$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft File: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft (raw, json) Hash identifier: KAMX8UyJKtYgFWtZ7lCREqjjT4LOVbEF7gL9u0o4Nts= Subject key identifier: 33:54:22:67:CE:7D:F4:6C:D2:FA:D9:93:65:30:E2:68:00:4B:B3:4C Authority key identifier: FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74 Certificate issuer: /CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74 Certificate serial: 575F3EF43615BE4BA7DFBFA665FC5E16BEF46680 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 02:54:42 +0000 Manifest this update: Wed 23 Sep 2026 02:49:42 +0000 Manifest next update: Thu 24 Sep 2026 06:40:42 +0000 Files and hashes: 1: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: fIUZWJqNIQdeGF5YTGMhUjUqsUhoEqCYOqgqGlb+3MI=) 2: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl (hash: QyBRzRzfViAKoi/3I/T59N6qQKgn6ClbrVYFdN8fqZs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5f:3e:f4:36:15:be:4b:a7:df:bf:a6:65:fc:5e:16:be:f4:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74 Validity Not Before: Sep 23 02:49:42 2026 GMT Not After : Sep 24 06:40:42 2026 GMT Subject: CN=33542267CE7DF46CD2FAD9936530E268004BB34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:87:26:64:e3:0a:b3:75:4b:b6:96:2f:ca:04: 87:c2:27:54:2d:23:9c:b4:26:3c:d0:33:2a:49:fa: d1:8a:6d:b3:71:41:a8:02:77:22:c4:7a:43:5f:6e: b7:f9:d0:fd:eb:85:e2:02:83:b5:5c:f0:ed:aa:41: 2e:f3:92:d4:d0:ad:e2:7c:ba:93:2d:e7:8c:f6:61: 53:37:67:ed:01:91:6d:e0:ab:4e:23:0a:55:37:4d: 75:5a:f3:f1:7c:97:f1:4d:82:62:b6:1b:40:e0:f2: c6:0b:f0:0b:a8:f6:f3:ee:21:25:7d:43:20:e1:01: b0:04:5d:fe:93:54:4d:f2:3d:79:9b:64:d8:94:86: f6:e8:d8:14:93:01:aa:7d:55:22:b5:fa:11:28:a4: 21:ea:c8:4f:11:ae:02:ad:bc:93:c5:bb:f3:6c:d2: 79:7c:41:67:6f:99:6e:7b:89:16:39:32:ac:b2:fe: 9b:59:4c:e1:9a:c3:86:15:b2:c0:13:28:4c:cd:e0: 64:c4:bf:8e:99:3f:11:8f:85:2a:72:ec:ea:2d:bb: a8:b1:a4:b6:42:5f:df:dd:33:0b:08:0e:75:b2:65: 50:6d:ff:33:65:31:1d:7d:a4:79:68:ce:e2:7c:a9: 5d:69:c8:10:f9:1e:51:60:b1:fe:bf:ec:a4:2a:83: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:54:22:67:CE:7D:F4:6C:D2:FA:D9:93:65:30:E2:68:00:4B:B3:4C X509v3 Authority Key Identifier: keyid:FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c1:5d:38:c3:67:32:ce:85:e8:c0:74:06:52:4e:27:af:de: f6:4a:74:f7:bb:3f:fe:2d:95:3d:bb:44:fe:63:69:26:b7:49: