$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft File: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft (raw, json) Hash identifier: CJY4YiQWO29Qb/QbjK+CJTsdpnAdoj7ficfz+H8lzUo= Subject key identifier: 9C:B4:1F:21:E0:E8:6D:B3:1E:82:F7:C3:1B:98:C8:81:BB:3B:67:19 Authority key identifier: FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74 Certificate issuer: /CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74 Certificate serial: 74C8BBA2ED5361613E772153D3F95B50B7C65040 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft Manifest number: FF Signing time: Mon 09 Nov 2026 10:23:40 +0000 Manifest this update: Mon 09 Nov 2026 10:18:40 +0000 Manifest next update: Tue 10 Nov 2026 11:06:40 +0000 Files and hashes: 1: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: fIUZWJqNIQdeGF5YTGMhUjUqsUhoEqCYOqgqGlb+3MI=) 2: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl (hash: 373SO7QA2mErpjVpTBEdaxHacJ4gersY5EEYFr7DKTw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c8:bb:a2:ed:53:61:61:3e:77:21:53:d3:f9:5b:50:b7:c6:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74 Validity Not Before: Nov 9 10:18:40 2026 GMT Not After : Nov 10 11:06:40 2026 GMT Subject: CN=9CB41F21E0E86DB31E82F7C31B98C881BB3B6719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:f6:cb:ef:7b:84:d2:38:21:54:4f:72:b6: 2e:c8:97:87:02:83:84:63:ba:0e:35:bf:db:f7:07: 37:fc:74:68:1b:1c:14:a2:7e:2e:7f:70:f5:05:2c: 79:25:8b:22:ac:23:74:52:f7:58:3a:52:96:85:09: a3:17:eb:1e:72:f3:91:71:60:d2:d0:ff:a6:6c:9b: 6b:67:29:0c:6a:57:c1:b3:5e:4e:42:e9:da:ef:57: 49:05:6d:80:5a:99:e4:e0:44:1c:02:6c:7d:67:82: e6:2e:8b:41:6a:5f:f8:b2:34:ba:5f:89:84:b9:e7: 8a:22:b3:be:7f:65:a5:cb:61:3c:e5:12:1f:9b:c1: b0:9b:c6:88:64:07:96:54:78:b3:95:c0:8f:a8:c7: f4:cd:fa:ea:01:66:11:f4:39:11:c8:d0:bd:1b:43: 90:74:75:73:e8:75:0b:8f:f0:a7:0e:14:8c:c1:27: c9:60:e0:96:9b:dc:40:3f:ed:a4:ab:5f:aa:d7:54: 5f:a2:3b:4e:ed:b5:c4:52:ae:82:20:48:62:29:20: 03:a7:52:7e:87:8c:2d:9c:80:7b:e4:02:e7:3b:a9: 2b:be:c5:55:a4:33:ea:ae:b9:b0:36:63:b7:5d:48: 45:95:17:18:6b:11:c1:27:a0:01:3d:5b:70:52:e7: 49:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B4:1F:21:E0:E8:6D:B3:1E:82:F7:C3:1B:98:C8:81:BB:3B:67:19 X509v3 Authority Key Identifier: keyid:FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:aa:90:1e:e6:8b:f0:eb:0c:c8:32:fc:ae:94:8c:da:ce:fd: a2:a2:cb:f1:9e:1b:a4:5c:b9:c6:c6:97:b4:47:5e:7b:47:c1: 