEjIScpA1lBM2WkTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ4MkVCMENERjI2RkM5RjUyQkI0ODJEMjU1QTI2Mzc0 RkIyOTdGMjAeFw0yNjA5MjUxMDQ5MDBaFw0yNjA5MjYxMDU0MDBaMDMxMTAvBgNV BAMTKDkwNEYzMzQ1MTZCMkQ4NzY3MUQ3MTg4OEVCNjgyQUNERUMzN0Q4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfhCG4UXtg5n1pI9tQgqvGunW Oqf2gH1H0KBvfSROn5z8DHtWNRV5dX/USf09Y7SgVymE9pRuQLoPFw5Cn8h+L40H 6GQnhfeL2yqUu0BkLvOHhtxLtRnwLbxRlxjYE60TvPq6GXhzsrEiGTzgEMVHrLBX 051cN9MQkecGJTYyWMB+iDihaq+VS7P1H1Z8FEbAJOhOecJBJ6jca0BIZVULBhGZ D2eZl6o8Eqi9oJOGF43qnZxB29oOjMOoAZFKrwmWppf/OqVdBNAqbfMa5x+dTLsF d0xg0x3DDdZmp4gFDgGUXNjGiWrXSDaz2r7jlcLnWWTlzEVCmHMqcYNzCWCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkE8zRRay2HZx1xiI62gqzew32N0wHwYDVR0j BBgwFoAU/YLrDN8m/J9Su0gtJVomN0+yl/IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y3Yjc2NzctNjIwNC00MDVmLThiYTItZTcxNDMyNGMxNWQ3LzAvRkQ4MkVCMENE RjI2RkM5RjUyQkI0ODJEMjU1QTI2Mzc0RkIyOTdGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDgyRUIwQ0RGMjZGQzlGNTJCQjQ4MkQyNTVBMjYzNzRGQjI5 N0YyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvRkQ4MkVCMENERjI2RkM5RjUyQkI0ODJEMjU1QTI2 Mzc0RkIyOTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfAz77Sd5POk8ZeApHdZnPrsbCiRH9TKPZZ 4KQfYsTw/GkQMndu0UzXAZ4xRWmJDDiszi6pb3i0pBaaMQ0EqkuutbWgwfwWg/l1 5Ifgtp2Vcj+fS+Wj/FKRquAM4ogoXAcDKSq9bOoMBjgd/oNNQ1c7TFrTlUGO1gBt e75XZ1ladeF2g4Q5LHLpNumJ/i7MQDGzO5nMVugXV9uon9TvxVwfAxTMEYnOobj2 uFoKn6Se8YIpDvNi+C0LOuLTulBLRxrepGsyJ5vh2TwVdlWgJdqvY8gxj92cetkJ nyXZzSdlnPaAO6q194FogUQuWSbvUSmh63VEB0ihdZZYXC08s/I= -----END CERTIFICATE-----Generated at Fri Sep 25 14:46:33 2026 by rpki-client