$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft File: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft (raw, json) Hash identifier: BlKhxFwOzD1sJhdcfCse2dn7mvBSwa9VhvnFi/Djl7U= Subject key identifier: 68:CD:A8:D7:61:B9:DC:0E:1A:41:B4:41:ED:4A:DA:C2:47:FA:B2:89 Authority key identifier: FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74 Certificate issuer: /CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74 Certificate serial: 62202D0C416D212B81012BAB40EA48903803C2DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft Manifest number: BD Signing time: Sun 20 Sep 2026 21:38:49 +0000 Manifest this update: Sun 20 Sep 2026 21:33:49 +0000 Manifest next update: Mon 21 Sep 2026 23:22:49 +0000 Files and hashes: 1: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: fIUZWJqNIQdeGF5YTGMhUjUqsUhoEqCYOqgqGlb+3MI=) 2: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl (hash: 5qpcN994zVqGj+Snv/Yc5WAIeUJQ5xa7i5b8VvBxya0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:20:2d:0c:41:6d:21:2b:81:01:2b:ab:40:ea:48:90:38:03:c2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74 Validity Not Before: Sep 20 21:33:49 2026 GMT Not After : Sep 21 23:22:49 2026 GMT Subject: CN=68CDA8D761B9DC0E1A41B441ED4ADAC247FAB289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:89:ae:06:2d:8f:70:76:16:c4:16:0a:ad: ee:53:83:e7:5b:3a:39:ed:45:ab:07:77:40:c5:e4: 41:e5:3e:bd:64:3e:a2:1b:d7:4c:c8:72:5d:e4:f7: 1b:fd:1e:01:09:dc:ff:4f:13:f4:b8:e3:43:a8:1b: c2:48:5d:b5:aa:fa:00:39:ee:26:25:59:52:02:a8: 00:20:e4:8f:11:31:46:2f:db:af:cd:83:a2:c4:d2: 75:61:77:34:1a:b1:3c:f5:f1:f7:d7:0d:27:ec:57: 90:b6:8d:73:fb:d9:d9:03:84:be:53:52:12:7e:64: b0:e6:13:67:eb:8f:86:99:ec:cb:35:f0:ca:9b:b4: 45:39:3b:e4:7e:73:19:28:a5:ce:03:43:60:5e:0b: 43:8e:54:30:ed:d9:83:e3:78:3d:ad:55:a8:25:54: bb:9d:17:21:b4:c9:bf:d0:0b:1d:47:f4:1f:34:e8: 1b:bf:61:f6:a1:ca:e6:6f:fe:95:ae:f2:35:f9:1c: 4c:53:18:26:2a:bd:fe:83:e7:ab:90:8e:4e:c7:41: bc:6e:ab:4b:18:1c:e7:d4:20:05:c6:94:fc:d4:18: 03:5c:af:7c:46:1a:3a:18:02:f9:9e:1b:62:85:ee: 15:93:74:2a:08:2a:79:f0:f8:1f:3f:37:d8:b9:31: 74:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:A8:D7:61:B9:DC:0E:1A:41:B4:41:ED:4A:DA:C2:47:FA:B2:89 X509v3 Authority Key Identifier: keyid:FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:88:3d:81:db:5d:ba:2c:7a:32:24:99:3d:11:85:62:5b:51: b5:c0:3c:96:8f:7b:6e:27:3d:32:2b:e7:04:5d:b8:b1:18:8b: 