$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft (raw, json) Hash identifier: PbAu50LVa+PYtktJkRrMPFnRiL0I7h6f90lJ8Z43DFc= Subject key identifier: E0:21:20:7B:9C:E5:2F:11:41:FC:5A:48:A6:A2:E0:67:FD:D9:82:55 Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 57266562508C26F85C94659638B7F9BFAE3D9D54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft Manifest number: FE Signing time: Mon 09 Nov 2026 08:46:31 +0000 Manifest this update: Mon 09 Nov 2026 08:41:31 +0000 Manifest next update: Tue 10 Nov 2026 11:04:31 +0000 Files and hashes: 1: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl (hash: lCAQB98LPLRVgzCDBiu+6bSaa0Rp6n3wI/bE6yofLr4=) 2: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM=) 3: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=) 4: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:26:65:62:50:8c:26:f8:5c:94:65:96:38:b7:f9:bf:ae:3d:9d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: Nov 9 08:41:31 2026 GMT Not After : Nov 10 11:04:31 2026 GMT Subject: CN=E021207B9CE52F1141FC5A48A6A2E067FDD98255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:2b:ef:6d:7c:94:4d:62:08:42:7c:87:8d: 2f:1a:85:43:aa:76:07:10:ae:f4:c1:4d:4f:68:36: e7:70:f2:18:4a:ed:6f:02:f5:4f:2e:b6:f8:59:d0: ed:a5:a8:63:e6:73:0d:54:b4:0a:57:ab:c1:6b:59: 6b:30:60:9e:7b:c5:55:6f:06:c7:51:1b:8e:33:b3: ef:c4:51:8e:77:66:89:89:61:de:9a:00:b1:b2:a7: f0:97:15:4d:2a:19:08:6b:9c:3b:25:22:18:b4:5e: 24:c0:f8:2e:10:46:ee:35:9a:38:14:2a:74:dd:68: e0:64:90:17:49:11:75:1e:e9:b1:47:1c:d8:80:57: a4:77:95:42:3c:9f:57:07:0e:fa:31:11:2e:4f:e8: 48:08:74:09:32:d9:c9:18:31:a5:09:89:af:37:89: 1e:93:88:ca:c5:70:62:5b:4f:e2:1b:a3:38:7f:26: a7:e8:0b:b7:73:77:5d:9d:c7:ed:0c:42:de:dc:5f: a2:99:3a:a7:4d:f5:df:38:56:b9:56:be:47:1d:1f: 01:a3:ed:5d:db:2e:c9:e8:29:83:61:78:0a:bd:19: 5c:5e:7b:d2:7c:27:e6:6a:ed:91:0a:02:f8:b6:33: a2:aa:69:34:ab:4b:c3:46:ff:19:07:9c:3a:a4:18: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:21:20:7B:9C:E5:2F:11:41:FC:5A:48:A6:A2:E0:67:FD:D9:82:55 X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:19:29:cd:ab:50:98:b6:60:ca:8b:dd:53:76:76:53:04:49: 5d:95:ee:96:81:97:58:b8:e7:75:f9:6e:90:19:49:50:71:27: dc:2f:e9:ef:ec:56:68:be:0f:84:56:9b:8f:1e:0c:45:18:9d: 1d:b4:f1:6b:9d:49:b0:86:9a:51:55:b2:9a:95:a1:f3:18:c0: ea:a4:a8:01:d5:1e:09:4f:63:db:c3:b2:ed:9a:5e:f8:b3:e6: db:1f:f8:03:23:fa:64:28:28:b1:39:cf:1d:84:b3:9f:40:f2: 54:0e:d7:e0:37:ae:bd:60:c5:56:99:3c:ea:0b:d4:8d:a0:ff: 82:3d:f5:e7:d4:fb:2e:61:d0:00:cd:73:64:40:17:b6:b4:ad: 44:ce:45:a7:fa:5c:e8:0b:0e:b0:d0:7f:ee:3a:e4:a3:92:de: f2:e0:d2:5d:25:55:8a:56:5a:64:67:ac:23:40:32:48:85:e9: 31:e8:5d:37:3e:df:6b:77:db:db:a5:52:3c:10:12:24:9f:53: 9d:2b:40:b4:bc:34:85:c5:49:c3:a9:25:d4:1d:10:54:2d:fc: 12:dc:72:9d:6d:5d:de:64:7b:44:2b:51:cd:02:8a:23:20:15: 90:a0:58:5b:b5:55:d3:20:32:77:20:69:03:05:5f:1a:93:ee: 39:46:5c:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyZlYlCMJvhclGWWOLf5v649nVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjExMDkwODQxMzFaFw0yNjExMTAxMTA0MzFaMDMxMTAvBgNV BAMTKEUwMjEyMDdCOUNFNTJGMTE0MUZDNUE0OEE2QTJFMDY3RkREOTgyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgCvvbXyUTWIIQnyHjS8ahUOq dgcQrvTBTU9oNudw8hhK7W8C9U8utvhZ0O2lqGPmcw1UtApXq8FrWWswYJ57xVVv BsdRG44zs+/EUY53ZomJYd6aALGyp/CXFU0qGQhrnDslIhi0XiTA+C4QRu41mjgU KnTdaOBkkBdJEXUe6bFHHNiAV6R3lUI8n1cHDvoxES5P6EgIdAky2ckYMaUJia83 iR6TiMrFcGJbT+Ibozh/JqfoC7dzd12dx+0MQt7cX6KZOqdN9d84VrlWvkcdHwGj 7V3bLsnoKYNheAq9GVxee9J8J+Zq7ZEKAvi2M6KqaTSrS8NG/xkHnDqkGHJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4CEge5zlLxFB/FpIpqLgZ/3ZglUwHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIx RUNCQUYyRjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4ZKc2rUJi2YMqL3VN2dlMESV2V7paBl1i4 53X5bpAZSVBxJ9wv6e/sVmi+D4RWm48eDEUYnR208WudSbCGmlFVspqVofMYwOqk qAHVHglPY9vDsu2aXviz5tsf+AMj+mQoKLE5zx2Es59A8lQO1+A3rr1gxVaZPOoL 1I2g/4I99efU+y5h0ADNc2RAF7a0rUTORaf6XOgLDrDQf+465KOS3vLg0l0lVYpW WmRnrCNAMkiF6THoXTc+32t329ulUjwQEiSfU50rQLS8NIXFScOpJdQdEFQt/BLc cp1tXd5ke0QrUc0CiiMgFZCgWFu1VdMgMncgaQMFXxqT7jlGXKY= -----END CERTIFICATE-----Generated at Mon Nov 9 17:08:49 2026 by rpki-client