$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft File: FB3286A3734F366E27845180AD985879147BEA5E.mft (raw, json) Hash identifier: BfwvRkHLgdz4FjCAwbTKMmoW5DAEyM1KeLFiEeISbg8= Subject key identifier: 93:40:E2:EF:DA:22:BD:1F:A6:6C:97:3A:06:60:1C:8E:DA:8E:55:F9 Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E Certificate issuer: /CN=FB3286A3734F366E27845180AD985879147BEA5E Certificate serial: 12ADFC39F1440FF7392FAC96FCC7D41EB6FC38C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:07:17 +0000 Manifest this update: Thu 17 Sep 2026 07:02:17 +0000 Manifest next update: Fri 18 Sep 2026 08:55:17 +0000 Files and hashes: 1: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: LQLPTnxAiTCFL6ZmWkZjMD4eo5v053wknOPM5ftHnJk=) 2: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: 27HB+moGW931DJ3lKZUVs+RCefOnlzQL4giJYO55G7A=) 3: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: JUZB6P5kO+Db3k9YCVP/aQyPW9NErekyd7f5TZeRyDM=) 4: FB3286A3734F366E27845180AD985879147BEA5E.crl (hash: SB5h+REMgat0Ki4H8bFKcfTIIMENEjj67aYHN4MI8TE=) 5: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: vrQysHXSDOYVY5vPGR7dw/5TLODMWl8YiVoK5Waal3c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ad:fc:39:f1:44:0f:f7:39:2f:ac:96:fc:c7:d4:1e:b6:fc:38:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E Validity Not Before: Sep 17 07:02:17 2026 GMT Not After : Sep 18 08:55:17 2026 GMT Subject: CN=9340E2EFDA22BD1FA66C973A06601C8EDA8E55F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:da:e3:76:ea:8b:d1:c2:3d:86:af:b6:52:51: 00:d7:19:ad:cf:6f:76:f3:8f:06:ef:a2:26:09:ad: 43:e4:ba:05:dc:b8:75:7c:58:9e:13:14:e8:bd:32: 4d:55:38:f7:a7:7b:be:14:49:87:ab:d5:58:84:4e: cf:76:48:e5:e6:b1:5f:be:a8:fc:29:4a:83:e2:99: a1:28:5a:ea:6e:93:5e:20:e3:c9:45:15:73:82:38: d1:d9:c7:3a:01:1e:0e:a7:cc:ee:42:81:9e:dc:dc: 82:4e:b8:0a:91:bf:e3:93:ff:83:1f:e2:5b:22:71: 75:e0:3f:76:c6:56:b8:55:a3:dd:d5:df:20:90:c4: fc:d6:6f:19:13:df:24:80:bf:23:12:18:9c:7c:7c: 88:72:cc:20:fb:88:60:33:2b:fc:2f:41:ed:3e:e8: d0:45:8b:38:30:3d:71:61:31:06:1e:cc:04:2d:3d: d8:6f:98:66:c5:41:e9:2d:69:ee:fd:14:e4:0e:e9: 6d:40:17:01:00:54:ac:25:c6:4d:32:87:67:15:58: 8e:bf:83:40:48:63:36:2d:0e:e7:c5:c7:b6:d4:83: 6f:13:ce:b8:59:9d:2b:2d:6c:3d:d9:40:3d:0c:6f: f9:54:e4:c2:1d:50:b6:43:d7:90:67:b6:4e:f7:fa: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:40:E2:EF:DA:22:BD:1F:A6:6C:97:3A:06:60:1C:8E:DA:8E:55:F9 X509v3 Authority Key Identifier: keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9d:e4:70:9d:ea:0d:a2:a4:7d:74:e6:28:3f:a9:6f:20:bc: 33:29:cf:7f:1e:58:93:86:c7:e3:c8:b9:eb:12:d9:06:f3:d3: 46:03:bf:49:7c:ad:0a:6c:57:2b:76:53:27:7d:d3:c7:b6:72: d4:fc:7d:8c:3d:31:d8:a3:0f:50:c6:ed:a6:4a:50:b6:1c:9d: bd:d7:6a:2f:ff:28:ad:c4:07:87:8d:ae:43:58:fe:8b:df:e3: 91:65:00:3f:de:a4:83:07:15:71:04:34:fd:71:a1:a8:f0:47: 4d:fe:7f:a1:e7:81:3c:cc:e0:12:4b:6d:7d:9a:02:a9:ad:a3: f7:74:97:5e:36:79:a9:62:af:0d:9a:50:0f:51:eb:f1:2d:bd: 42:5f:e5:19:ce:43:1b:e0:3b:21:cc:20:48:13:2b:49:36:db: 5e:42:54:c4:09:3f:6d:b3:17:d3:48:be:ef:6f:a9:3c:4c:22: 60:21:e0:5d:24:eb:a0:be:1d:ae:7f:2b:a7:b5:e4:19:e9:95: 0e:69:f5:85:a3:85:04:d6:13:d5:d7:58:60:b1:7d:31:4f:0c: c3:d9:06:d0:a3:90:c2:66:bc:94:ec:de:ed:6a:0f:b8:92:cb: 0e:ff:50:b7:34:c4:fe:a2:c8:0d:b1:e1:e9:66:d1:98:f6:73: 16:ae:fa:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEq38OfFED/c5L6yW/MfUHrb8OMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx NDdCRUE1RTAeFw0yNjA5MTcwNzAyMTdaFw0yNjA5MTgwODU1MTdaMDMxMTAvBgNV BAMTKDkzNDBFMkVGREEyMkJEMUZBNjZDOTczQTA2NjAxQzhFREE4RTU1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2uN26ovRwj2Gr7ZSUQDXGa3P b3bzjwbvoiYJrUPkugXcuHV8WJ4TFOi9Mk1VOPene74USYer1ViETs92SOXmsV++ qPwpSoPimaEoWupuk14g48lFFXOCONHZxzoBHg6nzO5CgZ7c3IJOuAqRv+OT/4Mf 4lsicXXgP3bGVrhVo93V3yCQxPzWbxkT3ySAvyMSGJx8fIhyzCD7iGAzK/wvQe0+ 6NBFizgwPXFhMQYezAQtPdhvmGbFQektae79FOQO6W1AFwEAVKwlxk0yh2cVWI6/ g0BIYzYtDufFx7bUg28TzrhZnSstbD3ZQD0Mb/lU5MIdULZD15Bntk73+q4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk0Di79oivR+mbJc6BmAcjtqOVfkwHwYDVR0j BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3 MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4 NzkxNDdCRUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqd5HCd6g2ipH105ig/qW8gvDMpz38eWJOG x+PIuesS2Qbz00YDv0l8rQpsVyt2Uyd908e2ctT8fYw9MdijD1DG7aZKULYcnb3X ai//KK3EB4eNrkNY/ovf45FlAD/epIMHFXEENP1xoajwR03+f6HngTzM4BJLbX2a Aqmto/d0l142ealirw2aUA9R6/EtvUJf5RnOQxvgOyHMIEgTK0k2215CVMQJP22z F9NIvu9vqTxMImAh4F0k66C+Ha5/K6e15BnplQ5p9YWjhQTWE9XXWGCxfTFPDMPZ BtCjkMJmvJTs3u1qD7iSyw7/ULc0xP6iyA2x4elm0Zj2cxau+lw= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:58 2026 by rpki-client