$ rpki-client -vvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft File: FB3286A3734F366E27845180AD985879147BEA5E.mft (raw, json) Hash identifier: MolvLpVzZnUI2TieT52zkva7HSOR85p8PnWFMgvkg8k= Subject key identifier: 58:C0:88:9F:29:56:98:DA:99:8A:FC:18:98:3F:AB:A1:70:4E:AD:2F Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E Certificate issuer: /CN=FB3286A3734F366E27845180AD985879147BEA5E Certificate serial: 59CAC2F716B220E78FE879A0B78D07A307F43AC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 03:04:35 +0000 Manifest this update: Tue 21 Jul 2026 02:59:35 +0000 Manifest next update: Wed 22 Jul 2026 05:27:35 +0000 Files and hashes: 1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: vrQysHXSDOYVY5vPGR7dw/5TLODMWl8YiVoK5Waal3c=) 2: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: 27HB+moGW931DJ3lKZUVs+RCefOnlzQL4giJYO55G7A=) 3: FB3286A3734F366E27845180AD985879147BEA5E.crl (hash: Le7JgqAlIVKrY9kUeDEp4ldhsNGw5IW5Ta/k9XC+lB0=) 4: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: LQLPTnxAiTCFL6ZmWkZjMD4eo5v053wknOPM5ftHnJk=) 5: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: JUZB6P5kO+Db3k9YCVP/aQyPW9NErekyd7f5TZeRyDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ca:c2:f7:16:b2:20:e7:8f:e8:79:a0:b7:8d:07:a3:07:f4:3a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E Validity Not Before: Jul 21 02:59:35 2026 GMT Not After : Jul 22 05:27:35 2026 GMT Subject: CN=58C0889F295698DA998AFC18983FABA1704EAD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:6c:8e:9e:fb:54:23:37:19:f6:d4:8e:2e: 31:33:c4:4b:c7:d3:29:69:97:21:bf:ab:14:d7:c5: 88:79:0b:04:2c:5e:cc:64:2f:fe:a1:3d:98:2f:ff: 49:a0:c6:fa:86:86:52:24:b9:ae:47:f8:c3:ba:41: 25:1c:d3:10:df:06:0b:3e:37:ff:53:5a:ef:ad:3a: a8:c8:42:79:bb:5c:0d:97:16:a3:b3:0e:00:5a:00: d6:26:4d:34:80:ca:96:fc:73:e2:3a:ba:2a:f0:c1: 54:5c:f7:89:72:f2:8a:3e:09:75:ee:cf:bd:b4:a1: d6:48:4a:76:3e:6d:8c:67:7b:4c:e8:54:ac:8d:07: a6:d1:53:6f:c5:db:a1:51:04:d0:45:42:ad:59:20: 6b:06:c3:2b:2b:ae:21:56:b7:0b:df:65:38:85:17: 2c:18:d7:02:1e:bb:23:ec:88:5e:31:88:84:c6:ff: e0:2b:3f:c7:a2:a0:93:2f:cc:11:0c:7d:4d:2d:78: 71:6e:ff:26:b1:62:9d:70:28:77:a3:2d:84:84:6d: 61:af:68:a6:34:3c:34:36:d5:45:02:8b:51:75:13: 6e:35:e8:3c:88:4e:31:0b:57:bf:22:fd:64:1b:75: 6a:86:b7:d1:6d:ac:2c:d0:fc:51:05:05:15:2e:7b: 67:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C0:88:9F:29:56:98:DA:99:8A:FC:18:98:3F:AB:A1:70:4E:AD:2F X509v3 Authority Key Identifier: keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:77:c0:02:9c:ac:19:a2:ae:26:55:c4:b1:6c:76:f1:cc:c4: cd:69:a7:ea:83:d4:30:c2:1c:1c:6b:76:59:f5:d6:1a:0b:61: 0a:5d:1b:f5:7a:bc:e9:13:66:b7:a9:5c:a4:28:f9:de:d3:aa: 1a:d0:77:32:19:dc:3c:79:ee:44:33:d3:c4:f8:56:2d:3b:88: 10:7b:a2:b1:e9:f3:6b:7c:1e:37:90:5c:15:79:d7:2b:6b:22: dd:47:bd:5f:60:5f:f7:20:00:fd:5d:08:d7:ee:45:61:bb:b8: 61:8f:18:e3:b3:46:ba:1c:8f:5d:45:e4:5d:20:1b:23:a8:c4: 87:44:2a:2a:47:10:e2:52:4f:da:e8:a1:d9:47:54:54:4b:e0: 94:e5:69:53:54:55:9c:47:0b:80:27:5c:52:4a:95:62:dd:b7: e3:b6:9e:4a:c5:8a:9c:8b:47:c7:8b:3a:f5:2c:3b:5b:c8:35: 0f:bd:23:00:2b:78:a3:7e:6c:8a:22:2e:02:d0:1f:f9:e6:7b: 70:2d:58:3a:34:99:87:86:58:7e:e9:2c:69:ea:e0:d6:bd:e4: d1:eb:ed:58:d0:43:34:57:d3:50:83:96:01:1a:5b:e0:2f:81: 7c:e7:9b:df:fb:e3:00:a6:a7:0e:82:2a:ad:20:ed:da:54:a8: 6a:70:bd:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWcrC9xayIOeP6Hmgt40Howf0OsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx NDdCRUE1RTAeFw0yNjA3MjEwMjU5MzVaFw0yNjA3MjIwNTI3MzVaMDMxMTAvBgNV BAMTKDU4QzA4ODlGMjk1Njk4REE5OThBRkMxODk4M0ZBQkExNzA0RUFEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbmyOnvtUIzcZ9tSOLjEzxEvH 0ylplyG/qxTXxYh5CwQsXsxkL/6hPZgv/0mgxvqGhlIkua5H+MO6QSUc0xDfBgs+ N/9TWu+tOqjIQnm7XA2XFqOzDgBaANYmTTSAypb8c+I6uirwwVRc94ly8oo+CXXu z720odZISnY+bYxne0zoVKyNB6bRU2/F26FRBNBFQq1ZIGsGwysrriFWtwvfZTiF FywY1wIeuyPsiF4xiITG/+ArP8eioJMvzBEMfU0teHFu/yaxYp1wKHejLYSEbWGv aKY0PDQ21UUCi1F1E2416DyITjELV78i/WQbdWqGt9FtrCzQ/FEFBRUue2frAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWMCInylWmNqZivwYmD+roXBOrS8wHwYDVR0j BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3 MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4 NzkxNDdCRUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADR3wAKcrBmiriZVxLFsdvHMxM1pp+qD1DDC HBxrdln11hoLYQpdG/V6vOkTZrepXKQo+d7TqhrQdzIZ3Dx57kQz08T4Vi07iBB7 orHp82t8HjeQXBV51ytrIt1HvV9gX/cgAP1dCNfuRWG7uGGPGOOzRrocj11F5F0g GyOoxIdEKipHEOJST9roodlHVFRL4JTlaVNUVZxHC4AnXFJKlWLdt+O2nkrFipyL R8eLOvUsO1vINQ+9IwAreKN+bIoiLgLQH/nme3AtWDo0mYeGWH7pLGnq4Na95NHr 7VjQQzRX01CDlgEaW+AvgXznm9/74wCmpw6CKq0g7dpUqGpwvRE= -----END CERTIFICATE-----Generated at Tue Jul 21 06:31:29 2026 by rpki-client