$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft File: FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft (raw, json) Hash identifier: jk5cGGGSFpSje/DzGmTswP4x+k/4zD16JNHhuitW4uA= Subject key identifier: C1:B9:16:EB:77:04:6A:AF:C2:4A:35:56:5A:33:AF:9B:6B:9C:A1:01 Authority key identifier: FB:04:12:AD:F5:C0:AF:38:82:82:05:67:1C:38:D8:AE:99:F5:70:7A Certificate issuer: /CN=FB0412ADF5C0AF38828205671C38D8AE99F5707A Certificate serial: 6E1673329A190871E47B26D30F12690E16B5EF07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 03:12:27 +0000 Manifest this update: Thu 17 Sep 2026 03:07:27 +0000 Manifest next update: Fri 18 Sep 2026 03:31:27 +0000 Files and hashes: 1: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: uy/OITxgQ9Y741d8HOaHJYXKJTvlD+OGefENVoqqTDs=) 2: FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl (hash: XREH5gZhldg0W5Usav6q/ALgROTNrbOOg9oBxYvde6s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:16:73:32:9a:19:08:71:e4:7b:26:d3:0f:12:69:0e:16:b5:ef:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB0412ADF5C0AF38828205671C38D8AE99F5707A Validity Not Before: Sep 17 03:07:27 2026 GMT Not After : Sep 18 03:31:27 2026 GMT Subject: CN=C1B916EB77046AAFC24A35565A33AF9B6B9CA101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:3b:c3:3c:1c:fd:9a:8a:ff:ff:ff:35:7e: cd:b6:63:6b:eb:f0:93:0b:72:81:cd:d5:74:86:3d: 1e:67:b1:3c:ad:c0:12:90:82:cb:c1:5e:a6:8f:29: f1:5f:f6:09:e2:70:e6:e4:31:c9:2d:1e:0e:40:6a: 98:3d:df:48:1f:b0:43:64:0a:3d:d9:80:f4:3c:a8: a8:01:53:ab:ca:a6:77:e9:3b:d2:ef:f8:c9:a6:bb: 01:86:b9:b4:fd:19:76:82:50:68:82:97:80:0f:98: 3f:89:e3:83:4c:14:7f:dc:19:9b:af:89:a0:18:27: 7e:13:38:83:65:32:80:af:c7:26:c2:36:47:00:d7: 65:13:cf:32:f2:d2:19:57:36:f6:d3:02:2b:fd:b1: d5:6d:1e:fe:df:ff:2b:1c:40:98:5b:a8:c2:51:c8: 39:4d:d1:43:4b:d0:fc:49:a3:08:82:e8:2b:49:34: 50:24:ee:ca:b6:2c:ea:3e:25:29:0c:73:e1:5b:55: f4:52:0e:4a:20:b2:00:45:37:09:9b:8c:23:c8:5e: 16:de:77:2b:11:43:0b:2b:d3:6a:f9:c5:e5:bd:29: 9b:d4:1e:bf:af:e2:75:9d:c8:c2:a7:d5:94:9c:50: 9f:04:88:43:e8:a9:cc:de:ec:35:66:d1:f6:55:32: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B9:16:EB:77:04:6A:AF:C2:4A:35:56:5A:33:AF:9B:6B:9C:A1:01 X509v3 Authority Key Identifier: keyid:FB:04:12:AD:F5:C0:AF:38:82:82:05:67:1C:38:D8:AE:99:F5:70:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fe:d8:4f:10:39:f1:14:08:b4:50:29:b9:21:3e:11:26:88: