$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft File: FB9B3B1791631B716B38A928B32D781C38B7E74C.mft (raw, json) Hash identifier: jGPIhe87yUqaV6QVG+VzEpmk4bO2ibl1fMxAHn0Cnco= Subject key identifier: D3:23:59:88:52:1A:86:A2:A2:98:AB:C5:F0:57:BB:CE:FB:03:CF:53 Authority key identifier: FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C Certificate issuer: /CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Certificate serial: 04C1C619DDF85C3FACD40D8BCB5BB23DC374CEF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 16:51:34 +0000 Manifest this update: Thu 24 Sep 2026 16:46:34 +0000 Manifest next update: Fri 25 Sep 2026 18:48:34 +0000 Files and hashes: 1: FB9B3B1791631B716B38A928B32D781C38B7E74C.crl (hash: mbKY/V148fbDd/Olit3XmDw3zdew/pp/9CL8Sh9F6tM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 18:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c1:c6:19:dd:f8:5c:3f:ac:d4:0d:8b:cb:5b:b2:3d:c3:74:ce:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Validity Not Before: Sep 24 16:46:34 2026 GMT Not After : Sep 25 18:48:34 2026 GMT Subject: CN=D3235988521A86A2A298ABC5F057BBCEFB03CF53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:05:7b:7d:01:c2:41:f2:74:41:a0:a2:a6: 09:75:e0:b1:ea:ed:cf:ca:b5:aa:40:7d:a5:bf:7b: b2:f4:28:d1:ec:91:87:11:28:d0:42:93:8a:a2:4d: 99:54:05:0c:5a:53:9c:a2:c9:fe:42:66:d5:07:cd: d6:f5:51:fd:e9:7c:03:cc:4e:a3:4c:85:44:9d:85: c8:23:03:d5:94:d4:df:a0:b2:ba:1d:61:50:2b:96: 47:a1:f3:8a:fd:ab:b4:65:73:12:a5:c8:93:9b:1b: a9:7a:f4:df:a7:e1:4e:e6:82:5b:11:93:de:31:2d: 54:d2:ee:96:1d:09:de:bf:05:d8:51:2d:9d:c4:69: c8:cb:ef:e1:65:7c:1e:1f:02:6c:a1:c7:0a:57:ee: eb:4e:81:02:33:17:5a:fe:66:ec:1d:ff:9f:fd:ba: 51:83:4a:e7:3a:b7:82:2d:00:23:ae:26:1f:15:49: a1:55:09:7a:e8:aa:53:a3:73:d5:5f:46:6e:2f:c4: 72:90:af:b6:3b:42:14:c4:3f:b3:79:44:e3:19:45: 7b:b5:32:27:6f:11:da:84:37:9f:31:f3:fa:39:cf: ca:59:c6:d1:59:69:00:1e:42:4f:df:2e:c2:9d:8d: f8:60:cb:c3:84:5c:5e:2a:ec:9b:d0:fd:87:02:e3: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:23:59:88:52:1A:86:A2:A2:98:AB:C5:F0:57:BB:CE:FB:03:CF:53 X509v3 Authority Key Identifier: keyid:FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6d:6f:a4:e1:f0:d2:c7:40:e4:49:0a:e3:fd:6d:78:50:e0: 31:52:e2:01:2a:7c:73:da:c4:ae:00:28:44:d0:13:b0:fe:1c: 3f:67:b5:6c:c0:db:a7:20:e2:92:38:6a:a1:ee:13:2a:30:33: 91:5a:02:87:07:4c:82:3d:9a:cc:7b:f6:74:e7:ba:05:f8:7d: bd:8e:d6:d0:f9:59:72:f0:de:ab:e2:10:ba:c3:04:cb:fe:33: 4d:3b:3b:35:8f:ce:7d:b0:e4:0b:6a:ee:f1:21:93:e5:fc:79: db:f4:37:69:3f:dd:e4:f4:1c:97:c4:bd:4f:81:4e:5d:99:8c: f9:41:f6:aa:30:6f:de:25:f7:ae:5f:68:ca:2c:90:e3:d3:f2: 8a:bd:9f:98:2c:76:d6:f9:6f:8b:00:5d:c1:73:98:94:e3:41: f0:aa:e7:88:15:ea:a9:4d:14:bd:da:53:86:c4:cd:fc:85:50: 7f:73:6b:86:ca:26:c6:3e:45:11:1f:58:53:b4:e9:39:ed:3d: 53:d3:73:b5:a9:96:f5:d3:be:dc:50:c9:61:c1:c0:91:1e:56: 21:ca:39:f5:90:cc:c4:64:cb:31:05:a1:64:a8:82:28:22:fb: 23:fb:94:7b:8c:53:93:32:65:66:72:21:cc:90:f0:57:9c:95: 0a:b6:f4:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMHGGd34XD+s1A2Ly1uyPcN0zvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMz OEI3RTc0QzAeFw0yNjA5MjQxNjQ2MzRaFw0yNjA5MjUxODQ4MzRaMDMxMTAvBgNV BAMTKEQzMjM1OTg4NTIxQTg2QTJBMjk4QUJDNUYwNTdCQkNFRkIwM0NGNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+wV7fQHCQfJ0QaCipgl14LHq 7c/KtapAfaW/e7L0KNHskYcRKNBCk4qiTZlUBQxaU5yiyf5CZtUHzdb1Uf3pfAPM TqNMhUSdhcgjA9WU1N+gsrodYVArlkeh84r9q7RlcxKlyJObG6l69N+n4U7mglsR k94xLVTS7pYdCd6/BdhRLZ3EacjL7+FlfB4fAmyhxwpX7utOgQIzF1r+Zuwd/5/9 ulGDSuc6t4ItACOuJh8VSaFVCXroqlOjc9VfRm4vxHKQr7Y7QhTEP7N5ROMZRXu1 MidvEdqEN58x8/o5z8pZxtFZaQAeQk/fLsKdjfhgy8OEXF4q7JvQ/YcC45XPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0yNZiFIahqKimKvF8Fe7zvsDz1MwHwYDVR0j BBgwFoAU+5s7F5FjG3FrOKkosy14HDi350wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAyN2ZhMDItZTQ5Zi00MjE1LTg2MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5 MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMzOEI3RTc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjlCM0IxNzkxNjMxQjcxNkIzOEE5MjhCMzJENzgxQzM4QjdF NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4 MUMzOEI3RTc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVtb6Th8NLHQORJCuP9bXhQ4DFS4gEqfHPa xK4AKETQE7D+HD9ntWzA26cg4pI4aqHuEyowM5FaAocHTII9msx79nTnugX4fb2O 1tD5WXLw3qviELrDBMv+M007OzWPzn2w5Atq7vEhk+X8edv0N2k/3eT0HJfEvU+B Tl2ZjPlB9qowb94l965faMoskOPT8oq9n5gsdtb5b4sAXcFzmJTjQfCq54gV6qlN FL3aU4bEzfyFUH9za4bKJsY+RREfWFO06TntPVPTc7WplvXTvtxQyWHBwJEeViHK OfWQzMRkyzEFoWSogigi+yP7lHuMU5MyZWZyIcyQ8FeclQq29Mg= -----END CERTIFICATE-----Generated at Fri Sep 25 06:58:26 2026 by rpki-client