$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft File: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft (raw, json) Hash identifier: QsDD2d8PEZiKJQ1ezM0qxh7Z5Rx5HWLfvqDojUN6bhY= Subject key identifier: BF:B1:1E:72:35:81:2C:8F:CC:42:91:DD:9A:78:DB:C6:D9:29:AC:E7 Authority key identifier: FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A Certificate issuer: /CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Certificate serial: 36521B19CE70F5447204596E74BCC7619C776493 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft Manifest number: BF Signing time: Mon 21 Sep 2026 09:48:46 +0000 Manifest this update: Mon 21 Sep 2026 09:43:46 +0000 Manifest next update: Tue 22 Sep 2026 12:11:46 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: cg3Tr+ZR3IqdPJrclTSnhr/cIHYjQx4+i+x5ElcD2Yo=) 2: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl (hash: 5oS7ILJTl3xt0p22zd7kVUw/YqSfo22ukfQT8ahStR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:52:1b:19:ce:70:f5:44:72:04:59:6e:74:bc:c7:61:9c:77:64:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Validity Not Before: Sep 21 09:43:46 2026 GMT Not After : Sep 22 12:11:46 2026 GMT Subject: CN=BFB11E7235812C8FCC4291DD9A78DBC6D929ACE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:03:35:20:e8:86:c9:fd:b5:ec:45:39:73:27: 4e:27:8c:9f:92:ec:4c:52:6d:ca:b5:74:6a:17:0d: 9e:23:c2:85:8b:cc:84:00:56:bf:df:aa:24:d5:bb: ee:3f:dc:e8:da:ef:17:87:42:f1:ed:39:96:69:ed: a3:84:9b:fc:59:7c:40:12:02:09:05:7d:9b:90:70: 60:9c:34:2b:52:61:14:89:fa:6d:cf:52:d7:6a:79: ae:05:17:70:02:3f:4b:4b:0d:3d:36:4f:41:ca:ec: a7:b0:81:4a:47:23:fa:a8:8d:b3:b6:6f:eb:74:a4: 98:e9:c1:46:00:cc:c6:01:7d:96:77:40:dc:7a:9f: 9f:b1:08:bf:fb:62:cb:0f:c2:95:94:1d:aa:e0:ef: f3:6a:ac:82:26:0e:70:ff:2c:b7:49:48:bd:5a:85: 98:b2:d3:6a:d7:be:70:b4:36:f8:f9:5e:a9:01:7a: 01:fd:f8:69:10:fe:83:ae:30:00:7f:07:69:7b:2d: d3:ea:fb:dd:0d:05:10:40:1a:6a:cc:47:c9:1e:57: b7:d3:15:53:82:86:de:c0:f7:f4:9f:75:59:38:4d: 06:7b:e0:fa:8f:3e:da:d0:65:18:4c:eb:8f:bf:6a: cc:89:8b:e8:7b:a9:55:c0:1a:8e:8f:84:50:f3:dd: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B1:1E:72:35:81:2C:8F:CC:42:91:DD:9A:78:DB:C6:D9:29:AC:E7 X509v3 Authority Key Identifier: keyid:FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fc:1d:a8:2d:32:0d:1a:e8:20:af:bd:cb:2e:ef:93:21:48: 7e:59:de:7f:ed:be:34:50:cf:ce:6e:58:a8:ca:1b:f2:77:ca: 