$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft File: FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft (raw, json) Hash identifier: IB50uoqSoMHdOaxSjxZWUA1Z7MpZNOCliOjLJ+j1p5g= Subject key identifier: 02:D7:1F:0D:5F:4F:D7:D7:3E:17:FB:20:1C:CE:2F:3A:04:C7:7C:D9 Authority key identifier: FB:04:12:AD:F5:C0:AF:38:82:82:05:67:1C:38:D8:AE:99:F5:70:7A Certificate issuer: /CN=FB0412ADF5C0AF38828205671C38D8AE99F5707A Certificate serial: 1A6946AD46720D8B85B6AAD41959BFB12DA3EC67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 15:55:49 +0000 Manifest this update: Wed 23 Sep 2026 15:50:49 +0000 Manifest next update: Thu 24 Sep 2026 18:27:49 +0000 Files and hashes: 1: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: uy/OITxgQ9Y741d8HOaHJYXKJTvlD+OGefENVoqqTDs=) 2: FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl (hash: PrCozGgCNtiFwxsqXUhKfkV/WvBuR3V2lv3sqm4/Nuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:69:46:ad:46:72:0d:8b:85:b6:aa:d4:19:59:bf:b1:2d:a3:ec:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB0412ADF5C0AF38828205671C38D8AE99F5707A Validity Not Before: Sep 23 15:50:49 2026 GMT Not After : Sep 24 18:27:49 2026 GMT Subject: CN=02D71F0D5F4FD7D73E17FB201CCE2F3A04C77CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f9:2b:f2:f4:92:07:60:09:4c:7d:6e:e5:75: 04:4c:37:45:3b:5c:ea:ea:a7:75:5d:5b:29:47:79: 6f:47:3d:80:ca:df:73:9b:4c:83:9c:e4:b1:b3:d5: 2b:a7:84:4d:b7:3a:a6:55:4c:08:55:36:7b:79:d2: a6:e7:cb:f5:22:cd:bd:b9:74:3e:f2:ae:30:77:c2: c3:22:ec:f0:e3:d2:6e:51:eb:30:92:68:87:0b:47: 07:2f:af:84:ec:bc:ff:80:f4:71:2e:59:eb:d8:71: d9:58:90:84:8e:89:45:1d:0d:67:27:f8:cb:d6:28: 9e:26:50:99:40:ca:8a:03:cf:4c:8a:16:e3:fe:7a: 70:6b:93:4d:9c:0e:14:b6:93:75:bb:79:5b:9d:1d: c5:27:c0:ee:7d:2e:4d:c2:36:4f:9e:6b:89:cb:91: 30:8f:f0:1f:d7:f4:cc:6d:26:24:22:f0:3d:4f:e9: 77:40:41:13:10:65:7e:8d:cf:a4:30:c3:3f:9a:fb: 0e:26:b1:39:07:33:09:f1:c5:c5:c6:ec:76:3d:de: 10:1c:98:27:21:eb:eb:4e:80:e4:e8:80:90:87:95: f0:ae:b8:8e:52:ab:8f:ab:e4:ec:2b:d0:a9:2b:f6: a8:fa:72:71:e9:27:0c:68:c9:da:53:79:30:42:09: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D7:1F:0D:5F:4F:D7:D7:3E:17:FB:20:1C:CE:2F:3A:04:C7:7C:D9 X509v3 Authority Key Identifier: keyid:FB:04:12:AD:F5:C0:AF:38:82:82:05:67:1C:38:D8:AE:99:F5:70:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ab:04:59:61:00:f7:35:73:c0:18:ff:08:a6:6f:a8:93:67: 