$ rpki-client -vvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft File: FB3286A3734F366E27845180AD985879147BEA5E.mft (raw, json) Hash identifier: YxgsIDB7RCrzFGSmPMTCiv074rdwSroxCMuHGUrvGeA= Subject key identifier: 2D:81:54:AF:90:9D:59:41:CE:59:DF:3A:66:54:0E:FC:D8:C2:3B:B1 Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E Certificate issuer: /CN=FB3286A3734F366E27845180AD985879147BEA5E Certificate serial: 552D1D642F7ACAA787F6B3783B931C8A614BE505 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 05:36:20 +0000 Manifest this update: Fri 24 Jul 2026 05:31:20 +0000 Manifest next update: Sat 25 Jul 2026 08:44:20 +0000 Files and hashes: 1: FB3286A3734F366E27845180AD985879147BEA5E.crl (hash: Wn0ZCIl0fbzbsLz6L3SzgmadUA5zTde74P8VYg4lf4A=) 2: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: 27HB+moGW931DJ3lKZUVs+RCefOnlzQL4giJYO55G7A=) 3: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: JUZB6P5kO+Db3k9YCVP/aQyPW9NErekyd7f5TZeRyDM=) 4: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: vrQysHXSDOYVY5vPGR7dw/5TLODMWl8YiVoK5Waal3c=) 5: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: LQLPTnxAiTCFL6ZmWkZjMD4eo5v053wknOPM5ftHnJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2d:1d:64:2f:7a:ca:a7:87:f6:b3:78:3b:93:1c:8a:61:4b:e5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E Validity Not Before: Jul 24 05:31:20 2026 GMT Not After : Jul 25 08:44:20 2026 GMT Subject: CN=2D8154AF909D5941CE59DF3A66540EFCD8C23BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:7c:13:31:b8:58:63:bf:70:f0:22:61:1b: 88:ce:6d:e2:bf:ed:94:fb:12:19:fc:93:6f:67:d1: 59:41:ed:92:6d:7f:51:72:46:40:d7:ec:e0:51:1a: 9c:74:dc:47:eb:3d:44:81:3b:46:36:96:68:5a:19: 59:f8:43:86:47:c9:9a:4c:6e:09:5d:8d:73:c9:d5: db:06:b0:81:99:b6:9d:6c:4f:21:8f:11:6e:1d:ef: e9:ff:8c:e0:69:bc:7c:5e:38:d4:de:af:25:8f:5b: 24:ea:1b:1f:8b:04:e3:5f:c5:3b:8a:ec:58:99:0d: 46:cd:bc:71:e5:cb:0b:84:b9:c5:76:74:72:96:3e: 56:9e:f0:6c:ec:54:ee:a0:a0:72:23:9c:43:99:3e: 65:12:95:b4:c3:e9:9f:65:e8:f8:5f:65:09:f4:c3: 7b:fc:f9:68:ab:62:56:87:78:00:0b:7b:cf:7d:ca: db:01:14:49:f7:d7:eb:12:42:e6:5e:0a:c9:dd:d0: ec:6d:c4:09:6d:57:89:b5:87:a3:fd:c4:34:eb:07: 46:0f:26:88:98:79:1d:64:ec:ab:b1:58:d4:b0:d7: 60:c7:b5:01:09:fc:e9:05:94:8a:a2:55:c8:6c:4b: ca:55:a0:27:cf:6c:39:56:4a:f0:91:f8:7c:17:c5: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:81:54:AF:90:9D:59:41:CE:59:DF:3A:66:54:0E:FC:D8:C2:3B:B1 X509v3 Authority Key Identifier: keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:cd:69:2c:e6:20:61:38:7c:49:50:91:de:25:7a:3e:50:0f: f5:03:56:cf:93:bb:68:83:e1:f3:5d:f6:6e:02:04:f5:70:f3: 2f:fc:73:41:ba:a8:01:c2:14:50:2b:68:ce:f3:4b:42:ff:8c: 98:37:80:db:80:a6:7f:aa:73:bf:79:df:31:bd:e6:8a:51:27: 4f:c0:c7:52:3f:b9:54:ea:2e:7d:2b:92:b7:19:e6:5d:cf:26: ab:44:da:37:c8:0f:a4:6e:ab:7f:ca:79:d6:75:39:a7:a0:7f: 5d:0e:fd:a5:2f:df:04:de:de:d7:05:87:c7:09:2a:92:5c:6a: a9:51:3e:c5:a9:19:a2:4c:46:ed:e2:bc:50:e6:14:0d:75:68: a0:0e:a4:3c:b8:fb:1f:f1:84:5d:10:42:b9:d4:52:70:06:90: e5:94:a3:41:57:14:94:66:88:61:cb:3d:58:b4:7c:c4:07:dd: 46:ce:2f:c2:ec:54:4a:2b:5a:f7:21:c6:4b:77:19:23:c2:48: 4e:f7:d2:51:cb:74:59:5c:8b:01:a2:0e:a8:b1:d3:51:64:7e: 79:d6:de:e1:89:1e:f3:c4:0d:97:d0:24:69:c1:5c:d8:e9:2c: 83:fb:29:e8:9e:16:29:35:19:98:f4:07:15:bd:69:94:01:8e: fb:0f:b8:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVS0dZC96yqeH9rN4O5McimFL5QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx NDdCRUE1RTAeFw0yNjA3MjQwNTMxMjBaFw0yNjA3MjUwODQ0MjBaMDMxMTAvBgNV BAMTKDJEODE1NEFGOTA5RDU5NDFDRTU5REYzQTY2NTQwRUZDRDhDMjNCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMiHwTMbhYY79w8CJhG4jObeK/ 7ZT7Ehn8k29n0VlB7ZJtf1FyRkDX7OBRGpx03EfrPUSBO0Y2lmhaGVn4Q4ZHyZpM bgldjXPJ1dsGsIGZtp1sTyGPEW4d7+n/jOBpvHxeONTeryWPWyTqGx+LBONfxTuK 7FiZDUbNvHHlywuEucV2dHKWPlae8GzsVO6goHIjnEOZPmUSlbTD6Z9l6PhfZQn0 w3v8+WirYlaHeAALe899ytsBFEn31+sSQuZeCsnd0OxtxAltV4m1h6P9xDTrB0YP JoiYeR1k7KuxWNSw12DHtQEJ/OkFlIqiVchsS8pVoCfPbDlWSvCR+HwXxRo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYFUr5CdWUHOWd86ZlQO/NjCO7EwHwYDVR0j BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3 MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4 NzkxNDdCRUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATNaSzmIGE4fElQkd4lej5QD/UDVs+Tu2iD 4fNd9m4CBPVw8y/8c0G6qAHCFFAraM7zS0L/jJg3gNuApn+qc7953zG95opRJ0/A x1I/uVTqLn0rkrcZ5l3PJqtE2jfID6Ruq3/KedZ1Oaegf10O/aUv3wTe3tcFh8cJ KpJcaqlRPsWpGaJMRu3ivFDmFA11aKAOpDy4+x/xhF0QQrnUUnAGkOWUo0FXFJRm iGHLPVi0fMQH3UbOL8LsVEorWvchxkt3GSPCSE730lHLdFlciwGiDqix01FkfnnW 3uGJHvPEDZfQJGnBXNjpLIP7KeieFik1GZj0BxW9aZQBjvsPuN4= -----END CERTIFICATE-----Generated at Fri Jul 24 11:07:23 2026 by rpki-client