$ rpki-client -vvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft File: FB3286A3734F366E27845180AD985879147BEA5E.mft (raw, json) Hash identifier: ICo7GOYDr08GEoBfwAJf2bAZLH+eO1UX/KX2EVshU90= Subject key identifier: F9:D8:A7:E4:6E:A9:44:09:DB:C5:0E:70:ED:DA:D3:FD:FF:E4:AF:8D Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E Certificate issuer: /CN=FB3286A3734F366E27845180AD985879147BEA5E Certificate serial: 6471EDA170212A2D0E0339B5F013F5AB1C5B58BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:37:52 +0000 Manifest this update: Tue 16 Jun 2026 19:32:52 +0000 Manifest next update: Wed 17 Jun 2026 22:19:52 +0000 Files and hashes: 1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: vrQysHXSDOYVY5vPGR7dw/5TLODMWl8YiVoK5Waal3c=) 2: FB3286A3734F366E27845180AD985879147BEA5E.crl (hash: H8ureuoH6IMU9e8y3+t78qB7++a9KZsDcjjZLYdJ1Hw=) 3: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: JUZB6P5kO+Db3k9YCVP/aQyPW9NErekyd7f5TZeRyDM=) 4: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: LQLPTnxAiTCFL6ZmWkZjMD4eo5v053wknOPM5ftHnJk=) 5: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: 27HB+moGW931DJ3lKZUVs+RCefOnlzQL4giJYO55G7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:71:ed:a1:70:21:2a:2d:0e:03:39:b5:f0:13:f5:ab:1c:5b:58:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E Validity Not Before: Jun 16 19:32:52 2026 GMT Not After : Jun 17 22:19:52 2026 GMT Subject: CN=F9D8A7E46EA94409DBC50E70EDDAD3FDFFE4AF8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9d:63:6e:ba:6c:cd:83:00:e4:e7:45:98:2b: e9:80:41:c3:d4:1e:68:52:9b:83:57:49:b7:c9:22: ae:77:20:0e:32:93:bb:85:2e:b0:c7:66:f9:80:37: ac:ca:c9:05:c2:08:65:d3:dd:2f:45:ea:9a:bc:a6: c5:ad:fc:bd:b3:eb:b2:63:9d:c8:e6:ea:94:5c:3f: 7c:2b:4e:b2:0b:f6:b5:a0:ea:5d:e7:f9:d4:69:67: f7:a4:6c:6d:fb:d6:89:79:12:0b:ab:bb:b6:38:e8: 2c:05:45:60:3e:0d:0e:9a:64:36:e1:b8:de:de:0e: 4c:4d:70:52:df:b2:0f:b0:53:e0:7b:34:8c:7c:35: f3:3f:86:a0:81:a1:ef:9c:b5:ec:a7:e3:43:fc:d1: 17:b3:a3:bc:25:b1:fb:8b:6d:77:b8:c2:a6:f0:3b: fe:74:77:2d:1b:6a:2e:d5:54:d1:a2:76:a6:df:40: 99:2f:f0:df:32:e2:46:88:b9:94:b4:f2:5c:6e:af: 4e:f1:44:17:22:5a:96:43:00:fb:35:24:3a:67:4c: 57:ac:c3:58:12:a2:52:3c:e1:13:bb:a1:af:0c:8b: 1e:e5:32:f6:fb:dd:c4:38:b7:26:83:79:0c:ba:31: e0:d1:3b:ac:06:32:0c:f5:52:52:79:dd:24:8b:3f: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D8:A7:E4:6E:A9:44:09:DB:C5:0E:70:ED:DA:D3:FD:FF:E4:AF:8D X509v3 Authority Key Identifier: keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:96:93:b6:94:9d:23:79:86:86:fc:98:15:cd:2b:4d:93:e6: 59:b4:fd:d9:f4:3f:ad:dc:9d:6c:a6:75:2b:e5:e6:26:59:9c: 42:2c:41:e2:a7:e3:01:4a:51:2b:e4:48:78:f9:ba:00:53:22: 2b:ad:e6:2a:af:28:91:ef:0c:a5:8c:84:7c:b4:91:30:bb:29: aa:9f:09:57:5d:f7:5b:57:d2:4e:7a:aa:c6:d2:2b:6a:7a:ba: 3e:7f:98:c1:6e:49:dd:11:ec:9a:85:a3:39:93:8a:f0:53:a5: 4f:2b:9d:ed:e0:27:37:f1:5c:f1:9a:20:99:8d:48:c9:78:4c: 9e:70:cb:3a:f2:09:5a:12:c6:6b:a0:c2:4a:99:0e:56:51:f1: d9:c3:cb:13:68:ed:7f:43:e4:5d:2e:9b:1a:02:ef:a2:22:74: c2:e5:ad:02:d0:31:29:b7:0b:4a:86:e0:82:8f:7d:66:38:e4: 11:6b:81:e0:91:3f:7a:9a:7a:bb:a3:fb:58:f1:72:04:1e:dd: 3a:06:1d:50:5a:d3:b3:65:a9:8a:9f:ae:90:3c:4a:c2:d5:25: c4:fb:2d:cb:f4:44:7b:c6:c6:f6:46:fc:63:cc:02:45:b7:de: d9:e5:8a:07:c7:c5:70:3d:8b:e5:ec:59:3c:7a:d7:ee:57:cc: 74:97:34:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHHtoXAhKi0OAzm18BP1qxxbWLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx NDdCRUE1RTAeFw0yNjA2MTYxOTMyNTJaFw0yNjA2MTcyMjE5NTJaMDMxMTAvBgNV BAMTKEY5RDhBN0U0NkVBOTQ0MDlEQkM1MEU3MEVEREFEM0ZERkZFNEFGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhnWNuumzNgwDk50WYK+mAQcPU HmhSm4NXSbfJIq53IA4yk7uFLrDHZvmAN6zKyQXCCGXT3S9F6pq8psWt/L2z67Jj ncjm6pRcP3wrTrIL9rWg6l3n+dRpZ/ekbG371ol5Eguru7Y46CwFRWA+DQ6aZDbh uN7eDkxNcFLfsg+wU+B7NIx8NfM/hqCBoe+cteyn40P80Rezo7wlsfuLbXe4wqbw O/50dy0bai7VVNGidqbfQJkv8N8y4kaIuZS08lxur07xRBciWpZDAPs1JDpnTFes w1gSolI84RO7oa8Mix7lMvb73cQ4tyaDeQy6MeDRO6wGMgz1UlJ53SSLP29JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+din5G6pRAnbxQ5w7drT/f/kr40wHwYDVR0j BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3 MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4 NzkxNDdCRUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuWk7aUnSN5hob8mBXNK02T5lm0/dn0P63c nWymdSvl5iZZnEIsQeKn4wFKUSvkSHj5ugBTIiut5iqvKJHvDKWMhHy0kTC7Kaqf CVdd91tX0k56qsbSK2p6uj5/mMFuSd0R7JqFozmTivBTpU8rne3gJzfxXPGaIJmN SMl4TJ5wyzryCVoSxmugwkqZDlZR8dnDyxNo7X9D5F0umxoC76IidMLlrQLQMSm3 C0qG4IKPfWY45BFrgeCRP3qaeruj+1jxcgQe3ToGHVBa07NlqYqfrpA8SsLVJcT7 Lcv0RHvGxvZG/GPMAkW33tnligfHxXA9i+XsWTx61+5XzHSXNKs= -----END CERTIFICATE-----Generated at Wed Jun 17 11:29:15 2026 by rpki-client