$ rpki-client -vvf rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft File: FBA3638DA562505698B924E173281E46359B1617.mft (raw, json) Hash identifier: p21PQWz0f88sGP6Er58WB5FuoCYSt+wQLaBXhPo3ufs= Subject key identifier: B3:B0:E6:0B:E2:67:A3:41:75:0B:D0:CF:10:A3:1E:E4:69:DE:28:8A Authority key identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17 Certificate issuer: /CN=FBA3638DA562505698B924E173281E46359B1617 Certificate serial: 138E9927FF4654DB77F1AFE0B959CFCC95411AE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:08:49 +0000 Manifest this update: Tue 02 Jun 2026 11:03:49 +0000 Manifest next update: Wed 03 Jun 2026 14:18:49 +0000 Files and hashes: 1: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: aWv2LNdALgBBdR5J3vxMwq5LFZy/FvWsDrFbKxxFcx4=) 2: FBA3638DA562505698B924E173281E46359B1617.crl (hash: x16rjlQIdpJkzUBXEIL/Xiwzw0OnOon15KtqWGArljc=) 3: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: tNCHVLpKWfY3fZ8ZfZRRYmaRD6tD5GGqANd/n3olcLk=) 4: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: 5FPAtwhecwsubL80r6cuw6LZHftwyRq85ZxJM6Kqd/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8e:99:27:ff:46:54:db:77:f1:af:e0:b9:59:cf:cc:95:41:1a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBA3638DA562505698B924E173281E46359B1617 Validity Not Before: Jun 2 11:03:49 2026 GMT Not After : Jun 3 14:18:49 2026 GMT Subject: CN=B3B0E60BE267A341750BD0CF10A31EE469DE288A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:dd:67:e3:92:95:15:c9:8b:0f:91:17:4c: a0:59:c9:93:78:43:a0:fd:b3:15:db:9b:43:56:1e: 9a:76:3d:87:82:f5:aa:c1:92:45:76:ca:7a:8f:1e: d3:e0:35:eb:34:f0:08:38:56:8f:18:99:f4:c7:ea: 40:84:dc:e8:da:a4:ca:a3:aa:29:0b:b0:d5:5e:69: c7:56:02:79:0d:c8:54:ef:6e:15:93:69:4d:08:ad: 36:22:ff:34:75:02:5c:08:1f:39:58:e2:b6:17:95: 74:75:6f:a9:a3:06:e0:6e:f2:1d:ed:3e:a9:88:1b: 2e:50:2f:37:9a:dc:7b:f5:3d:de:35:4a:09:da:8a: 3c:15:e0:84:2a:b0:35:4a:24:b8:f3:c0:a7:c3:48: 26:39:7d:b5:95:81:9e:6b:b8:16:af:4a:d7:14:e8: 06:73:be:c9:0d:f8:a8:dd:e8:e3:11:fd:87:1a:e8: f9:66:94:c8:5e:59:a2:60:d5:62:c4:19:c9:25:4a: 30:ef:83:a8:c1:5a:cb:2a:75:8a:c7:63:5c:b9:99: 15:d3:e3:0e:a1:96:9a:d2:f9:85:ef:c9:c5:ea:85: c4:92:78:b1:ea:7d:71:17:55:3b:d5:a5:a2:f4:55: 7a:5a:89:aa:b8:ec:ce:36:ea:c7:20:b3:2f:38:d0: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B0:E6:0B:E2:67:A3:41:75:0B:D0:CF:10:A3:1E:E4:69:DE:28:8A X509v3 Authority Key Identifier: keyid:FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:eb:20:08:3a:9b:e4:ac:a6:dc:d6:f3:74:48:92:6b:17:bc: