$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft File: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft (raw, json) Hash identifier: xuJGj584GgmKd8oVZ2eb2+zYKO6NGQMLXuDAUILqssM= Subject key identifier: C8:AD:73:8B:9D:11:5D:24:55:11:E3:66:D0:45:B2:87:25:DC:9F:5A Authority key identifier: FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A Certificate issuer: /CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Certificate serial: 79F4879BDF7B14C97E30D17065D4EA9A604A798C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 08:15:48 +0000 Manifest this update: Mon 09 Nov 2026 08:10:48 +0000 Manifest next update: Tue 10 Nov 2026 11:01:48 +0000 Files and hashes: 1: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl (hash: noz7o65/+mIeAJn8SL3p3ql6RgD4RC5bSWU3VjzhUsQ=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: cg3Tr+ZR3IqdPJrclTSnhr/cIHYjQx4+i+x5ElcD2Yo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 11:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f4:87:9b:df:7b:14:c9:7e:30:d1:70:65:d4:ea:9a:60:4a:79:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Validity Not Before: Nov 9 08:10:48 2026 GMT Not After : Nov 10 11:01:48 2026 GMT Subject: CN=C8AD738B9D115D245511E366D045B28725DC9F5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:07:8b:17:dd:c0:69:c9:90:75:30:7a:3a: d2:4d:0a:15:ae:3e:22:32:9c:ee:2b:6b:3e:6d:26: cb:ed:28:68:6b:ae:e6:a0:60:e4:d4:64:32:22:00: 1d:26:ff:fb:38:8b:87:cf:3c:86:a2:c1:95:54:d5: 57:d9:00:f7:33:f4:33:68:09:7a:c6:c7:bb:61:d0: ba:df:a7:a4:c8:2c:07:dc:dc:4c:de:dd:b3:7d:19: 8f:17:68:f5:bf:72:60:59:50:e0:3c:8b:b8:65:63: 54:7c:99:04:77:47:e4:93:3a:5d:71:bb:57:00:f4: 7c:00:30:25:8c:f2:3e:a2:b1:5e:ba:c2:1f:ed:5d: a0:c1:af:55:d1:76:30:30:49:d5:35:da:53:b2:08: 07:47:47:8f:53:db:41:88:a3:52:a0:5f:96:b2:5a: 44:79:44:73:41:62:48:b5:04:04:72:2b:f9:95:5f: 2c:12:ba:ba:47:1a:82:97:62:b9:42:c4:27:6b:19: 72:5b:fa:02:98:1d:d2:a5:45:30:32:77:3b:b7:63: 8c:f9:d8:6b:33:5d:cd:96:83:69:b7:d4:8b:14:50: 6b:0c:51:e0:15:a9:c5:fe:4e:72:bf:98:fb:fd:f5: a4:f0:9a:3a:8d:5a:37:25:e7:0a:f6:85:ed:d0:06: c4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AD:73:8B:9D:11:5D:24:55:11:E3:66:D0:45:B2:87:25:DC:9F:5A X509v3 Authority Key Identifier: keyid:FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1b:d4:53:6a:40:73:58:80:f3:1e:38:81:ab:b8:80:c1:74: be:d8:0f:13:54:fc:75:04:4f:51:8f:4f:97:7c:70:00:d1:3f: 89:c8:84:1b:a6:0c:32:eb:79:6d:e2:ca:76:15:55:b1:d8:25: c6:25:a3:34:01:52:be:1e:72:1e:b4:47:cf:d2:48:cc:41:59: 4f:a6:51:42:03:ec:b9:0e:7d:80:4a:91:99:2f:9b:70:8b:29: 58:f3:65:61:ec:0e:14:73:3b:75:6f:be:64:9d:12:ed:cd:6f: 1e:04:88:b4:7f:f9:53:59:88:47:b1:3a:09:63:f1:c9:01:f0: 7d:d4:16:77:4f:fb:47:a7:38:7e:37:eb:8a:3e:5e:21:c1:c4: e9:56:fa:37:92:5b:f8:22:87:c2:80:b9:5b:f3:40:d0:20:f0: f7:bc:13:62:17:86:8c:da:e0:f5:54:4e:6c:c4:52:6e:39:9f: 30:53:c2:a8:02:0f:49:d5:6d:59:f9:da:0f:69:10:a6:aa:91: 10:90:77:ad:f8:60:a9:aa:2c:ff:11:3f:3b:53:ae:04:81:83: 0c:36:66:27:f5:54:f6:5f:bb:df:d7:8c:95:21:7b:cc:0b:3f: af:79:d9:4c:ca:c1:66:ff:a5:79:71:13:94:b2:98:2a:6a:9d: f1:32:33:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefSHm997FMl+MNFwZdTqmmBKeYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRjM4OUJDNEY1QzZERkIwRjBBQzUxQzE2RTZBQ0E0 N0Y5QzAyQTAeFw0yNjExMDkwODEwNDhaFw0yNjExMTAxMTAxNDhaMDMxMTAvBgNV BAMTKEM4QUQ3MzhCOUQxMTVEMjQ1NTExRTM2NkQwNDVCMjg3MjVEQzlGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGQeLF93AacmQdTB6OtJNChWu PiIynO4raz5tJsvtKGhrruagYOTUZDIiAB0m//s4i4fPPIaiwZVU1VfZAPcz9DNo CXrGx7th0Lrfp6TILAfc3Eze3bN9GY8XaPW/cmBZUOA8i7hlY1R8mQR3R+STOl1x u1cA9HwAMCWM8j6isV66wh/tXaDBr1XRdjAwSdU12lOyCAdHR49T20GIo1KgX5ay WkR5RHNBYki1BARyK/mVXywSurpHGoKXYrlCxCdrGXJb+gKYHdKlRTAydzu3Y4z5 2GszXc2Wg2m31IsUUGsMUeAVqcX+TnK/mPv99aTwmjqNWjcl5wr2he3QBsQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyK1zi50RXSRVEeNm0EWyhyXcn1owHwYDVR0j BBgwFoAU+x84m8T1xt+w8KxRwW5qykf5wCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5MTNmYTEtMzNhZS00ZTMzLWJiZTItODFiZDlmMDNjODRiLzAvRkIxRjM4OUJD NEY1QzZERkIwRjBBQzUxQzE2RTZBQ0E0N0Y5QzAyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjFGMzg5QkM0RjVDNkRGQjBGMEFDNTFDMTZFNkFDQTQ3RjlD MDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvRkIxRjM4OUJDNEY1QzZERkIwRjBBQzUxQzE2RTZB Q0E0N0Y5QzAyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIb1FNqQHNYgPMeOIGruIDBdL7YDxNU/HUE T1GPT5d8cADRP4nIhBumDDLreW3iynYVVbHYJcYlozQBUr4ech60R8/SSMxBWU+m UUID7LkOfYBKkZkvm3CLKVjzZWHsDhRzO3VvvmSdEu3Nbx4EiLR/+VNZiEexOglj 8ckB8H3UFndP+0enOH4364o+XiHBxOlW+jeSW/gih8KAuVvzQNAg8Pe8E2IXhoza 4PVUTmzEUm45nzBTwqgCD0nVbVn52g9pEKaqkRCQd634YKmqLP8RPztTrgSBgww2 Zif1VPZfu9/XjJUhe8wLP6952UzKwWb/pXlxE5SymCpqnfEyM8E= -----END CERTIFICATE-----Generated at Tue Nov 10 05:02:48 2026 by rpki-client