$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft File: FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft (raw, json) Hash identifier: c3mbbn/86yC0rBzXBiFn+MiGf7nKOoe8V5yODcb6M7w= Subject key identifier: 66:05:AF:8D:0D:81:C0:2F:A4:B3:80:F7:72:FC:0B:61:C7:A3:AB:8B Authority key identifier: FD:05:6B:EA:DF:6E:F8:5F:61:88:97:BD:17:A5:F2:7B:6A:18:B7:B7 Certificate issuer: /CN=FD056BEADF6EF85F618897BD17A5F27B6A18B7B7 Certificate serial: 53B7056125E9133B24BACFFBDF78C05D4EE726E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft Manifest number: BF Signing time: Mon 21 Sep 2026 21:07:46 +0000 Manifest this update: Mon 21 Sep 2026 21:02:46 +0000 Manifest next update: Tue 22 Sep 2026 23:25:46 +0000 Files and hashes: 1: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: fXBAdM3eV/OnDDNzfHAaJqAymYnadEFB3GVcvsNkVi0=) 2: FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl (hash: jLm7i+kmR8aH2TSj2StbWD6y2NSXtsDMLoFAEh9OMZ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b7:05:61:25:e9:13:3b:24:ba:cf:fb:df:78:c0:5d:4e:e7:26:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD056BEADF6EF85F618897BD17A5F27B6A18B7B7 Validity Not Before: Sep 21 21:02:46 2026 GMT Not After : Sep 22 23:25:46 2026 GMT Subject: CN=6605AF8D0D81C02FA4B380F772FC0B61C7A3AB8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:09:0c:bd:4f:b5:07:25:e4:95:58:d1:31: a6:14:5c:06:98:ca:77:8f:f2:98:8a:fd:8c:75:cb: 50:dd:97:ba:1c:ad:1c:49:3b:3c:e6:2b:57:4a:f0: 47:36:d8:7c:fe:e8:ee:22:a3:30:20:fe:d6:67:f3: 1e:c3:f4:6e:32:9e:de:f7:81:ed:1d:e4:4d:f4:47: 32:1f:ff:10:72:8a:bc:29:e6:d5:ec:89:6e:fb:ff: d6:c0:fd:10:da:0e:b8:9a:c4:03:f4:d6:ac:3a:1c: 27:ee:e1:4f:d3:d5:1c:e6:6a:8f:5c:6d:ee:47:9c: c6:94:8e:74:e3:0d:8b:4d:8d:85:2d:ba:30:e4:ae: 56:4f:c6:ed:31:03:9a:ef:ca:e4:b4:5e:fc:80:89: 2f:f9:26:6c:3f:c6:ac:4a:37:62:56:40:47:29:8e: 88:f4:18:67:7e:43:cc:9e:4f:9c:32:a6:ba:88:cf: e2:75:da:01:ba:68:63:8c:de:e8:a0:f1:db:a4:f1: cb:f1:28:74:57:af:82:18:49:65:2b:77:dc:8c:be: 9e:66:e4:26:5b:71:82:84:3a:2f:20:a9:63:67:6e: f9:2a:a9:80:9e:07:e7:72:79:9b:54:e8:4b:2d:74: 10:6b:ca:72:1b:7d:2a:6b:39:a1:21:fa:3e:2a:26: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:05:AF:8D:0D:81:C0:2F:A4:B3:80:F7:72:FC:0B:61:C7:A3:AB:8B X509v3 Authority Key Identifier: keyid:FD:05:6B:EA:DF:6E:F8:5F:61:88:97:BD:17:A5:F2:7B:6A:18:B7:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a1:bc:bb:f3:84:ac:18:3e:8a:43:a3:ef:20:05:25:7e:77: