$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft File: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft (raw, json) Hash identifier: ItFhri7ljhX8P2aOee6HzNwZs7xpKTqsZQL5iIeg/bc= Subject key identifier: B9:AE:E9:E8:5D:E9:40:73:4B:F2:03:3C:A9:BF:34:8E:E4:F2:D4:B2 Authority key identifier: FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE Certificate issuer: /CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE Certificate serial: 399646BE4368C016520052189593375863CD9322 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 13:17:26 +0000 Manifest this update: Mon 09 Nov 2026 13:12:26 +0000 Manifest next update: Tue 10 Nov 2026 16:31:26 +0000 Files and hashes: 1: 3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa (hash: 3NdyDC+1ZO5sttCVKzm0UcFCITwWVerR5FdVYXY26PA=) 2: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl (hash: oXQYLjXD6XwZG5KeOYAf32iq12XB+68nq3BKGtkwTAU=) 3: 3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa (hash: 68j/2R3Ewk4p7TN+xLCiDv2//M/vL0ynXYOYWgxaiD4=) 4: 3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa (hash: mr+ohZ4gsNxXowfdM8XgtzD25meDndV+/hmBLAjXpzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 16:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:96:46:be:43:68:c0:16:52:00:52:18:95:93:37:58:63:cd:93:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE Validity Not Before: Nov 9 13:12:26 2026 GMT Not After : Nov 10 16:31:26 2026 GMT Subject: CN=B9AEE9E85DE940734BF2033CA9BF348EE4F2D4B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:c8:c8:c6:27:7e:34:78:26:45:2b:4c:80: e5:e1:48:56:b3:f9:b5:8b:b7:69:ba:a9:95:df:d8: 85:a2:f9:49:f7:45:49:bb:05:c3:c0:92:e2:9d:6d: 04:94:10:13:23:45:c6:55:b6:6e:27:24:8f:4f:a6: 67:ea:b3:9a:f8:19:ae:b7:03:3e:1f:ba:10:21:36: a4:86:0f:df:1c:7e:39:fa:f6:9f:be:85:7a:4b:ce: c6:fb:fb:84:f9:56:bf:e3:94:d9:24:a5:8c:4b:8c: fa:b4:c9:6d:35:10:ca:00:d1:3e:a3:e1:2f:64:76: e7:06:46:0a:e3:e1:4b:9d:0c:df:75:c5:f3:63:fe: be:95:52:92:63:70:46:1e:3b:ad:4f:6c:58:e0:a8: ea:33:82:f4:6f:04:d8:05:10:d2:a9:77:ab:19:9d: 62:b3:0c:a6:7e:94:07:a7:89:35:ad:8e:5c:74:7d: 63:ff:7b:5a:12:89:91:22:86:d1:b6:81:e7:b1:10: e0:4e:c9:9d:8a:5d:5e:b7:cb:5c:37:35:f5:11:e9: 4b:f4:71:f0:21:94:93:73:bf:e3:d8:4a:f2:06:cd: 05:ec:bd:26:65:c1:d8:b6:c0:7c:c3:3e:d1:53:a8: a0:47:73:6b:ef:17:fa:46:aa:e6:46:dd:d2:14:5b: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AE:E9:E8:5D:E9:40:73:4B:F2:03:3C:A9:BF:34:8E:E4:F2:D4:B2 X509v3 Authority Key Identifier: