$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft File: FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json) Hash identifier: uMmqT8KLl/gMpzgSyQDIHiPXDynWBxbjYxlTTG2kcMw= Subject key identifier: E6:42:DF:B8:0B:CD:3C:E7:E1:52:B0:94:A0:33:D7:41:3D:B8:60:38 Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC Certificate issuer: /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC Certificate serial: 2BB23E540B56834F9D307E37A9347C610B6B6103 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft Manifest number: BC Signing time: Sun 20 Sep 2026 23:00:21 +0000 Manifest this update: Sun 20 Sep 2026 22:55:21 +0000 Manifest next update: Tue 22 Sep 2026 00:14:21 +0000 Files and hashes: 1: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=) 2: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: nmFHfdsfwahvTHl6QleSzLHLTe9mgi0CFgFy+6AWySg=) 3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=) 4: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=) 5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b2:3e:54:0b:56:83:4f:9d:30:7e:37:a9:34:7c:61:0b:6b:61:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC Validity Not Before: Sep 20 22:55:21 2026 GMT Not After : Sep 22 00:14:21 2026 GMT Subject: CN=E642DFB80BCD3CE7E152B094A033D7413DB86038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:3f:29:9e:4d:52:b5:26:ee:8b:be:7d:fc: 4e:77:7a:17:d0:bd:d0:a5:92:ca:e0:2d:91:6e:3a: 4e:31:1f:ff:1a:4f:61:4e:39:72:a8:1d:17:17:9f: ba:7b:a7:d8:fe:fa:25:d0:16:93:48:b9:b5:f1:9d: 08:ae:11:e0:a9:42:c0:ae:b1:a8:42:58:bb:1b:a6: f8:31:49:54:87:a2:da:4f:8b:29:fc:42:68:1d:c1: 56:cb:3a:9a:38:e1:8b:c0:a1:18:b8:6e:73:c1:91: 4e:f8:1b:1b:61:6a:60:44:0e:a7:42:0f:84:b5:7f: 7d:a5:b6:6e:f2:51:58:50:c0:d3:2a:25:3f:59:fb: 18:1c:a7:b0:13:fe:52:30:98:d0:7e:bd:c5:f3:6e: 21:48:27:9e:ab:31:a8:49:3e:45:45:96:4c:27:49: 2b:af:e0:97:4b:c6:f1:d5:7a:8f:a6:1c:14:65:27: 80:41:29:7e:dc:60:73:62:dd:e7:f0:01:67:7d:d7: 56:65:f9:03:08:61:0f:96:c6:19:7b:d3:42:88:7f: b6:c1:a8:2b:8e:10:60:37:80:f1:37:f1:f6:06:56: 36:2d:a9:39:03:68:2c:d9:1d:7c:27:ac:0f:9e:04: 2a:ff:4e:5a:03:f3:c5:61:9c:04:3c:ff:56:99:85: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:42:DF:B8:0B:CD:3C:E7:E1:52:B0:94:A0:33:D7:41:3D:B8:60:38 X509v3 Authority Key Identifier: keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d2:34:df:61:a8:d0:ff:2f:54:2f:e5:0d:9c:d5:42:42:04: 48:71:bf:d4:03:33:75:1b:fb:6e:14:03:ff:c8:85:7c:0b:7b: e6:bb:93:b4:dd:42:fa:2b:e6:cb:2d:ff:6b:d2:02:c4:09:c4: d0:29:01:f1:68:b9:9e:65:65:2e:2d:dc:c8:88:58:4e:3d:28: 9e:d8:e2:93:ad:24:48:ab:9d:27:c9:61:ef:97:12:c3:1e:ad: 4c:99:43:c6:b3:8b:aa:52:46:c4:3c:53:df:a6:b5:4c:23:f4: aa:97:45:b2:7e:83:d8:86:01:75:80:3e:4f:88:cb:cd:f5:c6: da:71:d4:16:ec:53:01:7b:22:3c:44:01:67:45:0a:e4:26:42: 8d:11:2f:1b:3d:35:a5:ef:a5:0b:3f:71:44:12:86:9e:6c:29: d8:8d:a1:62:3f:cc:4e:b6:8a:84:2e:6d:39:f4:93:52:35:10: ba:97:60:18:93:89:52:e7:e3:02:ce:70:dc:04:b8:cc:95:92: 24:6d:58:7b:01:90:34:2e:85:af:b1:be:b1:dc:87:06:28:5f: 14:41:d7:56:3f:e3:46:50:e0:c8:fa:c8:10:02:2e:c4:e7:6a: 7f:97:1c:6f:78:29:2f:48:58:73:e1:59:cc:ca:88:4c:0b:4e: 2e:eb:0c:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7I+VAtWg0+dMH43qTR8YQtrYQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRDODNDODE5OUM3NkQwOTFFMkFEOUJGQjQ2MDkyNjU3 MzYwNURBQzAeFw0yNjA5MjAyMjU1MjFaFw0yNjA5MjIwMDE0MjFaMDMxMTAvBgNV BAMTKEU2NDJERkI4MEJDRDNDRTdFMTUyQjA5NEEwMzNENzQxM0RCODYwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABj8pnk1StSbui759/E53ehfQ vdClksrgLZFuOk4xH/8aT2FOOXKoHRcXn7p7p9j++iXQFpNIubXxnQiuEeCpQsCu sahCWLsbpvgxSVSHotpPiyn8QmgdwVbLOpo44YvAoRi4bnPBkU74GxthamBEDqdC D4S1f32ltm7yUVhQwNMqJT9Z+xgcp7AT/lIwmNB+vcXzbiFIJ56rMahJPkVFlkwn SSuv4JdLxvHVeo+mHBRlJ4BBKX7cYHNi3efwAWd911Zl+QMIYQ+Wxhl700KIf7bB qCuOEGA3gPE38fYGVjYtqTkDaCzZHXwnrA+eBCr/TloD88VhnAQ8/1aZhdPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5kLfuAvNPOfhUrCUoDPXQT24YDgwHwYDVR0j BBgwFoAU/cg8gZnHbQkeKtm/tGCSZXNgXawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA1Zjc2OGItNDIxOC00YzVkLTg5M2EtMGZmNjk2NTI2NjM5LzAvRkRDODNDODE5 OUM3NkQwOTFFMkFEOUJGQjQ2MDkyNjU3MzYwNURBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREM4M0M4MTk5Qzc2RDA5MUUyQUQ5QkZCNDYwOTI2NTczNjA1 REFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvRkRDODNDODE5OUM3NkQwOTFFMkFEOUJGQjQ2MDky NjU3MzYwNURBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7SNN9hqND/L1Qv5Q2c1UJCBEhxv9QDM3Ub +24UA//IhXwLe+a7k7TdQvor5sst/2vSAsQJxNApAfFouZ5lZS4t3MiIWE49KJ7Y 4pOtJEirnSfJYe+XEsMerUyZQ8azi6pSRsQ8U9+mtUwj9KqXRbJ+g9iGAXWAPk+I y831xtpx1BbsUwF7IjxEAWdFCuQmQo0RLxs9NaXvpQs/cUQShp5sKdiNoWI/zE62 ioQubTn0k1I1ELqXYBiTiVLn4wLOcNwEuMyVkiRtWHsBkDQuha+xvrHchwYoXxRB 11Y/40ZQ4Mj6yBACLsTnan+XHG94KS9IWHPhWczKiEwLTi7rDEw= -----END CERTIFICATE-----Generated at Mon Sep 21 16:37:39 2026 by rpki-client