$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft File: FB3286A3734F366E27845180AD985879147BEA5E.mft (raw, json) Hash identifier: g2DJGeGBkVy97fbATGy4uJOoSCn2TuOQBLqQ+w2CbPw= Subject key identifier: 17:3F:14:AD:C9:81:98:80:19:AC:84:3A:4B:97:41:ED:64:D2:2B:7E Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E Certificate issuer: /CN=FB3286A3734F366E27845180AD985879147BEA5E Certificate serial: 7E770EE0BCA680FF5C46D0EDDDFCA4959D6496B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 03:06:29 +0000 Manifest this update: Tue 03 Nov 2026 03:01:29 +0000 Manifest next update: Wed 04 Nov 2026 06:54:29 +0000 Files and hashes: 1: FB3286A3734F366E27845180AD985879147BEA5E.crl (hash: wCa2ptZwNtyorNxKVaAEpzsSJuu8hDaTOU2G0c28zBs=) 2: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: vrQysHXSDOYVY5vPGR7dw/5TLODMWl8YiVoK5Waal3c=) 3: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: LQLPTnxAiTCFL6ZmWkZjMD4eo5v053wknOPM5ftHnJk=) 4: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: JUZB6P5kO+Db3k9YCVP/aQyPW9NErekyd7f5TZeRyDM=) 5: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: 27HB+moGW931DJ3lKZUVs+RCefOnlzQL4giJYO55G7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 04:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:77:0e:e0:bc:a6:80:ff:5c:46:d0:ed:dd:fc:a4:95:9d:64:96:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E Validity Not Before: Nov 3 03:01:29 2026 GMT Not After : Nov 4 06:54:29 2026 GMT Subject: CN=173F14ADC981988019AC843A4B9741ED64D22B7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:ff:d4:85:1d:2d:be:d2:b9:c0:09:33:da: f8:1e:ec:a7:52:e6:d0:84:0d:d7:b6:7e:2f:6f:a9: 99:22:6d:3a:9d:82:1a:ef:3a:83:59:f5:9d:a5:c7: 99:f2:5f:0f:cc:6f:f4:9e:61:c2:c0:46:25:1b:ab: 09:15:78:84:49:ff:d9:82:a1:be:7f:6f:8d:b0:28: fb:e9:01:7f:7f:77:a4:70:8c:88:f7:63:a0:82:35: fd:8a:25:cf:0b:2b:78:b1:8b:08:fc:28:87:17:a5: ee:fc:f3:99:62:cb:1b:8b:a5:3b:3c:dc:24:c3:3d: cc:2b:7a:e2:f5:f4:92:f3:f0:87:dc:38:3a:0d:7c: 2e:d6:8b:c2:9f:b7:95:c2:79:9a:e2:5d:5d:5d:ff: 11:d3:e1:62:14:22:1b:a8:c9:d0:df:0d:fa:e6:76: b2:7c:7a:df:3b:b2:99:c4:f7:bb:3f:3f:0f:6c:b7: d1:a7:29:72:55:49:69:39:a7:fd:75:6e:7c:f9:eb: a0:b4:7f:34:bd:46:07:40:46:25:df:19:6a:68:db: 05:a6:46:02:ee:d6:53:4d:b8:09:42:ff:e5:89:db: a6:23:78:b4:51:cd:31:19:6f:80:44:d8:8e:da:29: 40:4d:21:7d:be:d6:7f:be:2c:60:8d:d0:c9:0f:bb: 37:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3F:14:AD:C9:81:98:80:19:AC:84:3A:4B:97:41:ED:64:D2:2B:7E X509v3 Authority Key Identifier: keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:08:58:ce:59:58:9b:86:90:00:0f:2a:37:07:08:98:ab:c0: 72:06:68:3e:a7:23:81:16:7a:a1:d9:bf:2d:ea:2f:00:0d:9e: 97:4d:96:c1:bf:94:e0:d0:c4:10:9b:a9:d9:ce:64:40:cd:fd: 9e:50:de:55:dd:95:59:3d:2b:ea:21:56:fa:5d:37:41:35:d7: f9:5c:61:57:c2:4e:32:3b:c3:9b:ff:95:f2:83:6d:23:95:8f: 7e:70:be:ac:1c:cd:05:e2:0f:6f:91:5f:d7:fe:41:c0:80:60: 0d:88:1f:79:69:ce:d6:1d:8c:1f:b5:c2:76:b0:50:5b:7c:8d: 93:44:57:02:57:b0:69:3f:78:8c:a0:df:dc:74:72:43:da:99: 17:cc:bb:09:c8:a9:50:b5:87:f8:da:6e:3d:93:9c:cd:b2:1b: a7:08:97:28:16:36:d9:6f:53:4b:71:82:a2:00:c0:6a:dd:92: 96:80:30:34:2b:e8:d2:85:94:28:98:99:67:34:38:63:36:90: de:2f:0e:a4:e6:2e:77:02:69:03:ff:e4:d0:d2:cf:0b:46:bc: 88:f1:24:ae:b7:32:92:8c:a5:42:c0:d2:b6:74:16:d9:4b:5d: 91:55:e1:7c:0d:fa:ea:67:c3:23:91:ad:53:91:5b:ac:61:49: f6:dd:71:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfncO4LymgP9cRtDt3fyklZ1klrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx NDdCRUE1RTAeFw0yNjExMDMwMzAxMjlaFw0yNjExMDQwNjU0MjlaMDMxMTAvBgNV BAMTKDE3M0YxNEFEQzk4MTk4ODAxOUFDODQzQTRCOTc0MUVENjREMjJCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT5f/UhR0tvtK5wAkz2vge7KdS 5tCEDde2fi9vqZkibTqdghrvOoNZ9Z2lx5nyXw/Mb/SeYcLARiUbqwkVeIRJ/9mC ob5/b42wKPvpAX9/d6RwjIj3Y6CCNf2KJc8LK3ixiwj8KIcXpe7885liyxuLpTs8 3CTDPcwreuL19JLz8IfcODoNfC7Wi8Kft5XCeZriXV1d/xHT4WIUIhuoydDfDfrm drJ8et87spnE97s/Pw9st9GnKXJVSWk5p/11bnz566C0fzS9RgdARiXfGWpo2wWm RgLu1lNNuAlC/+WJ26YjeLRRzTEZb4BE2I7aKUBNIX2+1n++LGCN0MkPuzcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFz8UrcmBmIAZrIQ6S5dB7WTSK34wHwYDVR0j BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3 MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4 NzkxNDdCRUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0IWM5ZWJuGkAAPKjcHCJirwHIGaD6nI4EW eqHZvy3qLwANnpdNlsG/lODQxBCbqdnOZEDN/Z5Q3lXdlVk9K+ohVvpdN0E11/lc YVfCTjI7w5v/lfKDbSOVj35wvqwczQXiD2+RX9f+QcCAYA2IH3lpztYdjB+1wnaw UFt8jZNEVwJXsGk/eIyg39x0ckPamRfMuwnIqVC1h/jabj2TnM2yG6cIlygWNtlv U0txgqIAwGrdkpaAMDQr6NKFlCiYmWc0OGM2kN4vDqTmLncCaQP/5NDSzwtGvIjx JK63MpKMpULA0rZ0FtlLXZFV4XwN+upnwyORrVORW6xhSfbdcRU= -----END CERTIFICATE-----Generated at Tue Nov 3 08:28:42 2026 by rpki-client