a9:74:ca:e4:98:74:52:c4:37:2c:3f:91:85:73:d1:7b:e6:f4: c0:49:e9:91:7c:58:bf:2f:ea:d2:12:41:6c:1a:eb:59:e7:10: 65:3c:3c:56:be:b5:ca:19:22:79:62:ea:9b:5f:8b:d1:f4:fe: 11:a0:41:68:dd:0f:a4:08:8c:c7:5c:4c:17:c8:9a:6c:ce:3d: c9:5e:29:15:b5:dc:90:67:57:3e:48:9b:b3:08:7f:86:6c:dc: b6:82:da:e9:e1:1a:b5:b2:a1:bf:9a:3d:56:2e:0f:a8:51:96: 18:58:b7:c5:75:06:e0:25:e5:e1:39:37:d7:f7:4a:a8:ec:8b: 66:6b:15:08:fc:b8:5a:68:84:81:7a:a2:d0:be:03:6e:78:90: 9c:aa:9b:d1:c4:b2:7e:fd:11:4d:4f:11:8e:5d:f4:57:a4:90: 29:17:1b:90:9a:52:3f:61:46:8e:bf:55:4e:84:9a:2a:7f:1e: d8:c7:02:5c:9b:9a:68:9d:c4:ee:a2:9b:84:f6:d1:d7:f3:0e: 73:d7:00:47:54:be:76:04:65:44:18:b6:0a:c9:42:09:4a:6b: b0:44:ae:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV18+9DYVvkun37+mZfxeFr70ZoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRDQ5RUMxODJDNEE5OUNDMjMyOEJGMUNEM0FCREFC N0UyN0E3NDAeFw0yNjA5MjMwMjQ5NDJaFw0yNjA5MjQwNjQwNDJaMDMxMTAvBgNV BAMTKDMzNTQyMjY3Q0U3REY0NkNEMkZBRDk5MzY1MzBFMjY4MDA0QkIzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqhyZk4wqzdUu2li/KBIfCJ1Qt I5y0JjzQMypJ+tGKbbNxQagCdyLEekNfbrf50P3rheICg7Vc8O2qQS7zktTQreJ8 upMt54z2YVM3Z+0BkW3gq04jClU3TXVa8/F8l/FNgmK2G0Dg8sYL8Auo9vPuISV9 QyDhAbAEXf6TVE3yPXmbZNiUhvbo2BSTAap9VSK1+hEopCHqyE8RrgKtvJPFu/Ns 0nl8QWdvmW57iRY5Mqyy/ptZTOGaw4YVssATKEzN4GTEv46ZPxGPhSpy7Ootu6ix pLZCX9/dMwsIDnWyZVBt/zNlMR19pHlozuJ8qV1pyBD5HlFgsf6/7KQqg143AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM1QiZ8599GzS+tmTZTDiaABLs0wwHwYDVR0j BBgwFoAU+z1J7BgsSpnMIyi/HNOr2rfienQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM2MGYwNzgtOGEyMC00OGQxLTgyYjgtZTFmNTBhMTU1MjAxLzAvRkIzRDQ5RUMx ODJDNEE5OUNDMjMyOEJGMUNEM0FCREFCN0UyN0E3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjNENDlFQzE4MkM0QTk5Q0MyMzI4QkYxQ0QzQUJEQUI3RTI3 QTc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM2MGYwNzgtOGEyMC00OGQxLTgy YjgtZTFmNTBhMTU1MjAxLzAvRkIzRDQ5RUMxODJDNEE5OUNDMjMyOEJGMUNEM0FC REFCN0UyN0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXBXTjDZzLOhejAdAZSTiev3vZKdPe7P/4t lT27RP5jaSa3Sal0yuSYdFLENyw/kYVz0Xvm9MBJ6ZF8WL8v6tISQWwa61nnEGU8 PFa+tcoZInli6ptfi9H0/hGgQWjdD6QIjMdcTBfImmzOPcleKRW13JBnVz5Im7MI f4Zs3LaC2unhGrWyob+aPVYuD6hRlhhYt8V1BuAl5eE5N9f3Sqjsi2ZrFQj8uFpo hIF6otC+A254kJyqm9HEsn79EU1PEY5d9FekkCkXG5CaUj9hRo6/VU6Emip/HtjH AlybmmidxO6im4T20dfzDnPXAEdUvnYEZUQYtgrJQglKa7BErpA= -----END CERTIFICATE-----Generated at Wed Sep 23 21:33:35 2026 by rpki-client