$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft File: FBA3638DA562505698B924E173281E46359B1617.mft (raw, json) Hash identifier: t+LcWuKkTCEKwrjIs5U4+MW5nEAaTth1xNQLznBqRjU= Subject key identifier: 9D:B4:B6:96:F2:88:FB:E8:E1:97:3C:92:F4:43:86:14:67:EE:8A:22 Authority key identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17 Certificate issuer: /CN=FBA3638DA562505698B924E173281E46359B1617 Certificate serial: 1843061A056170AA9F81DF329E4EF79E6256AF60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 22:08:02 +0000 Manifest this update: Thu 24 Sep 2026 22:03:02 +0000 Manifest next update: Fri 25 Sep 2026 23:17:02 +0000 Files and hashes: 1: FBA3638DA562505698B924E173281E46359B1617.crl (hash: 8e27q42NsvFUckD59pNZLkW96Eqy5K/HyHHmc7w5pPE=) 2: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: 5FPAtwhecwsubL80r6cuw6LZHftwyRq85ZxJM6Kqd/0=) 3: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: aWv2LNdALgBBdR5J3vxMwq5LFZy/FvWsDrFbKxxFcx4=) 4: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: tNCHVLpKWfY3fZ8ZfZRRYmaRD6tD5GGqANd/n3olcLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 23:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:43:06:1a:05:61:70:aa:9f:81:df:32:9e:4e:f7:9e:62:56:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBA3638DA562505698B924E173281E46359B1617 Validity Not Before: Sep 24 22:03:02 2026 GMT Not After : Sep 25 23:17:02 2026 GMT Subject: CN=9DB4B696F288FBE8E1973C92F443861467EE8A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:f6:ca:03:20:80:af:87:cd:35:f6:cf:de: e7:31:71:74:c5:04:45:78:2b:b8:6a:a2:73:b5:90: bc:6d:8a:24:83:41:dc:fe:ee:d8:dc:57:c5:74:55: d8:94:7c:c7:ca:cf:93:bc:f3:33:79:8d:ef:b7:cb: 77:90:80:77:f0:63:0b:a5:ae:61:04:68:5b:58:c0: 5a:05:66:1d:46:c3:e6:64:ff:ec:74:52:fc:e8:4d: 48:01:66:67:3e:e7:e3:3f:dd:ed:e6:92:71:67:dc: a4:d7:17:6c:d4:a2:89:05:cb:22:c7:49:23:ea:b7: 2a:1c:6e:47:54:91:15:41:b8:1f:25:b3:c3:2f:b2: 5b:5e:cb:13:14:b3:8a:1c:0e:5f:83:ef:36:e9:87: b2:53:b4:50:ff:32:e4:ca:b3:2e:7b:64:c0:4e:78: 26:d1:da:3a:66:b3:fe:d5:35:b3:3d:9c:a7:0d:a4: 10:6b:d6:56:d2:7e:10:5f:69:28:7f:dd:0f:22:3c: bc:13:87:61:c7:9f:df:cc:4b:42:30:6a:f0:82:ea: 9c:cc:e4:9b:fa:cc:a0:db:fc:15:3a:19:ff:80:9f: 00:e4:6d:67:a6:d4:99:41:3f:ef:eb:8e:f3:f9:39: 8b:7f:a4:bf:1c:04:03:11:fb:e2:f7:ac:df:3e:b2: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B4:B6:96:F2:88:FB:E8:E1:97:3C:92:F4:43:86:14:67:EE:8A:22 X509v3 Authority Key Identifier: keyid:FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e5:b2:8a:5c:52:c4:bb:31:07:99:b3:90:d0:c8:58:02:84: 