52:27:17:c5:a5:1e:12:24:c0:1f:58:a8:cc:6f:21:25:01:2e: 2c:ca:79:62:0a:1c:a0:03:2f:9f:c2:59:69:88:02:be:84:5e: 71:0d:e7:0d:c9:26:ee:48:10:23:78:87:56:ed:e9:36:40:49: 42:2c:bd:ed:4a:be:7b:0f:b4:ac:6a:dd:fd:dc:74:91:c4:12: f6:d6:de:13:a0:90:5e:8a:b8:65:e7:ac:d3:92:4c:78:ce:ed: d6:a0:ef:93:46:4a:4c:78:74:d4:bd:dc:40:8c:c3:b8:6a:0a: 1a:04:2e:37:9e:bb:92:ab:49:e3:a2:1b:cc:1c:b0:d0:55:e8: b5:ee:95:2b:fc:1c:8c:61:ff:c8:38:67:19:c7:e5:9c:70:b9: 61:e7:5d:e0:40:f4:b3:e4:1e:96:0d:b9:cb:13:6f:76:df:2d: c0:f3:d7:36:da:bd:e6:c9:84:a3:94:ad:0a:82:81:4d:26:6a: 77:41:cb:43:f9:01:dd:27:26:0d:11:31:1d:ca:1d:76:5c:6e: 29:27:24:27:10:7d:f8:fb:8f:1e:7a:79:32:41:29:62:13:41: 74:19:0d:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMi7ou1TYWE+dyFT0/lbULfGUEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRDQ5RUMxODJDNEE5OUNDMjMyOEJGMUNEM0FCREFC N0UyN0E3NDAeFw0yNjExMDkxMDE4NDBaFw0yNjExMTAxMTA2NDBaMDMxMTAvBgNV BAMTKDlDQjQxRjIxRTBFODZEQjMxRTgyRjdDMzFCOThDODgxQkIzQjY3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLB/bL73uE0jghVE9yti7Il4cC g4Rjug41v9v3Bzf8dGgbHBSifi5/cPUFLHkliyKsI3RS91g6UpaFCaMX6x5y85Fx YNLQ/6Zsm2tnKQxqV8GzXk5C6drvV0kFbYBameTgRBwCbH1nguYui0FqX/iyNLpf iYS554ois75/ZaXLYTzlEh+bwbCbxohkB5ZUeLOVwI+ox/TN+uoBZhH0ORHI0L0b Q5B0dXPodQuP8KcOFIzBJ8lg4Jab3EA/7aSrX6rXVF+iO07ttcRSroIgSGIpIAOn Un6HjC2cgHvkAuc7qSu+xVWkM+quubA2Y7ddSEWVFxhrEcEnoAE9W3BS50kvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnLQfIeDobbMegvfDG5jIgbs7ZxkwHwYDVR0j BBgwFoAU+z1J7BgsSpnMIyi/HNOr2rfienQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM2MGYwNzgtOGEyMC00OGQxLTgyYjgtZTFmNTBhMTU1MjAxLzAvRkIzRDQ5RUMx ODJDNEE5OUNDMjMyOEJGMUNEM0FCREFCN0UyN0E3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjNENDlFQzE4MkM0QTk5Q0MyMzI4QkYxQ0QzQUJEQUI3RTI3 QTc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM2MGYwNzgtOGEyMC00OGQxLTgy YjgtZTFmNTBhMTU1MjAxLzAvRkIzRDQ5RUMxODJDNEE5OUNDMjMyOEJGMUNEM0FC REFCN0UyN0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyqkB7mi/DrDMgy/K6UjNrO/aKiy/GeG6Rc ucbGl7RHXntHwVInF8WlHhIkwB9YqMxvISUBLizKeWIKHKADL5/CWWmIAr6EXnEN 5w3JJu5IECN4h1bt6TZASUIsve1KvnsPtKxq3f3cdJHEEvbW3hOgkF6KuGXnrNOS THjO7dag75NGSkx4dNS93ECMw7hqChoELjeeu5KrSeOiG8wcsNBV6LXulSv8HIxh /8g4ZxnH5ZxwuWHnXeBA9LPkHpYNucsTb3bfLcDz1zbavebJhKOUrQqCgU0mandB y0P5Ad0nJg0RMR3KHXZcbiknJCcQffj7jx56eTJBKWITQXQZDVM= -----END CERTIFICATE-----Generated at Mon Nov 9 17:21:02 2026 by rpki-client