$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft File: FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft (raw, json) Hash identifier: YF0R49hRZj/WOP2NcVdaOgaV6FD0VTO93+2GgqlIYII= Subject key identifier: C0:04:FD:CA:0E:5B:66:D0:17:04:2A:46:50:B9:49:73:EF:9C:BC:35 Authority key identifier: FB:04:12:AD:F5:C0:AF:38:82:82:05:67:1C:38:D8:AE:99:F5:70:7A Certificate issuer: /CN=FB0412ADF5C0AF38828205671C38D8AE99F5707A Certificate serial: 150841589C0E2AEDF00927C636E589B0C377A8B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 05:35:00 +0000 Manifest this update: Wed 04 Nov 2026 05:30:00 +0000 Manifest next update: Thu 05 Nov 2026 09:00:00 +0000 Files and hashes: 1: FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl (hash: MwxISXRQ30/INokXq/ZnNXeVM8mOmtIS3q1PTTQx11c=) 2: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: uy/OITxgQ9Y741d8HOaHJYXKJTvlD+OGefENVoqqTDs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:08:41:58:9c:0e:2a:ed:f0:09:27:c6:36:e5:89:b0:c3:77:a8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB0412ADF5C0AF38828205671C38D8AE99F5707A Validity Not Before: Nov 4 05:30:00 2026 GMT Not After : Nov 5 09:00:00 2026 GMT Subject: CN=C004FDCA0E5B66D017042A4650B94973EF9CBC35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4e:67:01:59:28:46:93:2e:bc:8c:8e:c0:96: b5:dc:07:66:d0:69:f4:50:7e:56:07:1f:b9:60:73: 71:df:c0:a4:de:17:db:e1:58:48:c2:64:84:5b:b0: 26:87:8a:a6:81:09:7c:02:dc:76:85:d3:51:76:32: bf:fa:50:c3:7a:b5:71:a0:dc:89:12:32:4d:1b:df: cd:77:59:60:69:aa:ec:1f:5c:5f:7f:13:62:48:f3: 4f:f0:82:7e:a9:cb:9b:91:8f:55:4f:1f:d2:85:ee: 3f:57:a2:ea:7c:4d:71:88:95:1c:23:d0:e6:20:47: 0f:cd:ef:18:0b:a2:43:19:67:c9:ea:9f:e9:76:ee: 8e:f9:a7:33:aa:47:4a:7b:30:17:75:f1:91:ab:bd: 22:1e:1e:39:3d:1e:30:af:6c:9d:ae:ed:f9:56:4a: 7b:2d:47:10:e7:70:73:38:47:3c:37:3b:ea:70:dd: f1:d8:77:4f:d3:c3:89:38:3a:51:71:61:0e:7f:7f: f4:fc:69:95:3a:c3:cd:a8:2e:e7:f7:66:d2:05:e9: 10:31:c6:3f:2c:6d:e5:84:8a:d5:20:b6:c3:f7:52: 69:28:49:2a:02:fb:58:96:1a:4c:d6:51:66:d7:4f: 23:b0:c8:e0:25:3b:99:aa:90:16:f3:f9:aa:c5:37: 50:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:04:FD:CA:0E:5B:66:D0:17:04:2A:46:50:B9:49:73:EF:9C:BC:35 X509v3 Authority Key Identifier: keyid:FB:04:12:AD:F5:C0:AF:38:82:82:05:67:1C:38:D8:AE:99:F5:70:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f5:86:2a:25:e1:5c:84:bd:f6:2f:4c:c0:20:e8:37:e9:0d: 