$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft File: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft (raw, json) Hash identifier: CgpcNBvooG+JdD80SBa68XU2+uNCOVSh9SRxSduTbMs= Subject key identifier: 3B:1B:7E:E7:3F:E8:07:BA:DB:9B:7B:CA:91:32:B6:24:1A:D9:A5:D9 Authority key identifier: FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 Certificate issuer: /CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Certificate serial: 728DAFA635A2322BD4C346B9786ADD8323A4A209 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 15:38:26 +0000 Manifest this update: Sat 13 Jun 2026 15:33:26 +0000 Manifest next update: Sun 14 Jun 2026 15:59:26 +0000 Files and hashes: 1: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: zLgVQYA5xLAWWDvEEhgF6F2kUEICyQjNZMvsMOscIV8=) 2: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: SBw6P3tSXs9klMeIGPKPIG91NqF9/LEzB6kE45zVl8k=) 3: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl (hash: 9XIjqlr0jhsSEppe0f/GOM+YlnexUeSpq4ISqshEFNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:8d:af:a6:35:a2:32:2b:d4:c3:46:b9:78:6a:dd:83:23:a4:a2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764 Validity Not Before: Jun 13 15:33:26 2026 GMT Not After : Jun 14 15:59:26 2026 GMT Subject: CN=3B1B7EE73FE807BADB9B7BCA9132B6241AD9A5D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:69:dc:a2:06:02:85:a2:11:b4:d5:4d:c7:ba: 32:90:42:02:35:a9:a2:e1:58:c3:88:75:0d:1b:1b: f2:1e:65:e4:42:3c:0b:06:66:35:4c:6b:8f:62:dd: 51:fe:73:0d:15:fd:3a:6e:f4:19:d4:71:8d:a9:57: 4b:a9:ea:f5:17:f4:19:59:ea:6a:c4:36:00:e6:84: 5c:c4:fb:9b:dc:8b:11:6e:fa:01:0f:c4:dd:ad:c9: 79:e0:20:ea:10:1f:d3:b2:0a:34:ce:aa:39:35:3b: c3:09:69:a8:cd:9e:83:b0:48:dc:9c:e0:56:f9:a0: d3:a2:44:f9:3a:6f:dd:df:ff:95:56:f4:66:3a:cf: b5:77:c1:c1:02:15:cc:69:2e:58:3a:11:01:59:82: 63:17:25:c7:a5:de:31:8e:a5:dc:eb:b7:50:a6:e1: e1:b7:c7:9d:8b:95:a8:84:27:0c:2e:81:be:4f:9a: 12:a7:12:89:e8:0e:17:d6:c4:af:92:85:43:db:cb: a5:c6:ae:fd:4b:a7:7f:71:b3:5b:05:12:8a:5e:91: 1f:3b:e7:64:5b:5c:0d:ca:08:0b:48:0b:ef:6e:ca: ed:40:5b:12:02:07:8d:ff:1a:77:77:26:79:cd:29: 25:1c:dd:6c:6e:d1:37:0d:53:21:e2:9d:30:46:a5: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1B:7E:E7:3F:E8:07:BA:DB:9B:7B:CA:91:32:B6:24:1A:D9:A5:D9 X509v3 Authority Key Identifier: keyid:FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:f3:ab:04:8a:62:d5:ff:ef:4f:2b:3c:e4:02:05:b8:12:5d: b5:83:a1:4f:82:52:66:66:7e:f9:76:5d:f2:42:11:47:94:90: 09:19:e9:60:19:c5:fe:da:05:ac:61:fb:0e:c9:bd:02:aa:82: da:28:b8:62:5c:cf:87:25:a4:29:5c:73:ab:61:c6:dd:90:e7: ef:8c:98:49:d7:37:ff:72:e5:7d:5d:eb:e9:77:70:c5:f8:ac: 66:2c:26:d2:86:39:c7:07:49:d6:69:be:28:86:94:e8:26:70: f0:29:38:e3:48:bf:9b:07:db:d1:4f:e7:18:5f:48:d1:fe:a1: 51:b5:65:cb:95:d2:a3:50:82:64:c1:b1:a8:fc:a8:5c:a7:58: cc:b6:ed:65:65:c3:4b:e1:0a:94:17:25:fe:69:fe:83:48:30: 72:59:45:f1:88:34:96:f4:76:04:90:37:69:10:24:f4:47:56: 10:b0:41:1b:95:69:1b:e7:05:3b:1c:db:10:6d:a6:94:48:b4: 4e:21:e9:8f:83:04:e0:0b:72:72:7e:78:77:04:c8:b0:b6:9e: 98:4c:23:8d:16:4e:f1:6a:99:2e:6d:85:4f:f9:5c:e1:9a:c6: f3:17:c2:7d:46:96:23:1b:df:bc:f8:69:e1:a5:c3:06:e5:08: b3:c0:52:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUco2vpjWiMivUw0a5eGrdgyOkogkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFG QUExRjc2NDAeFw0yNjA2MTMxNTMzMjZaFw0yNjA2MTQxNTU5MjZaMDMxMTAvBgNV BAMTKDNCMUI3RUU3M0ZFODA3QkFEQjlCN0JDQTkxMzJCNjI0MUFEOUE1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0adyiBgKFohG01U3HujKQQgI1 qaLhWMOIdQ0bG/IeZeRCPAsGZjVMa49i3VH+cw0V/Tpu9BnUcY2pV0up6vUX9BlZ 6mrENgDmhFzE+5vcixFu+gEPxN2tyXngIOoQH9OyCjTOqjk1O8MJaajNnoOwSNyc 4Fb5oNOiRPk6b93f/5VW9GY6z7V3wcECFcxpLlg6EQFZgmMXJcel3jGOpdzrt1Cm 4eG3x52LlaiEJwwugb5PmhKnEonoDhfWxK+ShUPby6XGrv1Lp39xs1sFEopekR87 52RbXA3KCAtIC+9uyu1AWxICB43/Gnd3JnnNKSUc3Wxu0TcNUyHinTBGpTkZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOxt+5z/oB7rbm3vKkTK2JBrZpdkwHwYDVR0j BBgwFoAU/f41hITQgVoJqhVozPwC6vqh92QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTgzMjgyMzctNzUwZi00MDIyLWI4YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4 NEQwODE1QTA5QUExNTY4Q0NGQzAyRUFGQUExRjc2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GREZFMzU4NDg0RDA4MTVBMDlBQTE1NjhDQ0ZDMDJFQUZBQTFG NzY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvRkRGRTM1ODQ4NEQwODE1QTA5QUExNTY4Q0NGQzAy RUFGQUExRjc2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANbzqwSKYtX/708rPOQCBbgSXbWDoU+CUmZm fvl2XfJCEUeUkAkZ6WAZxf7aBaxh+w7JvQKqgtoouGJcz4clpClcc6thxt2Q5++M mEnXN/9y5X1d6+l3cMX4rGYsJtKGOccHSdZpviiGlOgmcPApOONIv5sH29FP5xhf SNH+oVG1ZcuV0qNQgmTBsaj8qFynWMy27WVlw0vhCpQXJf5p/oNIMHJZRfGINJb0 dgSQN2kQJPRHVhCwQRuVaRvnBTsc2xBtppRItE4h6Y+DBOALcnJ+eHcEyLC2nphM I40WTvFqmS5thU/5XOGaxvMXwn1GliMb37z4aeGlwwblCLPAUvQ= -----END CERTIFICATE-----Generated at Sat Jun 13 23:25:49 2026 by rpki-client