$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft File: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft (raw, json) Hash identifier: 8Xg9XoZv9S19GhKHbnpKr4jj00DTVIIV9HdArB3HDW8= Subject key identifier: C8:AF:51:10:13:0D:AD:3D:A0:CC:2C:91:8A:F3:15:A0:31:70:20:93 Authority key identifier: FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2 Certificate issuer: /CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2 Certificate serial: 40B0EE7CCCE6C90AFBE5A84F0E31912022DD8D8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft Manifest number: BF Signing time: Sun 20 Sep 2026 23:46:15 +0000 Manifest this update: Sun 20 Sep 2026 23:41:15 +0000 Manifest next update: Tue 22 Sep 2026 03:23:15 +0000 Files and hashes: 1: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl (hash: 6FIL7E59De3HUMDOPQee8icATv0E9gmvRbiQBj8gmaw=) 2: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: geMBt2/v9mDAfVwndEzecLfwDT1q5GpeHQvNLrPctqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b0:ee:7c:cc:e6:c9:0a:fb:e5:a8:4f:0e:31:91:20:22:dd:8d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2 Validity Not Before: Sep 20 23:41:15 2026 GMT Not After : Sep 22 03:23:15 2026 GMT Subject: CN=C8AF5110130DAD3DA0CC2C918AF315A031702093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:9c:32:15:c2:06:d7:10:c0:f9:05:18:88: 94:b8:5e:ae:e8:ec:5f:9c:14:53:cd:15:d7:6f:65: 72:c1:37:bc:6a:7d:80:ea:4c:3a:55:81:d2:18:12: ee:dc:70:bb:b4:c1:f8:8e:98:4f:96:ee:60:2a:55: 73:a7:39:08:a9:75:59:23:d5:6c:eb:21:55:ab:23: 4f:b7:8e:a2:64:7f:a1:ee:3f:67:b6:c1:42:af:cb: dc:de:64:17:e1:e3:60:23:62:d5:9d:b8:c8:9e:fb: 22:9f:ce:b6:e3:9c:ae:32:8a:77:62:d8:a9:9a:67: 19:94:9c:8b:24:89:35:18:05:ef:05:af:cf:90:d9: e0:75:fc:b5:f0:1d:7b:eb:df:2f:e1:1f:49:8f:b8: 89:75:98:6d:9e:eb:d3:ff:6c:a3:12:37:e7:3b:69: 2b:e0:33:5e:80:d4:dc:02:c5:65:e3:b4:dd:a9:8c: 29:8d:4e:9e:e2:12:01:b8:08:95:ba:2c:6e:db:71: 5d:eb:51:a5:27:2f:a3:0c:97:ff:b3:95:6c:6a:9f: 25:92:ec:aa:73:a3:68:0f:50:45:d7:bd:2f:45:ec: 28:06:38:1b:6c:46:04:3b:b4:eb:b9:49:ab:b7:99: 83:df:3d:d2:6e:f9:3c:ed:d6:da:dc:2b:0f:a1:6d: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AF:51:10:13:0D:AD:3D:A0:CC:2C:91:8A:F3:15:A0:31:70:20:93 X509v3 Authority Key Identifier: keyid:FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:2e:03:4e:15:37:2b:c3:ff:ec:58:ec:6b:bd:ed:65:ad:3d: ec:86:88:fa:87:3c:1d:bf:ab:4b:3e:3f:f3:0a:7b:dc:dd:82: 