$ rpki-client -vvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft File: FB3286A3734F366E27845180AD985879147BEA5E.mft (raw, json) Hash identifier: 38G1KYHLM0kEmD1TwYdrFKnX6IG3nTx2+Do9lSDWkPg= Subject key identifier: C3:CA:97:DC:87:10:52:7F:A4:21:70:85:D0:65:50:C6:29:27:CB:62 Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E Certificate issuer: /CN=FB3286A3734F366E27845180AD985879147BEA5E Certificate serial: 6AA23A11CC275281FFD7EE0AC5B53632901B1AC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:18:58 +0000 Manifest this update: Tue 02 Jun 2026 11:13:58 +0000 Manifest next update: Wed 03 Jun 2026 12:21:58 +0000 Files and hashes: 1: FB3286A3734F366E27845180AD985879147BEA5E.crl (hash: 4YvFFUBh3cPyPEaHAE8l5gPYTOFy+ec9q1644/NGllo=) 2: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: LQLPTnxAiTCFL6ZmWkZjMD4eo5v053wknOPM5ftHnJk=) 3: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: vrQysHXSDOYVY5vPGR7dw/5TLODMWl8YiVoK5Waal3c=) 4: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: 27HB+moGW931DJ3lKZUVs+RCefOnlzQL4giJYO55G7A=) 5: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: JUZB6P5kO+Db3k9YCVP/aQyPW9NErekyd7f5TZeRyDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a2:3a:11:cc:27:52:81:ff:d7:ee:0a:c5:b5:36:32:90:1b:1a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E Validity Not Before: Jun 2 11:13:58 2026 GMT Not After : Jun 3 12:21:58 2026 GMT Subject: CN=C3CA97DC8710527FA4217085D06550C62927CB62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:d8:96:f6:f1:c0:bd:38:f6:03:ca:6e:08: 30:d2:7e:69:ea:6f:c1:ff:06:9f:80:10:18:3d:4d: a3:26:96:71:58:3b:35:c2:d2:8f:9d:ae:96:56:ad: e3:24:00:9b:ee:d4:22:b6:87:79:0d:7c:59:d4:5a: 78:29:5c:01:3f:eb:67:2b:58:27:bc:13:f1:a4:cc: c7:03:4f:3a:9d:03:03:d8:7f:a2:9b:16:ca:14:2f: d7:04:4e:df:06:ea:f2:8b:48:ea:24:c8:db:d8:2b: 35:1e:92:d5:c1:e2:3c:94:a3:fd:ef:ea:c9:2d:6b: bf:22:19:0e:05:b6:1d:ba:22:5d:56:38:a4:50:c9: 94:56:aa:a9:74:b8:4a:01:cb:c3:35:f1:ee:4a:82: ce:8c:f8:3e:45:e3:6f:34:ac:94:4a:36:1b:8f:f1: 09:32:b7:94:79:5b:24:9b:d5:6b:b4:2e:2b:ec:af: ca:84:25:15:7c:b7:ee:9b:3f:34:6a:11:1d:56:9a: 3a:0b:25:c9:c2:f2:51:3d:97:93:a5:84:a1:54:39: 7b:7a:b6:2b:12:74:9a:a8:52:54:18:51:cd:ff:06: ad:de:83:41:06:73:6c:e2:b7:f7:49:80:e0:2d:cc: 09:87:cb:61:e5:eb:22:82:b4:9d:15:40:be:66:a8: 91:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CA:97:DC:87:10:52:7F:A4:21:70:85:D0:65:50:C6:29:27:CB:62 X509v3 Authority Key Identifier: keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:cc:b9:c5:60:22:99:7f:6c:f3:2c:1f:cc:1b:e4:17:30:d1: ae:e9:a1:7c:1d:61:13:84:f7:6c:76:10:69:18:ff:95:07:ee: 06:5b:54:9d:90:60:f7:e0:30:ca:59:fc:5a:e0:17:fa:f7:05: 7b:41:3a:d6:84:7e:82:2f:23:ac:36:65:2a:aa:09:c8:5b:96: e0:67:8b:81:7c:77:2b:bb:05:67:fe:83:a2:94:de:a3:59:f1: dc:7e:f5:ec:a7:c5:af:27:13:b4:12:ca:53:4a:e6:6e:bf:d6: 78:ae:c3:ac:b9:4e:d3:fd:59:19:77:d5:5b:b0:9d:1a:93:f3: ad:be:06:b9:20:fa:cf:a4:e2:94:3c:63:b2:c7:7b:7a:b9:28: ec:65:e1:5d:c4:e7:7f:a1:e9:03:a1:8e:9d:57:e7:a6:c0:bc: 7a:fd:e0:fe:37:92:f6:ca:d9:55:9a:5a:a0:66:46:3c:aa:48: 04:7e:a9:dd:13:8f:4b:c7:05:99:5a:f4:09:69:55:b1:37:c7: 1c:b9:b9:22:53:48:3b:00:0d:a5:7b:b3:f4:6e:30:bd:7b:50: 70:b3:d0:46:d5:e3:09:8c:2c:f0:03:19:77:06:48:59:0b:85: 05:4e:b0:8b:1e:d5:29:7b:0f:a8:eb:11:f4:12:ee:16:39:51: 8b:8d:d5:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqI6EcwnUoH/1+4KxbU2MpAbGsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx NDdCRUE1RTAeFw0yNjA2MDIxMTEzNThaFw0yNjA2MDMxMjIxNThaMDMxMTAvBgNV BAMTKEMzQ0E5N0RDODcxMDUyN0ZBNDIxNzA4NUQwNjU1MEM2MjkyN0NCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx59iW9vHAvTj2A8puCDDSfmnq b8H/Bp+AEBg9TaMmlnFYOzXC0o+drpZWreMkAJvu1CK2h3kNfFnUWngpXAE/62cr WCe8E/GkzMcDTzqdAwPYf6KbFsoUL9cETt8G6vKLSOokyNvYKzUektXB4jyUo/3v 6skta78iGQ4Fth26Il1WOKRQyZRWqql0uEoBy8M18e5Kgs6M+D5F4280rJRKNhuP 8Qkyt5R5WySb1Wu0Livsr8qEJRV8t+6bPzRqER1WmjoLJcnC8lE9l5OlhKFUOXt6 tisSdJqoUlQYUc3/Bq3eg0EGc2zit/dJgOAtzAmHy2Hl6yKCtJ0VQL5mqJHZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw8qX3IcQUn+kIXCF0GVQxikny2IwHwYDVR0j BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3 MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4 NzkxNDdCRUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnMucVgIpl/bPMsH8wb5Bcw0a7poXwdYROE 92x2EGkY/5UH7gZbVJ2QYPfgMMpZ/FrgF/r3BXtBOtaEfoIvI6w2ZSqqCchbluBn i4F8dyu7BWf+g6KU3qNZ8dx+9eynxa8nE7QSylNK5m6/1niuw6y5TtP9WRl31Vuw nRqT862+Brkg+s+k4pQ8Y7LHe3q5KOxl4V3E53+h6QOhjp1X56bAvHr94P43kvbK 2VWaWqBmRjyqSAR+qd0Tj0vHBZla9AlpVbE3xxy5uSJTSDsADaV7s/RuML17UHCz 0EbV4wmMLPADGXcGSFkLhQVOsIse1Sl7D6jrEfQS7hY5UYuN1c8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:23 2026 by rpki-client