91:59:04:0a:cb:9c:75:a7:a5:65:ce:f6:d6:45:bf:f1:f7:f7: 81:85:45:4a:24:f2:d3:75:12:35:93:93:dd:73:47:94:e1:e4: 2c:84:ad:0b:28:11:67:9a:55:97:ba:b7:6e:4a:c1:e4:7d:39: c3:90:8c:49:8c:97:21:26:db:07:5f:22:7a:5e:b6:52:cf:7a: 08:49:bb:b3:8a:3f:39:8e:fc:42:fd:e8:75:f5:c0:ff:81:38: 6c:95:a6:aa:9c:7c:4e:8c:6a:39:9a:c1:48:ee:0e:e8:9e:99: 59:8d:c7:4b:21:f5:b0:7a:a0:90:7c:93:0d:c5:63:38:3b:ff: 1f:a6:4e:c2:7d:f8:f3:b8:58:4d:3c:19:0c:39:34:54:7e:95: 5e:15:5a:c3:38:29:0c:50:0a:e6:92:7c:2b:9b:28:33:1b:87: 66:32:61:c1:6b:cd:29:c9:d0:78:a8:35:97:ef:3b:34:04:4a: 8f:6a:e0:be:9f:d4:84:b6:c6:36:19:d7:d6:71:ef:f6:5b:87: 6d:e9:52:1d:c5:71:6f:0a:a2:c7:4f:cf:2b:a4:37:38:5f:e6: 9f:5a:5d:69:83:4c:50:c7:3c:85:a4:8c:07:be:f4:ec:bd:b4: a5:70:b2:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEMGGgVhcKqfgd8ynk73nmJWr2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBMzYzOERBNTYyNTA1Njk4QjkyNEUxNzMyODFFNDYz NTlCMTYxNzAeFw0yNjA5MjQyMjAzMDJaFw0yNjA5MjUyMzE3MDJaMDMxMTAvBgNV BAMTKDlEQjRCNjk2RjI4OEZCRThFMTk3M0M5MkY0NDM4NjE0NjdFRThBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrbvbKAyCAr4fNNfbP3ucxcXTF BEV4K7hqonO1kLxtiiSDQdz+7tjcV8V0VdiUfMfKz5O88zN5je+3y3eQgHfwYwul rmEEaFtYwFoFZh1Gw+Zk/+x0UvzoTUgBZmc+5+M/3e3mknFn3KTXF2zUookFyyLH SSPqtyocbkdUkRVBuB8ls8MvslteyxMUs4ocDl+D7zbph7JTtFD/MuTKsy57ZMBO eCbR2jpms/7VNbM9nKcNpBBr1lbSfhBfaSh/3Q8iPLwTh2HHn9/MS0IwavCC6pzM 5Jv6zKDb/BU6Gf+AnwDkbWem1JlBP+/rjvP5OYt/pL8cBAMR++L3rN8+sgALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnbS2lvKI++jhlzyS9EOGFGfuiiIwHwYDVR0j BBgwFoAU+6NjjaViUFaYuSThcygeRjWbFhcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDUwMWNkZjktNTJlMS00Yzk4LTlhYjMtYWZiNzBmYWMzNzdjLzAvRkJBMzYzOERB NTYyNTA1Njk4QjkyNEUxNzMyODFFNDYzNTlCMTYxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQkEzNjM4REE1NjI1MDU2OThCOTI0RTE3MzI4MUU0NjM1OUIx NjE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDUwMWNkZjktNTJlMS00Yzk4LTlh YjMtYWZiNzBmYWMzNzdjLzAvRkJBMzYzOERBNTYyNTA1Njk4QjkyNEUxNzMyODFF NDYzNTlCMTYxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/lsopcUsS7MQeZs5DQyFgChJFZBArLnHWn pWXO9tZFv/H394GFRUok8tN1EjWTk91zR5Th5CyErQsoEWeaVZe6t25KweR9OcOQ jEmMlyEm2wdfInpetlLPeghJu7OKPzmO/EL96HX1wP+BOGyVpqqcfE6MajmawUju DuiemVmNx0sh9bB6oJB8kw3FYzg7/x+mTsJ9+PO4WE08GQw5NFR+lV4VWsM4KQxQ CuaSfCubKDMbh2YyYcFrzSnJ0HioNZfvOzQESo9q4L6f1IS2xjYZ19Zx7/Zbh23p Uh3FcW8KosdPzyukNzhf5p9aXWmDTFDHPIWkjAe+9Oy9tKVwsmg= -----END CERTIFICATE-----Generated at Fri Sep 25 05:48:26 2026 by rpki-client