$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: 14mdZ0A05R+cfVgDFJerawPQkYy2g5VRRGwWkBy+eis= Subject key identifier: 68:8D:60:40:5A:BC:35:50:34:8E:F1:35:27:FA:6C:C9:6B:E7:BB:18 Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 7EF1F2C789E71110649730535A01FDE37F3A8782 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 06:52:49 +0000 Manifest this update: Sat 14 Nov 2026 06:47:49 +0000 Manifest next update: Sun 15 Nov 2026 06:56:49 +0000 Files and hashes: 1: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: D3JPXgiiqArAlsJELufWymHH70HVU9Zbi1p39D7KyKI=) 2: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) 3: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) 4: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 06:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f1:f2:c7:89:e7:11:10:64:97:30:53:5a:01:fd:e3:7f:3a:87:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: Nov 14 06:47:49 2026 GMT Not After : Nov 15 06:56:49 2026 GMT Subject: CN=688D60405ABC3550348EF13527FA6CC96BE7BB18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:6e:07:1c:4c:2f:fd:96:4b:e3:4b:c4:6d: 7f:fb:50:20:bc:bf:09:99:3e:a3:2f:50:90:5a:32: b8:60:02:49:8c:70:c4:5f:53:3e:a6:fa:fe:63:6d: c2:0c:56:bc:9c:3b:8a:2c:e1:73:e9:75:2f:9e:81: f5:53:ee:20:65:3d:d8:84:9c:2b:b2:f5:60:8a:71: 76:4a:cb:a9:f7:5f:46:0e:98:47:aa:58:97:0f:fd: 43:7f:f5:25:c6:1c:a0:ac:24:88:d1:59:31:3b:76: a5:77:96:83:e4:b1:3e:f4:35:2b:ab:a0:23:29:9c: cf:a4:b0:2f:fc:67:d0:11:5e:55:70:8d:02:3f:b9: d1:57:fa:10:d4:65:cd:7a:6b:c7:e8:f1:47:d2:a9: 76:a7:5b:f9:66:68:c0:94:e5:cd:d8:fb:60:59:d6: dc:0a:8b:30:0b:e6:1c:70:3a:6d:a5:6a:4b:7f:f3: c2:10:76:7b:0a:8a:d5:e4:34:01:da:13:f2:de:c9: 82:7f:45:ce:7f:37:f8:7c:b9:5c:95:fb:58:54:e7: 32:2f:9c:56:9a:7a:53:37:e8:3b:dc:c7:8b:26:a6: 24:bd:22:f3:6a:39:0d:e2:04:c1:dc:d1:81:b8:e2: 66:84:3c:77:eb:da:59:20:f9:85:ac:55:a6:78:ae: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8D:60:40:5A:BC:35:50:34:8E:F1:35:27:FA:6C:C9:6B:E7:BB:18 X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ba:55:de:01:dc:67:7a:0f:48:b4:be:32:9b:e4:09:60:fc: 18:a4:a9:c1:da:a5:9d:a0:02:3e:73:9a:aa:57:47:2e:19:37: 92:4e:b9:0e:dc:be:7b:62:16:56:46:82:92:d9:98:cd:b6:08: a8:1e:18:0a:48:e4:a3:c4:b2:37:50:fa:b1:f8:1f:0a:d5:11: 9e:2d:b2:03:10:22:94:26:39:9d:a9:83:b5:17:54:5e:e0:44: df:75:05:02:fe:c3:a5:40:e8:da:24:65:04:11:c8:13:37:98: 18:f2:b8:8e:f0:1f:17:53:1b:42:94:f2:1d:01:d3:5a:d0:fa: 83:c0:be:02:15:91:eb:63:b0:79:a3:88:c7:af:9b:82:0b:91: 09:34:a5:3c:2e:5d:fe:2d:28:55:4b:8d:d8:6c:05:b2:31:70: 6a:2d:9b:4a:3b:32:c4:68:ea:c8:97:72:6e:f8:08:73:d6:1e: 12:de:8f:06:a8:05:7c:04:53:66:16:78:56:5d:21:a1:fe:ea: 24:6f:68:b5:cb:5f:f0:99:3c:25:bc:fd:8c:81:b7:e2:4b:55: 7b:a8:b1:76:3c:d4:f8:2f:47:47:2b:91:df:9b:db:c3:80:f1: cb:03:ed:a8:58:85:1a:6e:53:49:cc:7b:85:0a:87:c0:3e:69: 03:35:b4:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvHyx4nnERBklzBTWgH94386h4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjExMTQwNjQ3NDlaFw0yNjExMTUwNjU2NDlaMDMxMTAvBgNV BAMTKDY4OEQ2MDQwNUFCQzM1NTAzNDhFRjEzNTI3RkE2Q0M5NkJFN0JCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QW4HHEwv/ZZL40vEbX/7UCC8 vwmZPqMvUJBaMrhgAkmMcMRfUz6m+v5jbcIMVrycO4os4XPpdS+egfVT7iBlPdiE nCuy9WCKcXZKy6n3X0YOmEeqWJcP/UN/9SXGHKCsJIjRWTE7dqV3loPksT70NSur oCMpnM+ksC/8Z9ARXlVwjQI/udFX+hDUZc16a8fo8UfSqXanW/lmaMCU5c3Y+2BZ 1twKizAL5hxwOm2lakt/88IQdnsKitXkNAHaE/LeyYJ/Rc5/N/h8uVyV+1hU5zIv nFaaelM36Dvcx4smpiS9IvNqOQ3iBMHc0YG44maEPHfr2lkg+YWsVaZ4rqfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaI1gQFq8NVA0jvE1J/psyWvnuxgwHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFm6Vd4B3Gd6D0i0vjKb5Alg/BikqcHapZ2g Aj5zmqpXRy4ZN5JOuQ7cvntiFlZGgpLZmM22CKgeGApI5KPEsjdQ+rH4HwrVEZ4t sgMQIpQmOZ2pg7UXVF7gRN91BQL+w6VA6NokZQQRyBM3mBjyuI7wHxdTG0KU8h0B 01rQ+oPAvgIVketjsHmjiMevm4ILkQk0pTwuXf4tKFVLjdhsBbIxcGotm0o7MsRo 6siXcm74CHPWHhLejwaoBXwEU2YWeFZdIaH+6iRvaLXLX/CZPCW8/YyBt+JLVXuo sXY81PgvR0crkd+b28OA8csD7ahYhRpuU0nMe4UKh8A+aQM1tHI= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:21 2026 by rpki-client