$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft File: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft (raw, json) Hash identifier: Z1dAsQqcEflK8tBpJoUVyEBABMyneXGIBvRLhDY/nt4= Subject key identifier: 52:BB:7E:FF:9D:29:E8:3B:9A:4D:B5:AD:DB:A1:42:C9:20:18:F4:50 Authority key identifier: FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE Certificate issuer: /CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE Certificate serial: 111DF6BED13830C15A63B311BDFB989D5A6B681F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft Manifest number: EC Signing time: Sun 25 Oct 2026 15:36:05 +0000 Manifest this update: Sun 25 Oct 2026 15:31:05 +0000 Manifest next update: Mon 26 Oct 2026 16:31:05 +0000 Files and hashes: 1: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl (hash: oGqG50mrnqKORzvTQliS3HNJrHKsNrKm/cHXvyr2Z5k=) 2: 3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa (hash: mr+ohZ4gsNxXowfdM8XgtzD25meDndV+/hmBLAjXpzo=) 3: 3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa (hash: 3NdyDC+1ZO5sttCVKzm0UcFCITwWVerR5FdVYXY26PA=) 4: 3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa (hash: 68j/2R3Ewk4p7TN+xLCiDv2//M/vL0ynXYOYWgxaiD4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1d:f6:be:d1:38:30:c1:5a:63:b3:11:bd:fb:98:9d:5a:6b:68:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE Validity Not Before: Oct 25 15:31:05 2026 GMT Not After : Oct 26 16:31:05 2026 GMT Subject: CN=52BB7EFF9D29E83B9A4DB5ADDBA142C92018F450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:de:67:22:c4:71:98:94:97:11:f5:4d:6f:ac: e0:b5:89:59:a5:f5:d7:bd:5b:f9:66:fa:43:cf:ee: 6b:d6:93:94:18:e4:65:9c:4b:b0:fb:bc:46:5d:c7: ff:a7:4a:70:b3:9a:ee:0d:0c:d2:73:37:32:38:3a: 79:89:00:89:a6:9b:d3:ee:c1:4e:b4:dc:f1:7e:79: 6c:34:2d:97:b5:89:af:6e:0b:05:d8:ed:9c:8a:cd: 40:88:70:7d:b0:09:f3:2f:9a:72:21:bb:b3:3f:1c: d7:1e:ea:d5:87:3f:21:90:3e:47:a5:dc:10:43:65: a5:c5:1b:23:37:ab:ab:3a:62:dc:d8:34:c0:b1:cc: 78:70:57:4b:6f:6e:9c:ae:47:e8:a4:cf:72:1a:72: bb:a6:be:e7:3c:aa:35:9b:a9:c6:ae:02:41:fa:9c: 16:5d:97:60:ad:48:f2:e1:a5:0e:b0:f6:e7:a8:f1: 8d:6a:60:a9:a6:81:6e:7c:d4:bd:92:82:ac:a8:69: ae:7c:7c:2e:0e:19:e3:df:5c:db:d9:ed:85:33:b1: df:ff:8b:62:1e:21:81:54:da:fd:d6:51:58:0e:a6: f6:19:9a:27:c9:a3:4d:06:ef:4b:64:df:b9:df:c4: d1:58:f8:47:6c:49:b9:04:bb:f8:4f:66:08:df:1d: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BB:7E:FF:9D:29:E8:3B:9A:4D:B5:AD:DB:A1:42:C9:20:18:F4:50 X509v3 Authority Key Identifier: