$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft File: FB3286A3734F366E27845180AD985879147BEA5E.mft (raw, json) Hash identifier: iBFfCsXWgJXnJHcsyeTJVmy48ScUFRvM5PPctdlcS4I= Subject key identifier: 72:31:0B:4E:6D:F8:B9:CB:97:35:1B:A8:96:C5:B0:CC:E0:FC:64:F7 Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E Certificate issuer: /CN=FB3286A3734F366E27845180AD985879147BEA5E Certificate serial: 137D270D3C9C7E1D870B88B26AA3F0A1F408FE30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:51:17 +0000 Manifest this update: Sun 20 Sep 2026 23:46:17 +0000 Manifest next update: Tue 22 Sep 2026 02:13:17 +0000 Files and hashes: 1: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: JUZB6P5kO+Db3k9YCVP/aQyPW9NErekyd7f5TZeRyDM=) 2: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: LQLPTnxAiTCFL6ZmWkZjMD4eo5v053wknOPM5ftHnJk=) 3: FB3286A3734F366E27845180AD985879147BEA5E.crl (hash: M5pW9D4I1qqmkCHIFomP/D9R7f44X/FPuSjaOJ9b25c=) 4: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: 27HB+moGW931DJ3lKZUVs+RCefOnlzQL4giJYO55G7A=) 5: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: vrQysHXSDOYVY5vPGR7dw/5TLODMWl8YiVoK5Waal3c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7d:27:0d:3c:9c:7e:1d:87:0b:88:b2:6a:a3:f0:a1:f4:08:fe:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E Validity Not Before: Sep 20 23:46:17 2026 GMT Not After : Sep 22 02:13:17 2026 GMT Subject: CN=72310B4E6DF8B9CB97351BA896C5B0CCE0FC64F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:81:88:72:2a:f9:5e:95:dc:09:8f:f4:39: c5:91:91:69:ed:88:52:35:07:2f:b9:ff:4c:99:5f: 80:2a:2a:27:c7:e8:0a:2c:f6:4f:6a:48:11:aa:9f: b9:4c:07:e3:28:6e:b8:af:f7:52:86:3c:b5:ad:e9: 09:a7:ee:32:e4:13:64:65:29:8d:04:e8:3b:1a:e8: 33:e6:21:b6:c9:56:5b:80:67:ee:0b:72:aa:66:19: c6:2b:14:dd:fb:e9:c1:fb:7a:d3:51:3c:45:bd:de: 3d:9d:c0:e4:3a:d8:93:13:15:b4:91:86:90:49:33: fb:64:28:29:76:d5:84:8c:9e:03:d9:19:ef:17:a6: 06:76:cc:19:4b:13:68:77:06:b5:8f:8e:47:e2:e0: 3c:0e:6e:3f:39:80:68:a8:2d:68:b3:c1:7f:07:2c: aa:69:78:eb:04:29:43:ab:2d:0b:63:23:da:ff:b0: ce:ef:de:a4:d4:b9:1a:ab:5d:e6:28:e2:4a:ba:27: 71:41:15:a6:99:aa:08:8b:09:31:7f:eb:ff:64:8b: df:92:f4:7c:03:b3:85:bd:24:d4:5e:f2:54:fd:58: 59:d4:d7:20:03:2b:9a:58:a9:3c:ff:0e:28:da:77: 5b:fb:1c:cf:0b:a4:44:6e:6b:bc:c1:0b:35:c5:d7: 56:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:31:0B:4E:6D:F8:B9:CB:97:35:1B:A8:96:C5:B0:CC:E0:FC:64:F7 X509v3 Authority Key Identifier: keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:32:44:cd:28:b2:f6:1b:27:84:dd:99:cf:64:61:e3:28:78: ae:26:75:32:26:dd:6f:fb:df:d6:27:22:1f:14:94:0c:a5:80: 52:b8:6c:eb:24:3e:1e:fb:43:88:c7:8e:9e:45:05:07:7d:eb: c9:51:85:69:18:9c:16:81:44:72:58:60:6c:c0:a2:58:a9:d6: 0c:89:84:11:f9:36:f3:0e:17:31:d2:65:b1:71:04:d9:78:af: 9d:f4:18:04:0a:8a:12:3b:85:24:98:17:78:ac:e4:8c:29:9b: e3:8e:aa:7c:18:1e:ff:6a:8f:33:16:d2:b3:46:76:73:71:3c: 7f:cf:a0:ee:1a:29:a7:8a:58:6c:7f:d4:ab:3c:4a:b0:f2:52: 80:53:2f:f7:d5:8c:71:5e:02:7c:c8:ff:40:99:61:92:e0:d7: 26:0a:54:d1:4f:7b:32:f5:45:cf:05:fb:54:ca:82:17:ee:e2: 18:8a:8d:82:6b:2c:ac:d8:14:f7:3d:b4:4a:8d:d5:b3:51:8d: bd:0e:d1:1e:61:6e:98:1b:76:7c:06:e6:af:00:fa:88:29:e6: 24:62:f0:bf:cf:52:4c:3f:e1:db:1c:55:3b:bb:7f:77:37:16: 9d:44:b7:df:5a:a7:ae:8f:e2:ba:87:2d:11:01:15:bd:c3:90: 3c:5d:ec:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE30nDTycfh2HC4iyaqPwofQI/jAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx NDdCRUE1RTAeFw0yNjA5MjAyMzQ2MTdaFw0yNjA5MjIwMjEzMTdaMDMxMTAvBgNV BAMTKDcyMzEwQjRFNkRGOEI5Q0I5NzM1MUJBODk2QzVCMENDRTBGQzY0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEYGIcir5XpXcCY/0OcWRkWnt iFI1By+5/0yZX4AqKifH6Aos9k9qSBGqn7lMB+Mobriv91KGPLWt6Qmn7jLkE2Rl KY0E6Dsa6DPmIbbJVluAZ+4LcqpmGcYrFN376cH7etNRPEW93j2dwOQ62JMTFbSR hpBJM/tkKCl21YSMngPZGe8XpgZ2zBlLE2h3BrWPjkfi4DwObj85gGioLWizwX8H LKppeOsEKUOrLQtjI9r/sM7v3qTUuRqrXeYo4kq6J3FBFaaZqgiLCTF/6/9ki9+S 9HwDs4W9JNRe8lT9WFnU1yADK5pYqTz/Dijad1v7HM8LpERua7zBCzXF11b5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcjELTm34ucuXNRuolsWwzOD8ZPcwHwYDVR0j BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3 MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4 NzkxNDdCRUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsyRM0osvYbJ4Tdmc9kYeMoeK4mdTIm3W/7 39YnIh8UlAylgFK4bOskPh77Q4jHjp5FBQd968lRhWkYnBaBRHJYYGzAolip1gyJ hBH5NvMOFzHSZbFxBNl4r530GAQKihI7hSSYF3is5Iwpm+OOqnwYHv9qjzMW0rNG dnNxPH/PoO4aKaeKWGx/1Ks8SrDyUoBTL/fVjHFeAnzI/0CZYZLg1yYKVNFPezL1 Rc8F+1TKghfu4hiKjYJrLKzYFPc9tEqN1bNRjb0O0R5hbpgbdnwG5q8A+ogp5iRi 8L/PUkw/4dscVTu7f3c3Fp1Et99ap66P4rqHLREBFb3DkDxd7Os= -----END CERTIFICATE-----Generated at Mon Sep 21 17:29:20 2026 by rpki-client