$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft File: FB3286A3734F366E27845180AD985879147BEA5E.mft (raw, json) Hash identifier: rYUfNLDhbftYBza2csPJ0L1TepxaFMi9DgxMC7WoxpQ= Subject key identifier: DB:73:38:F0:A6:BE:EF:F5:DB:5D:96:13:D9:E7:D8:6C:2C:EE:DA:23 Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E Certificate issuer: /CN=FB3286A3734F366E27845180AD985879147BEA5E Certificate serial: 6B9AB71EB91E5697155CCF7614E3D0B626309D72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 19:09:18 +0000 Manifest this update: Thu 24 Sep 2026 19:04:18 +0000 Manifest next update: Fri 25 Sep 2026 21:01:18 +0000 Files and hashes: 1: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: JUZB6P5kO+Db3k9YCVP/aQyPW9NErekyd7f5TZeRyDM=) 2: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: 27HB+moGW931DJ3lKZUVs+RCefOnlzQL4giJYO55G7A=) 3: FB3286A3734F366E27845180AD985879147BEA5E.crl (hash: KW6Ow5e1FNn2lA9r9ci3GnQEHpu+YinVVoCk8fYYUxs=) 4: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: vrQysHXSDOYVY5vPGR7dw/5TLODMWl8YiVoK5Waal3c=) 5: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: LQLPTnxAiTCFL6ZmWkZjMD4eo5v053wknOPM5ftHnJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9a:b7:1e:b9:1e:56:97:15:5c:cf:76:14:e3:d0:b6:26:30:9d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E Validity Not Before: Sep 24 19:04:18 2026 GMT Not After : Sep 25 21:01:18 2026 GMT Subject: CN=DB7338F0A6BEEFF5DB5D9613D9E7D86C2CEEDA23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:a6:81:d2:8c:02:26:f7:7c:d2:7c:90:ae: 47:2f:57:95:6d:39:c6:8f:2f:ed:36:41:e4:f7:58: cf:a5:21:58:15:09:13:3a:40:7c:aa:62:17:74:73: 13:da:f7:e8:37:e9:47:da:c0:ed:b4:49:ff:5d:0e: c7:29:68:b5:f0:9e:bc:eb:b7:ab:a1:99:a3:14:b9: 22:54:84:07:a6:1e:c2:b0:b4:e5:e2:a9:ae:5a:c0: 77:49:71:16:2f:44:aa:3a:ec:07:11:66:93:54:5b: 11:9c:7e:a4:d7:63:ed:bd:5b:35:23:c2:00:e6:2d: 1c:77:67:ad:12:08:61:9a:e3:6c:4d:0d:ae:32:6e: 13:9f:ae:ca:87:fb:0d:25:81:fb:a6:76:c3:c9:a4: 86:cd:63:52:6a:73:29:a2:8a:74:8d:c2:64:7d:ff: bb:ad:da:66:e4:aa:5d:44:98:25:eb:29:06:d4:90: 88:21:9d:12:1e:3b:da:09:4c:a8:e8:8f:9d:bc:72: bd:f5:ce:e9:6f:e1:38:20:5c:d6:d1:02:3c:cf:de: 16:cd:d1:5b:28:f0:12:1b:9c:12:91:c3:b1:f9:02: 60:99:90:1b:53:12:e1:2e:66:10:23:d9:90:66:80: bd:61:ff:68:7f:01:27:3a:d5:e7:e9:61:76:39:83: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:73:38:F0:A6:BE:EF:F5:DB:5D:96:13:D9:E7:D8:6C:2C:EE:DA:23 X509v3 Authority Key Identifier: keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b7:eb:2b:c7:2d:f4:a5:39:74:3b:46:c4:61:40:c2:c2:ed: 3c:23:9f:6d:d0:28:a3:74:81:7e:bd:4d:b4:94:bf:86:18:d4: 5b:8b:b0:7e:f9:a1:fb:e4:ba:e6:07:9a:7f:02:2a:e7:06:82: e0:33:e3:3e:23:23:38:6f:cf:92:72:9a:39:70:f4:e7:9b:83: a3:cc:2b:d4:8f:30:7f:8f:80:fc:91:2e:24:5b:2a:dd:88:98: 81:ba:58:34:43:20:a5:9e:0a:9c:cd:f8:b7:ef:c7:b4:f7:bf: 3d:cd:8f:9b:1c:6a:88:67:93:d3:a5:11:ec:0a:01:ba:6a:08: b5:d7:2c:95:7b:69:75:53:22:22:0e:39:62:e8:3c:c6:21:af: 21:e7:35:e0:48:b5:4d:fb:cb:50:06:e0:35:61:60:38:12:51: 11:52:f9:20:2e:6b:27:a3:a1:b9:ca:4c:dc:63:86:e2:ef:32: 32:da:c5:c7:11:15:d6:e9:60:21:d0:62:59:a7:c7:a2:eb:b2: f0:cf:a8:62:4e:c1:7d:4f:54:38:96:a2:ea:21:9b:e7:3b:ef: 9f:8a:ef:8a:13:5c:a3:be:f5:c0:f6:68:e8:6f:d5:f0:da:15: 24:6d:70:af:51:d8:dd:f3:93:0c:65:aa:f9:42:96:27:52:20: d7:d6:d4:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5q3HrkeVpcVXM92FOPQtiYwnXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx NDdCRUE1RTAeFw0yNjA5MjQxOTA0MThaFw0yNjA5MjUyMTAxMThaMDMxMTAvBgNV BAMTKERCNzMzOEYwQTZCRUVGRjVEQjVEOTYxM0Q5RTdEODZDMkNFRURBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4k6aB0owCJvd80nyQrkcvV5Vt OcaPL+02QeT3WM+lIVgVCRM6QHyqYhd0cxPa9+g36UfawO20Sf9dDscpaLXwnrzr t6uhmaMUuSJUhAemHsKwtOXiqa5awHdJcRYvRKo67AcRZpNUWxGcfqTXY+29WzUj wgDmLRx3Z60SCGGa42xNDa4ybhOfrsqH+w0lgfumdsPJpIbNY1JqcymiinSNwmR9 /7ut2mbkql1EmCXrKQbUkIghnRIeO9oJTKjoj528cr31zulv4TggXNbRAjzP3hbN 0Vso8BIbnBKRw7H5AmCZkBtTEuEuZhAj2ZBmgL1h/2h/ASc61efpYXY5g7l9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23M48Ka+7/XbXZYT2efYbCzu2iMwHwYDVR0j BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3 MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4 NzkxNDdCRUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+36yvHLfSlOXQ7RsRhQMLC7Twjn23QKKN0 gX69TbSUv4YY1FuLsH75ofvkuuYHmn8CKucGguAz4z4jIzhvz5Jymjlw9Oebg6PM K9SPMH+PgPyRLiRbKt2ImIG6WDRDIKWeCpzN+Lfvx7T3vz3Nj5scaohnk9OlEewK AbpqCLXXLJV7aXVTIiIOOWLoPMYhryHnNeBItU37y1AG4DVhYDgSURFS+SAuayej obnKTNxjhuLvMjLaxccRFdbpYCHQYlmnx6LrsvDPqGJOwX1PVDiWouohm+c775+K 74oTXKO+9cD2aOhv1fDaFSRtcK9R2N3zkwxlqvlClidSINfW1N8= -----END CERTIFICATE-----Generated at Fri Sep 25 10:51:19 2026 by rpki-client