d7:df:3e:d9:4f:19:2b:01:c4:98:cf:1a:43:c5:9d:71:c5:40: b2:c6:a8:21:e2:2d:6f:30:40:7a:ec:1e:e0:87:54:e0:b3:5c: 98:66:f9:4a:c8:82:34:f0:83:f7:b0:de:b6:f2:b8:7b:b8:79: f8:86:b7:3d:f4:bf:7f:00:61:a9:3f:8a:42:77:e8:58:02:db: c9:2d:06:71:21:37:35:db:ec:2c:f3:49:eb:a9:40:fb:ea:5b: e7:3b:f5:7a:da:85:a8:6c:ee:e3:41:f2:46:0b:3f:86:a1:e7: 34:9f:dd:80:cc:76:15:b2:5f:7f:cd:18:f3:5e:56:05:10:72: c8:88:dc:88:22:48:3e:86:e5:05:fd:e6:8c:d5:9e:18:f7:47: 3a:65:45:6b:84:45:d0:39:9f:bc:7e:ec:92:2d:eb:f0:09:c4: 59:5b:81:1f:99:3d:d2:d9:81:13:fa:fe:43:a2:b1:0a:b8:54: df:d6:0d:b4:85:d6:c4:c2:59:19:e9:6c:7b:41:49:52:08:7f: fd:e5:62:1c:5f:3e:0d:39:63:5a:e6:6f:e5:57:a7:0d:2a:ab: 8b:2e:b4:59:f9:e6:c0:30:1a:78:09:80:5b:e9:29:c3:83:83: 3a:7a:e6:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7cFYSXpEzskus/733jAXU7nJuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwNTZCRUFERjZFRjg1RjYxODg5N0JEMTdBNUYyN0I2 QTE4QjdCNzAeFw0yNjA5MjEyMTAyNDZaFw0yNjA5MjIyMzI1NDZaMDMxMTAvBgNV BAMTKDY2MDVBRjhEMEQ4MUMwMkZBNEIzODBGNzcyRkMwQjYxQzdBM0FCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+wkMvU+1ByXklVjRMaYUXAaY yneP8piK/Yx1y1Ddl7ocrRxJOzzmK1dK8Ec22Hz+6O4iozAg/tZn8x7D9G4ynt73 ge0d5E30RzIf/xByirwp5tXsiW77/9bA/RDaDriaxAP01qw6HCfu4U/T1Rzmao9c be5HnMaUjnTjDYtNjYUtujDkrlZPxu0xA5rvyuS0XvyAiS/5Jmw/xqxKN2JWQEcp joj0GGd+Q8yeT5wyprqIz+J12gG6aGOM3uig8duk8cvxKHRXr4IYSWUrd9yMvp5m 5CZbcYKEOi8gqWNnbvkqqYCeB+dyeZtU6EstdBBrynIbfSprOaEh+j4qJjZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZgWvjQ2BwC+ks4D3cvwLYcejq4swHwYDVR0j BBgwFoAU/QVr6t9u+F9hiJe9F6Xye2oYt7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIxN2MyMDYtOWI2My00YzU2LTk0MzYtNDc1ZDgyMTQxYTY2LzAvRkQwNTZCRUFE RjZFRjg1RjYxODg5N0JEMTdBNUYyN0I2QTE4QjdCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDA1NkJFQURGNkVGODVGNjE4ODk3QkQxN0E1RjI3QjZBMThC N0I3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmIxN2MyMDYtOWI2My00YzU2LTk0 MzYtNDc1ZDgyMTQxYTY2LzAvRkQwNTZCRUFERjZFRjg1RjYxODg5N0JEMTdBNUYy N0I2QTE4QjdCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2hvLvzhKwYPopDo+8gBSV+d9ffPtlPGSsB xJjPGkPFnXHFQLLGqCHiLW8wQHrsHuCHVOCzXJhm+UrIgjTwg/ew3rbyuHu4efiG tz30v38AYak/ikJ36FgC28ktBnEhNzXb7CzzSeupQPvqW+c79Xrahahs7uNB8kYL P4ah5zSf3YDMdhWyX3/NGPNeVgUQcsiI3IgiSD6G5QX95ozVnhj3RzplRWuERdA5 n7x+7JIt6/AJxFlbgR+ZPdLZgRP6/kOisQq4VN/WDbSF1sTCWRnpbHtBSVIIf/3l YhxfPg05Y1rmb+VXpw0qq4sutFn55sAwGngJgFvpKcODgzp65p8= -----END CERTIFICATE-----Generated at Tue Sep 22 01:33:05 2026 by rpki-client