$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: 4uiAWYxISYtMklf69ZiNDktCgU9EBDbww4o8GBDVGeU= Subject key identifier: F0:92:93:06:09:B1:DB:7C:00:41:CE:A2:DD:24:91:B4:E0:F9:47:E4 Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 0F4065FD47CB8B45FAF33EDD80794474D911D875 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: BC Signing time: Sun 20 Sep 2026 15:41:24 +0000 Manifest this update: Sun 20 Sep 2026 15:36:24 +0000 Manifest next update: Mon 21 Sep 2026 16:51:24 +0000 Files and hashes: 1: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) 2: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) 3: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: oH7SaZAcj+UUYKNxVOYQfF/gmH4Yv+rrO+s45q+A4pg=) 4: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:40:65:fd:47:cb:8b:45:fa:f3:3e:dd:80:79:44:74:d9:11:d8:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: Sep 20 15:36:24 2026 GMT Not After : Sep 21 16:51:24 2026 GMT Subject: CN=F092930609B1DB7C0041CEA2DD2491B4E0F947E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:92:67:8e:25:f4:46:41:9e:43:f8:27:14: c7:49:6a:36:44:7c:bc:96:6a:9c:c4:17:5e:13:a5: d8:e7:f3:2b:65:06:74:d4:0e:f8:bc:c9:4f:1d:c4: e5:57:de:18:c1:5d:8d:25:74:59:80:57:83:d0:ba: 90:0a:6a:7c:fc:17:76:93:e0:12:a4:9c:67:bd:62: 5c:c4:61:7c:4d:c6:e6:78:8f:a0:84:e9:0f:c3:71: 7e:83:8d:b6:3c:4b:e3:78:c0:53:8a:24:cb:b6:f0: 4f:64:cf:48:3f:29:fc:41:05:08:a1:02:06:a9:b9: f4:8e:92:6f:42:e8:fd:2c:cc:46:9b:0b:c1:57:89: 6e:32:34:6a:bf:60:d7:6f:36:b9:6c:2b:10:f9:69: 77:c1:ca:3a:f5:a9:c8:7d:dd:8b:98:b4:30:d2:c4: ac:ba:5d:7a:68:9a:51:bb:96:e3:0f:f6:f8:d1:36: 50:0b:43:1a:de:fc:5f:ee:c7:ac:dd:22:67:11:41: 49:0d:f8:bc:01:45:62:63:a1:01:3e:15:af:a3:1d: 8a:1d:45:e7:7d:a3:c9:5e:1d:1d:3c:27:f9:ca:20: d1:aa:c2:a4:2e:33:68:fe:16:8f:32:a9:bb:00:07: 15:33:c3:e2:90:a3:bb:aa:20:9e:be:99:f8:cf:b4: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:92:93:06:09:B1:DB:7C:00:41:CE:A2:DD:24:91:B4:E0:F9:47:E4 X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:1f:2c:9f:b9:91:2c:02:e0:82:d4:e5:9c:37:df:d7:d6: 52:85:70:48:63:a2:37:37:a0:56:9c:d0:e2:f7:e7:3b:a4:8b: ae:97:e7:c3:b7:be:de:1d:bd:71:07:d1:96:28:04:c0:54:24: 08:b2:23:a5:52:7b:ef:ce:6a:27:81:a8:06:46:b0:56:28:60: c9:f1:92:b1:7b:d8:24:78:55:b8:62:2c:ca:2c:66:5d:c9:6b: 00:b6:87:27:7d:b2:c9:09:14:e2:77:c6:b9:91:6a:7c:61:dc: 40:e4:5a:ab:11:90:d7:c5:f9:0d:8c:c5:e9:2f:b3:e7:93:3e: 36:53:03:6c:a1:30:37:da:72:6a:fd:b8:37:51:f4:fa:76:41: e3:9b:38:2e:a2:77:b3:cd:7f:19:0f:ef:37:d2:01:6b:f5:7d: fb:23:3a:6c:fb:14:af:63:3e:74:ba:33:8f:e1:13:68:be:5f: 9c:f9:67:10:cf:46:cb:7e:d0:74:7d:bf:fb:14:b9:23:b8:6d: ff:32:eb:c4:36:89:0d:91:af:02:0e:c2:2c:43:71:3c:d8:22: f1:69:c7:37:69:ab:18:a9:d3:a3:46:c4:bb:6b:1e:a3:f8:23: 47:23:e7:67:55:3d:b9:a1:b1:9a:c8:e1:24:73:e6:9c:a8:08: e7:17:cd:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0Bl/UfLi0X68z7dgHlEdNkR2HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjA5MjAxNTM2MjRaFw0yNjA5MjExNjUxMjRaMDMxMTAvBgNV BAMTKEYwOTI5MzA2MDlCMURCN0MwMDQxQ0VBMkREMjQ5MUI0RTBGOTQ3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAO5JnjiX0RkGeQ/gnFMdJajZE fLyWapzEF14Tpdjn8ytlBnTUDvi8yU8dxOVX3hjBXY0ldFmAV4PQupAKanz8F3aT 4BKknGe9YlzEYXxNxuZ4j6CE6Q/DcX6DjbY8S+N4wFOKJMu28E9kz0g/KfxBBQih AgapufSOkm9C6P0szEabC8FXiW4yNGq/YNdvNrlsKxD5aXfByjr1qch93YuYtDDS xKy6XXpomlG7luMP9vjRNlALQxre/F/ux6zdImcRQUkN+LwBRWJjoQE+Fa+jHYod Red9o8leHR08J/nKINGqwqQuM2j+Fo8yqbsABxUzw+KQo7uqIJ6+mfjPtJ41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8JKTBgmx23wAQc6i3SSRtOD5R+QwHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+6HyyfuZEsAuCC1OWcN9/X1lKFcEhjojc3 oFac0OL35zuki66X58O3vt4dvXEH0ZYoBMBUJAiyI6VSe+/OaieBqAZGsFYoYMnx krF72CR4VbhiLMosZl3JawC2hyd9sskJFOJ3xrmRanxh3EDkWqsRkNfF+Q2Mxekv s+eTPjZTA2yhMDfacmr9uDdR9Pp2QeObOC6id7PNfxkP7zfSAWv1ffsjOmz7FK9j PnS6M4/hE2i+X5z5ZxDPRst+0HR9v/sUuSO4bf8y68Q2iQ2RrwIOwixDcTzYIvFp xzdpqxip06NGxLtrHqP4I0cj52dVPbmhsZrI4SRz5pyoCOcXzWw= -----END CERTIFICATE-----Generated at Mon Sep 21 05:21:37 2026 by rpki-client