$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: DrP1wR2AQgmSzlS+RcorRjArGdB46TU780W+C3TvHdM= Subject key identifier: C1:9E:5E:3D:BC:19:2C:5F:CD:BD:5E:08:01:18:1A:3A:D8:53:D6:C5 Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 13257432FADEBDC3D85B0BB853BC95B26A73591C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 19:15:27 +0000 Manifest this update: Tue 28 Jul 2026 19:10:27 +0000 Manifest next update: Wed 29 Jul 2026 20:53:27 +0000 Files and hashes: 1: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) 2: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: ZGwb8imWFicQE8euY9zPpgsydzfbsfh3B+RaQUZ+HxQ=) 3: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) 4: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:25:74:32:fa:de:bd:c3:d8:5b:0b:b8:53:bc:95:b2:6a:73:59:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: Jul 28 19:10:27 2026 GMT Not After : Jul 29 20:53:27 2026 GMT Subject: CN=C19E5E3DBC192C5FCDBD5E0801181A3AD853D6C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:74:0a:84:57:6e:a9:15:ff:bc:4e:3d:89:96: ca:1d:e5:e7:7f:4d:9d:b1:51:39:1c:0f:40:48:a7: 17:c1:da:3d:35:79:eb:b1:62:8b:8d:69:5b:63:de: a9:47:2a:83:35:6c:f2:24:09:29:2e:12:ee:90:f6: 29:28:ab:c4:38:bb:64:ac:dd:f7:57:b4:fc:73:cb: 96:80:da:ec:73:19:13:3f:a7:bd:76:99:d1:c2:64: 3c:b3:48:c6:93:37:ac:0f:d3:82:e1:fb:da:f0:26: 9e:de:00:e8:1f:2c:fd:a8:11:fa:65:5e:9a:a2:fe: 8c:bb:c9:da:c3:06:a8:93:2c:58:0f:09:1f:a1:9e: 75:b7:96:dd:14:c1:03:56:39:de:d7:11:7d:2a:05: 00:51:7c:6d:3a:ea:dd:0c:68:92:26:83:f0:3a:64: be:18:61:df:4e:05:01:4a:24:43:d8:6c:9e:04:53: c1:2d:64:7b:2b:44:27:f2:6b:bd:a9:e3:21:3d:b0: 52:af:91:13:7d:a6:d2:f5:e6:bb:3f:c3:ab:4a:af: aa:a6:67:b3:94:25:f6:09:91:40:6e:36:23:81:32: 10:10:56:0f:94:80:b9:b1:e3:e4:d7:0e:8b:1f:29: ce:44:fc:dc:5d:c5:eb:18:7b:95:48:c3:90:81:35: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9E:5E:3D:BC:19:2C:5F:CD:BD:5E:08:01:18:1A:3A:D8:53:D6:C5 X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:30:cb:9a:db:36:e1:99:06:f0:26:68:52:b2:5b:a9:c1:77: ed:af:73:41:3a:86:0f:b5:01:64:a3:a4:1f:6f:16:af:36:6b: 27:1d:bc:52:a3:8c:90:cb:f6:f2:15:52:d5:c2:75:63:90:4d: 6a:4e:57:ab:3f:f9:5c:ba:f6:22:b2:24:cd:5c:76:90:68:31: 54:81:88:a0:b9:ff:24:87:fc:71:8d:cf:ac:7a:4a:c5:ca:73: 78:7e:d5:f5:50:5a:94:17:0d:2f:60:d9:17:1a:a9:6e:ab:6c: 64:ce:be:a2:92:3e:dd:5b:2d:30:05:e7:fb:6e:93:c3:2a:be: 89:a6:ad:a6:c7:a3:03:7f:54:ee:99:ee:10:57:c1:e5:2b:a7: a8:9f:9c:b6:93:7a:89:a7:9d:05:1b:af:a7:96:b7:fd:74:3b: ef:ed:e8:a3:ec:7c:52:09:bd:23:9c:59:37:6f:85:9e:67:6b: 1c:46:3d:58:88:91:fd:a9:1c:cb:92:2a:23:45:7a:26:99:f2: 8b:85:c3:7d:62:c7:2c:f6:14:2a:b3:63:dd:45:41:e7:5b:b4: 06:f9:02:9f:3a:96:30:60:db:ad:e6:e9:2e:4a:89:0b:d2:78: c3:32:d6:f4:05:8f:f7:68:23:d3:5b:b7:bd:c3:0b:ee:4f:98: a5:ed:af:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEyV0MvrevcPYWwu4U7yVsmpzWRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjA3MjgxOTEwMjdaFw0yNjA3MjkyMDUzMjdaMDMxMTAvBgNV BAMTKEMxOUU1RTNEQkMxOTJDNUZDREJENUUwODAxMTgxQTNBRDg1M0Q2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHdAqEV26pFf+8Tj2Jlsod5ed/ TZ2xUTkcD0BIpxfB2j01eeuxYouNaVtj3qlHKoM1bPIkCSkuEu6Q9ikoq8Q4u2Ss 3fdXtPxzy5aA2uxzGRM/p712mdHCZDyzSMaTN6wP04Lh+9rwJp7eAOgfLP2oEfpl Xpqi/oy7ydrDBqiTLFgPCR+hnnW3lt0UwQNWOd7XEX0qBQBRfG066t0MaJImg/A6 ZL4YYd9OBQFKJEPYbJ4EU8EtZHsrRCfya72p4yE9sFKvkRN9ptL15rs/w6tKr6qm Z7OUJfYJkUBuNiOBMhAQVg+UgLmx4+TXDosfKc5E/NxdxesYe5VIw5CBNboNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwZ5ePbwZLF/NvV4IARgaOthT1sUwHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgwy5rbNuGZBvAmaFKyW6nBd+2vc0E6hg+1 AWSjpB9vFq82aycdvFKjjJDL9vIVUtXCdWOQTWpOV6s/+Vy69iKyJM1cdpBoMVSB iKC5/ySH/HGNz6x6SsXKc3h+1fVQWpQXDS9g2RcaqW6rbGTOvqKSPt1bLTAF5/tu k8MqvommrabHowN/VO6Z7hBXweUrp6ifnLaTeomnnQUbr6eWt/10O+/t6KPsfFIJ vSOcWTdvhZ5naxxGPViIkf2pHMuSKiNFeiaZ8ouFw31ixyz2FCqzY91FQedbtAb5 Ap86ljBg263m6S5KiQvSeMMy1vQFj/doI9Nbt73DC+5PmKXtrzQ= -----END CERTIFICATE-----Generated at Wed Jul 29 01:41:13 2026 by rpki-client