$ rpki-client -vvf rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft File: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft (raw, json) Hash identifier: Yr8vTUzHU3rFNubI3w3ppn2539qSO9jpknIWLp43xHU= Subject key identifier: 81:21:F9:F3:17:7D:22:D0:62:A7:95:52:AF:C8:03:34:B8:58:0E:EE Authority key identifier: FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE Certificate issuer: /CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE Certificate serial: 2B017BEE6D573024CFB2EA81C734D7ADD59E7890 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:51:11 +0000 Manifest this update: Tue 12 May 2026 19:46:11 +0000 Manifest next update: Wed 13 May 2026 20:38:11 +0000 Files and hashes: 1: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl (hash: Svl9QzM+jh80ee4dTP8NqBjb/p6IlcPzw5ybDbK2Cc8=) 2: 3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa (hash: mr+ohZ4gsNxXowfdM8XgtzD25meDndV+/hmBLAjXpzo=) 3: 3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa (hash: 3NdyDC+1ZO5sttCVKzm0UcFCITwWVerR5FdVYXY26PA=) 4: 3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa (hash: 68j/2R3Ewk4p7TN+xLCiDv2//M/vL0ynXYOYWgxaiD4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:01:7b:ee:6d:57:30:24:cf:b2:ea:81:c7:34:d7:ad:d5:9e:78:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE Validity Not Before: May 12 19:46:11 2026 GMT Not After : May 13 20:38:11 2026 GMT Subject: CN=8121F9F3177D22D062A79552AFC80334B8580EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:57:92:63:b4:b2:7e:3f:7a:db:71:81:db: 4c:1f:b2:2b:3e:9a:e8:00:07:de:25:bd:19:6d:f7: 3a:31:8d:2e:4b:73:38:ac:07:9d:31:60:03:6a:c5: 94:ee:25:88:d5:70:67:b2:b6:7d:79:59:e7:0d:61: d2:3a:c3:c1:4d:c3:c5:6b:ed:be:19:11:5f:53:53: ee:22:7b:b2:4b:d5:68:55:8a:9e:db:dc:cb:8a:6a: ba:c0:62:59:d9:e5:60:2b:c0:6e:99:fa:03:2b:96: 0b:a8:16:ab:8f:53:07:43:bf:66:b7:b8:7a:b7:96: 63:18:07:6d:80:6a:35:22:b5:88:2d:b2:ae:e9:9b: fb:24:6a:20:dd:1e:d4:b3:d9:c7:46:b0:b1:39:31: a0:cf:08:70:f8:37:c0:0f:f1:06:2a:0b:a6:14:35: 09:13:4a:41:8e:55:e2:58:cd:8a:1d:6c:c6:83:bf: a6:b9:35:8e:d6:06:85:3b:11:d3:d0:58:09:ef:a1: c8:c4:28:cd:88:a6:8d:bd:76:c1:20:00:78:f9:0c: 50:4a:8b:24:74:59:ba:40:58:e3:5f:d0:c7:62:55: 6a:f0:cc:36:01:0c:d9:b5:72:c8:e8:20:76:41:c2: 1d:49:0a:6e:46:d6:4f:b9:28:2d:e7:e6:18:91:d8: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:21:F9:F3:17:7D:22:D0:62:A7:95:52:AF:C8:03:34:B8:58:0E:EE X509v3 Authority Key Identifier: