$ rpki-client -vvf rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft File: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft (raw, json) Hash identifier: pR8aPoGHBfoo97kb/dBsboNF745gh9okzd8fjsD3IZ4= Subject key identifier: 65:2D:90:C6:AE:E9:08:E9:FB:D0:52:6D:A7:B7:6A:C3:6B:61:DE:15 Authority key identifier: FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE Certificate issuer: /CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE Certificate serial: 09610AFE4AE29132426C244BDFC62E0136688776 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 05:46:43 +0000 Manifest this update: Sat 20 Jun 2026 05:41:43 +0000 Manifest next update: Sun 21 Jun 2026 08:58:43 +0000 Files and hashes: 1: 3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa (hash: mr+ohZ4gsNxXowfdM8XgtzD25meDndV+/hmBLAjXpzo=) 2: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl (hash: nn3OFpLT727VOl67R2+L/rUUvst9fBqfzipOdN6yyxo=) 3: 3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa (hash: 68j/2R3Ewk4p7TN+xLCiDv2//M/vL0ynXYOYWgxaiD4=) 4: 3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa (hash: 3NdyDC+1ZO5sttCVKzm0UcFCITwWVerR5FdVYXY26PA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:61:0a:fe:4a:e2:91:32:42:6c:24:4b:df:c6:2e:01:36:68:87:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE Validity Not Before: Jun 20 05:41:43 2026 GMT Not After : Jun 21 08:58:43 2026 GMT Subject: CN=652D90C6AEE908E9FBD0526DA7B76AC36B61DE15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:87:87:a8:d7:58:ec:14:5c:aa:e1:98:d2: b2:d0:c9:41:1a:5a:a4:3e:fd:d1:d5:d0:7f:d3:0f: d2:1e:1a:54:2d:58:b6:f8:ad:31:a5:57:25:f2:2f: f2:77:ce:49:9d:ad:81:cd:a0:43:f5:cf:be:57:d9: af:e2:f2:7c:de:f9:bc:c1:ab:51:99:a3:3a:82:8b: f5:46:be:b5:98:d2:65:06:fe:b5:0f:50:5e:e6:1e: 83:5e:3f:a6:a3:73:2d:5a:9f:78:de:d0:f8:d7:82: 3b:28:17:49:92:29:e7:70:93:c7:37:03:b9:11:02: 69:8c:94:22:74:7c:9a:54:0f:c7:cf:e1:14:98:b9: dd:57:0f:ba:84:d6:1e:0b:a3:9e:60:21:cc:bc:a8: 35:b0:52:05:b3:90:6b:c7:af:8b:46:58:ee:53:a4: b0:60:b0:f4:dd:ad:0d:6d:5f:8e:41:d3:76:09:ed: a6:1a:ac:e3:8c:de:ef:0e:25:c6:06:11:57:3a:4d: aa:13:0c:f1:86:ed:af:d6:c0:60:50:7b:ae:db:26: 8a:90:fc:11:b4:79:3a:1e:9a:1a:0e:54:ee:8a:71: 2a:85:71:9f:7a:ee:de:d8:a6:60:d2:41:55:8a:67: 9e:d2:74:ba:7a:93:2a:16:24:5f:d5:1c:a3:f9:8a: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2D:90:C6:AE:E9:08:E9:FB:D0:52:6D:A7:B7:6A:C3:6B:61:DE:15 X509v3 Authority Key Identifier: