$ rpki-client -vvf rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft File: FB9B3B1791631B716B38A928B32D781C38B7E74C.mft (raw, json) Hash identifier: YUOPeWI32LHhJiSdPYQnAEOAOQ25hibNVtSSfwnX8cE= Subject key identifier: A2:FB:44:91:25:E9:1E:FB:1B:22:B5:23:11:1C:CC:42:63:99:FE:90 Authority key identifier: FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C Certificate issuer: /CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Certificate serial: 526BD9ED24E221DB3803FE70213B6436A19E1944 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft Manifest number: 0E Signing time: Tue 12 May 2026 22:20:36 +0000 Manifest this update: Tue 12 May 2026 22:15:36 +0000 Manifest next update: Wed 13 May 2026 22:37:36 +0000 Files and hashes: 1: FB9B3B1791631B716B38A928B32D781C38B7E74C.crl (hash: WHvuexkw6DpNWJX4gmxQ/XPzRddpwQNX68oaFNd/OL4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6b:d9:ed:24:e2:21:db:38:03:fe:70:21:3b:64:36:a1:9e:19:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Validity Not Before: May 12 22:15:36 2026 GMT Not After : May 13 22:37:36 2026 GMT Subject: CN=A2FB449125E91EFB1B22B523111CCC426399FE90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1d:9b:58:89:92:da:9f:b8:db:12:e4:bd:43: d9:1d:6f:4f:fd:e3:45:d5:dc:5f:97:11:ca:af:6b: 2d:7a:05:a3:4b:23:8d:a4:0f:2d:3a:58:ec:32:11: 7f:38:f2:9e:c7:cd:70:4e:8e:d0:f5:0f:78:30:8c: e8:41:80:c6:12:69:1f:5e:7b:0f:ff:53:63:49:16: b1:0d:9a:4f:5b:04:be:17:68:84:a3:08:9d:7b:27: 3f:b4:c8:06:e8:db:e5:d1:16:09:64:94:55:c0:f5: b6:d1:84:a5:f8:15:28:fb:99:f8:f4:be:0a:54:c7: db:15:24:4c:9a:5a:86:03:e0:61:18:d4:f0:de:2f: 28:a7:8e:e4:62:b2:54:e2:94:fc:54:15:b3:b3:de: 5c:07:c3:c5:8a:ff:52:0f:82:c2:5b:37:bc:bd:01: 6e:cd:00:cd:93:a5:98:c6:60:65:85:bf:0e:d8:c6: 3e:49:ac:95:af:5d:75:11:97:42:54:e9:91:1f:1a: 01:6c:61:f7:23:b5:e4:e6:16:2a:eb:7a:e5:6d:cb: ce:78:ea:08:ce:0b:e9:b4:4f:b0:35:82:be:c3:0c: 94:2a:6b:ae:63:04:60:b4:54:70:d7:d4:9e:24:6a: 33:3d:eb:66:da:25:32:f5:e7:92:dc:86:bb:e9:41: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FB:44:91:25:E9:1E:FB:1B:22:B5:23:11:1C:CC:42:63:99:FE:90 X509v3 Authority Key Identifier: keyid:FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a0:56:3d:41:0e:0b:6f:f0:c6:2b:8e:8f:ee:be:35:80:31: 76:6c:83:a1:50:e9:b4:0d:8c:4e:d3:cd:ee:59:73:22:b4:9e: 0d:7d:70:dd:54:8e:9f:14:46:f8:ee:03:1c:a4:d5:ae:77:c8: 8b:3c:c9:60:ec:ee:7c:29:5e:d0:68:99:ce:e1:c3:ce:60:6c: 38:59:85:50:ba:44:b7:cd:3c:48:cc:1c:85:0e:90:ab:6b:00: 4a:d9:b1:94:30:d9:5c:84:66:d9:b5:5f:73:5c:14:33:ea:e5: 9e:cc:91:a8:94:4f:9f:dc:42:35:39:c6:a7:46:c8:6e:af:b8: 4c:c1:11:29:51:ef:97:2d:be:7f:d6:74:5f:88:93:69:48:99: a0:e0:2d:b0:cc:37:53:b0:b5:ee:a0:d1:53:7e:15:98:d2:d0: fa:cd:30:e5:57:df:77:af:a9:a4:7e:c3:17:0d:13:7b:a4:14: 25:2e:77:65:88:2d:5c:b7:28:e2:b5:fa:04:b7:0d:50:1c:68: e9:29:04:7e:14:96:05:9b:8a:02:a9:95:8e:c3:b2:d1:5b:c8: e1:d9:e4:af:88:af:78:43:7b:8e:e9:b8:b0:cf:95:79:96:63: 25:9f:36:17:70:dd:00:b0:d9:cd:98:d4:cc:62:f3:e0:fa:72: 12:c1:b3:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmvZ7STiIds4A/5wITtkNqGeGUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMz OEI3RTc0QzAeFw0yNjA1MTIyMjE1MzZaFw0yNjA1MTMyMjM3MzZaMDMxMTAvBgNV BAMTKEEyRkI0NDkxMjVFOTFFRkIxQjIyQjUyMzExMUNDQzQyNjM5OUZFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrHZtYiZLan7jbEuS9Q9kdb0/9 40XV3F+XEcqvay16BaNLI42kDy06WOwyEX848p7HzXBOjtD1D3gwjOhBgMYSaR9e ew//U2NJFrENmk9bBL4XaISjCJ17Jz+0yAbo2+XRFglklFXA9bbRhKX4FSj7mfj0 vgpUx9sVJEyaWoYD4GEY1PDeLyinjuRislTilPxUFbOz3lwHw8WK/1IPgsJbN7y9 AW7NAM2TpZjGYGWFvw7Yxj5JrJWvXXURl0JU6ZEfGgFsYfcjteTmFirreuVty854 6gjOC+m0T7A1gr7DDJQqa65jBGC0VHDX1J4kajM962baJTL155LchrvpQY3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUovtEkSXpHvsbIrUjERzMQmOZ/pAwHwYDVR0j BBgwFoAU+5s7F5FjG3FrOKkosy14HDi350wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAyN2ZhMDItZTQ5Zi00MjE1LTg2MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5 MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMzOEI3RTc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjlCM0IxNzkxNjMxQjcxNkIzOEE5MjhCMzJENzgxQzM4QjdF NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4 MUMzOEI3RTc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHygVj1BDgtv8MYrjo/uvjWAMXZsg6FQ6bQN jE7Tze5ZcyK0ng19cN1Ujp8URvjuAxyk1a53yIs8yWDs7nwpXtBomc7hw85gbDhZ hVC6RLfNPEjMHIUOkKtrAErZsZQw2VyEZtm1X3NcFDPq5Z7MkaiUT5/cQjU5xqdG yG6vuEzBESlR75ctvn/WdF+Ik2lImaDgLbDMN1Owte6g0VN+FZjS0PrNMOVX33ev qaR+wxcNE3ukFCUud2WILVy3KOK1+gS3DVAcaOkpBH4UlgWbigKplY7DstFbyOHZ 5K+Ir3hDe47puLDPlXmWYyWfNhdw3QCw2c2Y1Mxi8+D6chLBs1A= -----END CERTIFICATE-----Generated at Wed May 13 02:33:52 2026 by rpki-client