6f:af:f9:58:0e:b2:59:a8:84:da:b1:d8:ec:0e:5f:51:08:92: f8:35:b9:7c:9e:fa:7c:41:75:9d:0b:29:d7:59:95:ce:03:6b: 93:df:1e:47:1c:3e:44:49:e8:4f:c9:5e:44:ef:23:61:1e:d8: 9c:bc:41:3b:1a:7c:b7:55:5f:31:77:d9:be:3b:61:03:6d:56: 11:d0:bd:2c:1b:1e:99:25:45:a6:27:c5:68:00:c6:37:3d:94: 9e:3d:ea:34:60:35:97:dc:9d:fc:0e:1b:1c:da:7b:66:2a:ad: aa:e5:b9:83:32:9d:f0:65:9b:cf:43:e4:d9:ea:a8:43:ed:32: 41:f6:bc:26:70:ab:4b:4d:c2:74:c5:2c:5b:81:a0:52:25:60: 06:0f:36:39:92:e2:23:4d:4f:8d:03:e4:3e:7a:86:97:d4:33: 13:5d:f4:51:3a:ac:cb:b8:f0:a7:07:50:ee:57:86:7e:3f:aa: 96:23:cc:a4:2e:f7:49:70:7e:90:51:7f:eb:b3:10:02:55:75: d3:8a:90:fe:ce:2b:5d:e3:d9:6c:df:59:42:72:ec:06:29:2a: 80:66:2f:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYiAtDEFtISuBASurQOpIkDgDwt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRDQ5RUMxODJDNEE5OUNDMjMyOEJGMUNEM0FCREFC N0UyN0E3NDAeFw0yNjA5MjAyMTMzNDlaFw0yNjA5MjEyMzIyNDlaMDMxMTAvBgNV BAMTKDY4Q0RBOEQ3NjFCOURDMEUxQTQxQjQ0MUVENEFEQUMyNDdGQUIyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8YmuBi2PcHYWxBYKre5Tg+db OjntRasHd0DF5EHlPr1kPqIb10zIcl3k9xv9HgEJ3P9PE/S440OoG8JIXbWq+gA5 7iYlWVICqAAg5I8RMUYv26/Ng6LE0nVhdzQasTz18ffXDSfsV5C2jXP72dkDhL5T UhJ+ZLDmE2frj4aZ7Ms18MqbtEU5O+R+cxkopc4DQ2BeC0OOVDDt2YPjeD2tVagl VLudFyG0yb/QCx1H9B806Bu/YfahyuZv/pWu8jX5HExTGCYqvf6D56uQjk7HQbxu q0sYHOfUIAXGlPzUGANcr3xGGjoYAvmeG2KF7hWTdCoIKnnw+B8/N9i5MXRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaM2o12G53A4aQbRB7Urawkf6sokwHwYDVR0j BBgwFoAU+z1J7BgsSpnMIyi/HNOr2rfienQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM2MGYwNzgtOGEyMC00OGQxLTgyYjgtZTFmNTBhMTU1MjAxLzAvRkIzRDQ5RUMx ODJDNEE5OUNDMjMyOEJGMUNEM0FCREFCN0UyN0E3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjNENDlFQzE4MkM0QTk5Q0MyMzI4QkYxQ0QzQUJEQUI3RTI3 QTc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM2MGYwNzgtOGEyMC00OGQxLTgy YjgtZTFmNTBhMTU1MjAxLzAvRkIzRDQ5RUMxODJDNEE5OUNDMjMyOEJGMUNEM0FC REFCN0UyN0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6IPYHbXbosejIkmT0RhWJbUbXAPJaPe24n PTIr5wRduLEYi2+v+VgOslmohNqx2OwOX1EIkvg1uXye+nxBdZ0LKddZlc4Da5Pf HkccPkRJ6E/JXkTvI2Ee2Jy8QTsafLdVXzF32b47YQNtVhHQvSwbHpklRaYnxWgA xjc9lJ496jRgNZfcnfwOGxzae2YqrarluYMynfBlm89D5NnqqEPtMkH2vCZwq0tN wnTFLFuBoFIlYAYPNjmS4iNNT40D5D56hpfUMxNd9FE6rMu48KcHUO5Xhn4/qpYj zKQu90lwfpBRf+uzEAJVddOKkP7OK13j2WzfWUJy7AYpKoBmL2o= -----END CERTIFICATE-----Generated at Mon Sep 21 06:48:57 2026 by rpki-client