$ rpki-client -vvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft File: FB3286A3734F366E27845180AD985879147BEA5E.mft (raw, json) Hash identifier: v0MjAqC3o16OfWqPxMLuL6l2pMiOEfr9nmWRCHscW38= Subject key identifier: 99:DF:0A:A9:56:34:FE:12:75:90:68:85:30:88:B2:F6:8E:73:C6:46 Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E Certificate issuer: /CN=FB3286A3734F366E27845180AD985879147BEA5E Certificate serial: 16549DEB0A848CFDADAB478FA54F1316F009BD9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:40:07 +0000 Manifest this update: Tue 12 May 2026 08:35:07 +0000 Manifest next update: Wed 13 May 2026 10:02:07 +0000 Files and hashes: 1: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: LQLPTnxAiTCFL6ZmWkZjMD4eo5v053wknOPM5ftHnJk=) 2: FB3286A3734F366E27845180AD985879147BEA5E.crl (hash: 0zkWSVboBI0HSc4+38RGc34spBaW8FR5dsoRGbLP44g=) 3: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: JUZB6P5kO+Db3k9YCVP/aQyPW9NErekyd7f5TZeRyDM=) 4: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: vrQysHXSDOYVY5vPGR7dw/5TLODMWl8YiVoK5Waal3c=) 5: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: 27HB+moGW931DJ3lKZUVs+RCefOnlzQL4giJYO55G7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:54:9d:eb:0a:84:8c:fd:ad:ab:47:8f:a5:4f:13:16:f0:09:bd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E Validity Not Before: May 12 08:35:07 2026 GMT Not After : May 13 10:02:07 2026 GMT Subject: CN=99DF0AA95634FE12759068853088B2F68E73C646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:39:fc:ad:27:b2:45:41:15:7e:b0:9b:51: 9b:4a:a4:b9:d7:44:b1:15:bc:8f:cd:74:cb:1b:13: 41:67:e4:ee:1b:dd:66:d0:bd:b2:eb:1a:91:98:91: 51:68:73:ad:07:85:e6:c1:34:b9:c4:c4:d0:73:a0: 9d:87:e5:2e:51:b0:71:4d:be:b4:c5:cb:1b:88:06: 9a:ee:bf:2c:8f:3c:16:71:f5:ca:72:2c:2b:0a:41: 5e:ab:1b:ae:b9:d7:5a:5b:ef:0a:aa:f8:bb:40:21: 5c:ff:68:c5:29:c7:4d:02:8d:ad:4d:d5:93:64:f5: 1e:2c:90:e8:fd:e5:b1:ad:3a:52:88:ae:52:42:ac: 9e:eb:f4:2d:eb:df:99:25:54:99:1e:d5:8b:eb:84: fa:f2:3b:f2:f4:7a:8b:82:83:63:f6:97:1c:e2:10: 9c:d2:98:9a:12:e2:1b:e1:8c:12:f2:cd:fb:3a:92: fe:9d:22:05:8d:c4:82:4d:fa:10:d5:9f:83:ce:d3: 73:a3:c4:f0:af:d2:4e:f1:d8:98:3d:c4:6d:d4:7a: 47:f3:7c:48:64:c0:3c:dd:b1:29:cf:e7:83:5a:e3: e3:7b:13:e6:12:62:02:d3:ed:df:56:46:45:22:64: da:3c:32:51:10:50:11:e5:0a:35:fe:fd:c5:ae:68: 0a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DF:0A:A9:56:34:FE:12:75:90:68:85:30:88:B2:F6:8E:73:C6:46 X509v3 Authority Key Identifier: keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4c:08:bf:f9:89:e8:64:cb:46:37:d2:0a:92:3f:cd:c1:f2: f9:11:62:55:f7:87:a1:66:17:71:c3:7e:37:d6:b0:06:d0:56: ca:6c:c3:4d:f1:97:09:5b:69:ae:a0:75:3a:76:b2:f2:52:74: 5a:da:28:10:ec:2f:d6:d4:42:2d:00:a8:76:60:77:a3:15:4f: 42:9a:87:d0:70:e9:16:f0:d2:dd:ad:1a:c2:cd:34:94:1b:50: 92:5e:f4:bd:ae:18:32:85:b0:b4:2c:f5:b7:d2:b5:db:44:95: bd:b7:50:1b:13:97:80:6e:2f:95:08:ae:81:f5:93:6e:76:83: ac:30:3d:62:55:44:3b:01:dd:89:fc:fe:70:35:5f:bd:09:3e: 7e:17:7b:f0:e9:b5:7d:6b:56:5e:c6:cf:ad:db:ce:4d:f6:fa: 9b:bf:12:6f:7d:31:bc:83:92:ff:51:06:14:00:74:d0:d9:ed: 10:bd:20:35:64:74:25:3a:9a:e0:b5:61:4b:17:65:5f:9b:59: 15:e7:c6:02:c2:4b:61:3e:58:11:7f:b0:bc:1f:98:8c:da:bb: 72:91:33:1b:a8:6b:fc:6a:6c:2f:60:0a:22:13:f2:5f:8c:1c: 6d:73:c9:ff:0c:1d:23:75:ab:b7:ea:ef:a4:4c:08:9d:3e:6b: fc:3b:cf:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlSd6wqEjP2tq0ePpU8TFvAJvZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx NDdCRUE1RTAeFw0yNjA1MTIwODM1MDdaFw0yNjA1MTMxMDAyMDdaMDMxMTAvBgNV BAMTKDk5REYwQUE5NTYzNEZFMTI3NTkwNjg4NTMwODhCMkY2OEU3M0M2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkTn8rSeyRUEVfrCbUZtKpLnX RLEVvI/NdMsbE0Fn5O4b3WbQvbLrGpGYkVFoc60HhebBNLnExNBzoJ2H5S5RsHFN vrTFyxuIBpruvyyPPBZx9cpyLCsKQV6rG66511pb7wqq+LtAIVz/aMUpx00Cja1N 1ZNk9R4skOj95bGtOlKIrlJCrJ7r9C3r35klVJke1YvrhPryO/L0eouCg2P2lxzi EJzSmJoS4hvhjBLyzfs6kv6dIgWNxIJN+hDVn4PO03OjxPCv0k7x2Jg9xG3Uekfz fEhkwDzdsSnP54Na4+N7E+YSYgLT7d9WRkUiZNo8MlEQUBHlCjX+/cWuaAo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmd8KqVY0/hJ1kGiFMIiy9o5zxkYwHwYDVR0j BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3 MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4 NzkxNDdCRUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1MCL/5iehky0Y30gqSP83B8vkRYlX3h6Fm F3HDfjfWsAbQVspsw03xlwlbaa6gdTp2svJSdFraKBDsL9bUQi0AqHZgd6MVT0Ka h9Bw6Rbw0t2tGsLNNJQbUJJe9L2uGDKFsLQs9bfStdtElb23UBsTl4BuL5UIroH1 k252g6wwPWJVRDsB3Yn8/nA1X70JPn4Xe/DptX1rVl7Gz63bzk32+pu/Em99MbyD kv9RBhQAdNDZ7RC9IDVkdCU6muC1YUsXZV+bWRXnxgLCS2E+WBF/sLwfmIzau3KR Mxuoa/xqbC9gCiIT8l+MHG1zyf8MHSN1q7fq76RMCJ0+a/w7z6I= -----END CERTIFICATE-----Generated at Tue May 12 22:13:30 2026 by rpki-client