$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft (raw, json) Hash identifier: Td6dsc2fomzOOgiX2X4itKeEFQiwQp6bwq/fODJK/fc= Subject key identifier: E0:8E:3A:A8:34:26:65:4C:DE:EE:46:59:AA:9A:FD:4E:E9:FC:52:DE Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Certificate serial: 11A7E1730B2C3EDD6824C132DBEFDC97C77B2018 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft Manifest number: FB Signing time: Sat 07 Nov 2026 08:20:45 +0000 Manifest this update: Sat 07 Nov 2026 08:15:45 +0000 Manifest next update: Sun 08 Nov 2026 09:42:45 +0000 Files and hashes: 1: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=) 2: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: oCEPSRGBFFoflWYSjHYx9VCHu8/mjpeyrYwb5luSmks=) 3: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl (hash: nkBxQsY959n27BNn8I+7WQzve7Nkq+Tr9t+g9wRpQKM=) 4: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: RnJJllf0YMteG3AFkp1Ixqim8p6HBfDvdaEh2ix5oH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 03:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a7:e1:73:0b:2c:3e:dd:68:24:c1:32:db:ef:dc:97:c7:7b:20:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Validity Not Before: Nov 7 08:15:45 2026 GMT Not After : Nov 8 09:42:45 2026 GMT Subject: CN=E08E3AA83426654CDEEE4659AA9AFD4EE9FC52DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:fd:54:02:7b:b1:37:84:31:4e:7f:08:4c: 40:01:70:8d:37:72:69:f9:79:f6:7b:29:2d:14:1f: ef:0e:38:cb:c5:98:70:d2:59:57:44:6b:9d:eb:58: 23:64:83:e9:49:59:e3:1e:c1:ef:df:bc:44:72:f3: 84:d6:3d:fb:24:d5:d9:f2:b9:4d:f2:e6:ce:7d:d0: f9:cb:73:d7:17:3f:10:c8:7b:a1:37:5e:91:de:ca: b5:5e:c7:ed:9a:4b:80:ca:11:af:17:72:8b:ed:0e: 76:5b:3f:30:51:a5:41:ba:b0:5b:d8:43:e6:a6:74: d6:30:02:9d:69:c1:69:20:76:dd:11:7f:a1:15:c4: 2d:dc:06:b5:76:fc:a5:bd:59:fb:c3:eb:d0:44:63: be:58:97:a5:52:04:69:25:ac:3e:51:b0:cb:ad:96: f8:af:a9:6b:6a:c3:82:c4:01:4b:d5:73:98:3e:e6: f6:45:7c:82:93:af:ab:d1:20:e9:24:a2:03:e7:75: d0:07:74:b2:c0:a0:18:d0:1e:c4:67:9b:b6:62:08: f9:a4:d3:82:29:a4:a9:f2:31:09:22:26:20:75:a0: 13:69:81:9f:bc:79:cc:35:40:9c:7e:f8:05:58:72: ef:28:85:8d:14:05:54:46:62:94:29:bb:eb:3d:3c: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8E:3A:A8:34:26:65:4C:DE:EE:46:59:AA:9A:FD:4E:E9:FC:52:DE X509v3 Authority Key Identifier: keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:32:55:63:e2:d9:13:65:93:3c:0f:43:cf:9b:e5:b0:8e:d2: ad:3f:ac:37:67:e6:38:73:c3:6d:4b:1f:93:6a:f5:e3:92:18: e3:14:21:41:82:f5:f1:7f:60:62:34:6c:67:a2:a4:7e:53:5a: 09:ff:b3:fe:c9:93:a5:6f:34:df:77:b9:e7:f2:a3:25:6c:32: d8:de:bb:8c:7d:36:ca:2e:b7:10:71:f7:41:cc:f1:59:39:67: 50:37:1e:4e:b1:11:e5:65:7a:30:70:bb:be:49:9c:10:28:f2: 68:6c:c3:da:60:75:d5:0e:49:3a:0e:88:af:ff:01:16:90:66: f2:2c:60:d4:d4:a7:6c:37:6a:f5:bc:5e:f9:ec:71:44:d2:7c: 15:51:5d:e6:ec:bf:70:16:fe:5b:75:a7:1e:b4:56:e9:f5:c9: e0:03:98:14:c1:2d:ed:95:58:b3:ae:7b:84:61:eb:21:a0:7a: eb:21:74:f9:b8:3f:a0:b8:07:0e:9a:54:16:93:71:2f:85:21: db:dd:dc:2e:df:49:6d:27:5e:c7:32:19:89:ee:f9:ae:3f:e7: fd:4d:f7:66:6d:10:f1:62:78:52:d7:9d:87:09:41:2b:d2:c6: 89:0a:4a:ac:b8:d7:5b:12:dc:15:1e:e3:5a:aa:0d:3c:5b:42: a1:7c:51:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEafhcwssPt1oJMEy2+/cl8d7IBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIx REE4RjM4QzAeFw0yNjExMDcwODE1NDVaFw0yNjExMDgwOTQyNDVaMDMxMTAvBgNV BAMTKEUwOEUzQUE4MzQyNjY1NENERUVFNDY1OUFBOUFGRDRFRTlGQzUyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9/1UAnuxN4QxTn8ITEABcI03 cmn5efZ7KS0UH+8OOMvFmHDSWVdEa53rWCNkg+lJWeMewe/fvERy84TWPfsk1dny uU3y5s590PnLc9cXPxDIe6E3XpHeyrVex+2aS4DKEa8XcovtDnZbPzBRpUG6sFvY Q+amdNYwAp1pwWkgdt0Rf6EVxC3cBrV2/KW9WfvD69BEY75Yl6VSBGklrD5RsMut lvivqWtqw4LEAUvVc5g+5vZFfIKTr6vRIOkkogPnddAHdLLAoBjQHsRnm7ZiCPmk 04IppKnyMQkiJiB1oBNpgZ+8ecw1QJx++AVYcu8ohY0UBVRGYpQpu+s9PGcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4I46qDQmZUze7kZZqpr9Tun8Ut4wHwYDVR0j BBgwFoAU/V+ujyQex7cr1LqHlSFnax2o84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYy NDFFQzdCNzJCRDRCQTg3OTUyMTY3NkIxREE4RjM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GRDVGQUU4RjI0MUVDN0I3MkJENEJBODc5NTIxNjc2QjFEQThG MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzAvRkQ1RkFFOEYyNDFFQzdCNzJCRDRCQTg3OTUyMTY3 NkIxREE4RjM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUyVWPi2RNlkzwPQ8+b5bCO0q0/rDdn5jhz w21LH5Nq9eOSGOMUIUGC9fF/YGI0bGeipH5TWgn/s/7Jk6VvNN93uefyoyVsMtje u4x9NsoutxBx90HM8Vk5Z1A3Hk6xEeVlejBwu75JnBAo8mhsw9pgddUOSToOiK// ARaQZvIsYNTUp2w3avW8XvnscUTSfBVRXebsv3AW/lt1px60Vun1yeADmBTBLe2V WLOue4Rh6yGgeushdPm4P6C4Bw6aVBaTcS+FIdvd3C7fSW0nXscyGYnu+a4/5/1N 92ZtEPFieFLXnYcJQSvSxokKSqy411sS3BUe41qqDTxbQqF8UVU= -----END CERTIFICATE-----Generated at Sat Nov 7 16:59:14 2026 by rpki-client