$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft File: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft (raw, json) Hash identifier: BkRCZZeKi27LS2dlPZn4XkviN7QGvFgcto/ugUSuWF0= Subject key identifier: D3:BD:CE:99:82:A5:10:A1:50:15:76:0A:E4:72:07:52:7C:B8:12:4F Authority key identifier: FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A Certificate issuer: /CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Certificate serial: 07AEF43D01EF1F478285C2FDD1A4A56B983B3E41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft Manifest number: EB Signing time: Sat 24 Oct 2026 16:34:54 +0000 Manifest this update: Sat 24 Oct 2026 16:29:54 +0000 Manifest next update: Sun 25 Oct 2026 18:31:54 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: cg3Tr+ZR3IqdPJrclTSnhr/cIHYjQx4+i+x5ElcD2Yo=) 2: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl (hash: GFGAzDs1hOM6KFIVaE1BxnKglecqAACuMweA2WmF/pk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 18:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ae:f4:3d:01:ef:1f:47:82:85:c2:fd:d1:a4:a5:6b:98:3b:3e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Validity Not Before: Oct 24 16:29:54 2026 GMT Not After : Oct 25 18:31:54 2026 GMT Subject: CN=D3BDCE9982A510A15015760AE47207527CB8124F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2f:0a:11:fe:cd:13:86:83:03:ff:0b:65:2f: 1d:e8:2e:09:60:da:b1:0f:09:54:4d:22:64:1b:5d: 26:c4:ff:ad:61:a2:e1:17:01:b1:be:54:03:6b:2d: 67:eb:87:cf:3f:f2:5c:27:f0:91:f0:f5:c8:3f:41: 26:88:2e:28:88:8c:42:14:14:cd:d7:d9:a6:01:0d: 81:99:19:af:e1:f9:2d:6c:7b:e5:92:e5:5f:3e:76: a9:c7:78:a4:cc:9c:b5:50:21:de:1b:fe:89:a1:d9: b9:31:77:d5:49:10:df:8d:c4:39:86:9a:df:03:79: 90:8f:ec:8b:b6:33:39:2b:d2:fd:e1:3b:14:fb:af: 89:28:50:c9:39:63:30:22:53:03:2f:ce:28:bb:54: 70:38:ad:61:e9:aa:f1:8d:f9:3f:69:e3:c7:1e:02: e7:e6:d6:9a:06:23:f7:20:a4:eb:ff:6d:e5:ad:2a: 1f:90:c7:3c:08:14:b8:de:d1:10:de:48:56:64:34: 8f:ee:cd:96:11:70:33:d8:1d:1a:3f:c6:28:e3:94: 6f:72:97:32:5a:20:66:b1:ce:a1:64:f8:ef:d6:68: 75:bc:53:27:90:66:47:1a:3c:a1:1e:aa:0a:71:be: e4:a0:56:b5:7e:89:1b:a4:c3:6d:bb:a6:c1:a0:2b: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BD:CE:99:82:A5:10:A1:50:15:76:0A:E4:72:07:52:7C:B8:12:4F X509v3 Authority Key Identifier: keyid:FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:24:f7:0f:0e:be:53:49:f0:de:26:a6:ae:e9:fb:3b:4a:c0: 9d:67:c7:e9:64:c5:fc:4e:04:b5:7e:ee:c6:2c:e1:9a:2d:55: 4b:13:3d:86:d2:4a:bd:60:c0:a3:be:6b:01:ad:2f:15:98:cd: ff:f5:2a:ae:1d:45:ef:0f:07:df:73:7e:19:1e:4a:2b:88:83: c3:1e:c7:12:15:3e:4a:f4:a6:3e:f3:e8:bf:fa:f0:b0:41:a5: 8e:fe:1a:cd:63:8b:99:0e:b8:42:c2:82:dc:40:2a:3e:0b:79: 6e:54:a4:10:bb:44:05:09:01:ab:74:44:60:69:31:1c:82:66: ed:51:0f:ec:11:e9:38:75:43:8e:bd:a1:30:83:bb:1e:03:df: 24:71:d6:e3:f4:55:7a:3f:66:70:65:9e:2b:57:b2:4e:01:32: 7c:83:fd:c9:42:a2:12:6b:fd:8e:66:bc:29:70:8d:ef:26:53: 56:fd:6b:3c:4e:57:aa:4a:40:66:16:3c:cb:60:09:e7:7d:13: 78:f2:e3:e8:f3:bd:b8:d4:b0:bf:c3:32:ea:c2:60:6c:1c:e4: 81:1b:27:cb:a5:8f:2e:f5:e4:55:de:25:be:ef:e8:02:16:da: 4d:f8:ff:d9:e1:b0:f3:af:c7:86:cf:58:f3:b3:13:1e:2b:eb: d7:f1:27:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB670PQHvH0eChcL90aSla5g7PkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRjM4OUJDNEY1QzZERkIwRjBBQzUxQzE2RTZBQ0E0 N0Y5QzAyQTAeFw0yNjEwMjQxNjI5NTRaFw0yNjEwMjUxODMxNTRaMDMxMTAvBgNV BAMTKEQzQkRDRTk5ODJBNTEwQTE1MDE1NzYwQUU0NzIwNzUyN0NCODEyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLwoR/s0ThoMD/wtlLx3oLglg 2rEPCVRNImQbXSbE/61houEXAbG+VANrLWfrh88/8lwn8JHw9cg/QSaILiiIjEIU FM3X2aYBDYGZGa/h+S1se+WS5V8+dqnHeKTMnLVQId4b/omh2bkxd9VJEN+NxDmG mt8DeZCP7Iu2Mzkr0v3hOxT7r4koUMk5YzAiUwMvzii7VHA4rWHpqvGN+T9p48ce Aufm1poGI/cgpOv/beWtKh+QxzwIFLje0RDeSFZkNI/uzZYRcDPYHRo/xijjlG9y lzJaIGaxzqFk+O/WaHW8UyeQZkcaPKEeqgpxvuSgVrV+iRukw227psGgK/+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU073OmYKlEKFQFXYK5HIHUny4Ek8wHwYDVR0j BBgwFoAU+x84m8T1xt+w8KxRwW5qykf5wCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5MTNmYTEtMzNhZS00ZTMzLWJiZTItODFiZDlmMDNjODRiLzAvRkIxRjM4OUJD NEY1QzZERkIwRjBBQzUxQzE2RTZBQ0E0N0Y5QzAyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjFGMzg5QkM0RjVDNkRGQjBGMEFDNTFDMTZFNkFDQTQ3RjlD MDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvRkIxRjM4OUJDNEY1QzZERkIwRjBBQzUxQzE2RTZB Q0E0N0Y5QzAyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgk9w8OvlNJ8N4mpq7p+ztKwJ1nx+lkxfxO BLV+7sYs4ZotVUsTPYbSSr1gwKO+awGtLxWYzf/1Kq4dRe8PB99zfhkeSiuIg8Me xxIVPkr0pj7z6L/68LBBpY7+Gs1ji5kOuELCgtxAKj4LeW5UpBC7RAUJAat0RGBp MRyCZu1RD+wR6Th1Q469oTCDux4D3yRx1uP0VXo/ZnBlnitXsk4BMnyD/clCohJr /Y5mvClwje8mU1b9azxOV6pKQGYWPMtgCed9E3jy4+jzvbjUsL/DMurCYGwc5IEb J8uljy715FXeJb7v6AIW2k34/9nhsPOvx4bPWPOzEx4r69fxJzI= -----END CERTIFICATE-----Generated at Sun Oct 25 06:05:09 2026 by rpki-client