4e:cc:73:39:7a:25:06:13:87:7c:43:fc:0c:58:77:84:8b:7a: 8f:1f:80:5b:ca:61:e2:56:51:94:e9:76:0b:69:1c:33:ca:ec: bc:66:01:df:43:d1:b6:d5:78:b5:52:df:5e:80:c3:9e:9c:cd: de:a2:d3:81:8d:bc:65:a3:1b:60:1e:55:c3:d9:b5:87:c0:f4: 79:75:41:7f:2e:1e:dc:c8:28:17:37:4a:b2:4b:fb:5f:21:0f: 7a:c1:7e:4e:22:6c:ff:a2:88:01:c7:ec:3a:80:aa:25:69:97: 4d:65:2f:4c:47:39:f6:86:1e:81:c1:36:c5:4a:da:30:96:ec: 96:37:6a:5e:37:30:5d:1d:07:f3:7a:f6:fb:aa:2a:b8:5a:72: ef:1a:ed:0a:1a:7b:c1:a7:5a:4f:23:18:21:74:29:e8:0b:a1: db:5c:fc:99:0c:da:c4:ba:91:ed:52:b1:80:cc:49:7e:22:b9: b1:c2:4c:1e:ae:3f:48:a1:21:a6:ea:40:45:ad:3b:9d:5a:8e: 89:65:e5:fb:e9:22:64:f1:29:17:6a:38:87:2d:eb:a5:d3:5e: aa:fa:b4:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLDufMzmyQr75ahPDjGRICLdjY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ4MkVCMENERjI2RkM5RjUyQkI0ODJEMjU1QTI2Mzc0 RkIyOTdGMjAeFw0yNjA5MjAyMzQxMTVaFw0yNjA5MjIwMzIzMTVaMDMxMTAvBgNV BAMTKEM4QUY1MTEwMTMwREFEM0RBMENDMkM5MThBRjMxNUEwMzE3MDIwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN65wyFcIG1xDA+QUYiJS4Xq7o 7F+cFFPNFddvZXLBN7xqfYDqTDpVgdIYEu7ccLu0wfiOmE+W7mAqVXOnOQipdVkj 1WzrIVWrI0+3jqJkf6HuP2e2wUKvy9zeZBfh42AjYtWduMie+yKfzrbjnK4yindi 2KmaZxmUnIskiTUYBe8Fr8+Q2eB1/LXwHXvr3y/hH0mPuIl1mG2e69P/bKMSN+c7 aSvgM16A1NwCxWXjtN2pjCmNTp7iEgG4CJW6LG7bcV3rUaUnL6MMl/+zlWxqnyWS 7Kpzo2gPUEXXvS9F7CgGOBtsRgQ7tOu5Sau3mYPfPdJu+Tzt1trcKw+hbZvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyK9REBMNrT2gzCyRivMVoDFwIJMwHwYDVR0j BBgwFoAU/YLrDN8m/J9Su0gtJVomN0+yl/IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y3Yjc2NzctNjIwNC00MDVmLThiYTItZTcxNDMyNGMxNWQ3LzAvRkQ4MkVCMENE RjI2RkM5RjUyQkI0ODJEMjU1QTI2Mzc0RkIyOTdGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDgyRUIwQ0RGMjZGQzlGNTJCQjQ4MkQyNTVBMjYzNzRGQjI5 N0YyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvRkQ4MkVCMENERjI2RkM5RjUyQkI0ODJEMjU1QTI2 Mzc0RkIyOTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMouA04VNyvD/+xY7Gu97WWtPeyGiPqHPB2/ q0s+P/MKe9zdgk7Mczl6JQYTh3xD/AxYd4SLeo8fgFvKYeJWUZTpdgtpHDPK7Lxm Ad9D0bbVeLVS316Aw56czd6i04GNvGWjG2AeVcPZtYfA9Hl1QX8uHtzIKBc3SrJL +18hD3rBfk4ibP+iiAHH7DqAqiVpl01lL0xHOfaGHoHBNsVK2jCW7JY3al43MF0d B/N69vuqKrhacu8a7Qoae8GnWk8jGCF0KegLodtc/JkM2sS6ke1SsYDMSX4iubHC TB6uP0ihIabqQEWtO51ajoll5fvpImTxKRdqOIct66XTXqr6tO0= -----END CERTIFICATE-----Generated at Mon Sep 21 09:51:18 2026 by rpki-client