$ rpki-client -vvvf rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft File: FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft (raw, json) Hash identifier: FRPT63PWtW+TIrw+jUx7PsrdJiPG6DUpHSPyYIu7oSA= Subject key identifier: 4B:30:60:B3:08:99:5A:2A:C2:79:F5:AA:15:34:1E:F9:2C:83:85:02 Authority key identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 Certificate issuer: /CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Certificate serial: 20A02745563F45D4AD5FAF03A5B9BB7D5C75BCA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft Manifest number: C4 Signing time: Sun 27 Sep 2026 00:14:43 +0000 Manifest this update: Sun 27 Sep 2026 00:09:43 +0000 Manifest next update: Mon 28 Sep 2026 01:34:43 +0000 Files and hashes: 1: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 1Tk9QAHZ0ijLeVFuLiIRsfqrrSPDFu+yHnjWDMhhwpg=) 2: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: wvIAxFKPShLQpqf7iVcqajkRTzgNz/nJFo4xan5f+EA=) 3: FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl (hash: 8V57nIB5tuUY9WeAg78KcgO7oup2IUtnxSDMGaPlkPE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a0:27:45:56:3f:45:d4:ad:5f:af:03:a5:b9:bb:7d:5c:75:bc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Validity Not Before: Sep 27 00:09:43 2026 GMT Not After : Sep 28 01:34:43 2026 GMT Subject: CN=4B3060B308995A2AC279F5AA15341EF92C838502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3c:03:0c:39:15:9a:59:96:32:8a:37:55:5c: 2f:7a:42:62:8e:07:d2:89:2c:2c:24:3e:b7:6b:8d: 0b:58:af:84:b8:0e:9e:b5:a1:40:0a:f6:c5:ac:0b: 45:e8:1d:a1:05:f3:3b:fb:1c:e6:f9:c3:6e:f6:20: 80:78:3c:19:ca:00:5e:72:3f:e9:46:cf:55:5c:a8: 99:4c:0d:ae:2a:42:73:6f:b6:58:11:bd:f0:d6:14: 57:ac:40:7c:75:fc:0a:3d:31:24:77:72:08:1d:36: d7:40:86:08:b2:d5:72:a0:29:f9:e4:58:0f:c7:b2: 83:af:90:69:01:7a:3d:8e:cf:22:a4:66:82:29:6d: e7:55:9e:38:fb:f5:b7:59:3b:6c:e1:8b:77:3a:ba: 2a:79:98:30:26:9e:89:b8:2b:bd:f0:4f:6d:35:1a: 06:1f:c7:d2:fd:90:f7:3c:76:bd:1c:a5:3f:55:76: 1d:a1:3c:7b:eb:7b:59:0d:f5:35:67:bc:84:b4:c2: 18:79:2d:89:94:e8:34:fd:67:45:6e:72:cd:4e:2f: ab:27:64:a7:ec:9b:eb:4b:46:cf:30:0d:75:6e:55: 74:a1:69:5e:37:e0:3c:50:46:7c:8f:8d:72:76:fa: dd:d1:10:d3:74:1a:69:f1:fa:4c:81:28:0e:e8:47: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:30:60:B3:08:99:5A:2A:C2:79:F5:AA:15:34:1E:F9:2C:83:85:02 X509v3 Authority Key Identifier: keyid:FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:34:e0:2d:87:d8:1a:1b:93:89:cd:05:45:85:20:26:d7:f8: 14:4d:13:83:9f:07:e7:7f:3d:5f:1d:ea:c6:44:30:eb:b0:04: 7d:85:94:13:37:1f:91:9e:10:e9:47:45:f3:72:67:db:c7:5d: 62:30:78:e1:cc:9b:45:b6:2a:87:d3:95:83:49:7a:eb:7d:45: fc:62:0c:4f:d5:f3:57:17:3f:4a:78:b1:a4:b7:a3:5a:ef:4b: 23:80:a3:a0:e7:db:32:21:83:d8:70:e4:09:f4:82:df:d2:63: ac:06:f5:a6:bb:5e:3b:b4:4f:35:85:55:f9:c8:98:9d:f6:e5: b0:d8:d5:86:c3:7f:e5:ae:d0:70:cf:09:da:90:7b:11:46:b3: 9b:2a:c4:29:3e:47:5d:8f:ca:4a:44:33:c5:6c:52:e8:c2:bf: 54:a4:9f:f5:29:aa:2f:33:9d:f2:66:93:a5:2b:06:dd:0b:ea: 0f:a3:72:45:a2:5d:ae:c3:89:50:1b:f4:1b:6d:25:bc:7d:e3: 01:d0:13:5d:53:72:c5:e3:e4:60:40:28:93:b1:61:5b:59:17: e5:22:51:bd:6a:05:68:d6:5f:87:e8:f9:b0:b8:be:68:b8:bb: b2:73:ff:90:9e:f3:5b:1d:de:65:d5:01:bc:2d:a1:69:b1:cf: 2f:db:90:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKAnRVY/RdStX68Dpbm7fVx1vKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5 RjQzQUZBNzAeFw0yNjA5MjcwMDA5NDNaFw0yNjA5MjgwMTM0NDNaMDMxMTAvBgNV BAMTKDRCMzA2MEIzMDg5OTVBMkFDMjc5RjVBQTE1MzQxRUY5MkM4Mzg1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPAMMORWaWZYyijdVXC96QmKO B9KJLCwkPrdrjQtYr4S4Dp61oUAK9sWsC0XoHaEF8zv7HOb5w272IIB4PBnKAF5y P+lGz1VcqJlMDa4qQnNvtlgRvfDWFFesQHx1/Ao9MSR3cggdNtdAhgiy1XKgKfnk WA/HsoOvkGkBej2OzyKkZoIpbedVnjj79bdZO2zhi3c6uip5mDAmnom4K73wT201 GgYfx9L9kPc8dr0cpT9Vdh2hPHvre1kN9TVnvIS0whh5LYmU6DT9Z0Vucs1OL6sn ZKfsm+tLRs8wDXVuVXShaV434DxQRnyPjXJ2+t3RENN0Gmnx+kyBKA7oRwbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSzBgswiZWirCefWqFTQe+SyDhQIwHwYDVR0j BBgwFoAU/TUxh/sNNk+nCGoXKLmJS59Dr6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA0ZDAzOTctZmZhMC00OTAzLTgwNWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdG QjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5RjQzQUZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1MzE4N0ZCMEQzNjRGQTcwODZBMTcyOEI5ODk0QjlGNDNB RkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5 NEI5RjQzQUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHk04C2H2Bobk4nNBUWFICbX+BRNE4OfB+d/ PV8d6sZEMOuwBH2FlBM3H5GeEOlHRfNyZ9vHXWIweOHMm0W2KofTlYNJeut9Rfxi DE/V81cXP0p4saS3o1rvSyOAo6Dn2zIhg9hw5An0gt/SY6wG9aa7Xju0TzWFVfnI mJ325bDY1YbDf+Wu0HDPCdqQexFGs5sqxCk+R12PykpEM8VsUujCv1Skn/Upqi8z nfJmk6UrBt0L6g+jckWiXa7DiVAb9BttJbx94wHQE11TcsXj5GBAKJOxYVtZF+Ui Ub1qBWjWX4fo+bC4vmi4u7Jz/5Ce81sd3mXVAbwtoWmxzy/bkOI= -----END CERTIFICATE-----Generated at Sun Sep 27 06:48:18 2026 by rpki-client