$ rpki-client -vvf rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft File: FB9B3B1791631B716B38A928B32D781C38B7E74C.mft (raw, json) Hash identifier: 2OoCBMwH10MxqoM7Z2rBrvo2dg3QP+mB44U8V9Ra6kw= Subject key identifier: B1:B1:2B:14:9C:42:64:E7:8A:CF:2A:06:94:F5:6B:A8:9E:10:26:24 Authority key identifier: FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C Certificate issuer: /CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Certificate serial: 6100D2046C52A3273903DCFA4F47EFCB0E82DDDA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:59:29 +0000 Manifest this update: Thu 23 Jul 2026 19:54:29 +0000 Manifest next update: Fri 24 Jul 2026 21:34:29 +0000 Files and hashes: 1: FB9B3B1791631B716B38A928B32D781C38B7E74C.crl (hash: PgZsKjQVq6ZJOdA9imkCkaFAckmvpi63kQZkTqXM068=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:00:d2:04:6c:52:a3:27:39:03:dc:fa:4f:47:ef:cb:0e:82:dd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Validity Not Before: Jul 23 19:54:29 2026 GMT Not After : Jul 24 21:34:29 2026 GMT Subject: CN=B1B12B149C4264E78ACF2A0694F56BA89E102624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:53:64:71:55:76:b1:d3:83:69:21:d7:27: 6d:27:34:43:96:cf:70:af:04:af:a3:8e:df:bc:a1: f2:12:5f:88:a1:f4:fa:9d:cf:7f:bf:dd:d4:6e:b6: c8:1b:d2:4c:18:7a:e8:b9:40:de:06:74:64:a2:cb: 4c:89:2f:47:97:86:cb:6f:56:13:b2:e1:52:80:c8: 5b:26:40:2f:de:33:d9:65:65:1d:4b:0f:8f:a0:61: f6:e1:ba:94:bb:78:c8:4f:56:96:67:6c:a0:fc:55: b9:d4:fb:57:b7:fc:1c:29:27:8e:4b:fe:12:e2:11: de:ad:a9:86:31:de:35:7b:38:4e:73:66:5b:81:2a: a3:47:e1:61:85:49:ea:85:3b:26:10:2b:64:d6:80: fc:44:4a:42:5a:fc:df:fe:09:c2:65:38:16:32:c0: 73:e8:61:de:0d:93:3f:c5:6c:e2:45:97:a3:9a:51: 23:ee:46:72:f8:30:84:73:e0:6c:df:48:f0:26:34: 8d:87:f9:b2:0d:8a:2f:d2:82:82:12:6b:78:e9:6f: 24:0f:fa:e1:d2:98:0d:a7:0a:83:50:d4:04:5f:33: 9a:cd:b7:fd:18:ac:b1:e6:41:c8:9d:1b:fa:f1:c6: 58:b1:c6:bb:32:5d:2a:09:50:25:c2:52:13:8b:15: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B1:2B:14:9C:42:64:E7:8A:CF:2A:06:94:F5:6B:A8:9E:10:26:24 X509v3 Authority Key Identifier: keyid:FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:52:55:87:b5:87:e9:f4:c0:59:8e:ce:1b:f6:a0:b6:d9:82: 36:d3:7f:3d:c3:a2:95:af:52:01:3b:d8:78:b0:e1:70:2d:19: bd:ee:64:b2:c4:d9:b4:47:15:88:cb:e1:be:a1:b3:55:d2:f4: e0:71:61:ec:93:6b:5f:82:66:0c:c7:07:be:e2:b3:41:cb:74: b0:2f:b7:04:d2:4a:6b:4f:dc:6c:ff:84:eb:04:bc:c1:2b:c5: f8:ad:cc:5f:c3:d1:a6:07:6f:46:23:96:67:cd:77:49:cd:0b: 0a:56:12:68:44:2c:7e:4e:d4:41:4e:65:05:47:ba:8d:d6:ae: 6f:2c:79:06:6b:73:1e:7a:c7:fe:ef:3b:5c:55:f7:96:1d:6e: 77:35:23:30:87:22:cd:61:10:d5:b2:7f:8c:ed:a2:44:07:50: 2c:bf:84:fe:d7:db:ed:92:60:23:2b:bb:5a:11:71:5e:49:f0: a5:34:93:c2:a2:94:f2:d1:41:78:bd:29:b7:2c:ec:b2:94:57: 67:ed:1f:cd:36:c7:5d:e8:ca:87:31:37:7d:82:ac:10:18:9a: 92:c2:c6:35:a7:c6:2f:43:55:a3:58:3d:3e:dc:10:a0:6d:e8: da:e0:56:dc:f9:6f:be:e3:b1:ee:1c:bb:02:6b:e9:16:16:71: a9:9d:75:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQDSBGxSoyc5A9z6T0fvyw6C3dowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMz OEI3RTc0QzAeFw0yNjA3MjMxOTU0MjlaFw0yNjA3MjQyMTM0MjlaMDMxMTAvBgNV BAMTKEIxQjEyQjE0OUM0MjY0RTc4QUNGMkEwNjk0RjU2QkE4OUUxMDI2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KFNkcVV2sdODaSHXJ20nNEOW z3CvBK+jjt+8ofISX4ih9Pqdz3+/3dRutsgb0kwYeui5QN4GdGSiy0yJL0eXhstv VhOy4VKAyFsmQC/eM9llZR1LD4+gYfbhupS7eMhPVpZnbKD8VbnU+1e3/BwpJ45L /hLiEd6tqYYx3jV7OE5zZluBKqNH4WGFSeqFOyYQK2TWgPxESkJa/N/+CcJlOBYy wHPoYd4Nkz/FbOJFl6OaUSPuRnL4MIRz4GzfSPAmNI2H+bINii/SgoISa3jpbyQP +uHSmA2nCoNQ1ARfM5rNt/0YrLHmQcidG/rxxlixxrsyXSoJUCXCUhOLFYpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsbErFJxCZOeKzyoGlPVrqJ4QJiQwHwYDVR0j BBgwFoAU+5s7F5FjG3FrOKkosy14HDi350wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAyN2ZhMDItZTQ5Zi00MjE1LTg2MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5 MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMzOEI3RTc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjlCM0IxNzkxNjMxQjcxNkIzOEE5MjhCMzJENzgxQzM4QjdF NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4 MUMzOEI3RTc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtSVYe1h+n0wFmOzhv2oLbZgjbTfz3DopWv UgE72Hiw4XAtGb3uZLLE2bRHFYjL4b6hs1XS9OBxYeyTa1+CZgzHB77is0HLdLAv twTSSmtP3Gz/hOsEvMErxfitzF/D0aYHb0YjlmfNd0nNCwpWEmhELH5O1EFOZQVH uo3Wrm8seQZrcx56x/7vO1xV95Ydbnc1IzCHIs1hENWyf4ztokQHUCy/hP7X2+2S YCMru1oRcV5J8KU0k8KilPLRQXi9Kbcs7LKUV2ftH802x13oyocxN32CrBAYmpLC xjWnxi9DVaNYPT7cEKBt6NrgVtz5b77jse4cuwJr6RYWcamddbo= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:44 2026 by rpki-client