keyid:FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1f:c5:d4:d3:ad:a2:ed:8c:6a:b6:3f:09:ca:f4:f0:7e:f7: cd:28:3e:0e:b6:66:18:69:db:51:f8:12:67:19:13:ee:0a:eb: ee:71:55:38:c2:5e:44:0d:a4:69:a4:08:6b:ee:0a:b6:4c:6d: ba:8e:31:27:e7:cc:17:cb:fe:93:d9:39:51:72:9d:65:88:9a: 29:48:9c:cc:9f:05:79:ee:e1:94:80:6f:58:ae:fd:79:11:0b: 7d:d0:0f:f5:84:7f:65:81:f1:20:f5:2b:62:a3:9b:ad:0a:9f: e8:df:15:83:b0:e1:11:4c:10:cb:77:5f:51:7a:ce:67:d4:3d: df:fe:8e:e8:d5:5a:16:b8:b1:c5:e5:96:27:4a:3e:d6:a4:bb: f4:d4:e1:fd:73:aa:d3:e4:2f:3b:07:1f:55:38:31:43:4a:80: ee:f2:89:48:be:b6:56:62:36:2d:32:62:8f:3d:b8:b8:c7:2c: af:91:7f:52:85:ec:f6:41:0f:27:14:f8:9c:ea:3d:f5:4f:98: 2b:e9:08:0a:9e:3f:02:d6:0b:f1:fa:95:58:23:0a:16:71:05: c0:32:75:48:2b:e7:3c:cf:f4:a4:fd:01:50:14:ff:ec:46:51: c1:5e:b5:d4:19:b5:23:b2:7d:14:df:c2:0a:27:ed:9c:f4:15: 9a:b1:be:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwF77m1XMCTPsuqBxzTXrdWeeJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJFMUQ5NjJDREY1MEFFNEM4OERFRDA5N0M0RkQ1QzQw RUQxREFBRTAeFw0yNjA1MTIxOTQ2MTFaFw0yNjA1MTMyMDM4MTFaMDMxMTAvBgNV BAMTKDgxMjFGOUYzMTc3RDIyRDA2MkE3OTU1MkFGQzgwMzM0Qjg1ODBFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1N1eSY7Syfj9623GB20wfsis+ mugAB94lvRlt9zoxjS5LczisB50xYANqxZTuJYjVcGeytn15WecNYdI6w8FNw8Vr 7b4ZEV9TU+4ie7JL1WhVip7b3MuKarrAYlnZ5WArwG6Z+gMrlguoFquPUwdDv2a3 uHq3lmMYB22AajUitYgtsq7pm/skaiDdHtSz2cdGsLE5MaDPCHD4N8AP8QYqC6YU NQkTSkGOVeJYzYodbMaDv6a5NY7WBoU7EdPQWAnvocjEKM2Ipo29dsEgAHj5DFBK iyR0WbpAWONf0MdiVWrwzDYBDNm1csjoIHZBwh1JCm5G1k+5KC3n5hiR2CjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgSH58xd9ItBip5VSr8gDNLhYDu4wHwYDVR0j BBgwFoAU++HZYs31CuTIje0JfE/VxA7R2q4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZhNmNhMTItYjI4Ny00YWM3LTg3YjgtNmNkNzMzNTNlNjdmLzAvRkJFMUQ5NjJD REY1MEFFNEM4OERFRDA5N0M0RkQ1QzQwRUQxREFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQkUxRDk2MkNERjUwQUU0Qzg4REVEMDk3QzRGRDVDNDBFRDFE QUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvRkJFMUQ5NjJDREY1MEFFNEM4OERFRDA5N0M0RkQ1 QzQwRUQxREFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMfxdTTraLtjGq2PwnK9PB+980oPg62Zhhp 21H4EmcZE+4K6+5xVTjCXkQNpGmkCGvuCrZMbbqOMSfnzBfL/pPZOVFynWWImilI nMyfBXnu4ZSAb1iu/XkRC33QD/WEf2WB8SD1K2Kjm60Kn+jfFYOw4RFMEMt3X1F6 zmfUPd/+jujVWha4scXllidKPtaku/TU4f1zqtPkLzsHH1U4MUNKgO7yiUi+tlZi Ni0yYo89uLjHLK+Rf1KF7PZBDycU+JzqPfVPmCvpCAqePwLWC/H6lVgjChZxBcAy dUgr5zzP9KT9AVAU/+xGUcFetdQZtSOyfRTfwgon7Zz0FZqxvrM= -----END CERTIFICATE-----Generated at Tue May 12 22:47:14 2026 by rpki-client