$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft File: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft (raw, json) Hash identifier: 3qkPMy1fLjjBJ3mhuS3vFhM7hld2p0bz593Qd1oD4eM= Subject key identifier: D7:9F:D0:EC:0B:85:0D:57:45:A5:B7:92:7E:98:64:0B:86:8B:A9:5C Authority key identifier: FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A Certificate issuer: /CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Certificate serial: 66E1A5D68DF2BFA54E3701A3F7A05E5ACBD5D716 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:58:01 +0000 Manifest this update: Thu 24 Sep 2026 09:53:01 +0000 Manifest next update: Fri 25 Sep 2026 13:57:01 +0000 Files and hashes: 1: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl (hash: ybw/OUY0HiHFEVHsCnlagO1uwYy/iKEzS4TkoAWLWNw=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: cg3Tr+ZR3IqdPJrclTSnhr/cIHYjQx4+i+x5ElcD2Yo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e1:a5:d6:8d:f2:bf:a5:4e:37:01:a3:f7:a0:5e:5a:cb:d5:d7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Validity Not Before: Sep 24 09:53:01 2026 GMT Not After : Sep 25 13:57:01 2026 GMT Subject: CN=D79FD0EC0B850D5745A5B7927E98640B868BA95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:06:ac:76:d0:9b:72:a8:fd:32:ae:3f:be: 13:1e:01:b4:b5:fa:f1:b7:de:f4:64:97:89:e6:2b: dd:79:ba:87:ba:b3:ee:55:6b:8a:55:97:ae:2b:2e: 9e:1f:cc:e3:86:f5:ec:b6:32:93:65:e0:29:7a:21: 20:1b:ab:4a:de:13:50:1d:35:a9:e5:76:46:4d:88: 28:bc:e1:87:14:89:4b:b0:ee:e7:cb:ea:ab:dd:23: 30:68:6c:76:57:24:f9:1d:87:57:5d:17:e4:3c:3c: 69:bb:39:9d:0c:40:4e:49:1d:b6:0c:d7:5b:3f:cf: 67:78:d3:0c:31:3f:cb:a2:48:b1:22:49:73:6e:d8: ce:83:d4:ad:6d:6e:d5:90:9f:2f:d6:03:c5:04:cc: c3:3d:fe:c3:b0:9e:1b:f3:8e:a4:76:ec:3a:d8:c3: 4b:55:40:0c:b6:d7:10:25:c7:69:e9:18:2f:33:fe: e3:6b:c6:ce:bd:bd:b3:c3:e5:bc:3c:35:08:9b:47: b8:dc:40:51:14:26:7e:a1:37:b6:3f:6a:e6:2d:5f: 55:16:3e:b4:3f:ca:25:ca:75:a7:32:5b:e2:81:d6: 28:19:88:80:b7:c6:07:32:52:26:46:c8:95:c7:4e: c2:d1:78:b6:6c:8b:af:74:8f:24:fb:10:20:f4:45: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9F:D0:EC:0B:85:0D:57:45:A5:B7:92:7E:98:64:0B:86:8B:A9:5C X509v3 Authority Key Identifier: keyid:FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:62:ee:61:10:45:78:03:ba:76:e3:09:51:b6:0b:2c:dd:d2: 03:78:5e:1b:b1:63:e7:95:70:50:1f:03:48:ce:c4:ff:71:da: 0b:08:33:6d:a3:08:d3:8c:e3:83:32:57:31:d7:13:c0:81:4b: fd:db:40:72:f6:b3:da:79:57:8e:af:79:d8:a0:c7:1c:ba:4b: c1:86:a8:6f:2d:2a:d8:f5:97:8d:23:7c:43:3c:54:70:3a:47: fb:fb:55:db:e5:f5:fa:2b:e3:81:14:66:ca:e8:0d:75:5b:0e: 08:71:5c:66:5d:c8:54:6e:8c:13:08:b9:79:cc:f2:62:e5:7b: f7:f5:5e:db:23:27:c6:fb:63:ef:fd:00:3a:0c:83:40:de:3e: 35:de:da:79:38:65:c9:8f:ae:cf:91:3c:83:83:16:9b:a7:10: 8a:c9:8d:ad:22:d1:0e:c0:54:47:d9:b1:df:06:fe:f6:f3:71: 2d:58:24:c4:74:fa:1e:82:06:c9:7d:1d:ba:83:b7:d4:b5:5b: 5d:7d:92:a5:fa:20:e5:f4:70:7b:71:af:e9:12:4b:b0:6d:15: f2:ce:8d:c8:ef:87:a1:ad:0f:3a:0b:24:fa:4e:5c:85:9a:a5: d2:16:84:d0:d1:7f:9f:1b:8e:02:03:75:d5:35:46:16:3d:28: f7:2a:1c:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuGl1o3yv6VONwGj96BeWsvV1xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRjM4OUJDNEY1QzZERkIwRjBBQzUxQzE2RTZBQ0E0 N0Y5QzAyQTAeFw0yNjA5MjQwOTUzMDFaFw0yNjA5MjUxMzU3MDFaMDMxMTAvBgNV BAMTKEQ3OUZEMEVDMEI4NTBENTc0NUE1Qjc5MjdFOTg2NDBCODY4QkE5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hgasdtCbcqj9Mq4/vhMeAbS1 +vG33vRkl4nmK915uoe6s+5Va4pVl64rLp4fzOOG9ey2MpNl4Cl6ISAbq0reE1Ad NanldkZNiCi84YcUiUuw7ufL6qvdIzBobHZXJPkdh1ddF+Q8PGm7OZ0MQE5JHbYM 11s/z2d40wwxP8uiSLEiSXNu2M6D1K1tbtWQny/WA8UEzMM9/sOwnhvzjqR27DrY w0tVQAy21xAlx2npGC8z/uNrxs69vbPD5bw8NQibR7jcQFEUJn6hN7Y/auYtX1UW PrQ/yiXKdacyW+KB1igZiIC3xgcyUiZGyJXHTsLReLZsi690jyT7ECD0RdrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU15/Q7AuFDVdFpbeSfphkC4aLqVwwHwYDVR0j BBgwFoAU+x84m8T1xt+w8KxRwW5qykf5wCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5MTNmYTEtMzNhZS00ZTMzLWJiZTItODFiZDlmMDNjODRiLzAvRkIxRjM4OUJD NEY1QzZERkIwRjBBQzUxQzE2RTZBQ0E0N0Y5QzAyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjFGMzg5QkM0RjVDNkRGQjBGMEFDNTFDMTZFNkFDQTQ3RjlD MDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvRkIxRjM4OUJDNEY1QzZERkIwRjBBQzUxQzE2RTZB Q0E0N0Y5QzAyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhi7mEQRXgDunbjCVG2Cyzd0gN4XhuxY+eV cFAfA0jOxP9x2gsIM22jCNOM44MyVzHXE8CBS/3bQHL2s9p5V46vedigxxy6S8GG qG8tKtj1l40jfEM8VHA6R/v7Vdvl9for44EUZsroDXVbDghxXGZdyFRujBMIuXnM 8mLle/f1XtsjJ8b7Y+/9ADoMg0DePjXe2nk4ZcmPrs+RPIODFpunEIrJja0i0Q7A VEfZsd8G/vbzcS1YJMR0+h6CBsl9HbqDt9S1W119kqX6IOX0cHtxr+kSS7BtFfLO jcjvh6GtDzoLJPpOXIWapdIWhNDRf58bjgIDddU1RhY9KPcqHI0= -----END CERTIFICATE-----Generated at Fri Sep 25 01:01:21 2026 by rpki-client