keyid:FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5b:98:c5:75:79:75:c8:0f:91:59:97:86:0a:b3:ab:d7:65: 30:91:11:64:bb:70:78:5c:09:ea:96:aa:13:fd:79:43:4a:27: ca:18:d8:01:84:71:fb:6a:58:c0:c1:86:0e:98:e9:83:e8:78: 8c:de:93:63:83:04:8c:3c:ea:25:86:df:3e:64:a6:93:3a:cf: 67:06:2d:89:d3:b7:59:38:3b:c7:7a:5a:96:a0:1e:55:fe:34: ed:94:93:ab:62:e9:72:6a:03:f9:f4:f4:0d:63:23:1f:dc:6f: d9:90:ad:5b:50:2b:f3:f3:87:73:bc:44:1a:e4:f9:3c:39:0b: 08:14:3d:a6:8b:54:68:90:a3:d2:f6:17:83:ca:f3:f6:7f:29: d1:4e:97:13:e9:94:00:41:8d:fc:52:fc:f8:f3:88:ee:39:eb: 1a:d9:2c:6e:9c:ff:9c:3f:e0:0e:90:d3:55:7c:fa:0c:7f:c4: aa:37:0c:93:50:ff:51:ce:79:21:a3:d7:ec:56:ce:0d:15:e0: 67:d0:05:00:41:24:a6:70:1c:21:31:22:94:11:d8:94:d0:77: 0a:d8:4c:48:13:3d:33:06:81:e2:e5:70:fc:75:9d:15:c4:5e: ea:33:6b:0a:3a:a0:2c:e8:f6:36:6c:f1:f8:44:c5:a4:c4:07: 52:d3:d8:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZZGvkNowBZSAFIYlZM3WGPNkyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJFMUQ5NjJDREY1MEFFNEM4OERFRDA5N0M0RkQ1QzQw RUQxREFBRTAeFw0yNjExMDkxMzEyMjZaFw0yNjExMTAxNjMxMjZaMDMxMTAvBgNV BAMTKEI5QUVFOUU4NURFOTQwNzM0QkYyMDMzQ0E5QkYzNDhFRTRGMkQ0QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9isjIxid+NHgmRStMgOXhSFaz +bWLt2m6qZXf2IWi+Un3RUm7BcPAkuKdbQSUEBMjRcZVtm4nJI9Ppmfqs5r4Ga63 Az4fuhAhNqSGD98cfjn69p++hXpLzsb7+4T5Vr/jlNkkpYxLjPq0yW01EMoA0T6j 4S9kducGRgrj4UudDN91xfNj/r6VUpJjcEYeO61PbFjgqOozgvRvBNgFENKpd6sZ nWKzDKZ+lAeniTWtjlx0fWP/e1oSiZEihtG2geexEOBOyZ2KXV63y1w3NfUR6Uv0 cfAhlJNzv+PYSvIGzQXsvSZlwdi2wHzDPtFTqKBHc2vvF/pGquZG3dIUW70vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUua7p6F3pQHNL8gM8qb80juTy1LIwHwYDVR0j BBgwFoAU++HZYs31CuTIje0JfE/VxA7R2q4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZhNmNhMTItYjI4Ny00YWM3LTg3YjgtNmNkNzMzNTNlNjdmLzAvRkJFMUQ5NjJD REY1MEFFNEM4OERFRDA5N0M0RkQ1QzQwRUQxREFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQkUxRDk2MkNERjUwQUU0Qzg4REVEMDk3QzRGRDVDNDBFRDFE QUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvRkJFMUQ5NjJDREY1MEFFNEM4OERFRDA5N0M0RkQ1 QzQwRUQxREFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdbmMV1eXXID5FZl4YKs6vXZTCREWS7cHhc CeqWqhP9eUNKJ8oY2AGEcftqWMDBhg6Y6YPoeIzek2ODBIw86iWG3z5kppM6z2cG LYnTt1k4O8d6WpagHlX+NO2Uk6ti6XJqA/n09A1jIx/cb9mQrVtQK/Pzh3O8RBrk +Tw5CwgUPaaLVGiQo9L2F4PK8/Z/KdFOlxPplABBjfxS/PjziO456xrZLG6c/5w/ 4A6Q01V8+gx/xKo3DJNQ/1HOeSGj1+xWzg0V4GfQBQBBJKZwHCExIpQR2JTQdwrY TEgTPTMGgeLlcPx1nRXEXuozawo6oCzo9jZs8fhExaTEB1LT2K4= -----END CERTIFICATE-----Generated at Tue Nov 10 04:22:43 2026 by rpki-client