46:2c:60:9b:f0:16:4a:e4:5a:55:f9:33:53:f6:3d:56:49:c0: 01:fe:fe:7a:73:0d:90:57:6d:ac:18:8f:1a:6c:54:e0:fb:b2: c1:a1:1a:ee:bf:47:08:e2:7a:01:f0:5a:2d:f1:0b:34:26:b8: 5c:98:eb:c7:4e:00:03:b6:7f:d4:1e:c0:dc:6f:ed:23:c3:67: fe:d6:d6:1e:0d:b7:a9:27:60:6e:74:41:b8:49:47:0a:53:a6: fa:f2:43:ac:27:66:d1:7a:21:2d:32:f8:f8:5d:b7:4b:37:2f: 93:3a:ce:38:f0:45:ef:94:93:6f:cc:94:12:f9:93:fe:4e:8d: 93:03:9e:39:26:ba:7d:f3:e8:18:db:82:cd:0b:42:b2:74:08: f6:a9:62:84:42:cb:17:61:12:d1:0c:cd:7f:41:1b:4b:09:cc: fb:8d:26:62:0a:78:d7:50:29:ba:e0:b9:57:ea:93:53:d8:29: 4d:8d:54:7a:d1:72:e3:47:6c:c3:a4:04:81:c9:98:30:54:7b: a6:39:4d:f9:ee:f9:89:86:1b:cf:b2:2e:ba:da:a7:b9:a6:e6: 79:0b:87:cf:b3:e5:3e:6f:a5:55:15:72:74:ea:7e:57:cf:cf: 63:74:4a:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmlGrUZyDYuFtqrUGVm/sS2j7GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIwNDEyQURGNUMwQUYzODgyODIwNTY3MUMzOEQ4QUU5 OUY1NzA3QTAeFw0yNjA5MjMxNTUwNDlaFw0yNjA5MjQxODI3NDlaMDMxMTAvBgNV BAMTKDAyRDcxRjBENUY0RkQ3RDczRTE3RkIyMDFDQ0UyRjNBMDRDNzdDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+Svy9JIHYAlMfW7ldQRMN0U7 XOrqp3VdWylHeW9HPYDK33ObTIOc5LGz1SunhE23OqZVTAhVNnt50qbny/Uizb25 dD7yrjB3wsMi7PDj0m5R6zCSaIcLRwcvr4TsvP+A9HEuWevYcdlYkISOiUUdDWcn +MvWKJ4mUJlAyooDz0yKFuP+enBrk02cDhS2k3W7eVudHcUnwO59Lk3CNk+ea4nL kTCP8B/X9MxtJiQi8D1P6XdAQRMQZX6Nz6Qwwz+a+w4msTkHMwnxxcXG7HY93hAc mCch6+tOgOTogJCHlfCuuI5Sq4+r5Owr0Kkr9qj6cnHpJwxoydpTeTBCCQHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAtcfDV9P19c+F/sgHM4vOgTHfNkwHwYDVR0j BBgwFoAU+wQSrfXArziCggVnHDjYrpn1cHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjODkxZDctNGZjYy00NzcwLTgyZDQtMzY3Yjg3YmI1NTFlLzAvRkIwNDEyQURG NUMwQUYzODgyODIwNTY3MUMzOEQ4QUU5OUY1NzA3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQjA0MTJBREY1QzBBRjM4ODI4MjA1NjcxQzM4RDhBRTk5RjU3 MDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRkIwNDEyQURGNUMwQUYzODgyODIwNTY3MUMzOEQ4 QUU5OUY1NzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWrBFlhAPc1c8AY/wimb6iTZ0YsYJvwFkrk WlX5M1P2PVZJwAH+/npzDZBXbawYjxpsVOD7ssGhGu6/RwjiegHwWi3xCzQmuFyY 68dOAAO2f9QewNxv7SPDZ/7W1h4Nt6knYG50QbhJRwpTpvryQ6wnZtF6IS0y+Phd t0s3L5M6zjjwRe+Uk2/MlBL5k/5OjZMDnjkmun3z6Bjbgs0LQrJ0CPapYoRCyxdh EtEMzX9BG0sJzPuNJmIKeNdQKbrguVfqk1PYKU2NVHrRcuNHbMOkBIHJmDBUe6Y5 Tfnu+YmGG8+yLrrap7mm5nkLh8+z5T5vpVUVcnTqflfPz2N0Shk= -----END CERTIFICATE-----Generated at Thu Sep 24 04:02:18 2026 by rpki-client