$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft File: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft (raw, json) Hash identifier: GdQ0d/f0kjmzdtCm7rmLJQF4Pf7tNXGM4tJ7baGT3Eo= Subject key identifier: 7F:4E:04:30:79:D0:E4:73:C7:2F:B2:78:39:9D:E6:3C:33:F3:AE:74 Authority key identifier: FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 Certificate issuer: /CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Certificate serial: 3C4A04B28907FBF28A369CE6031B7564B632B3EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 07:20:14 +0000 Manifest this update: Wed 23 Sep 2026 07:15:14 +0000 Manifest next update: Thu 24 Sep 2026 10:51:14 +0000 Files and hashes: 1: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: SBw6P3tSXs9klMeIGPKPIG91NqF9/LEzB6kE45zVl8k=) 2: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl (hash: DmY60cLuWU7jDP4C25SlFaTAuLjMk4ynjT/zFGlR2NI=) 3: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: zLgVQYA5xLAWWDvEEhgF6F2kUEICyQjNZMvsMOscIV8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4a:04:b2:89:07:fb:f2:8a:36:9c:e6:03:1b:75:64:b6:32:b3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Validity Not Before: Sep 23 07:15:14 2026 GMT Not After : Sep 24 10:51:14 2026 GMT Subject: CN=7F4E043079D0E473C72FB278399DE63C33F3AE74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8a:8d:85:ad:f7:8a:7f:23:3d:00:e5:62:00: bb:b7:a5:18:ad:65:40:d5:a9:7c:77:7a:5a:10:0b: bd:24:79:e4:43:c5:ff:8f:40:57:e1:b6:bd:a5:70: 5d:43:bd:6e:de:d0:8f:80:35:81:f0:e7:87:11:14: 93:4c:f7:46:af:2e:dc:ef:50:4c:43:dc:f6:5b:5d: b3:fb:72:0e:70:62:0e:fa:b7:88:fd:b0:e6:37:4f: e0:54:8a:b5:73:09:72:73:69:b0:0b:1f:34:fa:47: 3e:ce:47:cc:a4:58:df:4e:f5:33:ea:78:94:3a:90: e3:5f:f2:07:2c:48:27:0a:3f:c0:e5:71:8b:13:d5: 22:4b:1d:7c:4f:48:0c:d0:57:1f:f3:6c:94:01:ec: c2:03:1f:dd:18:04:e2:47:9e:6f:92:ed:45:96:cb: 02:84:10:14:d3:fa:b1:45:6f:b0:4d:cf:0a:67:87: 36:ec:b3:3f:fd:0f:a6:21:bc:5a:d5:ed:3b:68:50: 9a:cb:fc:52:d0:90:cc:98:a4:a4:a4:b0:07:c8:07: 9e:58:37:29:64:91:e5:11:39:fc:ce:57:93:21:25: 32:0a:44:0b:44:a0:6a:9d:6c:6c:cf:aa:69:60:30: 37:ba:da:e6:d5:27:4d:a3:c5:91:77:b3:ea:ed:90: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4E:04:30:79:D0:E4:73:C7:2F:B2:78:39:9D:E6:3C:33:F3:AE:74 X509v3 Authority Key Identifier: keyid:FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:5b:11:12:f1:b8:69:bb:5e:ef:07:8a:1a:81:20:dd:97:51: 77:f0:42:9d:c6:73:02:13:90:3d:e9:67:c2:e3:86:74:ab:4c: ca:46:88:56:ac:72:6e:8a:eb:48:25:0a:6e:25:44:5e:e5:cd: 55:8d:2b:2d:9b:b8:70:05:e9:12:e5:a7:9f:68:f6:b9:31:15: 4c:f5:a0:0b:07:ef:49:f5:e1:a4:29:53:56:7e:85:56:81:3d: 1b:47:c0:71:c9:5d:93:97:2c:f3:2b:5b:57:9e:78:b6:3e:43: 90:38:cb:f8:e7:04:1d:d7:c2:d4:9c:30:b7:5a:52:9b:73:84: ba:9c:db:88:49:d1:63:b1:b5:64:9e:53:e5:f6:bd:37:60:ff: 50:54:78:8e:25:3f:b9:95:2a:ca:ac:27:d0:45:9f:86:ca:05: da:76:d2:21:5b:5b:5e:39:f9:c4:ae:f0:32:40:f7:16:6d:4d: 7f:13:69:bc:34:56:00:ca:24:6b:17:b1:3d:9b:b2:be:3b:4d: 24:7b:1d:c4:c9:4b:44:ce:49:ea:b1:c4:95:f3:7d:f7:f1:52: 16:c0:c7:be:7b:1b:1a:cd:9d:ab:91:ad:fc:3f:f6:68:71:12: f3:62:f3:80:b4:1b:ad:a0:dd:e6:20:ed:ee:3c:0c:51:11:9e: 67:00:2f:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPEoEsokH+/KKNpzmAxt1ZLYys+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFG QUExRjc2NDAeFw0yNjA5MjMwNzE1MTRaFw0yNjA5MjQxMDUxMTRaMDMxMTAvBgNV BAMTKDdGNEUwNDMwNzlEMEU0NzNDNzJGQjI3ODM5OURFNjNDMzNGM0FFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJio2FrfeKfyM9AOViALu3pRit ZUDVqXx3eloQC70keeRDxf+PQFfhtr2lcF1DvW7e0I+ANYHw54cRFJNM90avLtzv UExD3PZbXbP7cg5wYg76t4j9sOY3T+BUirVzCXJzabALHzT6Rz7OR8ykWN9O9TPq eJQ6kONf8gcsSCcKP8DlcYsT1SJLHXxPSAzQVx/zbJQB7MIDH90YBOJHnm+S7UWW ywKEEBTT+rFFb7BNzwpnhzbssz/9D6YhvFrV7TtoUJrL/FLQkMyYpKSksAfIB55Y NylkkeUROfzOV5MhJTIKRAtEoGqdbGzPqmlgMDe62ubVJ02jxZF3s+rtkJupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf04EMHnQ5HPHL7J4OZ3mPDPzrnQwHwYDVR0j BBgwFoAU/f41hITQgVoJqhVozPwC6vqh92QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTgzMjgyMzctNzUwZi00MDIyLWI4YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4 NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFGQUExRjc2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREZFMzU4NDg0RDA4MTVBMDlBQTE1NjhDQ0ZDMDJFQUZBQTFG NzY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAy RUFGQUExRjc2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFbERLxuGm7Xu8HihqBIN2XUXfwQp3GcwIT kD3pZ8LjhnSrTMpGiFascm6K60glCm4lRF7lzVWNKy2buHAF6RLlp59o9rkxFUz1 oAsH70n14aQpU1Z+hVaBPRtHwHHJXZOXLPMrW1eeeLY+Q5A4y/jnBB3XwtScMLda UptzhLqc24hJ0WOxtWSeU+X2vTdg/1BUeI4lP7mVKsqsJ9BFn4bKBdp20iFbW145 +cSu8DJA9xZtTX8Tabw0VgDKJGsXsT2bsr47TSR7HcTJS0TOSeqxxJXzfffxUhbA x757GxrNnauRrfw/9mhxEvNi84C0G62g3eYg7e48DFERnmcAL0U= -----END CERTIFICATE-----Generated at Thu Sep 24 03:51:39 2026 by rpki-client