$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: JEJNtPlcxUoBSyi8AEcuu0p8HH24ACo8+GcC6qNpu3Q= Subject key identifier: 05:3D:B2:18:9E:0E:2E:10:39:2A:7E:AA:F7:34:C0:C2:2B:7E:BC:3F Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 681B537AD2AD24C1E949DA679029539D1F5EF63A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: 37 Signing time: Fri 12 Jun 2026 18:58:25 +0000 Manifest this update: Fri 12 Jun 2026 18:53:25 +0000 Manifest next update: Sat 13 Jun 2026 20:46:25 +0000 Files and hashes: 1: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) 2: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) 3: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: 2MwIAbWBzCD9eKax5VXQ3JQnf8IuD5gzCvS+CPXHOSg=) 4: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1b:53:7a:d2:ad:24:c1:e9:49:da:67:90:29:53:9d:1f:5e:f6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: Jun 12 18:53:25 2026 GMT Not After : Jun 13 20:46:25 2026 GMT Subject: CN=053DB2189E0E2E10392A7EAAF734C0C22B7EBC3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:8e:1e:73:0e:49:7a:5d:a8:18:03:0f:9e: de:2a:62:8f:6d:ba:3e:0b:ac:f4:b9:af:22:4b:ac: 11:44:ea:89:2c:94:16:9b:11:4b:65:06:60:0f:d9: 86:3a:ab:06:50:a8:f0:58:1b:0b:a0:e0:1b:27:4b: fd:a6:dc:46:08:ce:a7:fb:75:f3:fc:9c:32:1a:02: 80:c5:fd:5d:8d:41:0a:a5:2e:0b:3c:0d:32:ac:7f: 80:f4:3a:4b:4d:7a:0f:f2:db:f0:3f:15:c9:36:65: fc:6a:c5:04:21:75:3e:02:73:e1:4e:35:c6:67:01: 58:cc:97:a6:d4:37:59:47:66:46:b4:da:2e:6b:3d: 16:d7:e1:71:aa:ed:ea:e0:c0:39:cd:65:bb:9d:de: 3d:cd:b1:b3:af:7d:67:7b:d8:32:65:f6:ca:89:24: 18:dd:1c:2e:01:0f:ab:c2:6d:bd:37:a2:4e:4c:2e: da:a0:76:e2:c0:0d:bd:e8:6f:fc:f4:44:48:c3:1b: a0:0d:07:21:8a:90:3b:4c:d8:f2:f7:11:2e:e0:0c: a3:2b:c5:a8:c3:67:de:f4:8a:b7:98:9b:a8:dd:0c: 3e:6b:13:77:22:2b:83:59:b9:26:df:bc:dd:dc:1b: 0a:7f:fa:8a:8b:c3:d5:14:0e:76:b6:da:91:6b:57: c8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3D:B2:18:9E:0E:2E:10:39:2A:7E:AA:F7:34:C0:C2:2B:7E:BC:3F X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d3:c7:b3:35:2b:fb:ff:4b:b5:2f:88:2a:37:a8:94:57:cf: 4f:47:8e:79:01:ba:3f:34:96:8f:ab:61:3e:d5:6b:bb:26:c3: be:80:29:87:3e:64:16:37:ba:7d:c6:be:84:43:96:b1:3e:66: 94:d7:3f:ae:df:0e:bb:7f:7d:0c:29:7b:73:80:11:57:dc:63: 0a:4e:01:ec:e5:df:26:fc:bc:6e:b3:4e:fb:a6:54:c0:43:6c: 9d:81:e7:25:7f:89:cb:d1:80:53:7c:c8:2a:ff:5b:3b:58:5a: 18:28:12:a8:98:57:a0:61:ce:06:a3:71:b9:0c:6a:07:d3:07: f1:f4:0b:5d:87:74:1d:33:f2:4a:0b:41:50:65:f3:be:6f:56: c2:5e:6d:d2:c5:06:2b:f9:d7:9a:47:48:4a:b8:70:8f:04:03: f6:4e:44:37:3a:45:9e:ce:52:eb:91:8f:0d:3a:f2:80:5b:3c: 40:5f:bf:da:97:45:07:eb:c1:71:df:0f:a0:a6:a5:d7:e8:69: 81:33:11:bf:bc:47:52:c2:d2:66:38:38:02:70:ea:cb:2d:9d: 03:ef:a4:f2:9c:bd:95:94:e9:48:eb:bc:ba:ab:dc:31:95:fc: d7:96:c5:7d:30:4e:92:d9:db:b4:b6:bf:67:9b:0a:3d:1e:bd: 12:e5:5e:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBtTetKtJMHpSdpnkClTnR9e9jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjA2MTIxODUzMjVaFw0yNjA2MTMyMDQ2MjVaMDMxMTAvBgNV BAMTKDA1M0RCMjE4OUUwRTJFMTAzOTJBN0VBQUY3MzRDMEMyMkI3RUJDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nY4ecw5Jel2oGAMPnt4qYo9t uj4LrPS5ryJLrBFE6okslBabEUtlBmAP2YY6qwZQqPBYGwug4BsnS/2m3EYIzqf7 dfP8nDIaAoDF/V2NQQqlLgs8DTKsf4D0OktNeg/y2/A/Fck2ZfxqxQQhdT4Cc+FO NcZnAVjMl6bUN1lHZka02i5rPRbX4XGq7ergwDnNZbud3j3NsbOvfWd72DJl9sqJ JBjdHC4BD6vCbb03ok5MLtqgduLADb3ob/z0REjDG6ANByGKkDtM2PL3ES7gDKMr xajDZ970ireYm6jdDD5rE3ciK4NZuSbfvN3cGwp/+oqLw9UUDna22pFrV8iNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBT2yGJ4OLhA5Kn6q9zTAwit+vD8wHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATTx7M1K/v/S7UviCo3qJRXz09HjnkBuj80 lo+rYT7Va7smw76AKYc+ZBY3un3GvoRDlrE+ZpTXP67fDrt/fQwpe3OAEVfcYwpO Aezl3yb8vG6zTvumVMBDbJ2B5yV/icvRgFN8yCr/WztYWhgoEqiYV6BhzgajcbkM agfTB/H0C12HdB0z8koLQVBl875vVsJebdLFBiv515pHSEq4cI8EA/ZORDc6RZ7O UuuRjw068oBbPEBfv9qXRQfrwXHfD6CmpdfoaYEzEb+8R1LC0mY4OAJw6sstnQPv pPKcvZWU6UjrvLqr3DGV/NeWxX0wTpLZ27S2v2ebCj0evRLlXo8= -----END CERTIFICATE-----Generated at Sat Jun 13 12:42:00 2026 by rpki-client