ec:7f:28:6c:b0:c1:73:10:f5:bb:83:71:27:27:89:e4:60:18: 71:c1:e0:dc:95:90:a9:54:cd:c5:0e:1a:21:63:c4:26:da:07: 90:bd:4a:b6:ec:97:9d:df:9c:33:df:bd:1f:91:25:dc:f5:a5: 43:08:13:9a:28:ed:de:ea:eb:79:6f:fb:61:84:8b:78:84:ab: 4a:4e:44:6f:ae:cf:d8:5e:ed:49:e1:ed:df:fc:a8:23:af:8e: 3d:fe:53:8d:06:6d:c2:47:9d:f2:6a:a3:5f:a0:8b:62:bd:0a: 0f:d1:79:9c:81:90:67:87:c9:09:4b:1b:fb:69:2d:ec:55:bf: e9:ef:58:ec:b3:ad:42:57:50:ac:72:3f:ce:20:0c:5a:5c:5f: 32:a2:9a:1c:38:90:8f:94:c3:66:b2:77:4b:81:a0:75:fd:0a: 8b:6a:11:2a:78:10:25:2d:c7:fa:5c:21:ca:cc:ce:1c:b9:9e: f5:7e:ae:2d:d9:d4:ba:07:eb:5d:61:10:4b:55:35:aa:0c:6d: af:71:1f:58:e8:7a:0b:32:db:65:1c:2e:a0:d2:3e:41:1b:c4: 6f:8a:9a:01:80:f0:2e:0e:42:8d:1f:43:b5:ec:81:1d:d6:0e: 73:93:9b:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE46ZJ/9GVNt38a/guVnPzJVBGuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBMzYzOERBNTYyNTA1Njk4QjkyNEUxNzMyODFFNDYz NTlCMTYxNzAeFw0yNjA2MDIxMTAzNDlaFw0yNjA2MDMxNDE4NDlaMDMxMTAvBgNV BAMTKEIzQjBFNjBCRTI2N0EzNDE3NTBCRDBDRjEwQTMxRUU0NjlERTI4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylt1n45KVFcmLD5EXTKBZyZN4 Q6D9sxXbm0NWHpp2PYeC9arBkkV2ynqPHtPgNes08Ag4Vo8YmfTH6kCE3OjapMqj qikLsNVeacdWAnkNyFTvbhWTaU0IrTYi/zR1AlwIHzlY4rYXlXR1b6mjBuBu8h3t PqmIGy5QLzea3Hv1Pd41SgnaijwV4IQqsDVKJLjzwKfDSCY5fbWVgZ5ruBavStcU 6AZzvskN+Kjd6OMR/Yca6PlmlMheWaJg1WLEGcklSjDvg6jBWssqdYrHY1y5mRXT 4w6hlprS+YXvycXqhcSSeLHqfXEXVTvVpaL0VXpaiaq47M426scgsy840EudAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs7DmC+Jno0F1C9DPEKMe5GneKIowHwYDVR0j BBgwFoAU+6NjjaViUFaYuSThcygeRjWbFhcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDUwMWNkZjktNTJlMS00Yzk4LTlhYjMtYWZiNzBmYWMzNzdjLzAvRkJBMzYzOERB NTYyNTA1Njk4QjkyNEUxNzMyODFFNDYzNTlCMTYxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQkEzNjM4REE1NjI1MDU2OThCOTI0RTE3MzI4MUU0NjM1OUIx NjE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDUwMWNkZjktNTJlMS00Yzk4LTlh YjMtYWZiNzBmYWMzNzdjLzAvRkJBMzYzOERBNTYyNTA1Njk4QjkyNEUxNzMyODFF NDYzNTlCMTYxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPrIAg6m+SsptzW83RIkmsXvOx/KGywwXMQ 9buDcScnieRgGHHB4NyVkKlUzcUOGiFjxCbaB5C9Srbsl53fnDPfvR+RJdz1pUMI E5oo7d7q63lv+2GEi3iEq0pORG+uz9he7Unh7d/8qCOvjj3+U40GbcJHnfJqo1+g i2K9Cg/ReZyBkGeHyQlLG/tpLexVv+nvWOyzrUJXUKxyP84gDFpcXzKimhw4kI+U w2ayd0uBoHX9CotqESp4ECUtx/pcIcrMzhy5nvV+ri3Z1LoH611hEEtVNaoMba9x H1joegsy22UcLqDSPkEbxG+KmgGA8C4OQo0fQ7XsgR3WDnOTmxU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:49:42 2026 by rpki-client