$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: Kd6Z/b7skr5/t1W8GLzT3EZe0tCtJSByxizFjOM9NmY= Subject key identifier: F2:8E:24:EF:6D:88:46:4E:F3:7D:E0:BE:8F:C1:3B:46:08:D8:C5:35 Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 31CCCB07979DF65F20714012644C63C1BAAC4AC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:56:41 +0000 Manifest this update: Tue 12 May 2026 05:51:41 +0000 Manifest next update: Wed 13 May 2026 08:27:41 +0000 Files and hashes: 1: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) 2: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: eVce8jNq7VyL6ounGEK42O42aehhHBdIFQGUnbxoN+8=) 3: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) 4: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:cc:cb:07:97:9d:f6:5f:20:71:40:12:64:4c:63:c1:ba:ac:4a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: May 12 05:51:41 2026 GMT Not After : May 13 08:27:41 2026 GMT Subject: CN=F28E24EF6D88464EF37DE0BE8FC13B4608D8C535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:1b:c0:a1:66:e4:6d:5f:3b:59:4e:24:a4: 47:f5:f9:21:7e:46:c1:09:19:18:fb:18:00:31:d2: 1a:fd:83:78:66:cb:e2:7e:a6:c4:78:f0:d5:39:fb: 3c:24:5a:64:ba:1d:77:c8:42:cc:47:8d:3b:68:74: ca:5e:14:46:c0:35:59:59:ff:a0:27:37:43:ed:64: 1b:ed:3b:81:6d:60:f5:72:60:e1:0a:1a:a1:32:f0: 20:6d:96:b9:10:0b:69:b6:7d:c1:dd:b0:e8:2f:fb: a7:c3:b9:3c:bf:ab:f8:3d:7d:07:ae:38:60:0b:fb: f9:77:d2:9b:6e:4e:50:3b:7d:33:36:25:33:a4:26: ac:6d:a2:33:87:ec:e9:f9:d5:63:c8:04:25:98:80: f7:80:6c:0f:8e:ed:c7:63:b4:47:25:4d:ae:7c:9c: 00:52:25:40:77:6c:9c:20:72:af:5d:07:c8:e3:2d: 71:19:a5:53:cf:5e:d6:a0:c3:b4:d9:2c:16:b8:06: 05:b6:3d:83:8d:27:4a:61:d3:54:15:31:1d:2d:65: 5b:e0:15:95:92:8b:ef:ca:f6:ec:a3:78:15:ec:e3: 27:8f:2c:c1:79:fc:30:f6:df:13:f2:80:23:62:17: 66:d0:11:23:9a:af:5a:a2:06:e2:ac:a5:55:f3:14: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8E:24:EF:6D:88:46:4E:F3:7D:E0:BE:8F:C1:3B:46:08:D8:C5:35 X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c9:d1:8e:3f:ce:14:5b:95:02:97:c5:b4:5c:a2:75:51:d9: 81:8f:55:58:f5:19:39:6b:9e:97:a0:ad:98:22:bf:77:cc:db: 88:b0:4a:bd:74:6f:31:fe:5d:00:ff:46:14:88:2a:12:81:6e: 24:5d:fc:fe:0d:1f:62:bf:72:13:df:63:cd:a9:20:b4:78:b8: c4:d0:09:15:e3:6e:53:b4:1b:ec:f8:bc:b9:72:b3:3f:36:d6: 03:56:f7:a1:dc:65:b5:47:4a:d6:c4:97:1e:e3:01:13:be:d4: ad:89:00:ac:51:f4:43:eb:95:9b:5b:4f:c2:0a:80:0c:ec:60: 1a:85:be:11:31:95:06:3f:e9:d2:73:c5:4b:d0:bb:2b:e9:c6: 0c:b6:e6:c2:2e:d0:68:e9:ca:94:42:86:58:7f:45:71:cb:29: 70:70:f4:40:d3:0e:93:b0:fb:00:21:a0:e2:75:cb:a9:cf:cd: dc:53:4a:d3:d0:ca:9a:dc:fa:77:9d:f4:51:91:f0:f5:24:24: 84:b9:7e:fa:c0:d6:f6:6c:58:84:46:7c:ae:58:c4:d9:14:38: 4b:1f:4b:30:81:92:e2:34:a3:f2:f8:0f:a9:a3:94:71:fb:36: ce:c6:40:41:1a:64:08:35:67:b1:cc:94:d2:8a:2f:44:4a:8d: e8:00:36:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMczLB5ed9l8gcUASZExjwbqsSsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjA1MTIwNTUxNDFaFw0yNjA1MTMwODI3NDFaMDMxMTAvBgNV BAMTKEYyOEUyNEVGNkQ4ODQ2NEVGMzdERTBCRThGQzEzQjQ2MDhEOEM1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChiBvAoWbkbV87WU4kpEf1+SF+ RsEJGRj7GAAx0hr9g3hmy+J+psR48NU5+zwkWmS6HXfIQsxHjTtodMpeFEbANVlZ /6AnN0PtZBvtO4FtYPVyYOEKGqEy8CBtlrkQC2m2fcHdsOgv+6fDuTy/q/g9fQeu OGAL+/l30ptuTlA7fTM2JTOkJqxtojOH7On51WPIBCWYgPeAbA+O7cdjtEclTa58 nABSJUB3bJwgcq9dB8jjLXEZpVPPXtagw7TZLBa4BgW2PYONJ0ph01QVMR0tZVvg FZWSi+/K9uyjeBXs4yePLMF5/DD23xPygCNiF2bQESOar1qiBuKspVXzFHBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8o4k722IRk7zfeC+j8E7RgjYxTUwHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPJ0Y4/zhRblQKXxbRconVR2YGPVVj1GTlr npegrZgiv3fM24iwSr10bzH+XQD/RhSIKhKBbiRd/P4NH2K/chPfY82pILR4uMTQ CRXjblO0G+z4vLlysz821gNW96HcZbVHStbElx7jARO+1K2JAKxR9EPrlZtbT8IK gAzsYBqFvhExlQY/6dJzxUvQuyvpxgy25sIu0GjpypRChlh/RXHLKXBw9EDTDpOw +wAhoOJ1y6nPzdxTStPQyprc+ned9FGR8PUkJIS5fvrA1vZsWIRGfK5YxNkUOEsf SzCBkuI0o/L4D6mjlHH7Ns7GQEEaZAg1Z7HMlNKKL0RKjegANnc= -----END CERTIFICATE-----Generated at Tue May 12 22:47:10 2026 by rpki-client