34:fa:3a:b4:9a:03:6e:97:be:09:80:73:99:ce:bd:f3:2c:d9: 0f:58:fc:d0:b6:76:ae:fa:ac:a5:3b:63:16:85:36:b0:c2:58: 21:c5:3b:a4:ad:e3:b1:8c:e1:2d:4c:1a:6b:d4:5a:ac:f7:53: a3:48:c6:24:62:02:7e:f9:cb:53:d1:82:8d:4a:2f:6b:39:5d: 5a:57:e3:4f:30:55:6a:d3:95:ff:d9:31:99:79:33:ba:2e:d2: 11:45:ce:68:be:bd:cf:ec:d0:3a:09:2e:21:c9:49:11:85:e0: 35:f1:60:36:b5:dc:59:02:af:95:cb:9b:bc:9a:0f:ca:bd:3d: 1d:a5:e6:1c:72:88:1c:e6:24:c4:b7:77:1d:d0:b8:f6:d3:16: 7d:32:b0:67:ab:8f:51:7f:7e:ac:de:31:4a:dd:68:20:1d:76: c7:e3:60:07:4b:5c:85:5d:89:47:23:aa:5e:36:aa:4b:37:95: 7c:5f:a3:b9:b2:00:09:65:89:f7:cb:3f:77:c3:e2:0b:b2:a7: f6:ed:21:6c:dc:d7:19:8b:cd:96:80:96:28:22:bb:15:01:ee: 7c:2e:0a:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNlIbGc5w9URyBFludLzHYZx3ZJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRjM4OUJDNEY1QzZERkIwRjBBQzUxQzE2RTZBQ0E0 N0Y5QzAyQTAeFw0yNjA5MjEwOTQzNDZaFw0yNjA5MjIxMjExNDZaMDMxMTAvBgNV BAMTKEJGQjExRTcyMzU4MTJDOEZDQzQyOTFERDlBNzhEQkM2RDkyOUFDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWAzUg6IbJ/bXsRTlzJ04njJ+S 7ExSbcq1dGoXDZ4jwoWLzIQAVr/fqiTVu+4/3Oja7xeHQvHtOZZp7aOEm/xZfEAS AgkFfZuQcGCcNCtSYRSJ+m3PUtdqea4FF3ACP0tLDT02T0HK7KewgUpHI/qojbO2 b+t0pJjpwUYAzMYBfZZ3QNx6n5+xCL/7YssPwpWUHarg7/NqrIImDnD/LLdJSL1a hZiy02rXvnC0Nvj5XqkBegH9+GkQ/oOuMAB/B2l7LdPq+90NBRBAGmrMR8keV7fT FVOCht7A9/SfdVk4TQZ74PqPPtrQZRhM64+/asyJi+h7qVXAGo6PhFDz3bZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv7EecjWBLI/MQpHdmnjbxtkprOcwHwYDVR0j BBgwFoAU+x84m8T1xt+w8KxRwW5qykf5wCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5MTNmYTEtMzNhZS00ZTMzLWJiZTItODFiZDlmMDNjODRiLzAvRkIxRjM4OUJD NEY1QzZERkIwRjBBQzUxQzE2RTZBQ0E0N0Y5QzAyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjFGMzg5QkM0RjVDNkRGQjBGMEFDNTFDMTZFNkFDQTQ3RjlD MDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvRkIxRjM4OUJDNEY1QzZERkIwRjBBQzUxQzE2RTZB Q0E0N0Y5QzAyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG38HagtMg0a6CCvvcsu75MhSH5Z3n/tvjRQ z85uWKjKG/J3yjT6OrSaA26XvgmAc5nOvfMs2Q9Y/NC2dq76rKU7YxaFNrDCWCHF O6St47GM4S1MGmvUWqz3U6NIxiRiAn75y1PRgo1KL2s5XVpX408wVWrTlf/ZMZl5 M7ou0hFFzmi+vc/s0DoJLiHJSRGF4DXxYDa13FkCr5XLm7yaD8q9PR2l5hxyiBzm JMS3dx3QuPbTFn0ysGerj1F/fqzeMUrdaCAddsfjYAdLXIVdiUcjql42qks3lXxf o7myAAlliffLP3fD4guyp/btIWzc1xmLzZaAligiuxUB7nwuCn0= -----END CERTIFICATE-----Generated at Tue Sep 22 04:21:14 2026 by rpki-client