a1:07:d2:a8:4f:ee:8c:bf:9d:70:4c:6a:4c:24:7b:10:28:6b: f9:60:af:be:4f:09:1f:34:91:34:b7:a7:4a:95:3e:5f:87:68: ba:9f:dc:55:22:80:a9:47:9f:91:01:ef:e6:b4:8d:27:4d:a9: 59:4e:26:b5:dc:35:90:04:a0:05:fe:5c:af:37:df:c4:dd:65: f3:e9:11:81:b3:bb:13:b4:db:fb:ce:a9:4e:f6:d7:0a:80:f6: b3:f3:e1:02:f1:a5:f1:7d:04:f0:ee:5a:cd:c0:74:d9:19:09: 45:23:b3:2c:b6:34:a5:b8:8e:5d:48:db:97:57:a1:0c:18:d7: da:fe:d4:c5:f1:dc:f5:19:1b:83:7d:08:d6:c2:8a:dd:d2:8d: 97:c8:73:a8:03:e2:51:be:6b:b3:fc:2c:e5:44:60:0e:1e:bb: 83:72:e8:cc:be:c0:69:16:f5:ec:0c:93:c6:ca:75:86:ce:d8: 0a:06:40:00:2e:bf:90:d0:35:88:ec:2b:0a:a4:b2:d2:d9:bf: b7:84:1d:4c:10:fc:eb:9d:d6:b7:04:12:18:9d:e9:1b:e8:41: 39:86:ff:df:5c:0d:c9:e2:d7:86:34:d9:41:7b:16:9c:bf:f3: 50:26:9b:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhZzMpoZCHHkeybTDxJpDha17wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIwNDEyQURGNUMwQUYzODgyODIwNTY3MUMzOEQ4QUU5 OUY1NzA3QTAeFw0yNjA5MTcwMzA3MjdaFw0yNjA5MTgwMzMxMjdaMDMxMTAvBgNV BAMTKEMxQjkxNkVCNzcwNDZBQUZDMjRBMzU1NjVBMzNBRjlCNkI5Q0ExMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKYDvDPBz9mor///81fs22Y2vr 8JMLcoHN1XSGPR5nsTytwBKQgsvBXqaPKfFf9gnicObkMcktHg5Aapg930gfsENk Cj3ZgPQ8qKgBU6vKpnfpO9Lv+MmmuwGGubT9GXaCUGiCl4APmD+J44NMFH/cGZuv iaAYJ34TOINlMoCvxybCNkcA12UTzzLy0hlXNvbTAiv9sdVtHv7f/yscQJhbqMJR yDlN0UNL0PxJowiC6CtJNFAk7sq2LOo+JSkMc+FbVfRSDkogsgBFNwmbjCPIXhbe dysRQwsr02r5xeW9KZvUHr+v4nWdyMKn1ZScUJ8EiEPoqcze7DVm0fZVMtJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwbkW63cEaq/CSjVWWjOvm2ucoQEwHwYDVR0j BBgwFoAU+wQSrfXArziCggVnHDjYrpn1cHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjODkxZDctNGZjYy00NzcwLTgyZDQtMzY3Yjg3YmI1NTFlLzAvRkIwNDEyQURG NUMwQUYzODgyODIwNTY3MUMzOEQ4QUU5OUY1NzA3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQjA0MTJBREY1QzBBRjM4ODI4MjA1NjcxQzM4RDhBRTk5RjU3 MDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRkIwNDEyQURGNUMwQUYzODgyODIwNTY3MUMzOEQ4 QUU5OUY1NzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL+2E8QOfEUCLRQKbkhPhEmiKEH0qhP7oy/ nXBMakwkexAoa/lgr75PCR80kTS3p0qVPl+HaLqf3FUigKlHn5EB7+a0jSdNqVlO JrXcNZAEoAX+XK8338TdZfPpEYGzuxO02/vOqU721wqA9rPz4QLxpfF9BPDuWs3A dNkZCUUjsyy2NKW4jl1I25dXoQwY19r+1MXx3PUZG4N9CNbCit3SjZfIc6gD4lG+ a7P8LOVEYA4eu4Ny6My+wGkW9ewMk8bKdYbO2AoGQAAuv5DQNYjsKwqkstLZv7eE HUwQ/Oud1rcEEhid6RvoQTmG/99cDcni14Y02UF7Fpy/81Amm1Y= -----END CERTIFICATE-----Generated at Thu Sep 17 10:57:19 2026 by rpki-client