keyid:FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:35:d0:6a:2e:13:b4:b1:e3:c2:54:1a:54:62:fd:35:ea:0b: 62:fc:06:94:9b:70:fb:a3:dd:34:66:15:7a:ab:fd:de:53:ee: bc:7c:63:be:bd:56:1f:8f:56:fd:b1:d0:93:18:3a:5a:e4:9a: dc:c5:c5:91:97:51:fa:34:f3:52:31:7b:07:da:c8:4b:20:ee: ca:fb:83:bb:6b:c6:be:1e:8e:50:a9:ab:69:d3:49:e0:2d:10: 98:67:c7:bf:0f:4f:51:97:85:dc:b1:9c:23:fb:59:ba:d2:26: 71:b6:50:e5:ec:5b:d1:38:2c:08:16:36:33:d5:04:82:8b:c0: 97:73:fb:a3:54:74:bb:43:46:bd:b3:71:b3:13:94:fa:06:37: 27:a1:2e:8e:ee:fd:8f:12:cf:62:e1:f0:0e:50:f4:34:53:27: 83:f6:c8:7a:e8:3d:a3:e4:37:91:f2:ca:7c:fd:bf:89:60:bf: 84:2e:df:ed:c3:7d:ef:93:29:7f:9c:36:8f:3c:f1:85:32:f1: 2f:b7:6a:a0:e4:09:f6:5a:c7:72:68:67:ba:2f:53:1b:06:87: 71:94:c3:84:e9:d3:24:4d:ab:7c:42:81:9f:e7:92:17:28:0f: 23:f8:dc:33:8e:27:9c:04:36:fb:47:77:97:87:e2:7f:0a:e3: a4:03:ab:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWEK/krikTJCbCRL38YuATZoh3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJFMUQ5NjJDREY1MEFFNEM4OERFRDA5N0M0RkQ1QzQw RUQxREFBRTAeFw0yNjA2MjAwNTQxNDNaFw0yNjA2MjEwODU4NDNaMDMxMTAvBgNV BAMTKDY1MkQ5MEM2QUVFOTA4RTlGQkQwNTI2REE3Qjc2QUMzNkI2MURFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqoeHqNdY7BRcquGY0rLQyUEa WqQ+/dHV0H/TD9IeGlQtWLb4rTGlVyXyL/J3zkmdrYHNoEP1z75X2a/i8nze+bzB q1GZozqCi/VGvrWY0mUG/rUPUF7mHoNeP6ajcy1an3je0PjXgjsoF0mSKedwk8c3 A7kRAmmMlCJ0fJpUD8fP4RSYud1XD7qE1h4Lo55gIcy8qDWwUgWzkGvHr4tGWO5T pLBgsPTdrQ1tX45B03YJ7aYarOOM3u8OJcYGEVc6TaoTDPGG7a/WwGBQe67bJoqQ /BG0eToemhoOVO6KcSqFcZ967t7YpmDSQVWKZ57SdLp6kyoWJF/VHKP5ininAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZS2Qxq7pCOn70FJtp7dqw2th3hUwHwYDVR0j BBgwFoAU++HZYs31CuTIje0JfE/VxA7R2q4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZhNmNhMTItYjI4Ny00YWM3LTg3YjgtNmNkNzMzNTNlNjdmLzAvRkJFMUQ5NjJD REY1MEFFNEM4OERFRDA5N0M0RkQ1QzQwRUQxREFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQkUxRDk2MkNERjUwQUU0Qzg4REVEMDk3QzRGRDVDNDBFRDFE QUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvRkJFMUQ5NjJDREY1MEFFNEM4OERFRDA5N0M0RkQ1 QzQwRUQxREFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACk10GouE7Sx48JUGlRi/TXqC2L8BpSbcPuj 3TRmFXqr/d5T7rx8Y769Vh+PVv2x0JMYOlrkmtzFxZGXUfo081IxewfayEsg7sr7 g7trxr4ejlCpq2nTSeAtEJhnx78PT1GXhdyxnCP7WbrSJnG2UOXsW9E4LAgWNjPV BIKLwJdz+6NUdLtDRr2zcbMTlPoGNyehLo7u/Y8Sz2Lh8A5Q9DRTJ4P2yHroPaPk N5Hyynz9v4lgv4Qu3+3Dfe+TKX+cNo888YUy8S+3aqDkCfZax3JoZ7ovUxsGh3GU w4Tp0yRNq3xCgZ/nkhcoDyP43DOOJ5wENvtHd5eH4n8K46QDq0w= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:19 2026 by rpki-client