$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft (raw, json) Hash identifier: toTG3IpYVcH4RPKk306GhCuXllmzPPIazmlZGimb4jY= Subject key identifier: AB:9A:2B:C9:3A:50:8E:22:C3:4E:23:21:63:8C:73:86:09:C4:F6:15 Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Certificate serial: 186B8219763A4136DD7CB6A9FC12EFF681A8A180 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft Manifest number: BC Signing time: Sun 20 Sep 2026 09:39:09 +0000 Manifest this update: Sun 20 Sep 2026 09:34:09 +0000 Manifest next update: Mon 21 Sep 2026 11:41:09 +0000 Files and hashes: 1: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl (hash: bUF+gkEfBVKLX5id7QsLSH/2AzWIO+g7oVEv6+EOXmA=) 2: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: qO47OC3TwK7E148rjwjIE4Ck8qFn/gnO363ZvkJFSv0=) 3: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: JiHp4yVnum/Ea+DgEoblrAZTOF1sDJH1+9ZL79YGFFM=) 4: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6b:82:19:76:3a:41:36:dd:7c:b6:a9:fc:12:ef:f6:81:a8:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Validity Not Before: Sep 20 09:34:09 2026 GMT Not After : Sep 21 11:41:09 2026 GMT Subject: CN=AB9A2BC93A508E22C34E2321638C738609C4F615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:d9:95:e4:3e:2b:72:37:f5:12:26:7b:16: 88:6e:95:3d:0b:5f:b9:49:61:4b:84:c2:df:4c:fc: 51:7c:96:b1:26:25:02:34:69:bf:5a:ef:1e:a2:59: 49:65:f9:4f:47:76:04:6b:e9:28:c4:cc:bf:0f:28: 6e:aa:02:a2:18:aa:cd:97:8c:e8:d6:c7:26:56:b6: 68:e8:c7:bd:4b:df:8e:46:2d:62:08:17:35:35:cd: b4:85:32:90:a7:b4:ba:40:53:75:21:72:01:ef:d9: c7:75:e5:6d:3b:b3:20:f5:cb:55:3e:2a:c3:ba:a0: 8e:bd:2b:f1:6c:74:52:8b:bc:91:b6:ae:80:a5:b7: 82:46:fb:11:05:b6:40:56:e7:3e:1b:5b:af:6b:98: 51:ec:de:1c:a5:11:ae:a2:b7:bf:5d:b7:93:2d:14: 3e:96:ae:2b:ba:d4:17:a4:16:ca:6d:62:10:24:b8: 7b:d7:30:e5:f2:73:74:47:7f:0c:b3:07:59:80:0d: d7:2a:f1:da:1d:af:92:7e:2a:45:b9:25:21:d0:ca: 88:83:0d:d7:2a:f6:17:16:88:6b:7e:44:a3:a2:1b: e6:a9:5e:df:da:f5:65:35:e2:7e:0b:6d:10:de:9a: 2d:55:9d:5a:a1:9a:83:16:87:4b:6e:08:ae:e8:5a: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9A:2B:C9:3A:50:8E:22:C3:4E:23:21:63:8C:73:86:09:C4:F6:15 X509v3 Authority Key Identifier: keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:84:29:72:5c:98:43:28:aa:59:75:5c:97:c5:28:a8:07:d0: 21:b5:3c:03:d6:42:b3:ab:0b:b0:bd:de:67:1b:98:49:33:89: fa:83:fb:7f:fd:3e:f5:8b:08:c7:fa:f9:64:31:f2:db:b3:72: 5a:6f:9f:c3:35:6b:d3:60:25:20:ef:91:e5:a9:9e:6a:da:f2: 7e:55:d9:73:37:5e:2d:75:01:8e:b7:e6:53:25:e7:cd:e4:59: 91:88:f4:18:1d:ae:2e:84:c4:51:26:05:fd:b5:24:46:81:5f: 3d:5c:19:c5:80:37:cd:1d:75:4a:f7:ca:59:2a:c7:f2:0c:7f: 41:2f:4c:27:f0:e9:de:ca:0b:f4:2a:d5:e9:12:e5:64:09:89: 0a:7f:e6:a0:f2:32:57:58:4a:86:f2:54:a9:6b:44:31:f3:a7: 77:93:72:05:fe:ee:32:12:7f:27:e9:6b:2f:e3:74:fa:fa:87: 85:80:c8:7a:3f:ca:99:61:f3:0b:a2:f0:7e:9c:33:b9:93:78: 60:8f:a2:cd:e1:4d:e8:c7:27:e5:71:86:1e:38:f7:70:89:25: d3:e5:04:f0:64:0c:d4:88:0f:77:70:72:d7:61:be:f8:de:51: b1:3d:01:1c:8d:f5:9b:8f:3b:34:d4:6b:bc:9f:ad:b3:18:49: 54:18:07:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGGuCGXY6QTbdfLap/BLv9oGooYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC QUYyRjM4QzAeFw0yNjA5MjAwOTM0MDlaFw0yNjA5MjExMTQxMDlaMDMxMTAvBgNV BAMTKEFCOUEyQkM5M0E1MDhFMjJDMzRFMjMyMTYzOEM3Mzg2MDlDNEY2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6stmV5D4rcjf1EiZ7FohulT0L X7lJYUuEwt9M/FF8lrEmJQI0ab9a7x6iWUll+U9HdgRr6SjEzL8PKG6qAqIYqs2X jOjWxyZWtmjox71L345GLWIIFzU1zbSFMpCntLpAU3UhcgHv2cd15W07syD1y1U+ KsO6oI69K/FsdFKLvJG2roClt4JG+xEFtkBW5z4bW69rmFHs3hylEa6it79dt5Mt FD6Wriu61BekFsptYhAkuHvXMOXyc3RHfwyzB1mADdcq8dodr5J+KkW5JSHQyoiD Ddcq9hcWiGt+RKOiG+apXt/a9WU14n4LbRDemi1VnVqhmoMWh0tuCK7oWrjZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq5oryTpQjiLDTiMhY4xzhgnE9hUwHwYDVR0j BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIx RUNCQUYyRjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaEKXJcmEMoqll1XJfFKKgH0CG1PAPWQrOr C7C93mcbmEkzifqD+3/9PvWLCMf6+WQx8tuzclpvn8M1a9NgJSDvkeWpnmra8n5V 2XM3Xi11AY635lMl583kWZGI9Bgdri6ExFEmBf21JEaBXz1cGcWAN80ddUr3ylkq x/IMf0EvTCfw6d7KC/Qq1ekS5WQJiQp/5qDyMldYSobyVKlrRDHzp3eTcgX+7jIS fyfpay/jdPr6h4WAyHo/yplh8wui8H6cM7mTeGCPos3hTejHJ+Vxhh4493CJJdPl BPBkDNSID3dwctdhvvjeUbE9ARyN9ZuPOzTUa7yfrbMYSVQYB40= -----END CERTIFICATE-----Generated at Sun Sep 20 17:44:25 2026 by rpki-client