$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: hA0hSTrqaxPOk2AJMGEGLroAa6dotJSzjc06+6oEG0Y= Subject key identifier: 16:22:44:CA:8D:DC:90:58:74:77:0C:C1:CC:83:84:80:E4:58:FC:82 Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 3817B1F31177F166B2ED899C0FA9D19EEA6697B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 17:42:53 +0000 Manifest this update: Wed 23 Sep 2026 17:37:53 +0000 Manifest next update: Thu 24 Sep 2026 20:03:53 +0000 Files and hashes: 1: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) 2: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) 3: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: +lTwBx0M/GcB/4o+jTp9KPXqU5yry3LoIK2AMxGkuT0=) 4: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:17:b1:f3:11:77:f1:66:b2:ed:89:9c:0f:a9:d1:9e:ea:66:97:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: Sep 23 17:37:53 2026 GMT Not After : Sep 24 20:03:53 2026 GMT Subject: CN=162244CA8DDC905874770CC1CC838480E458FC82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:40:b6:6a:84:23:8e:63:69:a7:12:cb:f6:75: fa:80:bf:7f:3e:af:e5:b8:b9:c6:0d:2f:63:dc:a9: 90:fd:ef:4b:d8:65:b9:89:74:6e:ea:4b:f2:31:64: 31:40:fa:68:e1:9d:ae:76:9e:1c:14:cf:42:84:4a: ca:d1:ba:28:e0:be:d9:34:36:bf:06:0c:33:09:05: f5:e3:98:ae:d0:de:56:66:3b:80:c4:48:a6:6a:f4: 96:3f:90:5a:f3:ed:fb:74:7a:5c:db:99:29:1d:44: 2d:ce:68:5d:10:26:c6:8d:3a:17:5c:5b:f2:26:53: 02:1d:9e:eb:09:7a:4b:58:7e:b5:09:4c:21:86:77: 64:95:94:07:13:63:f2:ea:a0:42:91:69:10:86:db: 79:c4:bd:62:c3:c2:ff:11:ff:8a:da:94:4d:b1:59: e7:28:3a:77:26:72:81:39:e8:fc:8e:af:7e:3a:d5: cd:2e:29:7b:c8:d1:23:07:32:3e:0f:38:29:98:1a: 81:6e:80:0d:cb:0c:b3:60:09:7a:36:f8:29:2d:25: 65:ca:b6:89:c5:ff:73:d4:8f:c8:81:9d:b8:e0:b8: d1:0d:b7:d2:19:8a:54:b9:48:f7:26:46:a9:0f:48: 0f:97:7f:6f:09:67:10:cf:50:1c:9f:74:b3:8e:83: 2a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:22:44:CA:8D:DC:90:58:74:77:0C:C1:CC:83:84:80:E4:58:FC:82 X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5d:2b:c8:d0:67:b3:12:4c:44:af:4c:37:17:0b:e8:3c:2e: 38:c3:47:d9:0d:31:79:c0:3b:43:2c:66:30:e6:f7:4e:14:7f: 6d:60:78:90:0f:36:e5:84:17:78:82:3b:4d:b5:05:26:f8:7f: 90:0d:02:e3:d3:97:19:56:45:65:28:e6:2b:d7:6f:2d:40:ae: 83:00:6e:0e:96:b8:c3:24:48:e5:49:36:8a:63:4c:40:f9:83: a3:61:d6:f1:2a:ab:fb:10:25:e5:c7:df:68:48:e8:7b:54:0a: a7:74:82:b5:59:59:d2:60:99:3f:5d:ba:7f:b7:a7:1f:d7:a8: ff:86:41:32:5d:e5:bd:06:e8:3e:f2:48:2e:8b:97:50:2c:2c: a7:9b:f5:1a:83:6a:93:31:b0:c2:03:53:7a:79:aa:87:a0:28: a8:b3:bc:77:f9:89:64:95:6b:df:2b:5e:21:7b:16:25:03:3a: 71:db:fb:a0:23:82:c2:25:79:bd:24:b7:eb:c6:6f:b6:18:26: ae:5f:40:1d:f1:27:04:80:fa:96:83:3d:2f:57:8f:6d:fa:24: 85:fe:1b:1e:10:30:b9:4e:b7:b7:5a:f6:f3:8a:a3:22:91:b6: 77:af:14:f1:b2:e3:bd:ce:91:ed:e1:1d:d3:e8:b5:65:86:ff: 77:a2:ac:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBex8xF38Way7YmcD6nRnupml7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjA5MjMxNzM3NTNaFw0yNjA5MjQyMDAzNTNaMDMxMTAvBgNV BAMTKDE2MjI0NENBOEREQzkwNTg3NDc3MENDMUNDODM4NDgwRTQ1OEZDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiQLZqhCOOY2mnEsv2dfqAv38+ r+W4ucYNL2PcqZD970vYZbmJdG7qS/IxZDFA+mjhna52nhwUz0KESsrRuijgvtk0 Nr8GDDMJBfXjmK7Q3lZmO4DESKZq9JY/kFrz7ft0elzbmSkdRC3OaF0QJsaNOhdc W/ImUwIdnusJektYfrUJTCGGd2SVlAcTY/LqoEKRaRCG23nEvWLDwv8R/4ralE2x WecoOncmcoE56PyOr3461c0uKXvI0SMHMj4POCmYGoFugA3LDLNgCXo2+CktJWXK tonF/3PUj8iBnbjguNENt9IZilS5SPcmRqkPSA+Xf28JZxDPUByfdLOOgyojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFiJEyo3ckFh0dwzBzIOEgORY/IIwHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9dK8jQZ7MSTESvTDcXC+g8LjjDR9kNMXnA O0MsZjDm904Uf21geJAPNuWEF3iCO021BSb4f5ANAuPTlxlWRWUo5ivXby1AroMA bg6WuMMkSOVJNopjTED5g6Nh1vEqq/sQJeXH32hI6HtUCqd0grVZWdJgmT9dun+3 px/XqP+GQTJd5b0G6D7ySC6Ll1AsLKeb9RqDapMxsMIDU3p5qoegKKizvHf5iWSV a98rXiF7FiUDOnHb+6AjgsIleb0kt+vGb7YYJq5fQB3xJwSA+paDPS9Xj236JIX+ Gx4QMLlOt7da9vOKoyKRtnevFPGy473Oke3hHdPotWWG/3eirII= -----END CERTIFICATE-----Generated at Thu Sep 24 07:09:15 2026 by rpki-client