07:7e:4c:af:e5:c4:74:50:d0:9d:2d:f8:9b:c2:b1:ec:6a:b8: b4:0c:f4:9b:08:d8:95:68:c8:b5:b8:1a:0f:d7:47:7a:f1:f8: 0f:39:7e:e3:1f:d8:d2:d3:90:90:7f:4f:37:90:7d:0e:00:06: 80:8d:4c:eb:19:30:f9:50:84:ce:b4:06:71:42:45:d0:5f:1f: 34:00:ea:2c:98:8d:a0:ea:4e:09:59:18:ab:49:6b:c9:4b:01: f1:e3:d3:29:62:aa:34:ac:5c:e9:a6:82:9a:5a:89:5c:1e:96: 60:80:76:ba:48:54:d4:93:8b:1f:c2:bc:4f:19:a4:98:04:7f: 7a:29:bf:b5:af:77:2f:be:f7:4c:bd:bf:a6:91:18:dc:36:bc: 73:24:9d:6a:4a:28:ad:e1:70:fb:6f:97:9a:5c:54:09:dc:ec: 6c:58:5d:00:36:1b:e0:7d:98:0e:9b:d3:e3:0a:24:1c:96:c5: 43:07:a6:6d:ee:d8:1e:74:4f:b2:09:15:41:e1:6f:12:03:d1: 15:33:81:d7:ea:2d:77:d5:dd:ff:97:93:a7:1d:18:a1:f4:59: d2:e9:89:b0:a0:d8:2e:4b:67:d0:61:81:88:8e:26:5c:85:8a: 34:2c:bf:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQhBWJwOKu3wCSfGNuWJsMN3qLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIwNDEyQURGNUMwQUYzODgyODIwNTY3MUMzOEQ4QUU5 OUY1NzA3QTAeFw0yNjExMDQwNTMwMDBaFw0yNjExMDUwOTAwMDBaMDMxMTAvBgNV BAMTKEMwMDRGRENBMEU1QjY2RDAxNzA0MkE0NjUwQjk0OTczRUY5Q0JDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpTmcBWShGky68jI7AlrXcB2bQ afRQflYHH7lgc3HfwKTeF9vhWEjCZIRbsCaHiqaBCXwC3HaF01F2Mr/6UMN6tXGg 3IkSMk0b3813WWBpquwfXF9/E2JI80/wgn6py5uRj1VPH9KF7j9Xoup8TXGIlRwj 0OYgRw/N7xgLokMZZ8nqn+l27o75pzOqR0p7MBd18ZGrvSIeHjk9HjCvbJ2u7flW SnstRxDncHM4Rzw3O+pw3fHYd0/Tw4k4OlFxYQ5/f/T8aZU6w82oLuf3ZtIF6RAx xj8sbeWEitUgtsP3UmkoSSoC+1iWGkzWUWbXTyOwyOAlO5mqkBbz+arFN1BjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwAT9yg5bZtAXBCpGULlJc++cvDUwHwYDVR0j BBgwFoAU+wQSrfXArziCggVnHDjYrpn1cHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjODkxZDctNGZjYy00NzcwLTgyZDQtMzY3Yjg3YmI1NTFlLzAvRkIwNDEyQURG NUMwQUYzODgyODIwNTY3MUMzOEQ4QUU5OUY1NzA3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQjA0MTJBREY1QzBBRjM4ODI4MjA1NjcxQzM4RDhBRTk5RjU3 MDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRkIwNDEyQURGNUMwQUYzODgyODIwNTY3MUMzOEQ4 QUU5OUY1NzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/1hiol4VyEvfYvTMAg6DfpDQd+TK/lxHRQ 0J0t+JvCsexquLQM9JsI2JVoyLW4Gg/XR3rx+A85fuMf2NLTkJB/TzeQfQ4ABoCN TOsZMPlQhM60BnFCRdBfHzQA6iyYjaDqTglZGKtJa8lLAfHj0yliqjSsXOmmgppa iVwelmCAdrpIVNSTix/CvE8ZpJgEf3opv7Wvdy++90y9v6aRGNw2vHMknWpKKK3h cPtvl5pcVAnc7GxYXQA2G+B9mA6b0+MKJByWxUMHpm3u2B50T7IJFUHhbxID0RUz gdfqLXfV3f+Xk6cdGKH0WdLpibCg2C5LZ9BhgYiOJlyFijQsvwQ= -----END CERTIFICATE-----Generated at Wed Nov 4 17:08:05 2026 by rpki-client