$ rpki-client -vvf rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft File: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft (raw, json) Hash identifier: +ym3ODvgXmbLVVj9JU3J0ixhVlTgoM4iJM25IUP0EBs= Subject key identifier: FB:6A:59:CD:81:23:60:DB:62:1C:CF:EC:4C:A6:A2:96:D6:53:9E:82 Authority key identifier: FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A Certificate issuer: /CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Certificate serial: 3C55EF9EDDE32CD53E25E5DC7935AE888F714C25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 10:07:35 +0000 Manifest this update: Tue 02 Jun 2026 10:02:35 +0000 Manifest next update: Wed 03 Jun 2026 11:18:35 +0000 Files and hashes: 1: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl (hash: vh0S1KYvH2210Ah5p71HHqcEBjt8FaiOzXuxzXZXcAg=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: cg3Tr+ZR3IqdPJrclTSnhr/cIHYjQx4+i+x5ElcD2Yo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:55:ef:9e:dd:e3:2c:d5:3e:25:e5:dc:79:35:ae:88:8f:71:4c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Validity Not Before: Jun 2 10:02:35 2026 GMT Not After : Jun 3 11:18:35 2026 GMT Subject: CN=FB6A59CD812360DB621CCFEC4CA6A296D6539E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:12:06:ef:49:9c:03:23:cb:05:22:c1:16:e6: c2:92:92:91:ed:17:63:14:ac:c5:1a:13:67:e8:ad: dd:e3:5e:d4:4e:46:f7:27:9c:e3:19:1a:39:24:1b: 4a:7c:31:d9:ad:70:88:64:9f:67:b3:61:89:10:29: fd:61:bd:81:68:43:3b:d0:a7:7b:e8:ee:c8:f7:ff: c4:4f:63:ee:f4:57:ec:a6:62:29:70:c1:80:a3:3d: 89:7a:02:98:98:7f:dc:af:6d:de:4e:94:f9:3c:d8: e3:df:cd:f3:7b:82:c5:bb:d1:45:21:4f:31:4c:7a: 00:ca:c9:f1:7c:76:9c:e1:c6:4e:fe:c4:2d:75:8e: e7:dd:2c:04:a0:79:d7:a9:c9:18:be:0e:a3:02:9d: e3:e0:01:64:cb:4e:c0:a3:e1:93:e6:ca:47:6e:b2: f3:29:47:28:28:9c:71:ac:0b:92:65:67:61:62:e3: ab:16:38:09:6f:c5:99:79:84:63:4a:15:82:11:58: e1:7f:32:00:05:af:23:cc:6e:c2:4d:3c:5c:97:e5: f6:dd:1f:6a:71:a9:ca:d8:10:7a:3f:68:de:80:0f: 26:44:8b:b1:25:fd:09:0d:41:ae:15:87:91:ce:5b: ca:4e:18:bc:e8:d7:98:c4:bb:f4:ad:ba:64:43:d2: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6A:59:CD:81:23:60:DB:62:1C:CF:EC:4C:A6:A2:96:D6:53:9E:82 X509v3 Authority Key Identifier: keyid:FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:67:77:07:6d:bb:b1:0f:94:b8:ec:9f:49:23:76:ab:19:ad: a3:fa:bd:1d:cb:d3:71:ec:40:31:63:2b:8d:1d:ff:9e:8b:10: d2:9b:29:70:3f:71:16:b6:95:a9:74:4e:c1:ce:de:99:b7:4e: 86:76:25:44:e7:71:44:f7:98:ba:4c:00:d1:4b:11:ea:08:3f: cc:bc:4a:d2:3a:b5:87:70:6c:31:a5:03:04:20:83:e6:87:30: 1d:b2:51:1b:dc:76:2a:fa:98:63:44:95:b3:4e:1d:e9:97:41: fd:69:9b:3f:dc:28:83:5f:24:da:33:ab:db:ca:3f:db:94:61: 39:dd:8b:cc:e6:e6:81:f2:fc:a1:c2:b9:e9:15:de:e1:fe:b1: 9b:99:76:a6:91:e9:fd:a6:a2:9d:91:ae:73:f1:c7:50:79:eb: 46:df:69:7a:2c:cb:e8:b4:7a:2d:50:e0:45:32:c5:ab:12:5c: ac:04:4b:fb:81:60:a6:6e:e9:52:d3:0d:b7:3b:89:8f:00:7b: 66:61:68:8a:c4:b3:b3:91:b1:cc:5b:27:32:2b:6a:44:82:73: 71:19:70:02:2f:a5:ee:5c:26:ff:fd:2b:74:c7:c6:25:18:c3: b7:41:28:d6:a2:a1:53:6d:c6:db:b2:1f:37:de:a7:e7:62:3d: 72:bc:1f:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPFXvnt3jLNU+JeXceTWuiI9xTCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRjM4OUJDNEY1QzZERkIwRjBBQzUxQzE2RTZBQ0E0 N0Y5QzAyQTAeFw0yNjA2MDIxMDAyMzVaFw0yNjA2MDMxMTE4MzVaMDMxMTAvBgNV BAMTKEZCNkE1OUNEODEyMzYwREI2MjFDQ0ZFQzRDQTZBMjk2RDY1MzlFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsEgbvSZwDI8sFIsEW5sKSkpHt F2MUrMUaE2ford3jXtRORvcnnOMZGjkkG0p8MdmtcIhkn2ezYYkQKf1hvYFoQzvQ p3vo7sj3/8RPY+70V+ymYilwwYCjPYl6ApiYf9yvbd5OlPk82OPfzfN7gsW70UUh TzFMegDKyfF8dpzhxk7+xC11jufdLASgedepyRi+DqMCnePgAWTLTsCj4ZPmykdu svMpRygonHGsC5JlZ2Fi46sWOAlvxZl5hGNKFYIRWOF/MgAFryPMbsJNPFyX5fbd H2pxqcrYEHo/aN6ADyZEi7El/QkNQa4Vh5HOW8pOGLzo15jEu/StumRD0j57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+2pZzYEjYNtiHM/sTKailtZTnoIwHwYDVR0j BBgwFoAU+x84m8T1xt+w8KxRwW5qykf5wCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5MTNmYTEtMzNhZS00ZTMzLWJiZTItODFiZDlmMDNjODRiLzAvRkIxRjM4OUJD NEY1QzZERkIwRjBBQzUxQzE2RTZBQ0E0N0Y5QzAyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjFGMzg5QkM0RjVDNkRGQjBGMEFDNTFDMTZFNkFDQTQ3RjlD MDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvRkIxRjM4OUJDNEY1QzZERkIwRjBBQzUxQzE2RTZB Q0E0N0Y5QzAyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZndwdtu7EPlLjsn0kjdqsZraP6vR3L03Hs QDFjK40d/56LENKbKXA/cRa2lal0TsHO3pm3ToZ2JUTncUT3mLpMANFLEeoIP8y8 StI6tYdwbDGlAwQgg+aHMB2yURvcdir6mGNElbNOHemXQf1pmz/cKINfJNozq9vK P9uUYTndi8zm5oHy/KHCuekV3uH+sZuZdqaR6f2mop2RrnPxx1B560bfaXosy+i0 ei1Q4EUyxasSXKwES/uBYKZu6VLTDbc7iY8Ae2ZhaIrEs7ORscxbJzIrakSCc3EZ cAIvpe5cJv/9K3THxiUYw7dBKNaioVNtxtuyHzfep+diPXK8H00= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:43 2026 by rpki-client