keyid:FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:25:b5:b5:4e:e2:84:c6:2f:42:31:a1:65:ef:dc:4b:4c:d3: 9a:21:52:97:52:98:b0:ab:49:65:6b:01:ab:93:43:00:cf:e9: aa:f8:1d:87:d6:13:38:cc:b3:40:14:4c:ef:48:6a:bf:fe:33: a2:13:c9:23:6f:88:d8:a0:be:f3:30:50:1b:e8:81:96:64:c8: 98:69:f4:67:f0:6c:23:ba:ad:df:ba:1e:11:d5:cb:fa:57:a2: c8:d7:d6:43:c8:01:9c:02:5f:42:77:1d:4d:52:fd:7c:e4:69: ae:6b:81:81:16:37:f4:97:0d:c1:99:5b:1b:7d:f6:b9:e1:b6: 62:39:11:72:1e:98:0d:1a:37:f3:da:a7:ae:9a:4e:f5:84:75: 7e:a4:0a:8b:64:82:0a:1e:bd:61:bd:fc:5c:97:6b:8f:3c:be: d6:c9:6d:7e:d2:b5:10:22:80:fd:c7:6d:af:f2:2d:9c:fc:d6: 3e:f7:dc:af:07:6a:84:5f:66:d8:ae:c1:dc:a2:b3:2e:6a:6f: 10:6f:31:eb:ea:ae:a4:04:ae:b1:a3:38:a8:aa:7c:98:8c:d2: c8:7f:c7:68:03:c5:35:74:a1:a9:da:d1:e7:8b:b0:83:a0:88: c1:f9:38:2f:e2:71:bb:1f:c6:36:bc:17:fd:ee:0b:75:4a:02: 80:f8:2e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUER32vtE4MMFaY7MRvfuYnVpraB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJFMUQ5NjJDREY1MEFFNEM4OERFRDA5N0M0RkQ1QzQw RUQxREFBRTAeFw0yNjEwMjUxNTMxMDVaFw0yNjEwMjYxNjMxMDVaMDMxMTAvBgNV BAMTKDUyQkI3RUZGOUQyOUU4M0I5QTREQjVBRERCQTE0MkM5MjAxOEY0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV3mcixHGYlJcR9U1vrOC1iVml 9de9W/lm+kPP7mvWk5QY5GWcS7D7vEZdx/+nSnCzmu4NDNJzNzI4OnmJAImmm9Pu wU603PF+eWw0LZe1ia9uCwXY7ZyKzUCIcH2wCfMvmnIhu7M/HNce6tWHPyGQPkel 3BBDZaXFGyM3q6s6YtzYNMCxzHhwV0tvbpyuR+ikz3Iacrumvuc8qjWbqcauAkH6 nBZdl2CtSPLhpQ6w9ueo8Y1qYKmmgW581L2Sgqyoaa58fC4OGePfXNvZ7YUzsd// i2IeIYFU2v3WUVgOpvYZmifJo00G70tk37nfxNFY+EdsSbkEu/hPZgjfHS3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUrt+/50p6DuaTbWt26FCySAY9FAwHwYDVR0j BBgwFoAU++HZYs31CuTIje0JfE/VxA7R2q4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZhNmNhMTItYjI4Ny00YWM3LTg3YjgtNmNkNzMzNTNlNjdmLzAvRkJFMUQ5NjJD REY1MEFFNEM4OERFRDA5N0M0RkQ1QzQwRUQxREFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQkUxRDk2MkNERjUwQUU0Qzg4REVEMDk3QzRGRDVDNDBFRDFE QUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvRkJFMUQ5NjJDREY1MEFFNEM4OERFRDA5N0M0RkQ1 QzQwRUQxREFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsltbVO4oTGL0IxoWXv3EtM05ohUpdSmLCr SWVrAauTQwDP6ar4HYfWEzjMs0AUTO9Iar/+M6ITySNviNigvvMwUBvogZZkyJhp 9GfwbCO6rd+6HhHVy/pXosjX1kPIAZwCX0J3HU1S/Xzkaa5rgYEWN/SXDcGZWxt9 9rnhtmI5EXIemA0aN/Pap66aTvWEdX6kCotkggoevWG9/FyXa488vtbJbX7StRAi gP3Hba/yLZz81j733K8HaoRfZtiuwdyisy5qbxBvMevqrqQErrGjOKiqfJiM0sh/ x2gDxTV0oana0eeLsIOgiMH5OC/icbsfxja8F/3uC3VKAoD4Lj4= -----END CERTIFICATE-----Generated at Sun Oct 25 18:47:34 2026 by rpki-client