$ rpki-client -vvf rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft File: FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft (raw, json) Hash identifier: s0POt8rnwQSJ7bXv5Rnv1G7yTnueJ3SYz2v2J+FMZM0= Subject key identifier: DB:4B:2A:51:BA:2C:31:97:B0:59:85:3C:8B:2D:35:1F:C9:70:EE:27 Authority key identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 Certificate issuer: /CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Certificate serial: 3550D838D02158B5C069CA452E0A2874B72DE657 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 04:53:51 +0000 Manifest this update: Wed 17 Jun 2026 04:48:51 +0000 Manifest next update: Thu 18 Jun 2026 08:42:51 +0000 Files and hashes: 1: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 1Tk9QAHZ0ijLeVFuLiIRsfqrrSPDFu+yHnjWDMhhwpg=) 2: FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl (hash: Qqc8K5Ht3CJljpKVFTrMlj4OWExHpaIf6Eq8eqoKIMM=) 3: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: wvIAxFKPShLQpqf7iVcqajkRTzgNz/nJFo4xan5f+EA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:50:d8:38:d0:21:58:b5:c0:69:ca:45:2e:0a:28:74:b7:2d:e6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Validity Not Before: Jun 17 04:48:51 2026 GMT Not After : Jun 18 08:42:51 2026 GMT Subject: CN=DB4B2A51BA2C3197B059853C8B2D351FC970EE27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:71:25:1a:21:a4:b4:ed:d0:35:52:81:d5: 70:9b:a3:eb:2b:c8:ad:f9:77:73:9b:cc:a4:12:26: 70:a7:f2:e0:a1:f0:63:9c:b3:22:28:1b:46:ab:f4: 37:2b:6f:ba:97:29:e4:55:45:9f:0f:98:96:7c:2a: bc:6b:65:2e:79:d8:e2:71:6c:c2:18:1a:f0:90:a4: c0:36:44:36:97:f2:84:c3:ca:0a:e0:93:ee:60:a5: 91:15:8f:0c:fb:ab:7c:ca:fd:48:c8:44:d4:9d:b8: 39:43:bd:7f:9e:76:ff:a2:22:3e:5b:5e:cf:bb:d3: 0d:2a:30:44:eb:08:5d:8d:11:01:a8:a5:7a:b5:61: 1f:1f:fe:19:f3:79:1b:54:b4:a4:2b:fd:37:fd:30: 92:e5:03:82:e9:27:07:16:ff:b0:7a:39:89:7d:02: fc:de:43:42:35:08:f8:78:00:6b:f6:df:44:0e:06: 1a:db:28:f3:ca:36:f9:92:1e:e6:e3:85:f2:68:10: 73:2f:e4:a2:43:55:54:15:7a:8b:be:46:76:f6:26: b3:ce:4e:d5:07:c2:fe:8e:74:dd:57:82:21:2f:b7: 02:ff:b4:b3:c4:7d:d3:55:fb:f5:58:f5:0b:fa:d0: 66:e4:d1:bd:ea:5d:c8:ab:43:b2:40:b8:ef:e1:ad: 93:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4B:2A:51:BA:2C:31:97:B0:59:85:3C:8B:2D:35:1F:C9:70:EE:27 X509v3 Authority Key Identifier: keyid:FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e2:5b:37:6e:4d:dc:f2:d4:e3:00:a7:47:10:ae:d0:31:04: 5b:9c:4b:da:b9:97:45:ab:97:5a:07:ea:84:b0:19:54:f2:7c: e2:06:77:81:53:86:d8:09:f6:1a:0c:cb:1d:f9:76:ac:56:aa: 42:44:44:e2:b7:8e:2d:87:33:84:0f:66:35:24:a1:d3:d5:c6: 79:29:90:58:ac:dd:0f:4b:57:8c:d9:d3:55:60:da:1f:4a:12: dc:b9:6c:c7:b8:8e:2b:6b:c7:dc:5d:06:4f:23:b7:c0:05:ac: 07:de:c3:18:b2:9c:96:d8:3d:fd:b7:bb:f7:82:9a:d1:53:29: 1b:66:36:63:d5:57:c6:ea:7f:a5:30:08:7b:3b:26:22:75:8e: b9:52:d9:d6:9d:d9:14:6f:4e:3a:23:ae:1f:51:59:82:36:0d: 7e:6e:49:3f:cb:64:97:d9:54:fe:83:28:60:25:10:db:99:8b: 41:ae:48:d6:7e:04:c7:59:1a:e3:db:a6:8f:1f:39:ae:02:71: ca:2e:61:4c:d4:68:85:d3:f2:3e:d7:72:f7:06:fe:79:f9:b1: f6:ed:6d:89:e9:09:9a:bf:bf:de:7b:de:9a:5c:0a:59:88:a8: 7a:60:d2:2b:39:52:88:3d:11:1e:8c:53:98:b4:a9:58:9b:02: 71:1f:42:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVDYONAhWLXAacpFLgoodLct5lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5 RjQzQUZBNzAeFw0yNjA2MTcwNDQ4NTFaFw0yNjA2MTgwODQyNTFaMDMxMTAvBgNV BAMTKERCNEIyQTUxQkEyQzMxOTdCMDU5ODUzQzhCMkQzNTFGQzk3MEVFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS3HElGiGktO3QNVKB1XCbo+sr yK35d3ObzKQSJnCn8uCh8GOcsyIoG0ar9Dcrb7qXKeRVRZ8PmJZ8KrxrZS552OJx bMIYGvCQpMA2RDaX8oTDygrgk+5gpZEVjwz7q3zK/UjIRNSduDlDvX+edv+iIj5b Xs+70w0qMETrCF2NEQGopXq1YR8f/hnzeRtUtKQr/Tf9MJLlA4LpJwcW/7B6OYl9 AvzeQ0I1CPh4AGv230QOBhrbKPPKNvmSHubjhfJoEHMv5KJDVVQVeou+Rnb2JrPO TtUHwv6OdN1XgiEvtwL/tLPEfdNV+/VY9Qv60Gbk0b3qXcirQ7JAuO/hrZMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU20sqUbosMZewWYU8iy01H8lw7icwHwYDVR0j BBgwFoAU/TUxh/sNNk+nCGoXKLmJS59Dr6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA0ZDAzOTctZmZhMC00OTAzLTgwNWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdG QjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5RjQzQUZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1MzE4N0ZCMEQzNjRGQTcwODZBMTcyOEI5ODk0QjlGNDNB RkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5 NEI5RjQzQUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7iWzduTdzy1OMAp0cQrtAxBFucS9q5l0Wr l1oH6oSwGVTyfOIGd4FThtgJ9hoMyx35dqxWqkJEROK3ji2HM4QPZjUkodPVxnkp kFis3Q9LV4zZ01Vg2h9KEty5bMe4jitrx9xdBk8jt8AFrAfewxiynJbYPf23u/eC mtFTKRtmNmPVV8bqf6UwCHs7JiJ1jrlS2dad2RRvTjojrh9RWYI2DX5uST/LZJfZ VP6DKGAlENuZi0GuSNZ+BMdZGuPbpo8fOa4CccouYUzUaIXT8j7XcvcG/nn5sfbt bYnpCZq/v9573ppcClmIqHpg0is5Uog9ER6MU5i0qVibAnEfQo8= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:13 2026 by rpki-client