$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft File: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft (raw, json) Hash identifier: zeaVdFWZqoMqbh/HskGpqFOoF60motAFRvvemYGc8So= Subject key identifier: 38:5C:D4:41:81:A4:93:27:AD:82:01:A6:61:C5:98:64:D1:08:C5:15 Authority key identifier: FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB Certificate issuer: /CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Certificate serial: 35DC6303C350B5DFCE86605C63732103C0C004B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:55:00 +0000 Manifest this update: Mon 21 Sep 2026 14:50:00 +0000 Manifest next update: Tue 22 Sep 2026 16:46:00 +0000 Files and hashes: 1: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: zgtrY5nvzrcyU/ntTybDgmO63b7QkAMGZiL13SPjEp8=) 2: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl (hash: 1XDZuz5qUiLZhO8UFmp3QaIy2CBFcYwjXLtP9LQyZFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:dc:63:03:c3:50:b5:df:ce:86:60:5c:63:73:21:03:c0:c0:04:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB Validity Not Before: Sep 21 14:50:00 2026 GMT Not After : Sep 22 16:46:00 2026 GMT Subject: CN=385CD44181A49327AD8201A661C59864D108C515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:bb:58:fd:6e:9f:86:61:94:7d:ca:d8:dc: 6d:37:a7:33:0b:38:ed:1d:0a:1b:67:f9:ca:29:a1: 41:69:d8:15:97:c9:3b:f2:42:ae:74:3b:19:9d:d2: e0:85:e5:ef:d4:12:dd:71:0d:80:c5:a4:9e:0e:f1: 1d:da:e3:59:23:8c:b2:e0:7b:20:95:5d:8e:dc:45: c2:90:3b:ab:ec:fd:2e:83:8f:79:ec:cd:2c:1c:e2: 2b:50:52:b6:24:60:0f:8c:52:c3:e3:84:4c:2b:f4: 30:b5:25:39:b2:7b:e7:f5:b8:29:5f:81:d2:2f:9b: ac:1c:76:a5:73:8c:ab:ab:1d:34:c1:97:33:67:c7: d2:8d:33:ce:d0:f0:0d:21:18:89:61:4c:25:fe:68: be:df:11:79:f1:eb:c0:a5:b0:f7:6a:49:99:dd:64: 88:d6:4e:4c:25:6e:f9:5d:60:23:8c:ed:2b:dc:63: 62:68:ad:93:34:17:c4:3a:19:cb:fd:fd:85:16:6c: 34:f1:59:ae:cc:5d:ca:16:79:29:5f:c0:0b:a6:83: cb:75:be:c8:9f:40:c6:8c:8c:2c:fe:4d:b9:23:ae: 61:18:b5:a8:33:5c:fb:5e:5b:dd:f1:01:3d:92:05: 83:7f:0a:2f:e3:22:1a:0d:19:0d:a3:50:31:58:87: 5a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5C:D4:41:81:A4:93:27:AD:82:01:A6:61:C5:98:64:D1:08:C5:15 X509v3 Authority Key Identifier: keyid:FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:26:a4:ed:ff:fe:a9:34:bd:0b:27:e3:44:ba:3d:78:ee:38: 72:85:24:a5:0d:eb:eb:10:0a:a1:5a:83:ea:65:73:f9:21:da: 3d:4d:c2:a5:44:5f:f7:8b:0c:91:94:aa:8b:ab:5b:61:6c:58: 3c:38:60:2a:ca:a2:7b:b0:bf:70:1e:31:97:fb:46:8d:95:3b: 9e:fc:a8:2b:58:82:cf:6b:5a:af:3d:da:d6:b0:d0:51:4e:ea: ce:76:a2:b8:32:99:0b:5a:c6:eb:a0:e8:3a:21:25:1d:37:76: 31:ca:c1:76:62:ab:77:da:90:16:87:18:b8:d8:45:ba:0e:8f: 7d:61:9a:38:80:72:31:89:e3:e7:36:49:a2:fc:bd:31:b1:02: 96:1e:c4:c5:6d:9d:b6:ac:b6:2a:72:aa:1d:8a:d4:e4:86:c6: a3:5e:f8:94:43:77:cc:20:41:74:ce:af:1a:30:7e:f2:fb:9b: 6f:61:6f:a1:e0:fd:42:24:49:8a:53:85:f8:ef:2d:58:2c:b8: 22:ae:5d:d2:7c:37:92:87:79:00:e9:3b:e5:7d:3e:ba:5a:1f: 32:1a:3c:4c:4a:2c:f3:d6:fa:39:05:40:46:5d:12:74:c8:a2: 2d:f0:17:8c:1b:c5:9d:23:57:1d:56:44:5a:9d:00:d6:bb:f1: 49:af:74:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdxjA8NQtd/OhmBcY3MhA8DABLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZB MTMwRTFFQjAeFw0yNjA5MjExNDUwMDBaFw0yNjA5MjIxNjQ2MDBaMDMxMTAvBgNV BAMTKDM4NUNENDQxODFBNDkzMjdBRDgyMDFBNjYxQzU5ODY0RDEwOEM1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrLtY/W6fhmGUfcrY3G03pzML OO0dChtn+copoUFp2BWXyTvyQq50Oxmd0uCF5e/UEt1xDYDFpJ4O8R3a41kjjLLg eyCVXY7cRcKQO6vs/S6Dj3nszSwc4itQUrYkYA+MUsPjhEwr9DC1JTmye+f1uClf gdIvm6wcdqVzjKurHTTBlzNnx9KNM87Q8A0hGIlhTCX+aL7fEXnx68ClsPdqSZnd ZIjWTkwlbvldYCOM7SvcY2JorZM0F8Q6Gcv9/YUWbDTxWa7MXcoWeSlfwAumg8t1 vsifQMaMjCz+TbkjrmEYtagzXPteW93xAT2SBYN/Ci/jIhoNGQ2jUDFYh1pDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOFzUQYGkkyetggGmYcWYZNEIxRUwHwYDVR0j BBgwFoAU/dVCrA6lq0+D0MaoY8XVtqEw4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYwMzFmZDAtNTg0MC00YWMxLWJmYjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMw RUE1QUI0RjgzRDBDNkE4NjNDNUQ1QjZBMTMwRTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREQ1NDJBQzBFQTVBQjRGODNEMEM2QTg2M0M1RDVCNkExMzBF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYwMzFmZDAtNTg0MC00YWMxLWJm YjEtMzVmNzFmZDI0MDRjLzAvRkRENTQyQUMwRUE1QUI0RjgzRDBDNkE4NjNDNUQ1 QjZBMTMwRTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAmpO3//qk0vQsn40S6PXjuOHKFJKUN6+sQ CqFag+plc/kh2j1NwqVEX/eLDJGUqourW2FsWDw4YCrKonuwv3AeMZf7Ro2VO578 qCtYgs9rWq892taw0FFO6s52orgymQtaxuug6DohJR03djHKwXZiq3fakBaHGLjY RboOj31hmjiAcjGJ4+c2SaL8vTGxApYexMVtnbastipyqh2K1OSGxqNe+JRDd8wg QXTOrxowfvL7m29hb6Hg/UIkSYpThfjvLVgsuCKuXdJ8N5KHeQDpO+V9PrpaHzIa PExKLPPW+jkFQEZdEnTIoi3wF4wbxZ0jVx1WRFqdANa78UmvdNY= -----END CERTIFICATE-----Generated at Mon Sep 21 19:56:40 2026 by rpki-client